# cdxgen を Homebrew, Nix, winget でインストール cdxgen のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:cdxgen ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install cdxgen ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#cdxgen ``` 証拠: nixpkgs package indexes: pkgs/by-name/cd/cdxgen/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id CycloneDX.cdxgen -e ``` 証拠: Windows Package Manager source index: CycloneDX.cdxgen from https://cdn.winget.microsoft.com/cache/source.msix ## パッケージ情報 - **パッケージキー:** brew:cdxgen - **パッケージマネージャ:** Homebrew - **バージョン:** 12.8.2 - **ソース概要:** Creates CycloneDX Software Bill-of-Materials (SBOM) for projects - **ホームページ:** - **最終更新:** 2026-07-27T12:16:43-04:00 - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - aibom (エイリアス) - cbom (エイリアス) - cdx-audit (エイリアス) - cdx-convert (エイリアス) - cdx-sign (エイリアス) - cdx-validate (エイリアス) - cdx-verify (エイリアス) - cdxgen (エイリアス) - cdxgen-secure (エイリアス) - cdxi (エイリアス) - evinse (エイリアス) - hbom (エイリアス) - obom (エイリアス) - saasbom (エイリアス) - spdxgen (エイリアス) - tracebom (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 12.8.2 ## プロジェクトの歴史と使われ方 CycloneDX Generator, usually called cdxgen, is a CLI, library, REPL, and server for generating CycloneDX and SPDX software bill of materials documents from source trees, container images, binaries, hosts, and related inputs. ### プロジェクトの歴史 The GitHub API records the cdxgen repository as created on 2019-12-30. Its package metadata identifies @cyclonedx/cdxgen as the npm package and points to the official GitHub repository, while the README now presents cdxgen as a broader BOM toolkit covering SBOM, CBOM, OBOM, SaaSBOM, HBOM, AI-BOM, and validation/signing workflows. The project grew from a CycloneDX SBOM generator into a multi-command supply-chain analysis suite with commands such as cdxgen, cdx-validate, cdx-convert, cdx-sign, cdx-verify, cdx-audit, evinse, hbom, obom, cbom, saasbom, aibom, and spdxgen. ### 採用の歴史 cdxgen's adoption tracks the rise of SBOM requirements in software supply-chain security. The README positions it for developers, AppSec, compliance teams, SOC analysts, hardware teams, and AI platform teams, and the supplied package-manager metadata shows Homebrew, Nix, and winget packaging in addition to npm and GitHub release binaries. ### 使われ方 The common developer path is cdxgen -o bom.json . for a local project, with additional modes for containers, git URLs, purls, hosts, AI assets, and validation/conversion/signing. The README emphasizes CI/CD use and standalone binaries for several commands. ### パッケージ好きにとっての重要性 cdxgen is package-nerd significant because it turns package graphs into standardized artifacts that other tools can consume. It sits at the intersection of language package managers, container metadata, CycloneDX, SPDX, Dependency-Track-style workflows, and modern compliance demands. ### タイムライン - 2019: GitHub API records the cdxgen repository as created on 2019-12-30. - 2024: Git tags include the v10 series, showing the project had reached a mature major-version cadence. - 2026: Homebrew formula packages cdxgen 12.7.0, and the README documents CycloneDX 1.5-1.7 plus SPDX 3.0.1 support. ### Related projects - CycloneDX is the primary BOM specification cdxgen emits. - OWASP Dependency-Track and depscan are adjacent downstream/security workflows referenced by the project documentation. - SPDX is supported as an export format through cdxgen and cdx-convert. ### ソース - - - - - - - - ## セキュリティノート cdxgen に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .cdxgenrc, .cdxgen.json, .cdxgen.yml, .cdxgen.yaml ## 他のパッケージマネージャ記録 - Nix - cdxgen: normalized package name match | nixpkgs package indexes: pkgs/by-name/cd/cdxgen/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - winget - CycloneDX.cdxgen: normalized package name match | Windows Package Manager source index: CycloneDX.cdxgen from https://cdn.winget.microsoft.com/cache/source.msix ## Combined YAML source View the package source record on GitHub. [combined/cdxgen.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cdxgen.yml) ## ソース - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph