About SBOM Tool
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
SBOM Tool 4.1.5
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
- By Microsoft
- Open Source
- Updated Dec 15, 2025
What's new in 4.1.5
⚙️ Changes
- Bump component detection to 6.2.1 by @sebasgomez238 (#1359)
- Fix CG alert - .NET SDK by @ZhengHong-Tan (#1334)
- Remove GH packages release step from pipeline by @sfoslund (#1333)
- Fix release pipeline internal feed release by @sfoslund (#1325)
Technical details
| Publisher | Microsoft |
|---|---|
| Version | 4.1.5 |
| Release date | 2025-12-15 |
| License | MIT |
| Installer type | portable |
| Architecture | x64 |
| Package ID | Microsoft.SBOMTool |
Install SBOM Tool from the command line
- Install with Windows Package Manager
winget install --id=Microsoft.SBOMTool -e- Update to the latest version
winget upgrade --id=Microsoft.SBOMTool -e- Uninstall
winget uninstall --id=Microsoft.SBOMTool -e
SBOM Tool version history
- 4.1.1
- 4.0.3
- 3.1.0
- 3.0.1
- 2.2.6
- 1.5.2
Frequently asked questions
Is SBOM Tool free?
Yes. SBOM Tool is free and open-source software released under the MIT license.
What is the latest version of SBOM Tool?
The latest version is 4.1.5, released on Dec 15, 2025.
Is it safe to download SBOM Tool?
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 625767b371b7fdd58f40f618b8a86da0247a33c89e419039c86b4edba1dad4b5.
Which Windows versions does SBOM Tool support?
SBOM Tool runs on Windows and is available for 64-bit (x64) systems.
How do I uninstall SBOM Tool?
Open Settings › Apps › Installed apps, find SBOM Tool and select Uninstall. From the command line, run winget uninstall --id=Microsoft.SBOMTool -e.
Related software
Windows Terminal 1.25.2733.0
The new Windows Terminal, a tabbed command line experience for Windows.
cURL 8.23.0.5
Command line tool and library for transferring data with URLs
jq 1.8.2
jq is a lightweight and flexible command-line JSON processor.
Microsoft Azure CLI 2.91.0
The Azure command-line interface (Azure CLI) is a set of commands used to create and manage Azure resources. The Azure CLI is available across Azure services and is designed to get you working quickly
Classic Shell 4.3.1
Adds classic shell features to Windows 7 and Windows 8
Beats filebeat 9.5.5
Tails and ships log files
yq 4.54.1
yq is a portable command-line YAML, JSON, XML, CSV and properties processor.
Octopus CLI 2.31.0
Work seamlessly with Octopus Deploy from the command line.