diff --git a/.gitlab/CODEOWNERS b/.gitlab/CODEOWNERS
index 7b3c0c6dd059b58a8b1073578af72a411019b1fd..ad52e4e3ca7f34f1df6420deecae783c06d11766 100644
--- a/.gitlab/CODEOWNERS
+++ b/.gitlab/CODEOWNERS
@@ -148,6 +148,7 @@ Dangerfile
 /app/presenters/projects/security/
 /spec/presenters/projects/security/
 /ee/app/finders/security/
+/ee/app/finders/sbom/
 /ee/app/models/security/
 /ee/app/models/vulnerabilities/
 /ee/app/policies/vulnerabilities/
@@ -160,6 +161,33 @@ Dangerfile
 /ee/app/assets/javascripts/license_compliance/components/detected_licenses_table.vue
 /ee/spec/frontend/license_compliance/components/detected_licenses_table_spec.js
 
+^[Composition Analysis backend] @gitlab-org/secure/composition-analysis-be
+/app/events/package_metadata/
+/app/models/concerns/enums/package_metadata.rb
+/ee/app/finders/sbom/possibly_affected_occurences_finder.rb
+/ee/app/models/package_metadata/
+/ee/app/models/sbom/
+/ee/app/services/package_metadata/
+/ee/app/services/sbom/ingestion/
+/ee/app/services/security/ingestion/
+/ee/app/workers/package_metadata/
+/ee/lib/gitlab/license_scanning.rb
+/ee/lib/gitlab/license_scanning/
+/ee/lib/gitlab/vulnerability_scanning/
+/ee/lib/sbom/
+/ee/spec/lib/gitlab/license_scanning/
+/ee/spec/lib/gitlab/license_scanning_spec.rb
+/ee/spec/lib/gitlab/vulnerability_scanning/
+/ee/spec/lib/sbom/
+/ee/spec/models/package_metadata/
+/ee/spec/models/sbom/
+/lib/gitlab/ci/parsers/sbom/
+/lib/gitlab/ci/reports/sbom/
+/lib/sbom/
+/spec/lib/gitlab/ci/parsers/sbom/
+/spec/lib/gitlab/ci/reports/sbom/
+/spec/lib/sbom/
+
 ^[Secure] @gitlab-org/secure/dynamic-analysis-be
 /ee/app/services/app_sec/dast/