CycloneDX BOM Standard

All

63 repositories

cdxgen
Public
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
docker containers supply-chain owasp bom oci sca software-bill-of-materials purl package-url
JavaScript
•
Apache License 2.0
•214•786•386•20•Updated Sep 21, 2025Sep 21, 2025
cyclonedx-python-lib
Public
Python implementation of OWASP CycloneDX
python library owasp bom vex spdx hacktoberfest attestation bill-of-materials software-bill-of-materials
Python
•
Apache License 2.0
•54•86•20•10•Updated Sep 20, 2025Sep 20, 2025
cyclonedx-node-npm
Public
Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.
nodejs npm node dependency-graph owasp bom hacktoberfest bill-of-materials software-bill-of-materials sbom
JavaScript
•
Apache License 2.0
•25•100•12•5•Updated Sep 20, 2025Sep 20, 2025
cyclonedx-node-yarn
Public
Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.
nodejs node yarn bom hacktoberfest bill-of-materials software-bill-of-materials sbom cyclonedx yarn-plugin
JavaScript
•
Apache License 2.0
•7•23•15•9•Updated Sep 20, 2025Sep 20, 2025
cyclonedx-webpack-plugin
Public
Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.
javascript webpack webpack-plugin owasp bom spdx hacktoberfest bill-of-materials software-bill-of-materials purl
JavaScript
•
Apache License 2.0
•10•27•11•7•Updated Sep 20, 2025Sep 20, 2025
cyclonedx-javascript-library
Public
Core functionality of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.
json library node web xml owasp bom vex vdr spdx
TypeScript
•
Apache License 2.0
•14•18•17•8•Updated Sep 20, 2025Sep 20, 2025
specification
Public
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
machine-learning supply-chain owasp specification standard bom software vex license spdx
XSLT
•
Apache License 2.0
•71•425•128•19•Updated Sep 20, 2025Sep 20, 2025
cyclonedx-python
Public
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
python environment poetry conda owasp python3 pip bom spdx hacktoberfest
Python
•
Apache License 2.0
•79•326•17•7•Updated Sep 20, 2025Sep 20, 2025
cyclonedx-core-java
Public
CycloneDX SBOM Model and Utils for Creating and Validating BOMs
library owasp bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom
Java
•
Apache License 2.0
•77•96•34•15•Updated Sep 19, 2025Sep 19, 2025
cyclonedx-buildroot
Public
Create CycloneDX Software Bill of Materials (SBOM) for Buildroot projects
bom buildroot bill-of-materials software-bill-of-materials sbom cyclonedx sbom-generator sbom-tool
Python
•
Apache License 2.0
•6•12•6•0•Updated Sep 18, 2025Sep 18, 2025
cyclonedx-linux-generator
Public
Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions
linux owasp bom bill-of-materials software-bill-of-materials sbom cyclonedx sbom-generator
Java
•
Other
•14•49•5•15•Updated Sep 18, 2025Sep 18, 2025
cyclonedx-node-pnpm
Public
Create CycloneDX Software Bill of Materials (SBOM) from Node.js PNPM projects.
nodejs node bom pnpm bill-of-materials software-bill-of-materials sbom cyclonedx sbom-generator
Apache License 2.0
•4•20•1•0•Updated Sep 18, 2025Sep 18, 2025
cyclonedx-property-taxonomy
Public
A taxonomy of all official CycloneDX property namespaces and names
registry taxonomy cyclonedx
Ruby
•
Apache License 2.0
•37•18•12•4•Updated Sep 17, 2025Sep 17, 2025
cyclonedx-gradle-plugin
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects
gradle owasp gradle-plugin bom spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url
Java
•
Apache License 2.0
•87•199•68•3•Updated Sep 17, 2025Sep 17, 2025
cyclonedx-authoring-tool
Public
An experimental user interface for manually creating, editing, and viewing CycloneDX SBOMs
