CycloneDX/specification
View on GitHubOWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
- Stars
- 547
- Forks
- 93
- Open beginner issues
- 0
- Indexed issues
- 179
- Avg merge
- 4h 32m
- Merged PRs (30d)
- 38
- Dominant language
- XSLT
- License
- Apache-2.0
- Last GitHub push
- Sep 2, 2026
- Latest indexed
- Sep 15, 2026
- Contributing guide
- Contributing guide
- Code of conduct
- Code of conduct
- Beginner labels
- help wanted
-
CycloneDX/specification#342 · 3 comments · 0 reactions · 0 assignees ·
-
cap: ai/ml proposed core enhancement
CycloneDX/specification#343 · 1 comment · 0 reactions · 1 assignee ·
-
CycloneDX/specification#345 · 9 comments · 1 reaction · 1 assignee ·
-
question
CycloneDX/specification#349 · 19 comments · 0 reactions · 0 assignees ·
-
breaking-changes format: XML
CycloneDX/specification#354 · 9 comments · 3 reactions · 0 assignees ·
-
question
CycloneDX/specification#363 · 4 comments · 1 reaction · 0 assignees ·
-
question
CycloneDX/specification#364 · 6 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#382 · 15 comments · 0 reactions · 0 assignees ·
-
breaking-changes defect format: ProtoBuf
CycloneDX/specification#391 · 2 comments · 0 reactions · 0 assignees ·
-
documentation duplicate
CycloneDX/specification#399 · 1 comment · 0 reactions · 0 assignees ·
-
documentation duplicate
CycloneDX/specification#404 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#406 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#409 · 1 comment · 1 reaction · 1 assignee ·
-
proposed core enhancement
CycloneDX/specification#435 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#436 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#437 · 1 comment · 0 reactions · 0 assignees ·
-
breaking-changes
CycloneDX/specification#438 · 2 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#440 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#441 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#442 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#443 · 0 comments · 0 reactions · 0 assignees ·
-
documentation
CycloneDX/specification#444 · 0 comments · 0 reactions · 0 assignees ·
-
documentation
CycloneDX/specification#446 · 0 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#447 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#448 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#449 · 0 comments · 0 reactions · 0 assignees ·
-
Support for ulid Open
CycloneDX/specification#450 · 2 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#453 · 3 comments · 0 reactions · 0 assignees ·
-
breaking-changes
CycloneDX/specification#457 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#459 · 3 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#460 · 0 comments · 0 reactions · 0 assignees ·
-
breaking-changes defect
CycloneDX/specification#461 · 3 comments · 5 reactions · 1 assignee ·
-
proposed core enhancement
CycloneDX/specification#466 · 7 comments · 0 reactions · 0 assignees ·
-
documentation format: JSON
CycloneDX/specification#469 · 2 comments · 4 reactions · 0 assignees ·
-
CycloneDX/specification#474 · 5 comments · 2 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#481 · 10 comments · 3 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#483 · 1 comment · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#491 · 2 comments · 0 reactions · 1 assignee ·
-
CDX 2.0 defect documentation help wanted
CycloneDX/specification#492 · 4 comments · 2 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#503 · 4 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#522 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#526 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#542 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#548 · 12 comments · 1 reaction · 1 assignee ·
-
proposed core enhancement
CycloneDX/specification#563 · 4 comments · 0 reactions · 1 assignee ·
-
CDX 1.6 CDX 1.7 defect
CycloneDX/specification#564 · 0 comments · 1 reaction · 1 assignee ·
-
CDX 1.7 proposed core enhancement
CycloneDX/specification#565 · 0 comments · 2 reactions · 1 assignee ·
-
proposed core enhancement
CycloneDX/specification#567 · 2 comments · 0 reactions · 1 assignee ·
-
format: ProtoBuf
CycloneDX/specification#574 · 1 comment · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#577 · 3 comments · 0 reactions · 0 assignees ·