diff --git a/sbom.yml b/sbom.yml
new file mode 100644
index 000000000..d175fea1c
--- /dev/null
+++ b/sbom.yml
@@ -0,0 +1,5 @@
+version: 2.28.4
+cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:*
+supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
+originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>'
+description: An open source, portable, easy to use, readable and flexible SSL library.