CycloneDX / CycloneDX/specification
[FEATURE]: Introduction of vulnerability type
Open
proposed core enhancement
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
## Describe the feature
I want to be able to describe not just security vulnerabilities in my software but also functional vulnerabilities ie defects and have this information available for release notes.
## Possible solutions
Introduction of an optional field for vulnerabilities -> vulnerabilityType which is an enumeration of security, functional & presentational
## Alternatives
Use custom properties
## Additional context
I am attempting to produce release notes using a SBOM hence wishing to be able to Populate the SBOM with defects recorded in our issue tracker (jira).
Contributor guide
Assessment
This issue has not been assessed yet.