CycloneDX / CycloneDX/cyclonedx-python-lib
[FEAT] Add support for XML Signatures
Open
enhancement
help wanted
- Dominant language
- Python
- Stars
- 116
- Forks
- 67
- Avg merge
- 8d 2h
- Merged PRs (30d)
- 2
Description
Extracted from #850
Just as #122 requests support for JSON signatures (JSF), this ticket requests support for the equivalent spec component in XML: XML Signatures.
Example from the spec:
For testing, XML signatures can be added to BOMs with `cyclonedx-cli sign`.
Contributor guide
Research direction
Start by reading the related JSON signatures request in #122 and the XML Signatures specification example linked in this issue. Use `cyclonedx-cli sign` to create signed BOMs for testing; done means the Python library supports the XML signature component and can process those BOMs.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python, xml
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100