Tuesday, 14 July 2026 @ 15:01 UTC~5413,429150,800

CycloneDX Generator (cdxgen)

OWASP Foundation·CycloneDX.cdxgen

A polyglot tool and a library for generating various Bill of Materials in CycloneDX specification.

Generate Software Bill of Materials (SBOM) for most applications and container images with a single command. Generate Operations Bill of Materials (OBOM) for Linux and Windows hosts. Integrate with any CI/CD pipeline. Automatically submit the generated BOM to your dependency track server for analysis.

winget install --id CycloneDX.cdxgen --exact --source winget

Latest 12.7.1·July 8, 2026

Release Notes

What's Changed JavaScript / TypeScript / Node.js 🚀

  • fix yarn alias parsing and add tests by @AvKat by @prabhu in #4230
  • pnpm workspace + pdm file components by @prabhu in #4235 Python 🐍
  • Include more python build packages. by @prabhu in #4231 C# / .NET 🎯
  • fix unparsed packages.config by @prabhu in #4238 Docker / Containers / Infrastructure 🐳
  • fix native SBOM pull for registries without referrers API by @prabhu in #4243
  • Use caxa 3.1.0 by @prabhu in #4244 AI-BOM / Machine Learning / MCP 🧠
  • Refactor cli options parsing with better defaults handling. by @prabhu in #4228
  • license enhancer + policy violations checker by @prabhu in #4232
  • Trim dependencies by @prabhu in #4236
  • move to undici by @prabhu in #4241
  • add AI-generated code and authorship provenance detection by @prabhu in #4242 Full Changelog: v12.7.0...v12.7.1

Installer type: portable

ArchitectureScopeDownloadSHA256
x64—DownloadB2751566100AE5CE85975961A07A1EF8F5B4D3BC0F27A3165967488EFA94DF6C

Details

Homepage
https://github.com/CycloneDX/cdxgen
License
Apache-2.0
Publisher
OWASP Foundation
Support
https://github.com/CycloneDX/cdxgen/issues
Moniker
cdxgen

Tags

bomcbomcontainerscyclonedxdockerociowasppackage-urlpurlsaasbomsbomscasoftware-bill-of-materialssupply-chain

Older versions (45)

