List view

Add support for source/sink and stacktrace to vulnerability support

proposed core enhancement

Status: Open.

#103 In CycloneDX/specification;

· stevespringett opened on Dec 7, 2021

Enhance metadata with richer description of custom code

help wanted

proposed core enhancement

Status: Open.

#173 In CycloneDX/specification;

· planetlevel opened on Jan 4, 2023

Expand upon ML explainability

help wanted

Status: Open.

#206 In CycloneDX/specification;

· stevespringett opened on Apr 5, 2023

Tie ML inputs/outputs to CDX objects

proposed core enhancement

Status: Open.

#207 In CycloneDX/specification;

· stevespringett opened on Apr 5, 2023

Add schema reference to "externalReference" object

proposed core enhancement

Status: Open.

#185 In CycloneDX/specification;

· mrutkows opened on Feb 8, 2023

Add tight scoping to nodes in the dependency graph

help wanted

proposed core enhancement

Status: Open.

#197 In CycloneDX/specification;

· stevespringett opened on Mar 22, 2023

Add support for granular lifecycles

proposed core enhancement

Status: Open.

#277 In CycloneDX/specification;

· prabhu opened on Aug 13, 2023

Support evidence for services

proposed core enhancement

Status: Open.

#280 In CycloneDX/specification;

· prabhu opened on Aug 25, 2023

Request: Evidence for Vulnerabilities

proposed core enhancement

Status: Open.

#333 In CycloneDX/specification;

· nickvido opened on Nov 6, 2023

modelCard Input/output descriptions

proposed core enhancement

Status: Open.

#343 In CycloneDX/specification;

· bardenstein opened on Nov 17, 2023

Request: Add project sustainability fields to CycloneDX

Status: Open.

#400 In CycloneDX/specification;

· sjn opened on Mar 18, 2024

Add support for redaction

proposed core enhancement

Status: Open.

#409 In CycloneDX/specification;

· stevespringett opened on Mar 23, 2024

Change component type so that it's not required or add a new type of unassigned

Status: Open.

#466 In CycloneDX/specification;

· pjdowner opened on May 14, 2024

licenses: allow mix of multiple SPDX expressions AND/OR multiple named/spdx licenses

promote to tc54Promote to Ecma Technical Committee 54Promote to Ecma Technical Committee 54

proposed core enhancement

RFC notice sentA public RFC notice was distributed to the CycloneDX mailing list for considerationA public RFC notice was distributed to the CycloneDX mailing list for consideration

RFC vote accepted

Status: Open.

Enhancement

#454 In CycloneDX/specification;

· jkowalleck opened on Apr 29, 2024

[FEATURE]: EPSS Score on Vulnerability model

proposed core enhancement

Status: Open.

#481 In CycloneDX/specification;

· mcombuechen opened on Jun 12, 2024

[FEATURE]: Validity period for attestations

proposed core enhancement

Status: Open.

#483 In CycloneDX/specification;

· tixu opened on Jun 14, 2024

Grammar and style check

documentation

help wanted

Status: Open.

#492 In CycloneDX/specification;

· stevespringett opened on Jul 11, 2024

[WIP] v1.7

defect

documentation

proposed core enhancement

test-datarelated to test-resources and -datarelated to test-resources and -data

Status: Draft (not ready).

CycloneDX/specificationnumber 511

#511 In CycloneDX/specification;

· jkowalleck opened on Aug 31, 2024

Should cryptoProperties only be specified for components of type cryptographic-asset?

proposed core enhancement

Status: Open.

Enhancement

#522 In CycloneDX/specification;

· stevespringett opened on Sep 11, 2024

[FEATURE]: Add additional component types for Manufacturing/Formulation/ML artifacts

proposed core enhancement

Status: Open.

Enhancement

#563 In CycloneDX/specification;

· mrutkows opened on Jan 8, 2025

[FEATURE]: Need means to "reference" a person (identity) for MBOM

proposed core enhancement

Status: Open.

Enhancement

#567 In CycloneDX/specification;

· mrutkows opened on Jan 8, 2025

[FEATURE]: Enumeration of curves and algorithms in CBOM

proposed core enhancement

Status: Open.

Enhancement

#569 In CycloneDX/specification;

· stevespringett opened on Jan 10, 2025

feat: support multi license mix

draft

promote to tc54Promote to Ecma Technical Committee 54Promote to Ecma Technical Committee 54

proposed core enhancement

ready for review

request for comment

RFC notice sentA public RFC notice was distributed to the CycloneDX mailing list for considerationA public RFC notice was distributed to the CycloneDX mailing list for consideration

RFC vote accepted

Status: Open (in progress).

CycloneDX/specificationnumber 582

#582 In CycloneDX/specification;

· jkowalleck opened on Jan 20, 2025

bom-ref help text needs tweaking ❗

defect

documentation

Status: Open.

#616 In CycloneDX/specification;

· prabhu opened on Mar 28, 2025

[FEATURE]: there SHOULD be at most one "declared" and one "conclude" license per component

proposed core enhancement

Status: Open.

Enhancement

#619 In CycloneDX/specification;

· jkowalleck opened on Mar 29, 2025