CycloneDX/cyclonedx-cli

View on GitHub

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

Stars: 541
Forks: 82
Open beginner issues: 0
Indexed issues: 110

Dominant language: C#
License: Apache-2.0
Last GitHub push: Jul 23, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted
PR merge metrics: No merged PRs in 30d

Open All

110 open issues indexed

Binaries do not have published hashsums Open

CycloneDX/cyclonedx-cli#313 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
cylconedx diff two json files error Open

CycloneDX/cyclonedx-cli#314 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
referenceCategory error converting from SPDX to CycloneDX Open

CycloneDX/cyclonedx-cli#316 · 14 comments · 5 reactions · 0 assignees · Indexed Sep 15, 2026
Feature request --ignore-symlinks for add files Open

CycloneDX/cyclonedx-cli#318 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Have the convert from CSV to CDX SBOM create the necessary Purls to allow vulnerabilities to be identified Open

CycloneDX/cyclonedx-cli#319 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Have a template CSV built into the tool so that it will be of the correct 'structure/format' to be converted into an SBOM Open

CycloneDX/cyclonedx-cli#320 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Provide an option to convert a Mend UA JSON to a CycloneDX JSON Open

CycloneDX/cyclonedx-cli#321 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Providing a more helpful message Open

CycloneDX/cyclonedx-cli#323 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CycloneDX CLI seems to output invalid BOM when license exists with empty name Open

CycloneDX/cyclonedx-cli#325 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Merged SBOMs contain duplicates Open

CycloneDX/cyclonedx-cli#326 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Reimplement as a DLL with a console app front end? Open

CycloneDX/cyclonedx-cli#331 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Conversion of SPDX to Cyclone dx is possible using cli or any other options for converting these 2 formats Open

CycloneDX/cyclonedx-cli#333 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
When I using CycloneDX-CLI to convert format(json, xml) or SPDX format, metadata/author and supplier fields are omitted. Open

CycloneDX/cyclonedx-cli#338 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
False Validation of Syft/Grype SBOM Open

CycloneDX/cyclonedx-cli#339 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
cyclonedx-linux-x64 incompatibility with docker:stable image for github pipeline integration Open

CycloneDX/cyclonedx-cli#343 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Conversion creates invalid SPDX Open

CycloneDX/cyclonedx-cli#345 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Missing version numbers Open

CycloneDX/cyclonedx-cli#347 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Can't get --exclude to work Open

CycloneDX/cyclonedx-cli#348 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Merge command - inconsistent dependencies tree with/without name or version parameters Open

CycloneDX/cyclonedx-cli#353 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Merging SBOMs doesn’t get rid of duplicates Open

CycloneDX/cyclonedx-cli#356 · 10 comments · 6 reactions · 0 assignees · Indexed Sep 15, 2026
Conversion creates invalid SPDX JSON Open

CycloneDX/cyclonedx-cli#361 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
We are searching for additional .NET-maintainer! Open

CycloneDX/cyclonedx-cli#362 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Bug in merging json SBOMs with empty component lists Open

CycloneDX/cyclonedx-cli#364 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Tests on MacOS fail due issue with snapshooter Open

CycloneDX/cyclonedx-cli#368 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Unable to convert from Github Generated SPDX to CycloneDX Open

CycloneDX/cyclonedx-cli#370 · 4 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Converting spdx (obtained via docker-scout) to cyclonedx results in empty file Open

CycloneDX/cyclonedx-cli#373 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support for CycloneDX schema version 1.6 Open

CycloneDX/cyclonedx-cli#375 · 8 comments · 4 reactions · 0 assignees · Indexed Sep 15, 2026
cyclonedx merge command does not support v1.6 format Open

CycloneDX/cyclonedx-cli#376 · 12 comments · 5 reactions · 0 assignees · Indexed Sep 15, 2026
How to run cyclonedx-cli Open

CycloneDX/cyclonedx-cli#378 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
How to sign a SBOM which is in xml format facing this issue Open

CycloneDX/cyclonedx-cli#379 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Using diff command always produces empty output even if there are changes in SBOM's provided as inputs. Open

CycloneDX/cyclonedx-cli#380 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
converting issues Open

CycloneDX/cyclonedx-cli#381 · 10 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
SBOM conversion issue. Open

CycloneDX/cyclonedx-cli#385 · 1 comment · 6 reactions · 0 assignees · Indexed Sep 15, 2026
Merge does not deduplicate components with differing bom-ref Open

CycloneDX/cyclonedx-cli#399 · 1 comment · 4 reactions · 0 assignees · Indexed Sep 15, 2026
Unable to Validate CycloneDX Format Versions 1.5 and 1.6 with ModelCard and Data Elements Open

CycloneDX/cyclonedx-cli#403 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Error validating CycloneDX format in version 1.6 Open

CycloneDX/cyclonedx-cli#407 · 7 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
`metadata.tools` not merged correctly when one SBOM uses legacy format and the other uses the newer format Open

CycloneDX/cyclonedx-cli#408 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Duplicate components are valid with sbom in json format but not in xml Open

CycloneDX/cyclonedx-cli#419 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
La dernière version linux Cyclonedx-cli valide avec succés le fichier json cycloneDX alors que CyberWatch détecte une erreur fatale lors de l'import Open

CycloneDX/cyclonedx-cli#420 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Error when converting GitHub's SPDXv2.3 JSON -> CycloneDX JSON Open

CycloneDX/cyclonedx-cli#421 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Give option to add added files as dependencies Open

CycloneDX/cyclonedx-cli#422 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Validation of sbom file fails when externalReferences url is ssh from GitHub Open

CycloneDX/cyclonedx-cli#425 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
spdx to cyclondx conversion failure Open

CycloneDX/cyclonedx-cli#426 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Deploy as dotnet tool Open

CycloneDX/cyclonedx-cli#427 · 3 comments · 7 reactions · 0 assignees · Indexed Sep 15, 2026
musl binaries depend on libc.musl Open

CycloneDX/cyclonedx-cli#428 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Add option to disable Unicode escaping of characters like `&` Open

CycloneDX/cyclonedx-cli#436 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Conversion from CycloneDX to SPDX creates invalid SPDX Open

CycloneDX/cyclonedx-cli#448 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
bug: SMAIL-GPL causing validate to fail Open

CycloneDX/cyclonedx-cli#459 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Support for Signing with X509 certificates Open

CycloneDX/cyclonedx-cli#464 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Grep command not working on CyclonDX XML format Open

CycloneDX/cyclonedx-cli#467 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026

CycloneDX/cyclonedx-cli

Get new issues in your inbox