# Install sbom-tool with Homebrew, Nix, scoop, winget

Scalable and enterprise ready tool to create SBOMs for any variety of artifacts. Version 4.1.11 via Homebrew; verified 2026-06-04. Also installable with nix: nix profile install nixpkgs#sbom-tool.

## Install

```sh
sudo av install brew:sbom-tool
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install sbom-tool
```

  Evidence: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#sbom-tool
```

  Evidence: nixpkgs package indexes: pkgs/by-name/sb/sbom-tool/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

### Windows

- Scoop (92%):

```sh
scoop install extras/sbom-tool
```

  Evidence: Scoop official bucket manifest trees: bucket/sbom-tool.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id Microsoft.SBOMTool -e
```

  Evidence: Windows Package Manager source index: Microsoft.SBOMTool from https://cdn.winget.microsoft.com/cache/source.msix

## Package facts

- **Package key:** brew:sbom-tool
- **Package manager:** Homebrew
- **Version:** 4.1.11
- **Source summary:** Scalable and enterprise ready tool to create SBOMs for any variety of artifacts
- **Homepage:** <https://github.com/microsoft/sbom-tool>
- **Repository:** <https://github.com/microsoft/sbom-tool>
- **Last updated:** 2026-06-04T04:32:21Z
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- sbom-tool (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 4.1.11

## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Other Package-Manager Records

- Nix - sbom-tool: normalized package name match | nixpkgs package indexes: pkgs/by-name/sb/sbom-tool/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Scoop - extras/sbom-tool: normalized package name match | Scoop official bucket manifest trees: bucket/sbom-tool.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1
- winget - Microsoft.SBOMTool: normalized package name match | Windows Package Manager source index: Microsoft.SBOMTool from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/sbom-tool.yml](https://github.com/mxcl/pkgdb/blob/main/combined/sbom-tool.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph