Python library for CycloneDX
Project description
CycloneDX Python Library
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction.
This Python package provides data models, validators and more, to help you create/render/read CycloneDX documents.
This package is not designed for standalone use. It is a software library.
As of version 3.0.0, the internal data model was adjusted to allow CycloneDX VEX documents to be produced as per
official examples linking VEX to a separate CycloneDX document.
If you're looking for a CycloneDX tool to run to generate (SBOM) software bill-of-materials documents, why not checkout CycloneDX Python or Jake.
Documentation
View the documentation here.
Python Support
We endeavour to support all functionality for all current actively supported Python versions. However, some features may not be possible/present in older Python versions due to their lack of support.
Changelog
See our CHANGELOG.
Contributing
Feel free to open issues, bugreports or pull requests.
See the CONTRIBUTING file for details.
Copyright & License
CycloneDX Python Lib is Copyright (c) OWASP Foundation. All Rights Reserved.
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.
See the LICENSE file for the full license.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
File details
Details for the file cyclonedx_python_lib-8.5.0.tar.gz.
File metadata
- Download URL: cyclonedx_python_lib-8.5.0.tar.gz
- Upload date:
- Size: 1.1 MB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/5.1.1 CPython/3.12.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 35f7a139042e4df17ff414fa228cec83c7e4e493bdec990847357791ca72f3a5 |
|
| MD5 | 88b163d357fc51752b15bf54b1fc1feb |
|
| BLAKE2b-256 | 67a8c735131c5e2a4e778c335b9f2c0500829d947b095e20331c401cfd0b6ef6 |
Provenance
The following attestation bundles were made for cyclonedx_python_lib-8.5.0.tar.gz:
Publisher:
release.yml on CycloneDX/cyclonedx-python-lib
-
Statement type:
https://in-toto.io/Statement/v1- Predicate type:
https://docs.pypi.org/attestations/publish/v1 - Subject name:
cyclonedx_python_lib-8.5.0.tar.gz - Subject digest:
35f7a139042e4df17ff414fa228cec83c7e4e493bdec990847357791ca72f3a5 - Sigstore transparency entry: 149455108
- Sigstore integration time:
- Predicate type:
File details
Details for the file cyclonedx_python_lib-8.5.0-py3-none-any.whl.
File metadata
- Download URL: cyclonedx_python_lib-8.5.0-py3-none-any.whl
- Upload date:
- Size: 373.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/5.1.1 CPython/3.12.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | a6b6d04295cdbee27c4b8d618ba2c1c7bbd535b9666cc36b05e9d6408751a829 |
|
| MD5 | 997d9a2765dfbd1bcd8a5a4621866797 |
|
| BLAKE2b-256 | 487e4e0561c3640f9f7795e3efce0d3045b0536f73cebf1ea142d55fe16c78b6 |
Provenance
The following attestation bundles were made for cyclonedx_python_lib-8.5.0-py3-none-any.whl:
Publisher:
release.yml on CycloneDX/cyclonedx-python-lib
-
Statement type:
https://in-toto.io/Statement/v1- Predicate type:
https://docs.pypi.org/attestations/publish/v1 - Subject name:
cyclonedx_python_lib-8.5.0-py3-none-any.whl - Subject digest:
a6b6d04295cdbee27c4b8d618ba2c1c7bbd535b9666cc36b05e9d6408751a829 - Sigstore transparency entry: 149455111
- Sigstore integration time:
- Predicate type:
