openvex / spec

OpenVEX Specification

openvex/spec Issues

Version ranges in product_id/subcomponent_id
Updated 3 months ago2
Consider defining an OpenVEX mediaType
Updated 4 months ago1
Modify severity
Updated 7 months ago6
Make OpenVEX extensible ?
Updated 7 months ago
Notifications of new VEX
Updated 7 months ago3
Standard for VEX document discovery
Updated 8 months ago1
README.md needs to be updated to reflect v0.2.0 spec changes
Closed 8 months ago1
Use Cases
Updated 8 months ago1
Modify Spec to Require Artifact Digest in PURL
Closed 9 months ago8
Diagram missing from ATTESTING.md
Updated 9 months ago
Allow for vulnerability to be a list
Closed 9 months ago7
More explicit expectations for package identifiers
Closed 9 months ago2
VEX schema/spec version should be a field in the metadata
Closed 9 months ago4
PURL matching with qualifiers
Closed 9 months ago3
Ability to refer back to an SBOM?
Closed 9 months ago4
Published schema for OpenVex
Updated 10 months ago8
Clarify timestamps
Closed 10 months ago2
Update Spec to point out `@id` change
Updated a year ago1
timestamp issue
Updated a year ago2
Be more specific in the Sample Scenario
Updated a year ago4
`Products` not listed as required
Updated a year ago4
Product identifiers with CycloneDX
Updated a year ago4
Add "impact_statement" to specification
Closed a year ago2