Tuesday, 14 July 2026 @ 14:01 UTC~3313,430150,790

SBOM Tool

Microsoft·Microsoft.SBOMTool

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

winget install --id Microsoft.SBOMTool --exact --source winget

Latest 4.1.5·December 15, 2025

Release Notes

⚙️ Changes

  • Bump component detection to 6.2.1 by @sebasgomez238 (#1359)
  • Fix CG alert - .NET SDK by @ZhengHong-Tan (#1334)
  • Remove GH packages release step from pipeline by @sfoslund (#1333)
  • Fix release pipeline internal feed release by @sfoslund (#1325)

Installer type: portable

ArchitectureScopeDownloadSHA256
x64—Download625767B371B7FDD58F40F618B8A86DA0247A33C89E419039C86B4EDBA1DAD4B5

Details

Homepage
https://github.com/microsoft/sbom-tool
License
MIT
Publisher
Microsoft
Support
https://github.com/microsoft/sbom-tool/issues
Copyright
© Microsoft Corporation. All rights reserved.

Tags

sbomsbom-generator

Older versions (6)

4.1.1
ArchitectureScopeDownloadSHA256
x64—DownloadE182F0C2D56DCD1EAB646C107CA43799794FC161F83FF143208990ADD9F69BBF
4.0.3
ArchitectureScopeDownloadSHA256
x64—Download721661F52B264526FF5F45627E61A4B176AD463BE75EA27B3C480C52D1A7E208
3.1.0
ArchitectureScopeDownloadSHA256
x64—DownloadE0DE5CE4DDD23F204D13C52F21C5227300AAC3FB08D0EFC443B7C1AEE9C0A1EA
3.0.1
ArchitectureScopeDownloadSHA256
x64—Download31A57CC980A927614E23E57C6FF4627BB04F6D38133468669C685B994B8BBC77
2.2.6
ArchitectureScopeDownloadSHA256
x64—Download991448567A8D36E90BEFE48A180716D48BDFF9B35EAF11D2B18300F8AB6A3924
1.5.2
ArchitectureScopeDownloadSHA256
x64—DownloadB4CD4D506D25D463344A8B4C5F05473B9ADC970F42DFC32A2761258BCE9906A2