CycloneDX / cyclonedx-cli

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

https://cyclonedx.org/

CycloneDX/cyclonedx-cli Issues

When converting cyclonedx xml to json and a dependency has multiple licenses, only the first license is taken into account
Closed a month ago2
cyclonedx merge defaults to specVersion 1.5 even when merging two v1.4 files
Closed a month ago6
Converting json SBOM to xml produces invalid SBOM when there is a component with multiple licenses
Closed a month ago3
cyclonedx-cli merge Command Produces SBOM with Null Values for Tools
Closed a month ago1
`cyclonedx convert` causes `cyclonedx validate` to fail
Closed a month ago2
SBOM conversion issue.
Updated 2 months ago1
We are searching for additional .NET-maintainer!
Updated 2 months ago2
`cyclonedx` does not know about all SPDX license IDs
Closed 2 months ago2
converting issues
Updated 2 months ago10
Help is in the wrong order?
Updated 2 months ago1
cyclonedx merge command does not support v1.6 format
Updated 2 months ago4
Using diff command always produces empty output even if there are changes in SBOM's provided as inputs.
Updated 2 months ago3
Merging vcpkg created sboms
Closed 2 months ago5
Bug in merging json SBOMs with empty component lists
Updated 2 months ago3
How to sign a SBOM which is in xml format facing this issue
Updated 3 months ago1
How to run cyclonedx-cli
Updated 3 months ago3
Merging SBOMs doesn’t get rid of duplicates
Updated 3 months ago3
Support for CycloneDX schema version 1.6
Updated 3 months ago4
Cyclonedx win x64 startup crash
Closed 3 months ago2
Converting spdx (obtained via docker-scout) to cyclonedx results in empty file
Updated 3 months ago2
Merged SBOMs contain duplicates
Updated 3 months ago6
Validation failure: Invalid CycloneDX JSON generated for specific images like "monetdb/monetdb:Jun2023-SP1" and "redis"
Closed 4 months ago1
Invalid sbom json
Closed 4 months ago3
Produces invalid SBOM file when CVSSv31 method is used in input
Closed 4 months ago3
Unable to convert from Github Generated SPDX to CycloneDX
Updated 4 months ago2
Spec 1.5 is not supported
Closed 4 months ago11
Vadation failure: The value 'Kazlib' is invalid according to its datatype 'http://cyclonedx.org/schema/spdx:licenseId'
Closed 4 months ago4
Incorrect Purl element instead of purl in evidence section
Closed 4 months ago2
Conversion creates invalid SPDX JSON
Updated 4 months ago3
Shows inccorect licesnse Id for "TTWL"
Closed 4 months ago2
When outputting to existing file, it is not truncated
Closed 4 months ago1
Tests on MacOS fail due issue with snapshooter
Updated 4 months ago
When I Upload this BOM Ver 1.5 it is not getting parse in Depedency-track V 4.9.1
Closed 4 months ago1
Component type null causing validation error
Closed 4 months ago1
Take care of "special" spdx metadata when converting from spdx to cyclonedx
Updated 8 months ago
Merge command - inconsistent dependencies tree with/without name or version parameters
Updated 9 months ago
Can't get --exclude to work
Updated a year ago1
False Validation of Syft/Grype SBOM
Updated a year ago5
Missing version numbers
Updated a year ago1
Conversion creates invalid SPDX
Updated a year ago
When I using CycloneDX-CLI to convert format(json, xml) or SPDX format, metadata/author and supplier fields are omitted.
Updated a year ago1
cyclonedx-linux-x64 incompatibility with docker:stable image for github pipeline integration
Updated a year ago
Error: TAR_ENTRY_INVALID: linkpath forbidden
Closed a year ago
Conversion of SPDX to Cyclone dx is possible using cli or any other options for converting these 2 formats
Updated a year ago2
Providing a more helpful message
Updated a year ago1
Reimplement as a DLL with a console app front end?
Updated a year ago1
KeyNotFoundException
Closed a year ago1
CycloneDX CLI seems to output invalid BOM when license exists with empty name
Updated a year ago
Provide an option to convert a Mend UA JSON to a CycloneDX JSON
Updated a year ago2
Have a template CSV built into the tool so that it will be of the correct 'structure/format' to be converted into an SBOM
Updated a year ago