LakeXpress SBOM Downloads

Latest Version: 0.2.8

Last updated: 2026-02-19

Download Files

JSON Format (CycloneDX 1.5)

XML Format (CycloneDX 1.5)

All Checksums

Verification Instructions

To verify the integrity of downloaded SBOM files:

# Download SBOM and checksum
wget https://aetperf.github.io/LakeXpress-Documentation/static/sboms/latest/lakexpress-0.2.8-sbom.json
wget https://aetperf.github.io/LakeXpress-Documentation/static/sboms/latest/lakexpress-0.2.8-sbom.json.sha256

# Verify
sha256sum -c lakexpress-0.2.8-sbom.json.sha256

Quick Download Script

Save this as download-sbom.sh:

#!/bin/bash
# Download and verify LakeXpress SBOM

BASE_URL="https://aetperf.github.io/LakeXpress-Documentation/static/sboms/latest"
VERSION="0.2.8"

# Download JSON SBOM and verify
echo "Downloading JSON SBOM..."
wget "${BASE_URL}/lakexpress-${VERSION}-sbom.json"
wget "${BASE_URL}/lakexpress-${VERSION}-sbom.json.sha256"
sha256sum -c "lakexpress-${VERSION}-sbom.json.sha256" || exit 1

# Download XML SBOM and verify
echo "Downloading XML SBOM..."
wget "${BASE_URL}/lakexpress-${VERSION}-sbom.xml"
wget "${BASE_URL}/lakexpress-${VERSION}-sbom.xml.sha256"
sha256sum -c "lakexpress-${VERSION}-sbom.xml.sha256" || exit 1

echo "✅ SBOMs downloaded and verified!"

Version History

All versions are available in the static/sboms directory.

About These SBOMs

The Software Bill of Materials (SBOM) provides a complete inventory of all components in LakeXpress:

  • All direct dependencies with exact versions
  • Package URLs (PURLs) for each component
  • License information where available
  • CycloneDX 1.5 format compatible with security scanning tools

Integration with Security Tools

Use these SBOMs with:

  • Grype: grype sbom:lakexpress-0.2.8-sbom.json
  • Trivy: trivy sbom lakexpress-0.2.8-sbom.json
  • OWASP Dependency-Track: Import via UI or API

This page is automatically updated when new releases are created.