| title | CycloneDX SBOM Specification | |||||||
|---|---|---|---|---|---|---|---|---|
| organization | OWASP / CycloneDX | |||||||
| content_type | standard | |||||||
| year | ongoing | |||||||
| tags |
|
|||||||
| source_url | https://github.com/CycloneDX/specification | |||||||
| description | CycloneDX lightweight SBOM standard supporting VEX (Vulnerability Exploitability eXchange). Widely adopted in Syft, Grype, and Trivy for supply chain security. | |||||||
| format | link | |||||||
| date_ingested | 2026-02-22 |
Organization: OWASP / CycloneDX Source: https://github.com/CycloneDX/specification
CycloneDX lightweight SBOM standard supporting VEX (Vulnerability Exploitability eXchange). Widely adopted in Syft, Grype, and Trivy for supply chain security.