pkg.soopen package index

brew / Rang 11921

bomctl mit Homebrew, apk, zypper installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für bomctl in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install bomctl

local Homebrew formula metadata

Überblick

Paketzusammenfassung

Format-agnostic SBOM tooling for the stages between SBOM generation and analysis

Befehle und Aliase

  • bomctl

Verlauf

Projektgeschichte und Nutzung

bomctl is experimental, format-agnostic SBOM tooling intended to bridge the gap between SBOM generation and SBOM analysis tools.

Projektgeschichte

The GitHub repository was created in January 2024. The README identifies bomctl as an OpenSSF Sandbox project under active development and says it builds on protobom for an SBOM-agnostic component graph.

Adoptionsgeschichte

The project documents installation through a Homebrew tap, container images on Docker Hub, and source builds, and the supplied package facts show availability through Homebrew, apk, and zypper.

Wie es verwendet wird

Users fetch, import, list, alias, merge, tag, export, and push SBOMs. bomctl stores SBOMs in a persistent cache and can fetch over HTTPS, OCI, Git, GitHub, and GitLab.

Warum Paket-Nerds sich dafür interessieren

bomctl is interesting to package and supply-chain users because it treats SBOMs as package-like artifacts that can be cached, transformed, pushed, and moved between SPDX, CycloneDX, and related ecosystems.

Zeitleiste

  • 2024: GitHub repository created.
  • 2024: v0.1.0-alpha appears in GitHub releases.
  • 2025: v0.4.3 appears in GitHub releases.

Related projects

  • protobom, OpenSSF, SPDX, CycloneDX, GUAC, Sigstore

Sicherheitslage

Noch keine Protected-Tool-Abdeckung gefunden

Für bomctl wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.

Installationsverhalten

  • Es wurden keine Homebrew-Bottle-Metadaten erfasst.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.netrc

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
bomctlExecutableindexiertes ExecutableAus dem lokalen Executable-Index erkannt.

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-08-03
Manager-Version0.4.3
Manager aktualisiert2026-07-26
lokale Datenunbekannt
Upstreamnicht verfügbar
neueste erkannte Versionnicht erkannt
  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:bomctl
Version0.4.3
PaketmanagerHomebrew
Homepagehttps://github.com/bomctl/bomctl
Repositoryhttps://github.com/bomctl/bomctl
Zuletzt aktualisiert2026-07-26T10:56:34+02:00
Pulseupdated
Bottlenicht erfasst
Dienstkeiner deklariert

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

apk95%

bomctl 0.1.9-r17

Format agnostic SBOM tooling

https://github.com/bomctl/bomctl

sudo apk add bomctl
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bomctl
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bomctl from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

bomctl-bash-completion 0.1.9-r17

Bash completions for bomctl

https://github.com/bomctl/bomctl

sudo apk add bomctl-bash-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bomctl
  • normalized package name match
  • Abgeglichen nach: Bomctl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bomctl-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

bomctl-fish-completion 0.1.9-r17

Fish completions for bomctl

https://github.com/bomctl/bomctl

sudo apk add bomctl-fish-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bomctl
  • normalized package name match
  • Abgeglichen nach: Bomctl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bomctl-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

bomctl-zsh-completion 0.1.9-r17

Zsh completions for bomctl

https://github.com/bomctl/bomctl

sudo apk add bomctl-zsh-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bomctl
  • normalized package name match
  • Abgeglichen nach: Bomctl
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bomctl-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
zypper95%

bomctl 0.4.3-1.7

Format agnostic SBOM tooling

https://github.com/bomctl/bomctl

sudo zypper install bomctl
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: bomctl
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: bomctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
zypper95%

bomctl-bash-completion 0.4.3-1.7

Bash Completion for bomctl

https://github.com/bomctl/bomctl

sudo zypper install bomctl-bash-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: bomctl
  • 2 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: bomctl-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
zypper95%

bomctl-fish-completion 0.4.3-1.7

Fish Completion for bomctl

https://github.com/bomctl/bomctl

sudo zypper install bomctl-fish-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: bomctl
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: bomctl-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
zypper95%

bomctl-zsh-completion 0.4.3-1.7

Zsh Completion for bomctl

https://github.com/bomctl/bomctl

sudo zypper install bomctl-zsh-completion
  • License: Apache-2.0
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: bomctl
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bomctl
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: bomctl-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation