Data Model for SBOM release notes

  • Release version: Store
  • Updated June 11, 2026
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Data Model for SBOM release notes

    The Data Model for SBOM (Software Bill of Materials) application on the ServiceNow Store provides a structured framework to upload, parse, and manage SBOM data within the ServiceNow platform. This application evolves through multiple versions to enhance security, tracking, performance, and support for DevOps and license management use cases.

    Show full answer Show less

    Version Highlights and Enhancements

    • Initial Release (v1.0.3, August 2023): Established core tables, access controls, and roles needed for SBOM data ingestion and processing.
    • Display Improvements (v1.0.4, September 2023): Added a display name field on BOM Component table to combine name and version for easier identification.
    • Security and Access Updates (v1.1.2, November 2023): Introduced additional roles and ACLs to enhance data security and reporting capabilities.
    • Data Model Extensions (v1.3.1 to v2.0.2, Feb–Aug 2024): Added support for PURL validation, BOM document authorship, DevOps use cases requiring unique SBOMs per build, and improvements for SBOM Core and Response features.
    • License Administration Support (v3.0.4, Nov 2024): Enhanced data model to support license management within SBOM.
    • Bulk Edit and Deletion Features (v4.0.0, Feb 2025): Enabled deleting BOM entity records and related components efficiently via the SBOM Workspace.
    • Performance and Data Tracking Improvements (v4.1.1 to v4.2.2, Aug 2025–April 2026): Added unique indexes for faster queries, new fields for unprocessed data and SHA-256 hashes, introduced processing time tracking fields, and a new "Timeout" status to better monitor BOM processing workflows.
    • Security Enhancements (v4.2.4, June 2026): Updated SBOM Data Model tables to align with ServiceNow platform security guidance, including read-only dictionary fields and renamed fix scripts to prevent update conflicts among Security Operations plugins.

    What This Enables ServiceNow Customers to Do

    • Manage comprehensive SBOM data with enhanced security and access controls.
    • Track and analyze BOM processing durations and statuses to optimize workflows.
    • Improve performance and accuracy in querying and navigating SBOM entities and dependencies.
    • Support DevOps and license administration needs through specialized data model enhancements.
    • Perform bulk operations such as deletion of BOM entities directly within the workspace.
    • Ensure compliance with internal security directives by aligning with platform security best practices.

    Practical Considerations

    ServiceNow customers should review system requirements and family compatibility on the ServiceNow Store to ensure proper integration. Keeping the Data Model for SBOM application up to date ensures optimal security, performance, and feature support for managing software bill of materials effectively within their environment.

    Version history for the Vulnerability Response Data Model for SBOM application on the ServiceNow Store.

    Important:
    For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

    Version history

    Version 4.2.4 - June 2026
    • The following enhancements and changes support internal security directives:
      • Updates for the SBOM Data Model tables to align with ServiceNow Platform Security guidance.
      • Read-only dictionary fields for SBOM Data Model tables.
      • Renamed fix script to a per-plugin name to avoid update-set conflicts with sibling Security Operations plugins.
    Version 4.2.2 - April 2026
    • New:
      • Added "Timeout" status option to the BOM document status field to help you better track BOMs that exceed their processing time limits.
      • Introduced new tracking fields on BOM document records, including processing_started(timestamp when processing begins) and processing_duration(total time spent in processing), enabling you to better monitor and analyze BOM processing workflows.
    Version 4.2.1 - December 2025
    • Fixed:
      • Fixed an issue where the Activity tab in SBOM License records failed to persist historical state changes.
      • Enabled the “Depends on” related list for intermediate SBOM entities and removed duplicate active filters for accurate dependency navigation.
    Version 4.1.1 - August 2025
    New:Added new indexes to improve query performance on key tables: unique indexes for contact information (phone/email/name), build-component relationships, component dependencies, external references, and component hashes. Enhanced the sn_sbom_component table with two new fields: unprocessed_sbom_data to store non-critical attributes as JSON for asynchronous processing, and hash_sha256 for direct storage of the component's SHA-256 hash value.
    Version 4.0.0 - February 2025
    Improvements to support deleting BOM entity records and their related components from the Software Bill of Materials Workspace with bulk edit.
    Version 3.0.5 - December 2024
    Fixed: Minor fix for this release.
    Version 3.0.4 - November 2024
    New: Data model improvements to support the License administration module.
    Version 2.0.2 - August 2024
    New: Table improvements to support new features in SBOM Response and SBOM Core.
    Version 1.4.3 - May 2024
    New: Data model and framework enhancements to support DevOps use cases that require unique SBOMs for the multiple builds of a BOM Entity.
    Version 1.3.1 - February 2024
    Updated data model to support PURL validation and author of the BOM document.
    Version 1.1.2 - November 2023
    • Changed:
      • Added Report View ACL to the [sn_sbom_m2m_bom_comptable] table.
      • Added New Roles and ACL to the [sn_sbom_doc] table.
    Version 1.0.4 - September 2023
    New: Display name is a new field on the BOM Component table. The Display name field uses the name and version as the displayed value of a component.
    Version 1.0.3 - August 2023
    Initial release: This application includes the tables, ACLs, and roles that are required to upload, parse, and ingest SBOM data.