Add cargo-cyclonedx (#424)

tools/ci/tool-list.sh

@@ -6,6 +6,7 @@ cd "$(dirname "$0")"/../..
 
 # They don't provide prebuilt binaries for musl or old glibc host.
 glibc_pre_2_34_incompat=(
+    cargo-cyclonedx
     xbuild
 )
 glibc_pre_2_31_incompat=(

tools/codegen/base/cargo-cyclonedx.json

@@ -0,0 +1,17 @@
+{
+  "repository": "https://github.com/CycloneDX/cyclonedx-rust-cargo",
+  "tag_prefix": "cargo-cyclonedx-",
+  "rust_crate": "${package}",
+  "version_range": ">= 0.5.0",
+  "platform": {
+    "x86_64_macos": {
+      "asset_name": "${package}-Darwin-x86_64.tar.gz"
+    },
+    "x86_64_windows": {
+      "asset_name": "${package}-Win-x86_64.zip"
+    },
+    "x86_64_linux_gnu": {
+      "asset_name": "${package}-linux-amd64.tar.gz"
+    }
+  }
+}