diff --git a/sbom.yml b/sbom.yml
new file mode 100644
index 0000000000..10e8db5ae5
--- /dev/null
+++ b/sbom.yml
@@ -0,0 +1,5 @@
+version: 2.28.5
+cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:*
+supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
+originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>'
+description: An open source, portable, easy to use, readable and flexible SSL library.