Name: CycloneDX CLI
Author: CycloneDX Team

CycloneDX CLI

CycloneDX Team·CycloneDX.CLI

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

The CycloneDX CLI tool currently supports BOM analysis, modification, diffing, merging, format conversion, signing and verification. Conversion is supported between CycloneDX XML, JSON, Protobuf, CSV, and SPDX JSON v2.3.

winget install --id CycloneDX.CLI --exact --source winget

Latest 0.33.1·July 23, 2026

Release Notes

0.33.1

This patch release updates the CycloneDX .NET library. Users of 0.33.0 should upgrade to 0.33.1.

Added

Multi-platform Docker images for linux/amd64 and linux/arm64.

Fixed

cyclonedx-dotnet-library#427: Check nested components when using analyze --multiple-component-versions, addressing CLI issue #481. cyclonedx-dotnet-library#415: Preserve vulnerability affects.ref values during hierarchical merges, addressing CLI issue #471.

Full Changelog: https://github.com/CycloneDX/cyclonedx-cli/compare/v0.33.0...v0.33.1

Installer type: `portable`

x86—A9FEE1F946B4D6B200B898CE16715274444E88A7B6AB5EBFF4FD1AA2EC6EAEB5

x64—9B360974C41A5D612EB026FB5E3BB1FA28E08865F7A4F915665B8BC94BD3BC31

arm64—49E169FE8DD579E16DC5D31B32CB5C832CEBBD1E6D4D317DF9D363985FB907A2

Details

Homepage: https://github.com/CycloneDX/cyclonedx-cli
License: Apache-2.0
Publisher: CycloneDX Team
Support: https://github.com/CycloneDX/cyclonedx-cli/issues
Copyright: Copyright (c) OWASP Foundation

Older versions (2)

0.31.0

x86—02735C665628C1E641E1EC34CC86ECC3F799F80A526381D447303706DE1F4B94

x64—DA18BDB0D5B10A5F45DDFB59B7B08B11DDC050BB5C6407608D831929A1799D3F

arm64—AF0A5C6C17B0BEE113066760D3378EB5E03EB5C75ECA2479E61FC43669C46036

0.30.0

x86—8EAB8678920CD2688B717B2D8B784374BD6758F948D5EF2B3F5828DEF51B6FA2

x64—1F563BA9644D2F2966FC8029FD701CA4AF4F388D44C017C1D60559A1ECC9114F

arm64—866809C6E2617C39D0B11713872AE35B88C98941C22DC66D9A4B633FA56DB82A