bomctl
Format agnostic SBOM tooling
File Explorer
Download Latest Version (.zip)- build.sh
- Dockerfile
- metadata.cyclonedx.json
- metadata.spdx.json
- check-go-headers.sh
- sbom-generation.sh
- semver-util.sh
- cflite-batch.yml
- cflite-cron.yml
- cflite-pr.yml
- commitlint.yml
- dependency-review.yml
- go-test.yml
- golangci-lint.yml
- goreleaser.yml
- markdownlint.yml
- scorecard.yml
- shellcheck.yml
- yamllint.yml
- dependabot.yml
- PULL_REQUEST_TEMPLATE.md
- build.yml
- fix.yml
- install.yml
- lint.yml
- adr.code-snippets
- extensions.json
- go.code-snippets
- header.code-snippets
- launch.json
- settings.json
- tasks.json
- alias.go
- completions.go
- errors.go
- export.go
- export_test.go
- fetch.go
- import.go
- internal_test.go
- link.go
- list.go
- merge.go
- options.go
- push.go
- root.go
- tag.go
- version.go
- template.md
- 0001-record-architecture-decisions.md
- 0002-import-subcommand.md
- 0003-list-output-customization.md
- 0004-authentication-types-and-secrets-encryption.md
- 0005-sbom-document-aliases-tags.md
- 0006-sbom-merge.md
- 0007-sbom-diff.md
- 0008-storing-and-retrieving-without-modification.md
- 0009-sbom-link-feature.md
- 0010-use-standard-for-url-structure.md
- README.md
- bomctl.png
- OpenSSF_StagesBadges_sandbox.svg
- CHANGELOG.md
- alias.txtar
- alias_list.txtar
- alias_remove.txtar
- alias_set.txtar
- alias_test.go
- completion.txtar
- completion_test.go
- add_files.go
- compare_documents.go
- e2eutil_commands.go
- setup_cache.go
- export.txtar
- export_test.go
- fetch.txtar
- fetch_test.go
- help.txtar
- help_test.go
- import.txtar
- import_test.go
- link.txtar
- link_test.go
- list.txtar
- list_test.go
- merge.txtar
- merge_test.go
- push.txtar
- push_test.go
- tag.txtar
- tag_add.txtar
- tag_clear.txtar
- tag_list.txtar
- tag_remove.txtar
- tag_test.go
- merge_A.cdx.json
- merge_B.cdx.json
- sbom.cdx.json
- test-linked.cdx.json
- test-linked.spdx.json
- version.txtar
- version_test.go
- client.go
- client_test.go
- fetch.go
- fetch_test.go
- internal_test.go
- push.go
- push_test.go
- client.go
- client_test.go
- fetch.go
- push.go
- client.go
- client_test.go
- fetch.go
- internal_test.go
- push.go
- client.go
- client_test.go
- fetch.go
- fetch_test.go
- internal_test.go
- push.go
- client.go
- client_test.go
- fetch.go
- fetch_test.go
- internal_test.go
- push.go
- push_test.go
- client.go
- db.go
- db_test.go
- export.go
- fuzz.go
- fetch.go
- fuzz.go
- import.go
- link.go
- link_test.go
- logger.go
- fuzz.go
- merge.go
- merge_test.go
- merger.go
- merger_test.go
- auth.go
- url.go
- link.go
- options.go
- file.go
- file_test.go
- internal_test.go
- table.go
- fuzz.go
- push.go
- sliceutil.go
- sliceutil_test.go
- sbom.cdx.json
- sbom.spdx.json
- testutil.go
- .adr-dir
- .commitlint.yaml
- .editorconfig
- .gitattributes
- .gitignore
- .golangci.yml
- .goreleaser.yml
- .markdownlint.yml
- .pre-commit-config.yaml
- .yamllint
- CHARTER.md
- CODE_OF_CONDUCT.md
- CODEOWNERS
- CONTRIBUTING.md
- COPYRIGHT.md
- DEVELOPMENT.md
- Dockerfile
- go.mod
- go.sum
- LICENSE
- main.go
- MAINTAINERS.md
- Makefile
- README.md
- ROADMAP.md
- SECURITY.md
- Taskfile.yml
# Installation Guide
1. Get the code
git clone https://github.com/bomctl/bomctl
Downloads the entire project code from GitHub to your computer.
cd bomctl
Moves into the project folder you just downloaded.
2. Official Install Script
Easy RecommendedPrerequisites
- Homebrew A package manager for macOS/Linux.
brew tap bomctl/bomctl && brew install bomctl
Registers this project's repository (tap) with Homebrew.
After installing, open a new terminal and run the program's version command (e.g. --version) to confirm it worked.
Pulled directly from this repo's README.
3. Docker
EasyPrerequisites
- Git Needed to download the project code from GitHub.
- Docker Desktop Needed to build and run containers. Install it and keep it running in the background.
Container images for `bomctl` can be found [here](https://hub.docker.com/r/bomctl/bomctl) and are signed
Type this command into your terminal and run it.
Run docker compose ps to check the containers are Up. If the README mentions a port, open http://localhost:PORT in your browser.
Pulled directly from this repo's README.
4. Go
MediumPrerequisites
go build ./...
Compiles the Go program into an executable.
go run .
Runs the Go program directly without a separate build step.
If the build finishes without errors, it worked. If you used go run ., check the terminal output.
5. Make
MediumPrerequisites
- Git Needed to download the project code from GitHub.
- Make Usually pre-installed on Linux/macOS. On Windows, install separately (e.g. via MSYS2 or WSL).
make
Compiles the code based on the generated build configuration to produce an executable.
If it finishes without errors, it worked. Try running the generated executable directly.
// repository documentation
Was this content helpful?
(0 ratings)
