CycloneDX / CycloneDX/specification

[FEATURE]: Introduction of vulnerability type

Open
#491 2 comments 0 reactions 1 assignee Claimed by @stevespringett View on GitHub
proposed core enhancement
Dominant language
XSLT
Stars
547
Forks
93
Avg merge
7h 11m
Merged PRs (30d)
37

Description

## Describe the feature

I want to be able to describe not just security vulnerabilities in my software but also functional vulnerabilities ie defects and have this information available for release notes.

## Possible solutions

Introduction of an optional field for vulnerabilities -> vulnerabilityType which is an enumeration of security, functional & presentational

## Alternatives

Use custom properties

## Additional context

I am attempting to produce release notes using a SBOM hence wishing to be able to Populate the SBOM with defects recorded in our issue tracker (jira).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.