SBOM in Jira, Confluence , Bitbucket

[Adesh Kokate]

I want detailed documentation or information about the Software Bill of Materials (SBOM) for Atlassian Data Center products such as Jira Software, Confluence, and Bitbucket. I am also interested in knowing where these SBOM files can be accessed or downloaded for Data Center versions of these products.

[Trudy Claspill · Accepted solution]

Hello @Adesh Kokate 

For what its worth, when I asked Chrome Gemini:

where can the software bill of materials be found for Jira Data Center?

This is the response I got. Disclaimer: I don't have a Data Center environment where I can validate this response.

The Software Bill of Materials (SBOM) for Jira Data Center is located within the product's installation directory. As of 2026, Atlassian provides SBOMs for all Data Center products to enhance security transparency. 

Location:

• <installation_dir>/sbom/

File Naming Pattern:
The files are typically in JSON format, using the CycloneDX standard, and follow this naming structure: 

• <product_name>-<version>-cyclonedx-sbom.json
• <product_name>-<version>-sbom.cdx.json 

Examples:

• Jira Software: atlassian-jira-software-<version>-cyclonedx-sbom.json
• Jira Service Management: atlassian-jira-servicedesk-<version>-cyclonedx-sbom.json 

The sbom/ folder may also contain files in SPDX or CSV formats.

[Adesh Kokate]

Thanks @Trudy Claspill .