# 使用 Homebrew, Nix, winget 安装 cyclonedx-cli

查看 cyclonedx-cli 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:cyclonedx-cli
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install cyclonedx-cli
```

  证据: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#cyclonedx-cli
```

  证据: nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

### Windows

- winget (92%):

```sh
winget install --id CycloneDX.CLI -e
```

  证据: Windows Package Manager source index: CycloneDX.CLI from https://cdn.winget.microsoft.com/cache/source.msix

## 软件包事实

- **软件包键:** brew:cyclonedx-cli
- **软件包管理器:** Homebrew
- **软件包管理器页面:** <https://formulae.brew.sh/formula/cyclonedx-cli>
- **版本:** 0.32.0
- **来源摘要:** Tool for analysis and manipulation of CycloneDX SBOMs
- **主页:** <https://cyclonedx.org/>
- **仓库:** <https://github.com/CycloneDX/cyclonedx-cli>
- **上游文档:** <https://cyclonedx.org/>
- **许可证:** Apache-2.0
- **源码归档:** <https://github.com/CycloneDX/cyclonedx-cli/archive/refs/tags/v0.32.0.tar.gz>
- **最后更新:** 2026-06-14T23:05:05Z
- **已生成:** 2026-07-08T07:18:31+00:00

## 可执行文件

- cyclonedx (cli)
- cyclonedx (别名)

## 依赖

- dotnet

## 安装行为

- post-install 钩子: 未定义
- Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## 版本和新鲜度

- 页面生成时间: 2026-07-08
- 管理器版本: 0.32.0
- 管理器更新时间: 2026-06-14
- 本地数据: OK
- 上游仓库: https://github.com/CycloneDX/cyclonedx-cli
- 检测到的最新版本: v0.32.0 (当前)
## 项目历史与用法

CycloneDX CLI is the general-purpose command-line tool for analyzing, modifying, converting, diffing, merging, signing, verifying, and validating CycloneDX BOM files.

### 项目历史

The CycloneDX standard began as an OWASP security-focused Bill of Materials format in 2018, then expanded through versions 1.1 through 1.7 into pedigree, services, composition, VEX/VDR, AI transparency, cryptographic assets, attestation, and citation support. The cyclonedx-cli repository was created in October 2020 as a dedicated automation tool around those BOM documents.

### 采用历史

CycloneDX's official site describes it as an international standard, with v1.6 ratified as ECMA-424 in June 2024, and its tool center lists hundreds of supporting tools. Within that ecosystem, cyclonedx-cli fills the package-manager-friendly role of a format workbench rather than a language-specific generator.

### 使用方式

The CLI is commonly used after an SBOM has already been produced: converting between XML, JSON, Protobuf, CSV, and SPDX JSON, validating against schema versions, merging component BOMs, diffing releases, and signing or verifying BOM artifacts in CI pipelines.

### 为什么软件包爱好者会关心

For maintainers, cyclonedx-cli matters because it gives distributions and build systems a single executable for SBOM hygiene tasks that otherwise require language-specific libraries or custom scripts.

### 时间线

- 2018: CycloneDX v1.0 introduced a general-purpose security-focused BOM standard.
- 2020: cyclonedx-cli repository and early releases appeared.
- 2024: CycloneDX v1.6 was ratified as ECMA-424, 1st Edition.
- 2025: CycloneDX v1.7 added citation, patent, and expanded transparency support.

### Related projects

- The CLI sits beside language-specific generators such as cyclonedx-gomod and cyclonedx-python, and interoperates with SPDX through its conversion command.

### 来源

- <https://cyclonedx.org/about/history/>
- <https://cyclonedx.org/docs/latest/>
- <https://cyclonedx.org/tool-center/>
- <https://github.com/CycloneDX/cyclonedx-cli/blob/main/README.md>
- <https://api.github.com/repos/CycloneDX/cyclonedx-cli>


## 安全说明

没有找到 cyclonedx-cli 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。


## 源数据库详情

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** cyclonedx-cli
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## 其他软件包管理器记录

- Nix - cyclonedx-cli: normalized package name match | nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- winget - CycloneDX.CLI: normalized package name match | Windows Package Manager source index: CycloneDX.CLI from https://cdn.winget.microsoft.com/cache/source.msix


## 相关链接

- [Networking and protocol packages](https://www.automicvault.com/zh-hans/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Homebrew utility packages](https://www.automicvault.com/zh-hans/pkg/brew-utility-packages/) - Matched curated package taxonomy and local package facts.
- [dotnet](https://www.automicvault.com/zh-hans/pkg/brew/dotnet/) - Runtime dependency declared by Homebrew.
- [cargo-cyclonedx](https://www.automicvault.com/zh-hans/pkg/brew/cargo-cyclonedx/) - Shares the same upstream homepage.
- [cyclonedx-gomod](https://www.automicvault.com/zh-hans/pkg/brew/cyclonedx-gomod/) - Shares the same upstream homepage.
- [cyclonedx-python](https://www.automicvault.com/zh-hans/pkg/brew/cyclonedx-python/) - Shares the same upstream homepage.

## Combined YAML source

View the package source record on GitHub. [combined/cyclonedx-cli.yml](https://github.com/automic-vault/db/blob/main/combined/cyclonedx-cli.yml)


## 来源

- Nucleus package database
- package-page enrichment
- curated package history
- package version freshness
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph