Repository navigation
[TRACKING] Complete support for CycloneDX v1.6 #696
Description
see https://github.com/CycloneDX/specification/releases/tag/1.6
and https://github.com/CycloneDX/specification/releases/tag/1.6.1
The following items are not currently supported for CycloneDX v1.6 (as of release 7.6.x):
- definitions
- partially addressed by feat: add basic support for Definitions #701
- partially addressed by feat: add extended support for Definitions #713
- TODO:
definition.Standard.signature
-
dependencies.provides -
bom-refproperties here and there - declarations
- to be continued
this library is a community effort.
if you find a feature that you need is missing, feel free to donate/contribute the missing feature.
Activity
[-]Complete support for CycloneDX v1.5[/-][+]Complete support for CycloneDX v1.6[/+]aespogom commentedon Mar 27, 2025
Hi team,
Thanks for your work on this library!
I'd like to suggest a small enhancement: when serializing data to cyclonedx.model.license.DisjunctiveLicense, if unexpected keys like properties/properties are present, the serializer currently fails without a very clear message.
Cyclonedx v1.6 supports that key and so I think this also applies to the complete support of v1.6.
Thanks again!
jkowalleck commentedon Mar 28, 2025
this would be a breaking change, behavior-wise(dont fail on non-implemented properties) and API(all constructors would accept any
kwarg) wise. just a remark, not a blocker.Anyway, feel free to pull request the needed changes; this is a community project, depending on your contributions and code donations.
[-]Complete support for CycloneDX v1.6[/-][+][TRACKING] Complete support for CycloneDX v1.6[/+]bom-refto known models according to spec #856