CycloneDX BOM Examples

February 3, 2024 ยท View on GitHub

Website Slack Invite Group Discussion Twitter

CycloneDX BOM Examples

CycloneDX was designed from the ground-up to be a Bill of Materials (BOM) format, capable of capturing complex inventory information for a wide range of cybersecurity and software supply chain use cases.

This repository contains example CycloneDX Bill of Materials (BOM) created from various open source projects. Examples are categorized by different BOM types including:

BOM TypeDescription
CBOMCryptography Bill of Materials
HBOMHardware Bill of Materials
OBOMOperations Bill of Materials
SaaSBOMSoftware-as-a-Service Bill of Materials
SBOMSoftware Bill of Materials
VDRVulnerability Disclosure Report
VEXVulnerability Exploitability eXchange

When possible, the BOMs conform to the latest version of the CycloneDX specification.

High-Level Object Model

CycloneDX Object Model Swimlane