CycloneDX / CycloneDX/specification
JSON Schema for vulnerability extension?
Open
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
I see the XML schema has a specific schema extension for describing vulnerability information https://github.com/CycloneDX/specification/blob/master/schema/ext/vulnerability-1.0.xsd
The main page [says](https://cyclonedx.org/#extensions)
> The Vulnerability extension provides the ability to represent component vulnerabilities in a BOM. This extension is applicable to CycloneDX v1.1 and higher.
However the `ext` folder doesn't appear to have the JSON schema https://github.com/CycloneDX/specification/tree/master/schema/ext
Are there any plans to publish a JSON Schema with the vulnerability extension applied?
Contributor guide
Assessment
This issue has not been assessed yet.