CycloneDX / CycloneDX/sbom-utility
Custom Validator Capability Question
Open
documentation
working as designed
- Dominant language
- Go
- Stars
- 163
- Forks
- 21
- PR merge metrics
- No merged PRs in 30d
Description
I've been reading up on the experimental custom validation feature and cannot conclusively determine if it supports the intended (https://github.com/CycloneDX/sbom-utility/pull/135) ability to validate anywhere in the SBOM structure. Specifically, I have a use case for validating that all `components` contain custom `properties`.
All examples for the JSON-based custom validation have simpler `selector`s that appear to only operate at the document level and not iteratively across arrays like `components`.
Is this kind of feature currently supported?
Contributor guide
Assessment
This issue has not been assessed yet.