Trustcenter CLI integration

This guide explains how to set up the local environment to upload SBOMs to Trustcenter.

  • Download trustctl, the command line utility which interfaces with Trustcenter
  • Set up an API key in Trustcenter (under Settings -> API Keys)
  • Configure host and API key on trustctl. This can be done in either of these 2 ways:
    • Environment variables (recommended):
      • TC_HOST=<your trustcenter host URL>
      • TC_API_KEY=<your Trustcenter API key>
    • Command line parameters (to be added at each trustctl invocation):
      • --tc-host <your trustcenter host URL>
      • --tc-api-key <your Trustcenter API key>
  • Upload your SBOMs. E.g.: to upload an sbom named sbom.json to the project MyProject use the following command:
    • trustctl projects sbom add MyProject sbom.json