CycloneDX / CycloneDX/specification
[TASK] CycloneDX 1.7.2 - Schema Alignment & Typo-/Bug‑Fix Release
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
## Summary
CycloneDX 1.7 has been available for some time, but several schema‑level inconsistencies and minor defects remain across XML, JSON, and Protocol Buffer definitions. This ticket tracks a maintenance release focused solely on correcting schema issues without modifying the normative specification.
## Acceptance Criteria
- No normative changes are made to the 1.7 or previous specification
- All known schema defects are resolved (e.g., validation mismatches, missing fields, inconsistent enum definitions)
- Cross‑format alignment is improved across XML, JSON, and Protobuf schemas
- Any remaining gaps or newly discovered issues are documented for follow‑up work
## Exit Criteria
- [ ] All fixes are merged into the appropriate branch (`master` or `1.x-dev`)
- [ ] A new patch release `1.7.2` is tagged and published
- [ ] Updated schemas are deployed to the CycloneDX webservers
- [ ] Documentation on the website is updated to reflect the corrected schemas
Contributor guide
Assessment
This issue has not been assessed yet.