MigratorXpress SBOM Downloads

Latest Version: v0.6.18

Last updated: 2026-01-09T09:48:32+00:00

Download Files

JSON Format (CycloneDX 1.5)

XML Format (CycloneDX 1.5)

All Checksums

Verification Instructions

To verify the integrity of downloaded SBOM files:

# Download SBOM and checksum
wget https://aetperf.github.io/MigratorXpress-Documentation/static/sboms/latest/migratorxpress-v0.6.18-sbom.json
wget https://aetperf.github.io/MigratorXpress-Documentation/static/sboms/latest/migratorxpress-v0.6.18-sbom.json.sha256

# Verify
sha256sum -c migratorxpress-v0.6.18-sbom.json.sha256

Quick Download Script

Save this as download-sbom.sh:

#!/bin/bash
# Download and verify MigratorXpress SBOM

BASE_URL="https://aetperf.github.io/MigratorXpress-Documentation/static/sboms/latest"
VERSION="v0.6.18"

# Download JSON SBOM and verify
echo "Downloading JSON SBOM..."
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.json"
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.json.sha256"
sha256sum -c "migratorxpress-${VERSION}-sbom.json.sha256" || exit 1

# Download XML SBOM and verify
echo "Downloading XML SBOM..."
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.xml"
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.xml.sha256"
sha256sum -c "migratorxpress-${VERSION}-sbom.xml.sha256" || exit 1

echo "✅ SBOMs downloaded and verified!"

Version History

All versions are available in the static/sboms directory.

About These SBOMs

The Software Bill of Materials (SBOM) provides a complete inventory of all components in MigratorXpress:

  • All direct dependencies with exact versions
  • Package URLs (PURLs) for each component
  • License information where available
  • CycloneDX 1.5 format compatible with security scanning tools

Integration with Security Tools

Use these SBOMs with:

  • Grype: grype sbom:migratorxpress-v0.6.18-sbom.json
  • Trivy: trivy sbom migratorxpress-v0.6.18-sbom.json
  • OWASP Dependency-Track: Import via UI or API

This page is automatically updated when new releases are created.