Install conda-sboms#

conda-sboms must be installed in the Python environment that owns the conda executable. Conda discovers exporter plugins from that environment. A plugin installed in an unrelated named environment is not available to the other conda executable.

conda 26.3 or newer is required.

Install from conda-forge#

For a standard conda installation, activate base and install the conda-forge package:

conda activate base
conda install --channel conda-forge "conda-sboms>=0.3.0"

Confirm that the same conda installation discovers the exporter:

conda export --help

The help output should list:

- cyclonedx-json-v1.7 (aliases: cyclonedx-json, cyclonedx, cdx-json): *.cdx.json

Install with pip#

To install the published PyPI wheel instead, activate the environment that owns the conda executable and run:

python -m pip install "conda-sboms>=0.3.0"

Conda is not distributed on PyPI, so this method requires an existing conda installation.

Run from a source checkout#

Use the repository’s locked development environment without modifying a normal conda installation. Clone the repository:

git clone https://github.com/conda-incubator/conda-sboms.git
cd conda-sboms

Install the development environment and inspect the registered formats:

pixi install --locked -e dev
pixi run --locked -e dev conda export --help

Run commands through the same environment:

pixi run --locked -e dev conda export \
  --prefix /path/to/environment \
  --format cyclonedx-json \
  --file environment.cdx.json