diff --git a/sbom.yml b/sbom.yml
new file mode 100644
index 000000000..a4be7f061
--- /dev/null
+++ b/sbom.yml
@@ -0,0 +1,5 @@
+version: 3.6.2
+cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:*
+supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
+originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>'
+description: An open source, portable, easy to use, readable and flexible SSL library with additional features and patches from Espressif.