node vue owasp bom vex spdx authoring-tool bill-of-materials software-bill-of-materials purl
Vue
•
Apache License 2.0
•3•8•5•9•Updated Sep 17, 2025Sep 17, 2025
cyclonedx-rust-cargo
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects
owasp cargo bom vex spdx bill-of-materials software-bill-of-materials purl package-url cargo-plugin
Rust
•
Apache License 2.0
•50•142•30•14•Updated Sep 17, 2025Sep 17, 2025
cdxgen-plugins-bin
Public
Binary plugins for @cyclonedx/cdxgen npm package
Shell
•
Apache License 2.0
•3•1•2•0•Updated Sep 16, 2025Sep 16, 2025
cyclonedx-php-library
Public
PHP Implementation of OWASP CycloneDX Bill of Materials (BOM)
php library owasp bom vex spdx hacktoberfest bill-of-materials software-bill-of-materials sbom
PHP
•
Apache License 2.0
•0•10•14•3•Updated Sep 15, 2025Sep 15, 2025
cyclonedx-php-composer
Public
Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects
php composer dependency-graph owasp bom composer-plugin spdx hacktoberfest bill-of-materials software-bill-of-materials
PHP
•
Apache License 2.0
•7•73•15•0•Updated Sep 15, 2025Sep 15, 2025
cyclonedx-node-module
Public
creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
nodejs node dependency-graph bom metapackage meta-package software-bill-of-materials sbom cyclonedx sbom-generator
Apache License 2.0
•38•134•0•0•Updated Sep 15, 2025Sep 15, 2025
cyclonedx-maven-plugin
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects
owasp bom vex spdx bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx
Java
•
Apache License 2.0
•94•332•78•16•Updated Sep 15, 2025Sep 15, 2025
tool-center
Public
Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services
owasp vex vdr sbom cyclonedx obom mbom saasbom mlbom software-transparency
HTML
•
Creative Commons Attribution Share Alike 4.0 International
•32•7•2•7•Updated Sep 15, 2025Sep 15, 2025
transparency-exchange-api
Public
A standard API specification for exchanging supply chain artifacts and intelligence
owasp specification bom bill-of-materials software-bill-of-materials api-spec sbom cyclonedx sbom-distribution tc54
Shell
•
Apache License 2.0
•17•84•61•4•Updated Sep 13, 2025Sep 13, 2025
cyclonedx-ruby-gem
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects
bundler gem owasp bom vex spdx bill-of-materials software-bill-of-materials purl package-url
Ruby
•
Apache License 2.0
•19•30•7•9•Updated Sep 13, 2025Sep 13, 2025
guides
Public
CSS
•
Creative Commons Attribution 4.0 International
•8•5•11•2•Updated Sep 12, 2025Sep 12, 2025
cyclonedx-web-tool
Public
A web based tool for working with CycloneDX BOMs
owasp bom vex bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx obom
HTML
•
Apache License 2.0
•7•39•8•7•Updated Sep 10, 2025Sep 10, 2025
cyclonedx-cli
Public
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
owasp bom vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl package-url sbom
C#
•
Apache License 2.0
•70•405•103•18•Updated Sep 9, 2025Sep 9, 2025
cyclonedx-gomod
Public
Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
owasp bom vex bill-of-materials software-bill-of-materials go-modules sbom sbom-generator obom mbom
Go
•
Apache License 2.0
•31•162•32•11•Updated Sep 9, 2025Sep 9, 2025
cyclonedx-dotnet
Public
Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects
dotnet owasp bom dotnet-core vex spdx hacktoberfest bill-of-materials software-bill-of-materials purl
C#
•
Apache License 2.0
•107•237•44•23•Updated Sep 4, 2025Sep 4, 2025
cyclonedx-go
Public
Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)
golang library owasp bom vex bill-of-materials software-bill-of-materials sbom obom mbom
Go
•
Apache License 2.0
•34•94•13•11•Updated Sep 4, 2025Sep 4, 2025