CycloneDX / sbom-utility

Utility that provides an API platform for validating, querying and managing BOM data

CycloneDX/sbom-utility Issues

Validating CycloneDX fails without internet connectivity
Updated a month ago
Enhancement: Add option to skip license validation
Closed a month ago3
Remote loading of Schema file from URL
Closed a month ago3
Support for both the v1.5 component evidence `identity` and the v1.6 array of `componentIdentityEvidence`
Updated a month ago2
Documentation for custom.json
Updated a month ago4
Add Apache Skywalking-eyes license checking to GitHub action CI workflow
Updated a month ago1
SIGSEGV: segmentation violation code=0x2 addr=0x0 pc=0x104bfa024
Closed 9 months ago1
signal SIGSEGV: segmentation violation code=0x1 addr=0x8 pc=0x5f53ae
Closed a month ago4
TODO: Change Formulation and ModelCard schemas to use pointers
Updated 5 months ago2
Add support for "legacy" and new `Tool` structure introduced in CycloneDX v1.5
Updated 7 months ago1
`diff` panics while diffing two files
Updated 8 months ago9
Support SPDX in the "patch" command
Updated 8 months ago
Feature Request - Generate JSON with entire structure
Updated 9 months ago
Testcase: Need test for new complex "licenseChoice" schema defn.
Updated 10 months ago1
Testcase: Need testcase that has a CDXService with no "bom-ref"
Updated 10 months ago
Testcase: Need new test case for new "Creation Tools" object
Updated 10 months ago
Support OWASP SCVS "Profiles" for use in validation, trimming, etc. commands
Updated a year ago
Release v013.0 is missing release assets
Closed a year ago2
Add all "bom-examples" to validate command's unit tests
Closed a year ago
Support stdin for input
Closed a year ago1
Include config.json and licenses.json in the compiled executable
Closed a year ago2
Update license.json to include entries for all SPDX 3.21 License templates
Updated a year ago5
Enhancement: Add testcases to validate JSF signatures
Updated a year ago1
Create Microsoft Softare Installer (MSI) file for Windows
Updated a year ago
Support Graph rendering of dependences and formatted (graph) output
Updated a year ago
Enhancement: Summarize "duplicate components" schema error
Updated a year ago5
Add custom JSON Marshallers functions for CycloneDX vulnerability data structures
Updated a year ago1
replace deprecated `ioutil` package functions with latest advised `io` and `os` package replacements
Closed a year ago10
"Invalid flag for command"
Closed a year ago2
Add flag to output JSON errors from the validate command
Closed a year ago1
JSON output format for SBOM validation
Closed a year ago2
Enhancement: more information about schema errors
Closed 2 years ago8
Provide a means to "truncate" long column data for list subcommands
Updated 2 years ago
Check for OSI/FSF mismatch when loading License policy config file
Closed 2 years ago2
Add support for displaying/validating CDX Signature schema (struct)
Updated 2 years ago
Add flag for validate command to turn on/off schema error colorization
Closed 2 years ago1
Add flag to vulnerablility command to stop processing after specified # of errors
Closed 2 years ago1
Author custom JSON marshaller functions to "omitempty" structs
Closed 2 years ago3
Explore using custom struct tags for CycloneDX property versioning
Updated 2 years ago2
Add support for BOM CDXSignature marshalling/unmarshalling and for validation purposes
Updated 2 years ago
Attempt to reduce JSON output size using the "omitempty" marshaling directive
Closed 2 years ago
Composite SPDX license expression not recognized
Closed 2 years ago9