Discussions

• 1 You must be logged in to vote

  🙏

  What exactly is the meaning of metadata.supplier?

  andreas-hilti asked Sep 11, 2024 in Q&A · Closed · Answered

  

  

  2
• 1 You must be logged in to vote

  🙏

  Should cryptoProperties only be specified for components of type cryptographic-asset?

  andreas-hilti asked Sep 11, 2024 in Q&A · Closed · Answered

  

  

  2
• 1 You must be logged in to vote

  🙏

  Add source file entry in dependencies section

  ofirAbu42 asked Aug 26, 2024 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Question: intent of schema license definition required properties

  jhoward-lm asked Jul 11, 2024 in Q&A · Closed · Answered

  

  

  4
• 1 You must be logged in to vote

  🙏

  Support for passkeys under cryptoProperties

  prabhu asked Jun 24, 2024 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  🙏

  bom-ref propertyused in PowerShell.

  proposed core enhancement

  sergiomarotco asked Jun 21, 2024 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  🙏

  specVersion has no restrictions on value

  question

  douglasdennis asked Jun 5, 2024 in Q&A · Unanswered

  

  

  

  

  8
• 1 You must be logged in to vote

  🙏

  What's a good logic to identify the kind of BOM given a json

  prabhu asked Jun 4, 2024 in Q&A · Unanswered

  

  

  

  

  3
• 1 You must be logged in to vote

  🙏

  Error with enum ScoreMethod

  dimitri995 asked May 28, 2024 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  💡

  Tracking non-compliant components and services

  prabhu started May 1, 2024 in Ideas

  

  

  1
• 2 You must be logged in to vote

  💬

  [Discussion] Findings on Discrepancy Assessments within the SBOM Ecosystem.

  dw763j started Apr 11, 2024 in General

  

  

  

  

  16
• 1 You must be logged in to vote

  🙏

  In which specification version were vulnerability references introduced?

  vbazurtob asked Apr 4, 2024 in Q&A · Answered

  

  

  

  

  2
• 5 You must be logged in to vote

  🙏

  Can BOM files be hybrid

  omerfinger asked Nov 13, 2023 in Q&A · Answered

  

  

  1
• 1 You must be logged in to vote

  🙏

  What versioning scheme does the CycloneDX specification use?

  Brcrwilliams asked Nov 9, 2023 in Q&A · Answered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Sub project modelling in a SBOM

  afsahsyeda asked Oct 31, 2023 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  #️⃣

  merging multiple CycloneDX documents

  jkowalleck started Oct 13, 2023 in RFC

  

  

  

  

  50
• 1 You must be logged in to vote

  🙏

  Why vex affects has versions

  tomekkolo asked Sep 15, 2023 in Q&A · Unanswered

  

  

  

  

  3
• 1 You must be logged in to vote

  🙏

  How to distinguish between VEX and SBOM

  Razikus asked Aug 30, 2023 in Q&A · Answered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Is CylcloneDX able to describe a hardware software stack?

  3BK asked Jun 14, 2023 in Q&A · Unanswered

  

  

  

  

  32
• 1 You must be logged in to vote

  🙏

  clarify use of "bomlink" in schema

  jkowalleck asked May 9, 2023 in Q&A · Unanswered

  

  

  6
• 1 You must be logged in to vote

  🙏

  What is the way to document known issues in release notes

  iViggyPrabhu asked May 1, 2022 in Q&A · Answered

  

  

  2
• 1 You must be logged in to vote

  🙏

  Component Type Classification for a Runtime

  gilday asked Apr 12, 2022 in Q&A · Answered

  

  

  3
• 1 You must be logged in to vote

  🙏

  Patches and hotfixes

  charterchap asked Jun 29, 2021 in Q&A · Unanswered

  

  

  

  

  2