CycloneDX / CycloneDX/sbom-utility

Support OWASP SCVS "Profiles" for use in validation, trimming, etc. commands

Open
#64 0 comments 0 reactions 0 assignees View on GitHub
documentation enhancement
Dominant language
Go
Stars
163
Forks
21
PR merge metrics
No merged PRs in 30d

Description

See standardized profiles: https://scvs.owasp.org/bom-maturity-model/profiles/examples/ntia-minimum-elements/

Also, see how they are being used in BOM generation (which could be used to create test/input data):
- https://github.com/CycloneDX/cdxgen and its "--profile" flag/option.

Note: profile usage/use cases will require some really good documentation to convey understanding with great references...

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.