# Wire a software bill of materials or license report into the build

A per-build inventory of what shipped, produced as an artefact rather than reconstructed later.

Category: Build, containers, and artifacts
Source: https://letsship.ai/use-cases/wire-an-sbom-or-license-report
Published: 2026-08-25

## Goal

Produce a software bill of materials or license report as part of the build.

## Acceptance criteria

- The report is generated on every build and stored as an artefact
- It covers transitive dependencies, not only direct ones
- Its format is one downstream tooling can consume
- Build time impact is recorded

## What lands as proof

A generated report attached to a real build, covering the full transitive tree.

## Prompt

Copy this to an agent to open the ticket:

```text
Create a Linear issue in my team and assign it to the SHIP agent.

Title: Add a bill of materials to the build

Description: Produce a software bill of materials or license report as part of the build.

Acceptance criteria:
- The report is generated on every build and stored as an artefact
- It covers transitive dependencies, not only direct ones
- Its format is one downstream tooling can consume
- Build time impact is recorded

Before you create the issue, check whether this repository produces any dependency inventory today and say so in the description.
```

## Questions

### What does the agent actually change?

The ticket is scoped to one outcome: produce a software bill of materials or license report as part of the build. Work that serves that outcome is in scope, and anything outside it is left for a separate ticket, so the pull request stays reviewable.

### How do I know the work is done?

The pull request carries the evidence, not only the diff. Here that means approved on the plan, report produced as a build artefact, so a reviewer can confirm the result without reproducing the work locally.

### How much oversight does this need?

The run stops for the plan, and the review bar is raised afterwards so that smaller suggestions block the merge too, not only serious findings.