CycloneDX CLI

by CycloneDX Teamv0.31.0

Last updated Jun 8, 2026

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

Install with winget

$ winget install --id CycloneDX.CLI --exact --version 0.31.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

The CycloneDX CLI tool currently supports BOM analysis, modification, diffing, merging, format

conversion, signing and verification.

Conversion is supported between CycloneDX XML, JSON, Protobuf, CSV, and SPDX JSON v2.3.

Installers · v0.31.0

Architecture	Type	Scope	Download
x86	Portable	-	Direct
x64	Portable	-	Direct
arm64	Portable	-	Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

No known CVEs for CycloneDX CLI.

Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.

Related apps

T
TrivyAqua Security Software
AquaSecurity.Trivyv0.71.0
Trivy is a comprehensive and versatile security scanner.
S
SyftAnchore Inc
Anchore.Syftv1.45.1
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
OpenSCA-cliXmirror Security
XmirrorSecurity.OpenSCA-cliv3.0.11
OpenSCA-cli is a supply-chain security tool for security researchers and developers.
SCANOSS SBOM WorkbenchSCANOSS
Scanoss.SBOM-Workbenchv1.18.4
Graphical user interface to scan and audit source code using SCANOSS API.
S
SBOM ToolMicrosoft
Microsoft.SBOMToolv4.1.5
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
C
CycloneDX Generator (cdxgen)OWASP Foundation
CycloneDX.cdxgenv12.5.1
A polyglot tool and a library for generating various Bill of Materials in CycloneDX specification.

More from CycloneDX Team or browse bill-of-materials, bom, cyclonedx.

Frequently asked questions

How do I install CycloneDX CLI on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id CycloneDX.CLI --exact --version 0.31.0. winget downloads the installer from CycloneDX Team and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install CycloneDX CLI silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id CycloneDX.CLI --exact 0.31.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall CycloneDX CLI via winget?

Run: winget uninstall --id CycloneDX.CLI --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from CycloneDX CLI's Apps & Features entry.

Is CycloneDX CLI free?

CycloneDX CLI is distributed under Apache-2.0. Refer to the publisher (https://github.com/CycloneDX/cyclonedx-cli) for the full license terms - Wingetly itself does not charge for installation.

Does CycloneDX CLI work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls CycloneDX CLI directly from the publisher.

How do I keep CycloneDX CLI up to date?

Run winget upgrade --id CycloneDX.CLI --exact, or winget upgrade --all to update everything winget tracks. We index 2 versions of CycloneDX CLI from microsoft/winget-pkgs.

Recent versions

0.31.0latest
0.30.0