Repositories list

• specification

  Public
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

  machine-learningsupply-chainowasp+ 17specificationstandardbomsoftwarevexlicensespdx+ 10

  XSLT

  •

  Apache License 2.0

  •62•376•122•14•Updated Jan 19, 2025Jan 19, 2025

• cyclonedx-php-composer

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects

  phpcomposerdependency-graph+ 13owaspbomcomposer-pluginspdxhacktoberfestbill-of-materialssoftware-bill-of-materials+ 6

  PHP

  •

  Apache License 2.0

  •7•54•15•3•Updated Jan 18, 2025Jan 18, 2025

• cyclonedx-python-lib

  Public
  Python implementation of OWASP CycloneDX

  pythonlibraryowasp+ 16bomvexspdxhacktoberfestattestationbill-of-materialssoftware-bill-of-materials+ 9

  Python

  •

  Apache License 2.0

  •43•71•24•14•Updated Jan 18, 2025Jan 18, 2025

• cyclonedx-go

  Public
  Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  golanglibraryowasp+ 8bomvexbill-of-materialssoftware-bill-of-materialssbomobommbom+ 1

  Go

  •

  Apache License 2.0

  •32•80•11•3•Updated Jan 18, 2025Jan 18, 2025

• cyclonedx-node-npm

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

  nodejsnpmnode+ 10dependency-graphowaspbomhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 3

  JavaScript

  •

  Apache License 2.0

  •21•77•16•9•Updated Jan 18, 2025Jan 18, 2025

• cyclonedx-webpack-plugin

  Public
  Generate CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

  javascriptwebpackwebpack-plugin+ 13owaspbomspdxhacktoberfestbill-of-materialssoftware-bill-of-materialspurl+ 6

  TypeScript

  •

  Apache License 2.0

  •9•26•13•9•Updated Jan 18, 2025Jan 18, 2025

• cyclonedx-javascript-library

  Public
  Core functionality of OWASP CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

  jsonlibrarynode+ 16webxmlowaspbomvexvdrspdx+ 9

  TypeScript

  •

  Apache License 2.0

  •12•15•15•6•Updated Jan 18, 2025Jan 18, 2025

• cyclonedx-php-library

  Public
  PHP Implementation of OWASP CycloneDX Bill of Materials (BOM)

  phplibraryowasp+ 12bomvexspdxhacktoberfestbill-of-materialssoftware-bill-of-materialssbom+ 5

  PHP

  •

  Apache License 2.0

  •0•8•13•6•Updated Jan 18, 2025Jan 18, 2025

• cyclonedx-python

  Public
  CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

  pythonenvironmentpoetry+ 16condaowasppython3pipbomspdxhacktoberfest+ 9

  Python

  •

  Apache License 2.0

  •69•261•17•4•Updated Jan 18, 2025Jan 18, 2025

• cdxgen

  Public
  Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. GPT: https://chatgpt.com/g/g-673bfeb4037481919be8a2cd1bf868d2-cdxgen

  dockercontainerssupply-chain+ 11owaspbomociscasoftware-bill-of-materialspurlpackage-url+ 4

  JavaScript

  •

  Apache License 2.0

  •167•610•323•10•Updated Jan 17, 2025Jan 17, 2025

• cyclonedx-gomod

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

  owaspbomvex+ 9bill-of-materialssoftware-bill-of-materialsgo-modulessbomsbom-generatorobommbom+ 2

  Go

  •

  Apache License 2.0

  •25•139•20•1•Updated Jan 17, 2025Jan 17, 2025

• cyclonedx-core-java

  Public
  CycloneDX SBOM Model and Utils for Creating and Validating BOMs

  libraryowaspbom+ 11vexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 4

  Java

  •

  Apache License 2.0

  •64•83•26•7•Updated Jan 16, 2025Jan 16, 2025

• cdxgen-plugins-bin

  Public
  Binary plugins for @cyclonedx/cdxgen npm package

  Shell

  •

  Apache License 2.0

  •3•1•2•0•Updated Jan 16, 2025Jan 16, 2025

• Sunshine

  Public
  Sunshine - SBOM visualization tool

  owaspbombill-of-materials+ 3software-bill-of-materialssbomcyclonedx

  HTML

  •

  Apache License 2.0

  •1•28•0•0•Updated Jan 16, 2025Jan 16, 2025

• cyclonedx-gradle-plugin

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

  gradleowaspgradle-plugin+ 9bomspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbom+ 2

