diff --git a/sbom.json b/sbom.json
new file mode 100644
index 0000000..86cf1a7
--- /dev/null
+++ b/sbom.json
@@ -0,0 +1 @@
+{"bomFormat":"CycloneDX","specVersion":"1.5","serialNumber":"urn:uuid:1967d648-abf9-4e2e-b232-05c2abe63c59","version":1,"metadata":{"timestamp":"2026-03-09T13:18:54Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.1.2","purl":"pkg:npm/%40cyclonedx/cdxgen@12.1.2","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.1.2","author":"OWASP Foundation","publisher":"OWASP Foundation"}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"properties":[]},"components":[],"services":[],"dependencies":[]}
\ No newline at end of file