CycloneDX CLI – command-line toolkit for BOM documents

CycloneDX CLI is a command-line utility for manipulating and analysing Bill of Materials documents.

It complements tools that discover dependencies and generate inventories by providing operations that are useful once BOM data already exists. Documents can be converted between formats, combined, compared, validated and cryptographically signed. Its stdin and stdout support also makes the utility convenient in shell pipelines and automated build processes, where BOMs may pass through several transformations before publication or analysis.

This is free and open source software.

Key Features

• Adds files and associated information to BOM documents.
• Analyzes BOMs for components appearing in multiple versions.
• Converts between CycloneDX JSON, XML and Protobuf representations.
• Supports CSV for simplified component-list interchange.
• Converts between CycloneDX and SPDX JSON.
• Generates differences between two BOM documents.
• Reports components that were added, removed or changed.
• Merges two or more BOM documents.
• Supports hierarchical merging for composite software.
• Validates CycloneDX documents.
• Can return a failure status when validation errors are detected.
• Generates RSA key pairs for document signing.
• Signs complete BOM documents.
• Signs arbitrary files associated with a software supply-chain workflow.
• Verifies signatures embedded in BOMs and signatures for separate files.
• Reads input from stdin and writes results to stdout for automation and pipelines.
• Provides officially supported x86-64 Linux builds and community-supported Arm Linux builds.

Website: github.com/CycloneDX/cyclonedx-cli
Support:
Developer: CycloneDX
License: Apache License 2.0

CycloneDX CLI is written in C#. Learn C# with our recommended free books and free tutorials.

Explore our carefully curated directory of recommended free and open source software, covering every major software category. The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form.