CycloneDX / cyclonedx-go

Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)

https://cyclonedx.org/

CycloneDX/cyclonedx-go Issues

Investigate how to best get rid of slice pointers
Updated a month ago1
Import Cycle Not Allowed
Updated 5 months ago
Implement extended data flow support
Updated 6 months ago
Expose merging SBOMs
Updated 6 months ago4
backward/forward compatibility for Tools (cdx 1.5)
Closed 6 months ago11
Specification version 1.5 support
Closed 6 months ago12
Receive incorrect licence information.
Closed 8 months ago4
New Feature Request: Add protobuf struct tags
Updated 10 months ago1
unmarshal bom on v1.5 return `invalid specification version`
Closed a year ago
test(todo): add back vulnerability properties test once XML schema is fixed
Closed 2 years ago
Feature Request: JSON schema on JSON output
Closed a year ago1
XML parser does not support ExternalReference, only ExternalReferences
Closed a year ago2
Dependencies list in Dependency struct should be an array of String, not Dependency
Closed 2 years ago
Support multiple spec versions
Closed 2 years ago2
[bug] Add `Properties` to cyclonedx.Vulnerability
Closed 2 years ago
XML characters in Property tag are not encoded
Closed 2 years ago
[bug] BOMEncoder for vulnerabilities adds a default score of 0 if not specified
Closed 2 years ago1
Support spec v1.4
Closed 2 years ago
Implement JSF support
Updated 2 years ago
Drop support for Go 1.14
Closed 3 years ago
Support spec v1.3
Closed 3 years ago