Skip to main content
Version: 0.7 (Latest)

MigratorXpress SBOM Downloads

SBOMs for 0.7.x

Since v0.6.33, the CycloneDX SBOMs (JSON and XML, with SHA-256 checksums) ship inside each release zip -- this includes all 0.7.x releases. The files below are the last SBOMs published on this site (v0.6.29); they do not describe the current release.

Last Published SBOM: 0.6.29​

Last updated: 2026-04-16

Download Files​

JSON Format (CycloneDX 1.5)​

XML Format (CycloneDX 1.5)​

All Checksums​

Verification Instructions​

To verify the integrity of downloaded SBOM files:

# Download SBOM and checksum
wget https://migratorxpress.arpe.io/sboms/latest/migratorxpress-v0.6.29-sbom.json
wget https://migratorxpress.arpe.io/sboms/latest/migratorxpress-v0.6.29-sbom.json.sha256

# Verify
sha256sum -c migratorxpress-v0.6.29-sbom.json.sha256

Quick Download Script​

Save this as download-sbom.sh:

#!/bin/bash
# Download and verify MigratorXpress SBOM

BASE_URL="https://migratorxpress.arpe.io/sboms/latest"
VERSION="v0.6.29"

# Download JSON SBOM and verify
echo "Downloading JSON SBOM..."
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.json"
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.json.sha256"
sha256sum -c "migratorxpress-${VERSION}-sbom.json.sha256" || exit 1

# Download XML SBOM and verify
echo "Downloading XML SBOM..."
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.xml"
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.xml.sha256"
sha256sum -c "migratorxpress-${VERSION}-sbom.xml.sha256" || exit 1

echo "SBOMs downloaded and verified!"

Version History​

SBOMs of previous releases are kept under https://migratorxpress-docs.arpe.io/sboms/v<version>/ (for example /sboms/v0.6.29/), with the same file names as above for that version.

About These SBOMs​

The Software Bill of Materials (SBOM) provides a complete inventory of all components in MigratorXpress:

  • All direct dependencies with exact versions
  • Package URLs (PURLs) for each component
  • License information where available
  • CycloneDX 1.5 format compatible with security scanning tools

Integration with Security Tools​

Use these SBOMs with:

  • Grype: grype sbom:migratorxpress-v0.6.29-sbom.json
  • Trivy: trivy sbom migratorxpress-v0.6.29-sbom.json
  • OWASP Dependency-Track: Import via UI or API

For current releases, use the SBOM files included in the release zip.

Copyright © 2026 Architecture & Performance.