Add SBOMHub CLI

[youichi-uda]

Summary

• Add SBOMHub CLI to the Tool Center
• SBOMHub CLI is a Go-based CLI tool that wraps Syft, Trivy, and cdxgen
• Generates SBOMs (CycloneDX/SPDX) and uploads to SBOMHub
• Supports vulnerability scanning via check command

Tool Information

• Name: SBOMHub CLI
• Publisher: SBOMHub
• Repository: https://github.com/youichi-uda/sbomhub-cli
• Website: https://sbomhub.app
• License: MIT (OSI Approved)
• Platforms: Linux, macOS, Windows

Capabilities

• SBOM generation (wrapping Syft/Trivy/cdxgen)
• SBOM upload to SBOMHub
• Vulnerability analysis
• CI/CD integration support

---

🤖 Generated with Claude Code

[jkowalleck]

since the tool is a wrapper for syft, trivy, cdxGen, it should basically be the same feature set as these are, right?

• https://github.com/CycloneDX/tool-center/blob/main/tools/cdxgen.json
• https://github.com/CycloneDX/tool-center/blob/main/tools/trivy.json
• https://github.com/CycloneDX/tool-center/blob/main/tools/syft.json

Unfortunately, these tools were added with not much care and might have wrong claims or properties ...

i am intrigues to let the same wrong claims be copied here.
therefore, i am okay with the proposed data.

[jkowalleck]

https://cyclonedx.github.io/tool-center/tool.html#tool_functions

Tools that human authors can use to create CycloneDX BOMs.

this is a CLI, rigth?
so it will generate the SBOM for you. it is not for humans to write the SBOM, right?

If so, please remove the AUTHOR

[youichi-uda]

You're right. SBOMHub CLI auto-generates SBOMs by wrapping generators (Syft, Trivy, cdxgen) — it's not a tool for humans to manually author BOMs. Removed . Thank you!

[jkowalleck]

this tool is a wrapper for SBOM generators - it does not analyse SBOM, right?

[youichi-uda]

Correct, it wraps SBOM generators and vulnerability scanners — it doesn't perform analysis itself. Removed \ and the \ section. Thank you for the review!