diff --git a/build/ci/release.yml b/build/ci/release.yml
index 8c44276a7b..4e4a465f34 100644
--- a/build/ci/release.yml
+++ b/build/ci/release.yml
@@ -82,7 +82,7 @@ functions:
           - AWS_SECRET_ACCESS_KEY
           - AWS_SESSION_TOKEN
           - workdir
-        binary: build/package/generate-sbom.sh 
+        binary: build/package/generate-sbom.sh
   "run silkbomb": 
     - command: ec2.assume_role
       params:
diff --git a/build/package/generate-sbom.sh b/build/package/generate-sbom.sh
index 97393a40b3..9c081296ea 100755
--- a/build/package/generate-sbom.sh
+++ b/build/package/generate-sbom.sh
@@ -27,5 +27,5 @@ docker run --rm \
   901841024863.dkr.ecr.us-east-1.amazonaws.com/release-infrastructure/silkbomb:2.0 \
   update \
   --purls /pwd/build/package/purls.txt \
-  --sbom-out /pwd/sbom.json
+  --sbom-out /pwd/compliance/sbom.json
   
\ No newline at end of file
diff --git a/compliance/.keep b/compliance/.keep
new file mode 100644
index 0000000000..e69de29bb2