---
title: "Update Project with SBOM (Dependencies - SCA)"
method: POST
path: "/api/v3.0/projects/{projectUuid}/dependencies/importSbom"
tags: ["Projects"]
---

# Update Project with SBOM (Dependencies - SCA)

`POST /api/v3.0/projects/{projectUuid}/dependencies/importSbom`

Upload a single SBOM file to update an existing project. The SBOM scan is queued for asynchronous processing. Supported formats: SPDX (JSON/XML), CycloneDX (JSON/XML).

## Path parameters

- `projectUuid` string, required

## Response `200`

SBOM scan successfully queued for project update

- SbomScanResponseDTO
  - `supportToken` string — Support token for tracking
  - `project` ProjectDTOV3 — Project information
    - `uuid` string
    - `name` string
    - `path` string
    - `applicationName` string
    - `applicationUuid` string
  - `scan` SbomScanInfoDTO — Scan information
    - `scanUuid` string — Scan identifier
    - `createdAt` string — Scan creation timestamp
  - `link` SbomScanLinksDTO — Log Link
    - `logs` string — Link to scan logs

## Other responses

- `400` — Invalid SBOM file format or malformed request
- `403` — Insufficient permissions to update this project
- `404` — Project not found

---

[API](https://skmtc.net/mend/apis/mend-api.md) · [All operations](https://skmtc.net/mend/apis/mend-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/mend/mend-api/versions/849dfb157abc/schema)