Skip to content

Pull requests: CycloneDX/specification

New pull request New
36 Open 453 Closed
36 Open 453 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

2.0 fixes CDX 2.0 related to release v2.0 defect
#1001 opened Aug 4, 2026 by jkowalleck Member • Draft
[2.0] enforce refType/refLinkType non-conflicting with BOM-Link breaking-changes CDX 2.0 related to release v2.0 defect
#997 opened Aug 3, 2026 by jkowalleck Member Loading… 2.0
1
11
Clean check-in of AI/ML. Supersedes #948. cap: ai/ml Capability: AI/ML proposed core enhancement
#990 opened Jul 29, 2026 by stevespringett Member • Draft 2.0
@stevespringett
2
chore(deps-dev): bump org.junit.jupiter:junit-jupiter-api from 5.11.4 to 6.1.2 in /tools dependencies Pull requests that update a dependency file
#985 opened Jul 25, 2026 by dependabot Bot Loading…
Added first-class hardware support proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#982 opened Jul 21, 2026 by stevespringett Member Loading… 2.0
1
@stevespringett
1
Unified evidence model addressing #278, #333 and other concerns. breaking-changes proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#980 opened Jul 20, 2026 by stevespringett Member Loading… 2.0
2
@stevespringett
2
chore(deps-dev): bump com.networknt:json-schema-validator from 1.5.5 to 3.0.6 in /tools dependencies Pull requests that update a dependency file
#977 opened Jul 18, 2026 by dependabot Bot Loading…
Refactored service into a component type breaking-changes proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#975 opened Jul 12, 2026 by stevespringett Member Loading… 2.0
1
@stevespringett
1
Add sample PQC readiness perspective for CBOM
#960 opened Jun 25, 2026 by bhess Contributor Loading…
2
chore(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.6 in /tools dependencies Pull requests that update a dependency file
#950 opened Jun 6, 2026 by dependabot Bot Loading…
1
Proposed 2.0 schema for AI/ML BOM cap: ai/ml Capability: AI/ML CDX 2.0 related to release v2.0 draft format: JSON
#948 opened Jun 3, 2026 by mrutkows Contributor Loading…
@mrutkows
9
feat(cryptography): add cryptographic agility plane to CBOM cap: cryptography Capability: Cryptography (CBOM) proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#947 opened Jun 3, 2026 by bhess Contributor Loading… 2.0
1
19
chore(deps): bump lib.slf4j.api from 2.0.16 to 2.0.18 in /tools dependencies Pull requests that update a dependency file
#937 opened May 23, 2026 by dependabot Bot Loading…
2
Add outputLength property to schema cap: cryptography Capability: Cryptography (CBOM) proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#931 opened May 15, 2026 by jvdsn Contributor Loading… 2.0
1
6
fix: sync cryptographic algorithm family enum cap: cryptography Capability: Cryptography (CBOM) cap: cryptography-registry Capability: Cryptography Registry
#919 opened May 2, 2026 by Mehrn0ush Contributor Loading…
1
chore(deps): bump commons-io:commons-io from 2.17.0 to 2.22.0 in /tools dependencies Pull requests that update a dependency file
#916 opened Apr 25, 2026 by dependabot Bot Loading…
4
chore: GH workflow default permissions for bundle_2.0_schemas.yml
#902 opened Mar 31, 2026 by jkowalleck Member Loading… 2.0
chore: update algorithm families
#893 opened Mar 26, 2026 by github-actions Bot Loading…
11
streamline self refs
#888 opened Mar 16, 2026 by jkowalleck Member Loading… 2.0
test(js): compile CycloneDX 2.0 schema in lint harness chore: QA A chore related to Quality Assurance
#838 opened Feb 21, 2026 by Mehrn0ush Contributor Loading… 2.0
@jkowalleck
fix(tests): enable JS functional tests for CycloneDX 2.0 chore: QA A chore related to Quality Assurance test-data related to test-resources and -data
#836 opened Feb 21, 2026 by Mehrn0ush Contributor Loading… 2.0
@jkowalleck
fix(linter): harden traverseSchema (cycle-safe traversal, unambiguous paths)
#833 opened Feb 21, 2026 by Mehrn0ush Contributor Loading… 2.0
schema: refactor data/threat models and refresh bundles
#777 opened Jan 17, 2026 by P3tra-WP Loading… 2.0
21
Implements conditional subschemas based on component type CDX 2.0 related to release v2.0
#774 opened Jan 13, 2026 by stevespringett Member Loading… 2.0
1
7
2.0 dev threat modeling petras suggestions
#760 opened Jan 4, 2026 by P3tra-WP Loading… 2.0
12
ProTip! What’s not been updated in a month: updated:<2026-07-04.