# SBOM for clang-tidy 23.1.4

> Clang-tidy is an LLVM-based code analyser tool

The Python package clang-tidy 23.1.4 ships 3 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/clang-tidy@23.1.4`
- PyPI: https://pypi.org/project/clang-tidy/23.1.4/
- License: Apache 2.0
- Clang: <http://clang.llvm.org/>
- Documentation: <https://clang.llvm.org/extra/clang-tidy/index.html#clang-tidy>
- Download: <https://github.com/llvm/llvm-project/releases>
- Source: <https://github.com/ssciwr/clang-tidy-wheel>

## SBOMs

### clang\_tidy-23.1.4-py2.py3-none-musllinux\_1\_2\_armv7l.whl

PEP 740 attestation verified (GitHub, ssciwr/clang-tidy-wheel, workflow release.yml).

- [clang\_tidy-23.1.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e17c1e04-1e56-5e9a-a87c-a737f005dffe/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### clang\_tidy-23.1.4-py2.py3-none-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ssciwr/clang-tidy-wheel, workflow release.yml).

- [clang\_tidy-23.1.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b35e1c9d-e08a-58d6-ad59-1f2d1f03ab02/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### clang\_tidy-23.1.4-py2.py3-none-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ssciwr/clang-tidy-wheel, workflow release.yml).

- [clang\_tidy-23.1.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b23aec57-cf9d-51bf-ad9e-e5d04c9e4d5c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/clang-tidy@23.1.4
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/clang-tidy/23.1.4.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/clang-tidy/23.1.4