CycloneDX Generator (cdxgen)

by OWASP Foundationv13.1.0

Last updated Sep 4, 2026

A polyglot tool and a library for generating various Bill of Materials in CycloneDX specification.

Install with winget

$ winget install --id CycloneDX.cdxgen --exact --version 13.1.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

Generate Software Bill of Materials (SBOM) for most applications and container images with a single command. Generate Operations Bill of Materials (OBOM) for Linux and Windows hosts. Integrate with any CI/CD pipeline. Automatically submit the generated BOM to your dependency track server for analysis.

Installers · v13.1.0

Architecture	Type	Scope	Install	Download
x64	Portable	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

No known CVEs for CycloneDX Generator (cdxgen).

Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.

Related apps

S
SBOM ToolMicrosoft
Microsoft.SBOMToolv4.1.5
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
G
GrypeAnchore Inc
Anchore.Grypev0.118.0
A vulnerability scanner for container images and filesystems
S
SyftAnchore Inc
Anchore.Syftv1.51.0
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
OpenLensOpenLens Authors
MuhammedKalkan.OpenLensv6.5.2-366
Open source build for Mirantis Lens. This build does not require you to log in and includes only open source part.
Podman CLIPodman
Podman.CLIv6.1.1
A daemonless container engine for developing, managing, and running OCI Containers
C
CycloneDX CLICycloneDX Team
CycloneDX.CLIv0.33.1
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

More from OWASP Foundation or browse bom, cbom, containers.

Frequently asked questions

How do I install CycloneDX Generator (cdxgen) on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id CycloneDX.cdxgen --exact --version 13.1.0. winget downloads the installer from OWASP Foundation and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install CycloneDX Generator (cdxgen) silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id CycloneDX.cdxgen --exact 13.1.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall CycloneDX Generator (cdxgen) via winget?

Run: winget uninstall --id CycloneDX.cdxgen --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from CycloneDX Generator (cdxgen)'s Apps & Features entry.

Is CycloneDX Generator (cdxgen) free?

CycloneDX Generator (cdxgen) is distributed under Apache-2.0. Refer to the publisher (https://github.com/CycloneDX/cdxgen) for the full license terms - Wingetly itself does not charge for installation.

Does CycloneDX Generator (cdxgen) work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls CycloneDX Generator (cdxgen) directly from the publisher.

How do I keep CycloneDX Generator (cdxgen) up to date?

Run winget upgrade --id CycloneDX.cdxgen --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of CycloneDX Generator (cdxgen) from microsoft/winget-pkgs.

Recent versions

13.1.0latest
13.0.1
13.0.0
12.8.3
12.8.2
12.8.1
12.8.0
12.7.1
12.7.0
12.6.0