Retired

May 12, 20261 Minute Read

Synchronous SBOM API deprecated

Following the recent release of the new Asynchronous SBOM REST API, the older, synchronous API is deprecated and slated for removal in six months, on November 13, 2026.

If your scripts or integrations are currently using the REST endpoint at /{owner}/{repo}/dependency-graph/sbom, please update them to use the new /{owner}/{repo}/dependency-graph/sbom/generate-report instead. This request will return a URL which you then poll for completion. Once the SBOM is computed, it will be cached and available for download, providing better performance and reliability than the previous method. Visit the API documentation for more details on the API usage.

Subscribe to our developer newsletter

Discover tips, technical guides, and best practices in our biweekly newsletter just for devs.

By submitting, I agree to let GitHub and its affiliates use my information for personalized communications, targeted advertising, and campaign effectiveness. See the GitHub Privacy Statement for more details.

Synchronous SBOM API deprecated - GitHub Changelog