CycloneDX / sbom-utility

Utility that provides an API platform for validating, querying and managing BOM data

CycloneDX/sbom-utility Issues

Add Apache Skywalking-eyes license checking to GitHub action CI workflow
Updated 2 months ago
Support for both the v1.5 component evidence `identity` and the v1.6 array of `componentIdentityEvidence`
Updated 2 months ago2
Add support for "legacy" and new `Tool` structure introduced in CycloneDX v1.5
Updated 2 months ago1
`diff` panics while diffing two files
Updated 3 months ago9
Support SPDX in the "patch" command
Updated 4 months ago
SIGSEGV: segmentation violation code=0x2 addr=0x0 pc=0x104bfa024
Closed 4 months ago
TODO: Change Formulation and ModelCard schemas to use pointers
Updated 4 months ago
Feature Request - Generate JSON with entire structure
Updated 4 months ago
Testcase: Need test for new complex "licenseChoice" schema defn.
Updated 5 months ago1
Testcase: Need testcase that has a CDXService with no "bom-ref"
Updated 5 months ago
Testcase: Need new test case for new "Creation Tools" object
Updated 5 months ago
Support OWASP SCVS "Profiles" for use in validation, trimming, etc. commands
Updated 8 months ago
Release v013.0 is missing release assets
Closed 9 months ago2
Add all "bom-examples" to validate command's unit tests
Closed a year ago
Support stdin for input
Closed a year ago1
Include config.json and licenses.json in the compiled executable
Closed a year ago2
Update license.json to include entries for all SPDX 3.21 License templates
Updated a year ago5
Enhancement: Add testcases to validate JSF signatures
Updated a year ago1
Create Microsoft Softare Installer (MSI) file for Windows
Updated a year ago
Support Graph rendering of dependences and formatted (graph) output
Updated a year ago
Enhancement: Summarize "duplicate components" schema error
Updated a year ago5
Add custom JSON Marshallers functions for CycloneDX vulnerability data structures
Updated a year ago1
replace deprecated `ioutil` package functions with latest advised `io` and `os` package replacements
Closed a year ago10
"Invalid flag for command"
Closed a year ago2
Add flag to output JSON errors from the validate command
Closed a year ago1
JSON output format for SBOM validation
Closed a year ago2
Enhancement: more information about schema errors
Closed a year ago8
Provide a means to "truncate" long column data for list subcommands
Updated a year ago
Check for OSI/FSF mismatch when loading License policy config file
Closed a year ago2
Add support for displaying/validating CDX Signature schema (struct)
Updated a year ago
Add flag for validate command to turn on/off schema error colorization
Closed a year ago1
Add flag to vulnerablility command to stop processing after specified # of errors
Closed a year ago1
Author custom JSON marshaller functions to "omitempty" structs
Closed a year ago3
Explore using custom struct tags for CycloneDX property versioning
Updated a year ago2
Add support for BOM CDXSignature marshalling/unmarshalling and for validation purposes
Updated a year ago
Attempt to reduce JSON output size using the "omitempty" marshaling directive
Closed a year ago
Composite SPDX license expression not recognized
Closed a year ago9