---
title: "Fetch a software bill of materials (SBOM) for a repository."
method: GET
path: "/repos/{owner}/{repo}/dependency-graph/sbom/fetch-report/{sbom_uuid}"
tags: ["dependency-graph"]
---

# Fetch a software bill of materials (SBOM) for a repository.

`GET /repos/{owner}/{repo}/dependency-graph/sbom/fetch-report/{sbom_uuid}`

Fetches a previously generated software bill of materials (SBOM) for a repository.
When the SBOM is ready, the response is a 302 redirect to a temporary download URL for the SBOM in SPDX JSON format.
The generated SBOM report may be retained for up to one week from the original request.
The temporary download URL returned by this endpoint expires separately, and its expiry is set when the fetch request is made.

## Path parameters

- `owner` string, required
- `repo` string, required
- `sbom_uuid` string, required

## Response `202`

SBOM is still being processed, no content is returned.

## Other responses

- `302` — Redirects to a temporary download URL for the completed SBOM.
- `403` — Forbidden
- `404` — Resource not found

---

[API](https://skmtc.net/github/apis/api-github-com.md) · [All operations](https://skmtc.net/github/apis/api-github-com/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/api-github-com/revisions/a367f7028301/schema)