Skip to main content

Python library for CycloneDX

Project description

CycloneDX Python Library

shield_pypi-version shield_conda-forge-version shield_rtfd shield_gh-workflow-test shield_coverage shield_ossf-best-practices shield_license
shield_website shield_slack shield_groups shield_twitter-follow


OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction.

This Python package provides data models, validators and more, to help you create/render/read CycloneDX documents.

This package is not designed for standalone use. It is a software library.

As of version 3.0.0, the internal data model was adjusted to allow CycloneDX VEX documents to be produced as per official examples linking VEX to a separate CycloneDX document.

If you're looking for a CycloneDX tool to run to generate (SBOM) software bill-of-materials documents, why not checkout CycloneDX Python or Jake.

Documentation

View the documentation here.

Python Support

We endeavour to support all functionality for all current actively supported Python versions. However, some features may not be possible/present in older Python versions due to their lack of support.

Changelog

See our CHANGELOG.

Contributing

Feel free to open issues, bugreports or pull requests.
See the CONTRIBUTING file for details.

Copyright & License

CycloneDX Python Lib is Copyright (c) OWASP Foundation. All Rights Reserved.
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.
See the LICENSE file for the full license.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cyclonedx_python_lib-8.2.1.tar.gz (1.1 MB view details)

Uploaded Source

Built Distribution

cyclonedx_python_lib-8.2.1-py3-none-any.whl (368.7 kB view details)

Uploaded Python 3

File details

Details for the file cyclonedx_python_lib-8.2.1.tar.gz.

File metadata

  • Download URL: cyclonedx_python_lib-8.2.1.tar.gz
  • Upload date:
  • Size: 1.1 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/5.1.1 CPython/3.12.7

File hashes

Hashes for cyclonedx_python_lib-8.2.1.tar.gz
Algorithm Hash digest
SHA256 3d8dd485f9eddb4da56c4c298a56a6d39492d653f3586583a65ac0a2a8748f7f
MD5 bd940e7563aae76c430440246a4e15e2
BLAKE2b-256 98b9c23c712ff729dd102773cc02a68ebc94f2d9c954fc017bb1dda246e03a55

See more details on using hashes here.

Provenance

The following attestation bundles were made for cyclonedx_python_lib-8.2.1.tar.gz:

Publisher: GitHub
  • Repository: CycloneDX/cyclonedx-python-lib
  • Workflow: release.yml
Attestations:
  • Statement type: https://in-toto.io/Statement/v1
    • Predicate type: https://docs.pypi.org/attestations/publish/v1
    • Subject name: cyclonedx_python_lib-8.2.1.tar.gz
    • Subject digest: 3d8dd485f9eddb4da56c4c298a56a6d39492d653f3586583a65ac0a2a8748f7f
    • Transparency log index: 143194207
    • Transparency log integration time:

File details

Details for the file cyclonedx_python_lib-8.2.1-py3-none-any.whl.

File metadata

File hashes

Hashes for cyclonedx_python_lib-8.2.1-py3-none-any.whl
Algorithm Hash digest
SHA256 ddb3a9dc50adb8e5562e83e00ecb6a29517fb8296d5733290900b1a62cd8bf7c
MD5 0a7d8b62f40de77abe019aae2365379d
BLAKE2b-256 54fa7bb82700987d1be6b8afb5910e686a4faa507536bd30c0bc88c0c9d6a808

See more details on using hashes here.

Provenance

The following attestation bundles were made for cyclonedx_python_lib-8.2.1-py3-none-any.whl:

Publisher: GitHub
  • Repository: CycloneDX/cyclonedx-python-lib
  • Workflow: release.yml
Attestations:
  • Statement type: https://in-toto.io/Statement/v1
    • Predicate type: https://docs.pypi.org/attestations/publish/v1
    • Subject name: cyclonedx_python_lib-8.2.1-py3-none-any.whl
    • Subject digest: ddb3a9dc50adb8e5562e83e00ecb6a29517fb8296d5733290900b1a62cd8bf7c
    • Transparency log index: 143194210
    • Transparency log integration time:

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page