specification

CycloneDX is a comprehensive Bill of Materials (BOM) standard designed to enhance supply chain security by providing detailed inventory and risk assessment frameworks across various domains, including software, hardware, and machine learning. It supports multiple BOM types such as Software Bill of Materials (SBOM), Hardware Bill of Materials (HBOM), and Vulnerability Disclosure Reports (VDR), and conforms to ECMA-424, ensuring broad applicability and standardization. Notably, CycloneDX offers a range of schema implementations and is supported by a community-driven Tool Center for resources and integrations.