cyclonedx-python-lib is a Python library for working with CycloneDX BOMs, and its maker's standard is defined on the CycloneDX site 1. The sources do not show the library itself; the alternatives below are tools that generate CycloneDX SBOMs for Python projects or in CycloneDX format 12310.
- 1
CycloneDX Bill of Materials Standardcyclonedx.orgverified and signed
The CycloneDX standard that the library implements, and the Python GitHub action CycloneDX/gh-python-generate-sbom generates a CycloneDX BOM for Python projects 111.
for agents: CycloneDX/gh-python-generate-sbom · CycloneDX · library
- 2
purl2noticessemcl.onefound in code, not yet checked
Its generate_sbom action produces a Software Bill of Materials in CycloneDX format from package URLs and identifies package coordinates across ecosystems including PyPI 2.
for agents: generate_sbom · generate_legal_notices · generate_legal_notices_from_purls
- 3
Sources
- 1CycloneDX Bill of Materials Standard | CycloneDXcyclonedx.org · read 2026-10-29
- 2SEMCL.ONE - AI powered OSS Compliance Platformsemcl.one · read 2026-10-30
- 3AI Code Review & Verification Tools | Code Security | Sonarsonarsource.com · read 2026-10-29
- 10SBOM-Powered Software Composition Analysis • Anchoreanchore.com · read 2026-10-29
- 11CycloneDX Python Generate SBOM: declares "CycloneDX/gh-python-generate-sbom" (the record we read and signed)unfragile.ai · read 2026-10-24
- 13CycloneDX SBOM action: declares "SonarSource/gh-action_sbom" (the record we read and signed)unfragile.ai · read 2026-10-24
For agents: the 10 actions behind this answer
CycloneDX/gh-python-generate-sbom · CycloneDX Python Generate SBOM verified and signed
Github action to generate a CycloneDX BOM for Python projects
generate_sbom · mcp-semclone found in code, not yet checked
Generate a Software Bill of Materials (SBOM) in CycloneDX format using purl2notices.
SonarSource/gh-action_sbom · CycloneDX SBOM action verified and signed
Generate CycloneDX SBOM with Syft
dataverse-python-quickstart · dataverse-python-quickstart verified and signed
Generate Python SDK setup + CRUD + bulk + paging snippets using official patterns.
docker-sandboxes-kits · docker-sandboxes-kits verified and signed
Use this skill when authoring, validating, packaging, signing, or composing a Docker Sandboxes kit `spec.yaml` (`sbx kit add/inspect/pack/pull/push/sign/validate/verify`), even if the user just says they want to "add a tool to a sandbox agent", "build a reusable sandbox extension", "publish a kit to
codegen · codegen verified and signed
Code generation utilities for json-render. Use when generating code from UI specs, building custom code exporters, traversing specs, or serializing props for @json-render/codegen.
pypi · pip-requirements-parser verified and signed
sentry-python-sdk · sentry-python-sdk verified and signed
Full Sentry SDK setup for Python. Use when asked to "add Sentry to Python", "install sentry-sdk", "setup Sentry in Python", or configure error monitoring, tracing, profiling, logging, metrics, crons, or AI monitoring for Python applications. Supports Django, Flask, FastAPI, Celery, Starlette, AIOHTT
python · fastcore verified and signed
get_image_sbom_native · Anchore Engine API Server verified and signed
Get image sbom in the native Anchore format
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.