Match the package version
Use the exact version shown by your installed Reveal package.
Software Bill of Materials
Download CycloneDX SBOMs for the exact Reveal package version and runtime you deploy. Server bundles group related documents into a single download. Each SBOM also includes a VEX assessment for known vulnerabilities identified when the release was reviewed.
Choosing the correct SBOM
Match the platform
Select .NET, Java, Node, or JavaScript for the package you deploy.
Choose the document
Download a JSON file or open a ZIP and select the architecture- or package-specific document you need. VEX status and rationale are included in the JSON.
Loading the release catalog…