CycloneDX .NET Integration Guide

Integrate CycloneDX .NET with Vulnetix. Generate a CycloneDX SBOM from your .NET/C# NuGet project and upload to Vulnetix.

Install & scan

$ dotnet tool install --global CycloneDX
$ dotnet-CycloneDX . -o . -json

Run CycloneDX .NET in CI

Scan on every push and upload the results to Vulnetix:

- name: Setup .NET
  uses: actions/setup-dotnet@v4
  with:
    dotnet-version: '8.0.x'

- name: Restore dependencies
  run: dotnet restore

- name: Install CycloneDX .NET tool
  run: dotnet tool install --global CycloneDX

- name: Generate SBOM
  run: dotnet-CycloneDX . -o . -json

- name: Upload to Vulnetix
  run: vulnetix upload --file bom.json

Centralise CycloneDX .NET results in Vulnetix

Upload CycloneDX .NET CycloneDX output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

CycloneDX .NET documentation ↗  ·  Source repository ↗

Wire CycloneDX .NET into your CI/CD pipeline →