Automic VaultAutomic Vault

brew

bomctl mit Homebrew, apk, zypper installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für bomctl in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install bomctl

local Homebrew formula metadata

Überblick

Paketzusammenfassung

Format-agnostic SBOM tooling for the stages between SBOM generation and analysis

Befehle und Aliase

  • bomctl

Verlauf

Projektgeschichte und Nutzung

bomctl is experimental, format-agnostic SBOM tooling intended to bridge the gap between SBOM generation and SBOM analysis tools.

Projektgeschichte

The GitHub repository was created in January 2024. The README identifies bomctl as an OpenSSF Sandbox project under active development and says it builds on protobom for an SBOM-agnostic component graph.

Adoptionsgeschichte

The project documents installation through a Homebrew tap, container images on Docker Hub, and source builds, and the supplied package facts show availability through Homebrew, apk, and zypper.

Wie es verwendet wird

Users fetch, import, list, alias, merge, tag, export, and push SBOMs. bomctl stores SBOMs in a persistent cache and can fetch over HTTPS, OCI, Git, GitHub, and GitLab.

Warum Paket-Nerds sich dafür interessieren

bomctl is interesting to package and supply-chain users because it treats SBOMs as package-like artifacts that can be cached, transformed, pushed, and moved between SPDX, CycloneDX, and related ecosystems.

Zeitleiste

  • 2024: GitHub repository created.
  • 2024: v0.1.0-alpha appears in GitHub releases.
  • 2025: v0.4.3 appears in GitHub releases.

Related projects

  • protobom, OpenSSF, SPDX, CycloneDX, GUAC, Sigstore

Sicherheitslage

Noch keine Protected-Tool-Abdeckung gefunden

Für bomctl wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.netrc

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
bomctlcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version0.4.3
Manager aktualisiert2026-07-05
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv0.4.3

https://github.com/bomctl/bomctl

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:bomctl
Version0.4.3
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/bomctl
Homepagehttps://github.com/bomctl/bomctl
Repositoryhttps://github.com/bomctl/bomctl
Upstream-Dokumentationhttps://github.com/bomctl/bomctl#readme
LizenzApache-2.0
Quellarchivhttps://github.com/bomctl/bomctl/archive/refs/tags/v0.4.3.tar.gz
Zuletzt aktualisiert2026-07-05T10:30:30Z
Pulseupdated
Build-Abhängigkeitengo
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebomctl
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

apk95%

bomctl 0.1.9-r16

Format agnostic SBOM tooling

https://github.com/bomctl/bomctl

sudo apk add bomctl
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bomctl
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bomctl from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

bomctl-bash-completion 0.1.9-r16

Bash completions for bomctl

https://github.com/bomctl/bomctl

sudo apk add bomctl-bash-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bomctl
  • normalized package name match
  • Abgeglichen nach: Bomctl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bomctl-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

bomctl-fish-completion 0.1.9-r16

Fish completions for bomctl

https://github.com/bomctl/bomctl

sudo apk add bomctl-fish-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bomctl
  • normalized package name match
  • Abgeglichen nach: Bomctl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bomctl-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

bomctl-zsh-completion 0.1.9-r16

Zsh completions for bomctl

https://github.com/bomctl/bomctl

sudo apk add bomctl-zsh-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bomctl
  • normalized package name match
  • Abgeglichen nach: Bomctl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bomctl-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
zypper95%

bomctl 0.4.3-1.4

Format agnostic SBOM tooling

https://github.com/bomctl/bomctl

sudo zypper install bomctl
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: bomctl
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: bomctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

bomctl-bash-completion 0.4.3-1.4

Bash Completion for bomctl

https://github.com/bomctl/bomctl

sudo zypper install bomctl-bash-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: bomctl
  • 2 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: bomctl-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

bomctl-fish-completion 0.4.3-1.4

Fish Completion for bomctl

https://github.com/bomctl/bomctl

sudo zypper install bomctl-fish-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: bomctl
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: bomctl-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

bomctl-zsh-completion 0.4.3-1.4

Zsh Completion for bomctl

https://github.com/bomctl/bomctl

sudo zypper install bomctl-zsh-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: bomctl
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: bomctl-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • goBuild dependency declared by Homebrew.

Gleicher Workflow

  • cyclonedx-gomodShares av.db curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain.
  • cyclonedx-npmShares av.db curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain.
  • cyclonedx-pythonShares av.db curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain.
  • cdxgenShares av.db curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain.
  • cyclonedx-cliShares av.db curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain.
  • sbom-toolShares av.db curated category or tags: cli, sbom, security, software-supply-chain.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment