> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/prezero/ui/application-details/sbom.md).

# SBOM

The **SBOM tab** of the application details section displays the application's software bill of materials. The SBOM provides you with a list of dependencies used by your application, along with:

* The dependency version;
* The dependency type;
* The license type;
* The total number of CVEs introduced by the dependency, along with the number of reachable CVEs and the number of exploitable CVEs;
* When the dependency was first identified as present in your application.

If the dependency introduces CVEs, you can click on its name to see a list of all associated vulnerabilities.

![Dashboard screen showing information that populates the SBOM report](/files/2jwERr22MS8MyW6A2l80)

## Export the SBOM <a href="#export-the-sbom" id="export-the-sbom"></a>

You can export the SBOM generated by Qwiet AI by Harness in various standards and formats, including:

| Standard  | Version                                                                                                       | Output types                                                                                 |
| --------- | ------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- |
| CycloneDX | v1.2                                                                                                          | [XML](https://cyclonedx.org/docs/1.2/xml/) and [JSON](https://cyclonedx.org/docs/1.2/json/)  |
| CycloneDX | v1.4                                                                                                          | [XML](https://cyclonedx.org/docs/1.4/xml/) and [JSON](https://cyclonedx.org/docs/1.4/json/#) |
| SPDX      | [2.3](https://spdx.github.io/spdx-spec/v2.3/)                                                                 | XML, JSON, tag values                                                                        |
| VEX       | [0.2.0](https://openvex.dev/docs/public/vex-5d8a763b90ca3ed19f5bb33859e9865f89dc0f8a2782708c0c5593d0036fb658) | JSON                                                                                         |

To export the SBOM, click **Export**. Select the findings type and licenses you'd like included, then click **Export Report** to select the standard and format of your choice.

![Dashboard screen showing the SBOM report export options](/files/I0u7TxworHDh7CWtk4e9)