12.7.0
ArchitectureScopeDownloadSHA256
x64—DownloadC92A793C5E3177CAA3297DF88317529D9D225113CF0B4C7BB144438B0DB257D1
12.6.0
ArchitectureScopeDownloadSHA256
x64—DownloadF3E574377AE6A850DD82EAFA901E7BFFDDFC4B503BB3710E608E6E9544B141EE
12.5.1
ArchitectureScopeDownloadSHA256
x64—Download7B409D7199C3795D6378A33756FC8B2FB8A26153C2E010D67961D98F989EACE3
12.5.0
ArchitectureScopeDownloadSHA256
x64—DownloadC5C8C345A7056AE769823A8E45BC4458DCB5E6155FE451A55B764D03A399C4C5
12.4.4
ArchitectureScopeDownloadSHA256
x64—Download444E7714C004049DC5ACD9A74A13298BAB714E52330700DDFA1E6326B09711E7
12.4.3
ArchitectureScopeDownloadSHA256
x64—Download95CC002E54428770587C3399443B1EDA5A0DD8B6FAE95ACA02F0A449A9E50BA3
12.4.2
ArchitectureScopeDownloadSHA256
x64—Download0B1A4A7D07BD1BFCEB57D36715392F11A5921058FE3091B4C9A2EE7C540490B9
12.4.1
ArchitectureScopeDownloadSHA256
x64—Download7F7898E103231D44CE6CE0EA42C0CFC75E3244DF7A81312E068D03828AD8EDED
12.4.0
ArchitectureScopeDownloadSHA256
x64—DownloadD89F75FE4ED72D3E34CE07A0CF1D8C8988BBE3EC311F5C94D721CD4B4716C2CC
12.3.3
ArchitectureScopeDownloadSHA256
x64—Download7BB2AFE76CD18086BB31B0BF7B4EE898E717A46A33E5C4C39496492A0785FF62
12.3.2
ArchitectureScopeDownloadSHA256
x64—Download181E7D3AA22FE588C90EDBB53EA9A2DDDE6C746BE8F230F61BF248707A48B57A
12.3.1
ArchitectureScopeDownloadSHA256
x64—Download2B98C8F33268FDE61ED849FF0616F5BAE5720D889778A852F94439B9000F3495
12.3.0
ArchitectureScopeDownloadSHA256
x64—Download5B963F1C12F752372A360AACC279D4CEF566BBAC1261775286372600F13FDCD4
12.2.1
ArchitectureScopeDownloadSHA256
x64—Download470E0E806E7B638AE8F0EC5839D39399C79175574565B6AB5594EB26E14EA527
12.2.0
ArchitectureScopeDownloadSHA256
x64—Download00FECB55B50A3AD1E8E42E5BB011C7086CA80875D1A31405625AC8961EF73D15
12.1.5
ArchitectureScopeDownloadSHA256
x64—Download19D9EBD3F5ED1390CC33C1AC503AE5504BB201959F7A09A3158AC87F4C5044BD
12.1.4
ArchitectureScopeDownloadSHA256
x64—Download607AFFB6EB91692133409E4654E0FC0896BE99407FFDF2A147BA9450739C8ADC
12.1.3
ArchitectureScopeDownloadSHA256
x64—DownloadBA5A684C7F6BA93AC8174B9A3ACD85D1A5D1717E09CE4F06CEF1EA174E942310
12.1.2
ArchitectureScopeDownloadSHA256
x64—DownloadB14DAB570906B46B7DD63247A9A85FFCC7B8E5792824FA75A41DF2DD36596B3F
12.1.1
ArchitectureScopeDownloadSHA256
x64—Download0F6B20ED599FAB7691C9B1B5198C6B55308CD60849640E5802E4F33B3902CCB9
12.1.0
ArchitectureScopeDownloadSHA256
x64—DownloadB8410E379374224C5424EC95399BC047B84DABDB202A420BBD31DCDA630C979C
12.0.0
ArchitectureScopeDownloadSHA256
x64—Download9660B2AEC4ED897C3E89EFA33D4F648D6D83E3987C8FDA791DC77DF2F97B8C7C
11.11.0
ArchitectureScopeDownloadSHA256
x64—Download029E94F13C99A52169B0EFF7585F1181A7B6A4C654FDAB7ED02105677123D1EF
11.10.0
ArchitectureScopeDownloadSHA256
x64—Download7040F626082A19F687EF9E39CA12B22FD19C8322588F00B84E3C5257E6CE3612
11.9.0
ArchitectureScopeDownloadSHA256
x64—Download63CE182C19ABEB7C949181C72599E798014784A8D8D616A2BC8659832800EEDF
11.8.0
ArchitectureScopeDownloadSHA256
x64—DownloadCA5BBD6D04279970AF3E04566E8888ED250BE9A7EDC6ADC52BDE9D20EE4479CB
11.7.0
ArchitectureScopeDownloadSHA256
x64—Download730AFB5DA16150E15D1046811003713AA2CF570175140FCFAEF633E004A90380
11.6.0
ArchitectureScopeDownloadSHA256
x64—DownloadC186406861E40E11FE2F8371EF8830E66017F3ADD117AEDEE26E77C85E37650D
11.5.0
ArchitectureScopeDownloadSHA256
x64—DownloadCCEF5A440AA535EC3B56229B4E2EED5676EDC02B4C366017D669BFF51CD12532
11.4.3
ArchitectureScopeDownloadSHA256
x64—DownloadC7B95E62D4653AE7EB7AE1A3FB765649A4AF6DA34B2B2B391D91740A3D29FA33
11.4.2
ArchitectureScopeDownloadSHA256
x64—DownloadAD5530E5E4365D838F4D28F6735C1AFED431F61393CBC6DB3F278CBC5CA3F063
11.4.1
ArchitectureScopeDownloadSHA256
x64—Download2005FA5A299C77511C534B1DF3CEB7D342FDAEB3D3AA1761B4775F8D184EFA96
11.4.0
ArchitectureScopeDownloadSHA256
x64—DownloadEA554DDE1DAB225C79654F002FA4C63B6D6FCEAA0A6D5EBD734A080547D012A3
11.3.2
ArchitectureScopeDownloadSHA256
x64—DownloadC568D9B1963ABA04F25F1CF05E0EA7CE223F6FF899C3BF0ABF79468466887154
11.3.1
ArchitectureScopeDownloadSHA256
x64—Download8181662C4140F756AE3FC318642A9779A542FE655391C99167193DF17335C121
11.3.0
ArchitectureScopeDownloadSHA256
x64—DownloadDE30E1DE54DFF84A2CA6921FE2E794BCAA52238B70874CDBC6D67D69BB109291
11.2.7
ArchitectureScopeDownloadSHA256
x64—DownloadB06642E8C15479F600D9DA055659657FCC69C50C3482C2792F8143A1AA0CECE7
11.2.6
ArchitectureScopeDownloadSHA256
x64—DownloadDBE9E84FF27902710CB1C46566F7A7DFCB83528E8D1FF3FE2265FF878C9E240A
11.2.5
ArchitectureScopeDownloadSHA256
x64—DownloadA8303AA9FEF26C43A07D70C7BD075D7F3AA53E95A9B4275523B58507D5416FD2
11.2.4
ArchitectureScopeDownloadSHA256
x64—Download685D1281854315C951A4410A3F9DB3A568AAF4B29E6395186E167363E7343201
11.2.3
ArchitectureScopeDownloadSHA256
x64—Download43DB4CB53F45B3CF32688B2D3B5E8121FC361A01BE9215BC7AE73F0814E7C58F
11.2.2
ArchitectureScopeDownloadSHA256
x64—DownloadF47335133C1E9080FEDA4044DFFD295338A5FF5B1CCD1AC31DAC92BA40A7C43F
11.2.1
ArchitectureScopeDownloadSHA256
x64—Download18C0C17955C5AF8BF1D83B248B24F1FB17DD007BFC35607B60DDDEAFB26388BA
11.2.0
ArchitectureScopeDownloadSHA256
x64—DownloadAB6E6543164ADE7127DD5FAD82B243F178AB504489CF2F16CF15B35C1D242B32
11.1.10
ArchitectureScopeDownloadSHA256
x64—DownloadE75692EB7B1ED548AE526530464A3E2B062434F3337E7D3891A331A19715FE43