---
title: Install CudaBOM on Linux | Snap Store
description: Get the latest version of CudaBOM for Linux - Prove which NVIDIA CUDA
  software is inside an artifact
url: https://snapcraft.io/cudabom
---

# CudaBOM

[Chris Peoples (cpeoples)](https://snapcraft.io/publisher/cpeoples "View all snaps from Chris Peoples (cpeoples)")

* [Chris Peoples (cpeoples)](https://snapcraft.io/publisher/cpeoples "View all snaps from Chris Peoples (cpeoples)")
* [Development](https://snapcraft.io/search?categories=development)
* [Security](https://snapcraft.io/search?categories=security)

latest/stable 0.1.0

Install latest/stable of CudaBOM

---

**Install using the command line**

```
sudo snap install cudabom
```

Don't have snapd? [Get set up for snaps](https://snapcraft.io/docs/installing-snapd).

---

### Package name

* cudabom

---

### License

* Apache-2.0

---

### Last updated

* Today - latest/stable

---

### Websites

* [github.com/cpeoples/cudabom](https://github.com/cpeoples/cudabom "https://github.com/cpeoples/cudabom")

---

### Contact

* [github.com/cpeoples/cudabom/issues](https://github.com/cpeoples/cudabom/issues "https://github.com/cpeoples/cudabom/issues")

---

### Source code

* [github.com/cpeoples/cudabom](https://github.com/cpeoples/cudabom "https://github.com/cpeoples/cudabom")

---

### Report a bug

* [github.com/cpeoples/cudabom/issues](https://github.com/cpeoples/cudabom/issues "https://github.com/cpeoples/cudabom/issues")

---

##### Report a Snap Store violation

* [Report this Snap](https://snapcraft.io/cudabom#report-snap-modal)

---

* [Description](https://snapcraft.io/cudabom#tab-description)
* [Security](https://snapcraft.io/cudabom#tab-security)

#### Prove which NVIDIA CUDA software is inside an artifact

cudabom proves which NVIDIA CUDA software is actually inside an artifact
(Python wheels, shared libraries, executables, and container images) and
turns that evidence into security-grade SBOM, advisory, and VEX data.

It specializes in CUDA component identity (cudart, cuBLAS/cuBLASLt, cuDNN,
NCCL, and more), including statically linked and vendored/renamed copies,
using an explicit evidence model with EXACT / LIKELY / UNKNOWN confidence. It
correlates findings against NVIDIA's machine-readable CSAF security bulletins
and enriches existing Syft/Trivy/PEP 770 SBOMs rather than replacing them.

cudabom never runs code on a GPU and never executes what it scans, so it runs
on any CI runner. Outputs a terminal table, native JSON, CycloneDX 1.6,
CycloneDX VEX, SARIF 2.1.0, and Markdown.

cudabom is an independent project and is not an NVIDIA product. Releases are
Sigstore-signed with SLSA Build Level 3 provenance.

---

## Install CudaBOM on your Linux distribution

Choose your Linux distribution to get detailed installation instructions. If yours is not shown, get more details on the [installing snapd documentation](https://snapcraft.io/docs/installing-snapd).

[### Arch Linux](https://snapcraft.io/install/cudabom/arch)

[### CentOS](https://snapcraft.io/install/cudabom/centos)

[### Debian](https://snapcraft.io/install/cudabom/debian)

[### elementary OS](https://snapcraft.io/install/cudabom/elementary)

[### Fedora](https://snapcraft.io/install/cudabom/fedora)

[### KDE Neon](https://snapcraft.io/install/cudabom/kde-neon)

[### Kubuntu](https://snapcraft.io/install/cudabom/kubuntu)

[### Manjaro](https://snapcraft.io/install/cudabom/manjaro)

[### Pop!\_OS](https://snapcraft.io/install/cudabom/pop)

[### openSUSE](https://snapcraft.io/install/cudabom/opensuse)

[### Red Hat Enterprise Linux](https://snapcraft.io/install/cudabom/rhel)

[### Ubuntu](https://snapcraft.io/install/cudabom/ubuntu)