From d477f582b458f640acaf6ce1ffa1c185295d03b6 Mon Sep 17 00:00:00 2001
From: Frantisek Hrbata <frantisek.hrbata@espressif.com>
Date: Tue, 20 Jun 2023 09:04:36 +0200
Subject: [PATCH] initial version of the sbom.yml file

This is an initial version of the sbom.yml file for Espressif's mbedtls.
It's used by the esp-idf-sbom[1] tool to generate an SBOM file in the SPDX
format for esp-idf projects.

[1] - https://github.com/espressif/esp-idf-sbom

Signed-off-by: Frantisek Hrbata <frantisek.hrbata@espressif.com>
---
 sbom.yml | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 sbom.yml

diff --git a/sbom.yml b/sbom.yml
new file mode 100644
index 000000000..10e8db5ae
--- /dev/null
+++ b/sbom.yml
@@ -0,0 +1,5 @@
+version: 2.28.5
+cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:*
+supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
+originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>'
+description: An open source, portable, easy to use, readable and flexible SSL library.