diff --git a/sbom.json b/sbom.json
new file mode 100644
index 0000000..a7ce6d9
--- /dev/null
+++ b/sbom.json
@@ -0,0 +1,25 @@
+{
+  "components": [
+    {
+      "type": "library",
+      "group": "org.springframework",
+      "name": "spring-web",
+      "version": "5.3.39",
+      "purl": "pkg:maven/org.springframework/spring-web@5.3.39"
+    },
+    {
+      "type": "library",
+      "group": "com.fasterxml.jackson.core",
+      "name": "jackson-databind",
+      "version": "2.15.4",
+      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.4"
+    },
+    {
+      "type": "library",
+      "group": "commons-io",
+      "name": "commons-io",
+      "version": "2.13.0",
+      "purl": "pkg:maven/commons-io/commons-io@2.13.0"
+    }
+  ]
+}
\ No newline at end of file