  Java

  •

  Apache License 2.0

  •78•166•55•4•Updated Jan 15, 2025Jan 15, 2025

• homebrew-cyclonedx

  Public
  CycloneDX Homebrew Tap

  Ruby

  •

  Apache License 2.0

  •2•0•0•0•Updated Jan 15, 2025Jan 15, 2025

• cyclonedx-node-yarn

  Public
  Create CycloneDX Software Bill of Materials (SBOM) from Node.js Yarn projects.

  nodejsnodeyarn+ 9bomhacktoberfestbill-of-materialssoftware-bill-of-materialssbomcyclonedxyarn-plugin+ 2

  TypeScript

  •

  Apache License 2.0

  •5•21•17•5•Updated Jan 15, 2025Jan 15, 2025

• gh-node-module-generatebom

  Public
  GitHub action to generate a CycloneDX SBOM for Node.js

  nodejsnodeowasp+ 8bombill-of-materialssoftware-bill-of-materialssbomgithub-actioncyclonedxgh-action+ 1

  JavaScript

  •

  Apache License 2.0

  •6•21•2•1•Updated Jan 10, 2025Jan 10, 2025

• gh-php-composer-generate-sbom

  Public
  GitHub action to generate a CycloneDX SBOM for PHP Composer

  phpowaspbom+ 7php-composerbill-of-materialssoftware-bill-of-materialssbomgithub-actioncyclonedxsbom-generator

  JavaScript

  •

  Apache License 2.0

  •0•0•2•1•Updated Jan 10, 2025Jan 10, 2025

• gh-python-generate-sbom

  Public
  GitHub action to generate a CycloneDX SBOM for Python

  pythonowasppython3+ 7bombill-of-materialssoftware-bill-of-materialssbomgithub-actioncyclonedxsbom-generator

  JavaScript

  •

  Apache License 2.0

  •4•14•3•0•Updated Jan 10, 2025Jan 10, 2025

• cyclonedx-dotnet-library

  Public
  .NET library to consume and produce CycloneDX Software Bill of Materials (SBOM)

  dotnetnugetowasp+ 10bomdotnet-corevexbill-of-materialssoftware-bill-of-materialssbomcyclonedx+ 3

  C#

  •

  Apache License 2.0

  •24•17•15•16•Updated Jan 8, 2025Jan 8, 2025

• cyclonedx-cocoapods

  Public
  Creates CycloneDX Software Bill-of-Materials (SBOM) from Objective-C and Swift projects that use CocoaPods.

  swiftobjective-ccocoapods+ 11owaspbomvexbill-of-materialssoftware-bill-of-materialssbomcyclonedx+ 4

  Ruby

  •

  Apache License 2.0

  •14•21•1•0•Updated Jan 7, 2025Jan 7, 2025

• .github

  Public
  2•0•3•0•Updated Jan 6, 2025Jan 6, 2025

• cyclonedx-rust-cargo

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Rust (Cargo) projects

  owaspcargobom+ 14vexspdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlcargo-plugin+ 7

  Rust

  •

  Apache License 2.0

  •47•111•27•12•Updated Jan 4, 2025Jan 4, 2025

• fork_schemastore

  Public archive
  fork for contrib: A collection of JSON schema files including full API

  JavaScript

  •

  Apache License 2.0

  •1.7k•0•0•0•Updated Dec 31, 2024Dec 31, 2024

• tool-center

  Public
  Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

  owaspvexvdr+ 11sbomcyclonedxobommbomsaasbommlbomsoftware-transparency+ 4

  Apache License 2.0

  •3•0•0•3•Updated Dec 24, 2024Dec 24, 2024

• cyclonedx.org-archived

  Public archive
  Public website cyclonedx.org

  owaspcyclonedx

  HTML

  •85•11•14•3•Updated Dec 20, 2024Dec 20, 2024

• cyclonedx-property-taxonomy

  Public
  A taxonomy of all official CycloneDX property namespaces and names

  registrytaxonomycyclonedx

  Ruby

  •

  Apache License 2.0

  •32•14•11•3•Updated Dec 18, 2024Dec 18, 2024

• guides

  Public
  CSS

  •

  Creative Commons Attribution 4.0 International

  •5•5•9•1•Updated Dec 16, 2024Dec 16, 2024

• cyclonedx-maven-plugin

  Public
  Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

  owaspbomvex+ 13spdxbill-of-materialssoftware-bill-of-materialspurlpackage-urlsbomcyclonedx+ 6

  Java

  •

  Apache License 2.0

  •86•304•66•12•Updated Dec 10, 2024Dec 10, 2024