v50

latestOpenAPI 3.0.2raw.githubusercontent.com2026-08-013374139.1 KB
sbom

Get SBOM for a package derivation

Get SBOM (Software Bill of Materials) for a package derivation.

Args: derivation: The derivation filename without /nix/store/ prefix (e.g., "abc123def-foo-1.0.drv") outputs: Optional comma-separated list of outputs (e.g., "out,bin,dev"). If omitted, includes the package's default outputs from derivation metadata. Must be alphanumeric with underscores only, max 100 chars total. format: SBOM format (defaults to SbomFormat.SPDX_2_3_JSON) body: Request body (reserved for future extension) user: Authenticated user context cache: Request-scoped dependency cache (injected)

Returns: SBOM document in the requested format

post/api/v1/catalog/sbom/package/{derivation}

Path parameters

derivationstring required

Query parameters

outputsstring nullable

Comma-separated list of output names (e.g., 'out,bin,dev')

Example:out

Comma-separated list of output names (e.g., 'out,bin,dev')

format'spdx-2.3-json'

Supported SBOM format types.

Request body

PackageSbomRequest required

Request body for package SBOM endpoint (reserved for future extension).

Response

SBOM for the given package derivation

object required