CycloneDX / CycloneDX/specification

[TASK] CycloneDX 1.7.2 - Schema Alignment & Typo-/Bug‑Fix Release

Open
#1,049 0 comments 0 reactions 1 assignee Claimed by @jkowalleck View on GitHub
CDX 1.7 defect
Dominant language
XSLT
Stars
547
Forks
93
Avg merge
7h 11m
Merged PRs (30d)
37

Description

## Summary
CycloneDX 1.7 has been available for some time, but several schema‑level inconsistencies and minor defects remain across XML, JSON, and Protocol Buffer definitions. This ticket tracks a maintenance release focused solely on correcting schema issues without modifying the normative specification.

## Acceptance Criteria
- No normative changes are made to the 1.7 or previous specification
- All known schema defects are resolved (e.g., validation mismatches, missing fields, inconsistent enum definitions)
- Cross‑format alignment is improved across XML, JSON, and Protobuf schemas
- Any remaining gaps or newly discovered issues are documented for follow‑up work

## Exit Criteria
- [ ] All fixes are merged into the appropriate branch (`master` or `1.x-dev`)
- [ ] A new patch release `1.7.2` is tagged and published
- [ ] Updated schemas are deployed to the CycloneDX webservers
- [ ] Documentation on the website is updated to reflect the corrected schemas

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.