Skip to main content

MigratorXpress SBOM Downloads

Latest Version: 0.6.29​

Last updated: 2026-04-16

Download Files​

JSON Format (CycloneDX 1.5)​

XML Format (CycloneDX 1.5)​

All Checksums​

Verification Instructions​

To verify the integrity of downloaded SBOM files:

# Download SBOM and checksum
wget https://migratorxpress.arpe.io/sboms/latest/migratorxpress-v0.6.29-sbom.json
wget https://migratorxpress.arpe.io/sboms/latest/migratorxpress-v0.6.29-sbom.json.sha256

# Verify
sha256sum -c migratorxpress-v0.6.29-sbom.json.sha256

Quick Download Script​

Save this as download-sbom.sh:

#!/bin/bash
# Download and verify MigratorXpress SBOM

BASE_URL="https://migratorxpress.arpe.io/sboms/latest"
VERSION="v0.6.29"

# Download JSON SBOM and verify
echo "Downloading JSON SBOM..."
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.json"
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.json.sha256"
sha256sum -c "migratorxpress-${VERSION}-sbom.json.sha256" || exit 1

# Download XML SBOM and verify
echo "Downloading XML SBOM..."
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.xml"
wget "${BASE_URL}/migratorxpress-${VERSION}-sbom.xml.sha256"
sha256sum -c "migratorxpress-${VERSION}-sbom.xml.sha256" || exit 1

echo "SBOMs downloaded and verified!"

Version History​

All versions are available in the static/sboms directory.

About These SBOMs​

The Software Bill of Materials (SBOM) provides a complete inventory of all components in MigratorXpress:

  • All direct dependencies with exact versions
  • Package URLs (PURLs) for each component
  • License information where available
  • CycloneDX 1.5 format compatible with security scanning tools

Integration with Security Tools​

Use these SBOMs with:

  • Grype: grype sbom:migratorxpress-v0.6.29-sbom.json
  • Trivy: trivy sbom migratorxpress-v0.6.29-sbom.json
  • OWASP Dependency-Track: Import via UI or API

This page is automatically updated when new releases are created.

Copyright © 2026 Architecture & Performance.