About CycloneDX CLI
The CycloneDX CLI tool currently supports BOM analysis, modification, diffing, merging, format
conversion, signing and verification.
Conversion is supported between CycloneDX XML, JSON, Protobuf, CSV, and SPDX JSON v2.3.
CycloneDX CLI 0.33.1
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
- By CycloneDX Team
- Open Source
- Portable
- Updated Jul 23, 2026
What's new in 0.33.1
0.33.1
This patch release updates the CycloneDX .NET library. Users of 0.33.0 should upgrade to 0.33.1.
Added
Multi-platform Docker images for linux/amd64 and linux/arm64.
Fixed
cyclonedx-dotnet-library#427: Check nested components when using analyze --multiple-component-versions, addressing CLI issue #481.
cyclonedx-dotnet-library#415: Preserve vulnerability affects.ref values during hierarchical merges, addressing CLI issue #471.
Full Changelog: https://github.com/CycloneDX/cyclonedx-cli/compare/v0.33.0...v0.33.1
Technical details
| Publisher | CycloneDX Team |
|---|---|
| Version | 0.33.1 |
| Release date | 2026-07-23 |
| License | Apache-2.0 |
| Installer type | portable |
| Architecture | x86, x64, arm64 |
| Package ID | CycloneDX.CLI |
Install CycloneDX CLI from the command line
- Install with Windows Package Manager
winget install --id=CycloneDX.CLI -e- Update to the latest version
winget upgrade --id=CycloneDX.CLI -e- Uninstall
winget uninstall --id=CycloneDX.CLI -e
CycloneDX CLI adds this command to the command line: cyclonedx.
CycloneDX CLI version history
0.31.0 Apr 29, 2026
What's Changed
- General project maintenance by @coderpatros in #484
- Bump System.Security.Cryptography.Xml from 10.0.5 to 10.0.6 by @dependabot[bot] in #486
Full Changelog: v0.30.0...v0.31.0
0.30.0 Feb 10, 2026
What's Changed
- SPDX 2.3 is supported. by @vargenau in #477
- Add support for CycloneDX v1.7 by @coderpatros in #479
Frequently asked questions
Is CycloneDX CLI free?
Yes. CycloneDX CLI is free and open-source software released under the Apache-2.0 license.
What is the latest version of CycloneDX CLI?
The latest version is 0.33.1, released on Jul 23, 2026.
Is it safe to download CycloneDX CLI?
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 9b360974c41a5d612eb026fb5e3bb1fa28e08865f7a4f915665b8bc94bd3bc31.
Which Windows versions does CycloneDX CLI support?
CycloneDX CLI runs on Windows and is available for 32-bit (x86), 64-bit (x64), ARM64 systems.
How do I uninstall CycloneDX CLI?
Open Settings › Apps › Installed apps, find CycloneDX CLI and select Uninstall. From the command line, run winget uninstall --id=CycloneDX.CLI -e.
Is there a portable version of CycloneDX CLI?
Yes. CycloneDX CLI is available as a portable program (cyclonedx-win-x64.exe, 64-bit (x64)) that runs without installation. Copy it to any folder or USB drive and run it from there.
Alternatives to CycloneDX CLI
Other Command Line Tools programs for Windows from different developers.
Syft 1.54.1
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
SBOM Tool 4.1.5
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
Bomly CLI 0.30.0
Free, open-source CLI for dependency intelligence and SBOM analysis.
Windows Terminal 1.25.2733.0
The new Windows Terminal, a tabbed command line experience for Windows.
cURL 8.23.0.5
Command line tool and library for transferring data with URLs
jq 1.8.2
jq is a lightweight and flexible command-line JSON processor.