diff --git a/.gitignore b/.gitignore
index 299f7cb2eaa4bb28458245dac6618da5dedac0cb..59470c206c786902a08bb17422dad183260bba9e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,6 +22,7 @@ __pycache__/
 coverage.xml
 htmlcov/
 /.cache/
+bom.json
 
 # Tooling generated
 .tox
diff --git a/tox.ini b/tox.ini
index 7b8651adec32ad31345c1925a3b0e430bde66b00..2791a34bb5813ccf82577e8259576b1085da4cd0 100644
--- a/tox.ini
+++ b/tox.ini
@@ -19,6 +19,7 @@ deps =
     pytest-xdist
     pytest-cov
     flake8
+    cyclonedx-py
     -r requirements.txt
 
 commands =
@@ -27,4 +28,5 @@ commands =
     flake8
     mypy {toxinidir}/compendium_v2/ {toxinidir}/test/
     sphinx-build -M html docs/source docs/build -E
+    cyclonedx-py environment --output-format json -o bom.json