# bomctl mit Homebrew, apk, zypper installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für bomctl in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:bomctl ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install bomctl ``` Evidenz: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add bomctl ``` Evidenz: Alpine Linux edge package indexes: bomctl from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - zypper (92%): ```sh sudo zypper install bomctl ``` Evidenz: openSUSE Tumbleweed package metadata: bomctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Paketfakten - **Paketschlüssel:** brew:bomctl - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 0.4.3 - **Quellzusammenfassung:** Format-agnostic SBOM tooling for the stages between SBOM generation and analysis - **Homepage:** - **Repository:** - **Lizenz:** Apache-2.0 - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-07-26T10:56:34+02:00 - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - bomctl (cli) - bomctl (Alias) ## Build-Abhängigkeiten - go ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 0.4.3 - Manager aktualisiert: 2026-07-26 - lokale Daten: OK - Upstream-Repository: https://github.com/bomctl/bomctl - neueste erkannte Version: v0.4.3 (aktuell) ## Projektgeschichte und Nutzung bomctl is experimental, format-agnostic SBOM tooling intended to bridge the gap between SBOM generation and SBOM analysis tools. ### Projektgeschichte The GitHub repository was created in January 2024. The README identifies bomctl as an OpenSSF Sandbox project under active development and says it builds on protobom for an SBOM-agnostic component graph. ### Adoptionsgeschichte The project documents installation through a Homebrew tap, container images on Docker Hub, and source builds, and the supplied package facts show availability through Homebrew, apk, and zypper. ### Wie es verwendet wird Users fetch, import, list, alias, merge, tag, export, and push SBOMs. bomctl stores SBOMs in a persistent cache and can fetch over HTTPS, OCI, Git, GitHub, and GitLab. ### Warum Paket-Nerds sich dafür interessieren bomctl is interesting to package and supply-chain users because it treats SBOMs as package-like artifacts that can be cached, transformed, pushed, and moved between SPDX, CycloneDX, and related ecosystems. ### Zeitleiste - 2024: GitHub repository created. - 2024: v0.1.0-alpha appears in GitHub releases. - 2025: v0.4.3 appears in GitHub releases. ### Related projects - protobom, OpenSSF, SPDX, CycloneDX, GUAC, Sigstore ### Quellen - - - ## Sicherheitshinweise Für bomctl wurde kein passendes lokales Secret-Handling-Manifest gefunden. Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Credential files - Unix: ~/.netrc ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** bomctl - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Andere Paketmanager-Einträge - apk - bomctl - 0.1.9-r17: normalized package name match | Alpine Linux edge package indexes: bomctl from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Format agnostic SBOM tooling | https://github.com/bomctl/bomctl - apk - bomctl-bash-completion - 0.1.9-r17: normalized package name match | Alpine Linux edge package indexes: bomctl-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Bash completions for bomctl | https://github.com/bomctl/bomctl - apk - bomctl-fish-completion - 0.1.9-r17: normalized package name match | Alpine Linux edge package indexes: bomctl-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Fish completions for bomctl | https://github.com/bomctl/bomctl - apk - bomctl-zsh-completion - 0.1.9-r17: normalized package name match | Alpine Linux edge package indexes: bomctl-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Zsh completions for bomctl | https://github.com/bomctl/bomctl - zypper - bomctl - 0.4.3-1.7: normalized package name match | openSUSE Tumbleweed package metadata: bomctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Format agnostic SBOM tooling | https://github.com/bomctl/bomctl - zypper - bomctl-bash-completion - 0.4.3-1.7: normalized package name match | openSUSE Tumbleweed package metadata: bomctl-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for bomctl | https://github.com/bomctl/bomctl - zypper - bomctl-fish-completion - 0.4.3-1.7: normalized package name match | openSUSE Tumbleweed package metadata: bomctl-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for bomctl | https://github.com/bomctl/bomctl - zypper - bomctl-zsh-completion - 0.4.3-1.7: normalized package name match | openSUSE Tumbleweed package metadata: bomctl-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for bomctl | https://github.com/bomctl/bomctl ## Verwandte Links - [Source-control packages](https://pkg.so/de/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://pkg.so/de/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://pkg.so/de/brew/go/) - Build dependency declared by Homebrew. - [cyclonedx-python](https://pkg.so/de/brew/cyclonedx-python/) - Shares pkgdb curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [cyclonedx-gomod](https://pkg.so/de/brew/cyclonedx-gomod/) - Shares pkgdb curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [cyclonedx-npm](https://pkg.so/de/brew/cyclonedx-npm/) - Shares pkgdb curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [cdxgen](https://pkg.so/de/brew/cdxgen/) - Shares pkgdb curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [cyclonedx-cli](https://pkg.so/de/brew/cyclonedx-cli/) - Shares pkgdb curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [sbom-tool](https://pkg.so/de/brew/sbom-tool/) - Shares pkgdb curated category or tags: cli, sbom, security, software-supply-chain. - [bom](https://pkg.so/de/brew/bom/) - Shares pkgdb curated category or tags: cli, sbom, security, software-supply-chain, spdx. - [cosign](https://pkg.so/de/brew/cosign/) - Shares pkgdb curated category or tags: cli, security, software-supply-chain, supply-chain-security. ## Combined YAML source View the package source record on GitHub. [combined/bomctl.yml](https://github.com/mxcl/pkgdb/blob/main/combined/bomctl.yml) ## Quellen - pkg.so package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph