# Install cyclonedx-cli with Homebrew, Nix, winget Tool for analysis and manipulation of CycloneDX SBOMs. Version 0.32.0 via Homebrew; verified 2026-06-14. ## Install ```sh sudo av install brew:cyclonedx-cli ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install cyclonedx-cli ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#cyclonedx-cli ``` Evidence: nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id CycloneDX.CLI -e ``` Evidence: Windows Package Manager source index: CycloneDX.CLI from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:cyclonedx-cli - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.32.0 - **Source summary:** Tool for analysis and manipulation of CycloneDX SBOMs - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-14T23:05:05Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - cyclonedx (cli) - cyclonedx (alias) ## Dependencies - dotnet ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.32.0 - Package-manager updated: 2026-06-14 - Local data: ok - Upstream repository: https://github.com/CycloneDX/cyclonedx-cli - Upstream latest detected: v0.32.0 (current) ## Project history and usage CycloneDX CLI is the general-purpose command-line tool for analyzing, modifying, converting, diffing, merging, signing, verifying, and validating CycloneDX BOM files. ### Project history The CycloneDX standard began as an OWASP security-focused Bill of Materials format in 2018, then expanded through versions 1.1 through 1.7 into pedigree, services, composition, VEX/VDR, AI transparency, cryptographic assets, attestation, and citation support. The cyclonedx-cli repository was created in October 2020 as a dedicated automation tool around those BOM documents. ### Adoption history CycloneDX's official site describes it as an international standard, with v1.6 ratified as ECMA-424 in June 2024, and its tool center lists hundreds of supporting tools. Within that ecosystem, cyclonedx-cli fills the package-manager-friendly role of a format workbench rather than a language-specific generator. ### How it is used The CLI is commonly used after an SBOM has already been produced: converting between XML, JSON, Protobuf, CSV, and SPDX JSON, validating against schema versions, merging component BOMs, diffing releases, and signing or verifying BOM artifacts in CI pipelines. ### Why package nerds care For maintainers, cyclonedx-cli matters because it gives distributions and build systems a single executable for SBOM hygiene tasks that otherwise require language-specific libraries or custom scripts. ### Timeline - 2018: CycloneDX v1.0 introduced a general-purpose security-focused BOM standard. - 2020: cyclonedx-cli repository and early releases appeared. - 2024: CycloneDX v1.6 was ratified as ECMA-424, 1st Edition. - 2025: CycloneDX v1.7 added citation, patent, and expanded transparency support. ### Related projects - The CLI sits beside language-specific generators such as cyclonedx-gomod and cyclonedx-python, and interoperates with SPDX through its conversion command. ### Sources - - - - - ## Security Notes No matching local secret-handling manifest was found for cyclonedx-cli. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cyclonedx-cli - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Nix - cyclonedx-cli: normalized package name match | nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - winget - CycloneDX.CLI: normalized package name match | Windows Package Manager source index: CycloneDX.CLI from https://cdn.winget.microsoft.com/cache/source.msix ## Related links - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched curated package taxonomy and local package facts. - [dotnet](https://www.automicvault.com/pkg/brew/dotnet/) - Runtime dependency declared by Homebrew. - [cargo-cyclonedx](https://www.automicvault.com/pkg/brew/cargo-cyclonedx/) - Shares the same upstream homepage. - [cyclonedx-gomod](https://www.automicvault.com/pkg/brew/cyclonedx-gomod/) - Shares the same upstream homepage. - [cyclonedx-python](https://www.automicvault.com/pkg/brew/cyclonedx-python/) - Shares the same upstream homepage. ## Combined YAML source View the package source record on GitHub. [combined/cyclonedx-cli.yml](https://github.com/automic-vault/db/blob/main/combined/cyclonedx-cli.yml) ## Sources - Nucleus package database - package-page enrichment - curated package history - package version freshness - package relationship graph - external package-manager database matches - cross-ecosystem install command graph