---
title: "How do I enable transitive dependencies for my SBOM?"
description: "Ketryx built-in dependency scanning currently only supports direct dependencies of a project, e.g. top-level dependencies."
category: "Frequently Asked Questions"
section: "Supply Chain Management Software Dependencies"
keywords: ["enable transitive", "transitive dependencies", "sbom enable", "dependencies sbom", "dependency", "data exchange", "format contain", "software package"]
source_url: "https://support.ketryx.com/hc/en-us/articles/26048022136205-How-do-I-enable-transitive-dependencies-for-my-SBOM"
last_reviewed: 2026-06-11
---

# How do I enable transitive dependencies for my SBOM?

Ketryx built-in dependency scanning currently only supports direct dependencies of a project, e.g. top-level dependencies. To enable transitive dependency management, you'll need to perform the following steps:

1. Using the [Build API,](https://docs.ketryx.com/api/build-api) submit SPDX (Software Package Data Exchange) files in JSON format that contain all dependencies of a project, including transitive dependencies.
2. Additionally, as the organization owner, you will need to enable transitive dependencies in your [advanced settings](https://docs.ketryx.com/reference/advanced-settings#create-transitive-dependency-items). ![](https://support.ketryx.com/hc/article_attachments/26048022133133)

## Related articles

- [Does Ketryx support C# dependency scanning?](does-ketryx-support-c-dependency-scanning.md)
- [Why are there fewer dependencies in the Ketryx SBOM module than parsed and shown on the build page?](why-are-there-fewer-dependencies-in-the-ketryx-sbom-module-than-parsed-and.md)
- [Why are there differences between the vulnerabilities shown in the SBOM module and on the Vulnerability page?](why-are-there-differences-between-the-vulnerabilities-shown-in-the-sbom-module.md)
- [SBOM Transitive Dependencies](sbom-transitive-dependencies.md)
- [I submitted a spdx file via the Build API. Why aren't any or all dependencies loading in Ketryx?](i-submitted-a-spdx-file-via-the-build-api-why-aren-t-any-or-all-dependencies.md)