Skip to content

Pull requests: CycloneDX/specification

New pull request New
40 Open 512 Closed
40 Open 512 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[WIP] tests: lint external schemas
#1095 opened Sep 10, 2026 by jkowalleck Member • Draft 2.0
streamline bom-ref descriptions documentation ready for review
#1091 opened Sep 8, 2026 by jkowalleck Member Loading… 2.0
remove metadata.supplier breaking-changes ready for review
#1090 opened Sep 8, 2026 by jkowalleck Member Loading… 2.0
formulation environmentVars as system-independent key-value breaking-changes cap: formulation Capability: Formulation proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1088 opened Sep 8, 2026 by jkowalleck Member Loading… 2.0
2
6
specFormat as const
#1087 opened Sep 8, 2026 by jkowalleck Member Loading… 2.0
docs: streamline descriptions - literals, references, code CDX 2.0 related to release v2.0 documentation ready for review
#1084 opened Sep 7, 2026 by jkowalleck Member Loading… 2.0
1
15
chore(deps): bump actions/setup-java from 5.6.0 to 6.0.0 dependencies Pull requests that update a dependency file
#1082 opened Sep 5, 2026 by dependabot Bot Loading…
2.0 dev fix links CDX 2.0 related to release v2.0 documentation ready for review
#1080 opened Sep 3, 2026 by jkowalleck Member Loading… 2.0
Inventory refactor and definitions registry breaking-changes proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1075 opened Sep 2, 2026 by stevespringett Member Loading… 2.0
1
@stevespringett
3
Introduce pre-defined perspectives CDX 2.0 related to release v2.0 proposed core enhancement
#1067 opened Aug 29, 2026 by taleodor Loading… 2.0
17
chore(deps-dev): bump com.networknt:json-schema-validator from 1.5.5 to 3.0.7 in /tools dependencies Pull requests that update a dependency file
#1065 opened Aug 29, 2026 by dependabot Bot Loading…
Add ATLAS threat taxonomy support
#1054 opened Aug 27, 2026 by devashridatta-dotcom Loading… 2.0
1
fix module naming convention for JSS CDX 2.0 related to release v2.0 defect
#1052 opened Aug 26, 2026 by jkowalleck Member • Draft 2.0
Add safety integrity level schema support CDX 2.0 related to release v2.0
#1041 opened Aug 24, 2026 by devashridatta-dotcom Loading… 2.0
2
[2.0] docs: update model readme CDX 2.0 related to release v2.0 documentation ready for review
#1036 opened Aug 21, 2026 by jkowalleck Member Loading… 2.0
[IDEA] Add OWASP Threat Model Library parity CDX 2.0 related to release v2.0
#1034 opened Aug 21, 2026 by P3tra-WP • Draft 2.0
19
fix: LMOTS pattern, add HSS variant (LMS family) cap: cryptography-registry Capability: Cryptography Registry
#1029 opened Aug 16, 2026 by Mehrn0ush Contributor Loading…
1
2
fix: extend GOST registry with 2012/2015 algorithms and curve OIDs cap: cryptography-registry Capability: Cryptography Registry
#1026 opened Aug 15, 2026 by Mehrn0ush Contributor Loading…
1
chore(deps-dev): bump org.junit.jupiter:junit-jupiter-api from 5.11.4 to 6.1.3 in /tools dependencies Pull requests that update a dependency file
#1023 opened Aug 15, 2026 by dependabot Bot Loading…
refactor: license expression as defined object CDX 2.0 related to release v2.0 ready for review
#1022 opened Aug 14, 2026 by jkowalleck Member Loading… 2.0
feat: licenses acknowledgement SHOULD be unique CDX 2.0 related to release v2.0 proposed core enhancement ready for review
#1021 opened Aug 14, 2026 by jkowalleck Member Loading… 2.0
1
fix(xml): allow protocol cryptographic relationships CDX 1.7 related to release v1.7 defect format: XML ready for review validated
#1019 opened Aug 13, 2026 by qkaiser Loading… 1.7.2
1
1
CBOM: add protocol registry schema cap: cryptography Capability: Cryptography (CBOM) proposed core enhancement
#1010 opened Aug 7, 2026 by bhess Contributor • Draft 2.0
10
Clean check-in of AI/ML. Supersedes #948. cap: ai/ml Capability: AI/ML proposed core enhancement
#990 opened Jul 29, 2026 by stevespringett Member • Draft 2.0
@stevespringett
14
Add sample PQC readiness perspective for CBOM CDX 2.0 related to release v2.0 proposed core enhancement
#960 opened Jun 25, 2026 by bhess Contributor Loading… 2.0
3
ProTip! Add no:assignee to see everything that’s not assigned.