# cyclonedx-gomod を Homebrew, Nix でインストール

cyclonedx-gomod のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:cyclonedx-gomod
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install cyclonedx-gomod
```

  証拠: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#cyclonedx-gomod
```

  証拠: nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-gomod/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## パッケージ情報

- **パッケージキー:** brew:cyclonedx-gomod
- **パッケージマネージャ:** Homebrew
- **バージョン:** 1.10.0
- **ソース概要:** Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
- **ホームページ:** <https://cyclonedx.org/>
- **リポジトリ:** <https://github.com/CycloneDX/cyclonedx-gomod>
- **最終更新:** 2026-07-25T14:20:52-04:00
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- cyclonedx-gomod (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 1.10.0
## プロジェクトの歴史と使われ方

cyclonedx-gomod is the CycloneDX command-line generator for Go modules, applications, and Go binaries.

### プロジェクトの歴史

The repository was created in March 2021, during the period when CycloneDX was moving from its original SBOM format toward richer supply-chain metadata. Its early releases established the Go-specific generator role, while later versions tracked newer CycloneDX specification versions and Go build-model details.

### 採用の歴史

The official CycloneDX tool center lists CycloneDX for Go modules as an open-source command-line utility and Go library, and the README documents Homebrew, GitHub release binaries, and go install as installation paths. That combination made it a natural fit for CI, GoReleaser, and distribution workflows.

### 使われ方

cyclonedx-gomod offers app, mod, and bin subcommands so users can choose between SBOMs for built applications, whole modules, or existing Go binaries. It accounts for Go build constraints such as GOARCH, GOOS, CGO_ENABLED, and GOFLAGS when producing application SBOMs.

### パッケージ好きにとっての重要性

For package managers and release engineers, cyclonedx-gomod is interesting because Go's module graph, build tags, and embedded module metadata affect what should appear in an SBOM; the tool encodes those Go-specific rules instead of treating Go projects as generic source trees.

### タイムライン

- 2021: Repository created and v0.1.0 released.
- 2024: Releases tracked CycloneDX 1.6-era output support.
- 2026: v1.10.0 release line remained active.

### Related projects

- Related CycloneDX tools include cyclonedx-cli for BOM manipulation and cyclonedx-python for Python environments and manifests.

### ソース

- <https://github.com/CycloneDX/cyclonedx-gomod/blob/main/README.md>
- <https://api.github.com/repos/CycloneDX/cyclonedx-gomod>
- <https://github.com/CycloneDX/cyclonedx-gomod/releases>
- <https://cyclonedx.org/tool-center/>
- <https://cyclonedx.org/about/history/>


## セキュリティノート

narrow executable package without higher-risk signals.

- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals

## 他のパッケージマネージャ記録

- Nix - cyclonedx-gomod: normalized package name match | nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-gomod/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/cyclonedx-gomod.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cyclonedx-gomod.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph