# Export a CycloneDX 1.6 CBOM for global-catalog software

<Heading
  as={"h1"}
  className={"openapi__heading"}
  children={"Export a CycloneDX 1.6 CBOM for global-catalog software"}
>
</Heading>

<MethodEndpoint
  method={"get"}
  path={"/export/cyclonedx"}
  context={"endpoint"}
>
  
</MethodEndpoint>

Resolves the `(name, version, publisher)` query to global-catalog rows
(latest **complete** snapshot only — the read is freshness-gated) and
renders ONE CycloneDX 1.6 document.

- **With `publisher`:** exact fingerprint lookup → at most one component.
- **Without `publisher`:** `name`+`version` may match several publisher
  variants; all are emitted as components in the single document, each
  with its own `mesh:pqc_compliant` and `mesh:pqc_state` properties.

On a **catalog miss** the request is recorded for fulfillment and the
endpoint returns `202` (not `404`): eligibility is decided at nightly
build time by the fail-closed public gate, never at request time.

<Heading
  id={"request"}
  as={"h2"}
  className={"openapi-tabs__heading"}
>
  <Translate id="theme.openapi.request.title">Request</Translate>
</Heading>

<ParamsDetails
  {...require("./export-global-cyclone-dx.ParamsDetails.json")}
>
  
</ParamsDetails>

<RequestSchema
  {...require("./export-global-cyclone-dx.RequestSchema.json")}
>
  
</RequestSchema>

<StatusCodes
  {...require("./export-global-cyclone-dx.StatusCodes.json")}
>
  
</StatusCodes>