Skip to main content
Version: 0.4 (Latest)

LakeXpress SBOM Downloads

Latest Version: 0.4.10​

Last updated: 2026-09-24

Download Files​

JSON Format (CycloneDX 1.5)​

XML Format (CycloneDX 1.5)​

Verification Instructions​

To verify the integrity of downloaded SBOM files:

# Download SBOM and checksum
wget https://lakexpress-docs.arpe.io/sboms/latest/lakexpress-0.4.10-sbom.json
wget https://lakexpress-docs.arpe.io/sboms/latest/lakexpress-0.4.10-sbom.json.sha256

# Verify
sha256sum -c lakexpress-0.4.10-sbom.json.sha256

Quick Download Script​

Save this as download-sbom.sh:

#!/bin/bash
# Download and verify LakeXpress SBOM

BASE_URL="https://lakexpress-docs.arpe.io/sboms/latest"
VERSION="0.4.10"

# Download JSON SBOM and verify
echo "Downloading JSON SBOM..."
wget "${BASE_URL}/lakexpress-${VERSION}-sbom.json"
wget "${BASE_URL}/lakexpress-${VERSION}-sbom.json.sha256"
sha256sum -c "lakexpress-${VERSION}-sbom.json.sha256" || exit 1

# Download XML SBOM and verify
echo "Downloading XML SBOM..."
wget "${BASE_URL}/lakexpress-${VERSION}-sbom.xml"
wget "${BASE_URL}/lakexpress-${VERSION}-sbom.xml.sha256"
sha256sum -c "lakexpress-${VERSION}-sbom.xml.sha256" || exit 1

echo "SBOMs downloaded and verified!"

Version History​

All versions are available in the static/sboms directory.

About These SBOMs​

The Software Bill of Materials (SBOM) provides a complete inventory of all components in LakeXpress:

  • All direct dependencies with exact versions
  • Package URLs (PURLs) for each component
  • License information where available
  • CycloneDX 1.5 format compatible with security scanning tools

Integration with Security Tools​

Use these SBOMs with:

  • Grype: grype sbom:lakexpress-0.4.10-sbom.json
  • Trivy: trivy sbom lakexpress-0.4.10-sbom.json
  • OWASP Dependency-Track: Import via UI or API

This page is automatically updated when new releases are created.

Copyright © 2026 Architecture & Performance.