CycloneDX Editor/Validator
This command-line tool performs various actions on CycloneDX SBOMs. It allows you to modify, merge and validate your Software Bill of Materials (SBOM).
The tool is built with automation in mind, i.e. usage within CI/CD. We try to be as scriptable as possible with various command-line flags, avoiding interactive prompts, providing multiple output options and fine-grained exit codes.
Command overview
| Command | Description |
|---|---|
| amend | Accepts a single input file and will apply one or multiple operations to it. Each operation modifies certain aspects of the SBOM. These modifications cannot be targeted at individual components in the SBOM which sets the amend command apart from set. Its use-case is ensuring an SBOM fulfils certain requirements in an automated fashion. |
| build-public | Creates a redacted version of an SBOM fit for publication. |
| init-sbom | Provides a first draft of an SBOM for manual completion. |
| list | Lists content of the SBOM. |
| merge | Merges two or more CycloneDX documents into one. |
| set | Sets properties on specified components to specified values. If a component in an SBOM is missing a particular property or the property is present but has a wrong value, this command can be used to modify just the affected properties without changing the rest of the SBOM. |
| validate | Validate the SBOM against a built-in or user-provided JSON schema. |
| vex | Apply different operations on VEX-files. |
Installation and usage
This tool is published on PyPi.
For detailed installation and usage guides, please refer to our official documentation.
Contributing
See our contribution guidelines.
License
This software is made available under the GNU General Public License v3 (GPL-3.0-or-later).
1 maintainer
Metadata
1 maintainer
Release files for cyclonedx-editor-validator 1.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| cyclonedx_editor_validator-1.0.2.tar.gz | 689.5 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| cyclonedx_editor_validator-1.0.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 1.1 MB
Release files / cyclonedx_editor_validator-1.0.2.tar.gz
| Download URL | cyclonedx_editor_validator-1.0.2.tar.gz |
|---|---|
| Size | 689.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
407db47911022e65ca645a33533c93873f0fc01d834a0ceb190dcd2e209bc2b5
|
|
BLAKE2b-256 checksum How to use checksums |
524fea66f71540d5c87a95d9d39a24d2f66729c48bbcbf4ed09aa9f4c284f8a2
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / cyclonedx_editor_validator-1.0.2-py3-none-any.whl
| Download URL | cyclonedx_editor_validator-1.0.2-py3-none-any.whl |
|---|---|
| Size | 459.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
5bd0d70c306f3e55449a4a3cbe91e4bc476478322915024303e81ff074000450
|
|
BLAKE2b-256 checksum How to use checksums |
1ac237388260b764640338749f01637352e321dfab77c699ce623784c3bffba0
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
