Skip to main content
SourceTrustSign in

Help center

Guides for SourceTrust: Importing dependencies, reviewing licenses, external obligations, publishing attestation pages, billing, plain-language license explainers, and procurement-oriented explainers for common open-source licenses.

Exporting files for releases

← All articles

After publish, export markdown, NOTICE, HTML, PDF, JSON, CSV, CycloneDX, or SPDX from the frozen snapshot. Files always come from the last published revision.

Before the first publication, available exports use the complete current eligible inventory and are marked as unpublished output. After publication they use the frozen published revision. Both paths check the size of the complete output, including license text. If the output is too large, the download explains the limit and returns no shortened file. Preview has its own complete-output check and can also be refused; a successful inventory import does not guarantee that every output fits.

Once a project is published, click Export at the top of the project page. The download dialog lists every format. All files come from the published revision, not work in progress.

  • Disclosure: Markdown, plain-text NOTICE, HTML, PDF.
  • Structured: JSON, CSV, iOS PLIST.
  • SBOM: CycloneDX (1.7/1.6/1.5, JSON or XML) and SPDX (2.3 JSON or tag:value, 3.0.1 JSON-LD).

See Help center → Download and export formats (Download and export formats) for a full breakdown of each format, spec version, and filename. Building a mobile app? See Help center → Mobile apps and in-app licenses (Mobile apps and in-app licenses).