CycloneDX Rust Cargo Integration Guide

Integrate cargo-cyclonedx with Vulnetix. Generate a CycloneDX SBOM from your Rust Cargo project and upload to Vulnetix.

Install & scan

$ cargo install cargo-cyclonedx
$ cargo cyclonedx --format json --output-cdx bom.json

Run CycloneDX Rust Cargo in CI

Scan on every push and upload the results to Vulnetix:

- name: Install cargo-cyclonedx
  run: cargo install cargo-cyclonedx

- name: Generate CycloneDX SBOM
  run: cargo cyclonedx --format json --output-cdx bom.json

- name: Upload to Vulnetix
  run: vulnetix upload --file bom.json

Centralise CycloneDX Rust Cargo results in Vulnetix

Upload CycloneDX Rust Cargo CycloneDX output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

CycloneDX Rust Cargo documentation ↗  ·  Source repository ↗

Wire CycloneDX Rust Cargo into your CI/CD pipeline →