CycloneDX/specification
View on GitHubOWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
- Stars
- 547
- Forks
- 93
- Open beginner issues
- 0
- Indexed issues
- 179
- Avg merge
- 4h 32m
- Merged PRs (30d)
- 38
- Dominant language
- XSLT
- License
- Apache-2.0
- Last GitHub push
- Sep 2, 2026
- Latest indexed
- Sep 15, 2026
- Contributing guide
- Contributing guide
- Code of conduct
- Code of conduct
- Beginner labels
- help wanted
-
proposed schema extension
CycloneDX/specification#35 · 4 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#37 · 16 comments · 1 reaction · 0 assignees ·
-
CycloneDX/specification#53 · 2 comments · 0 reactions · 1 assignee ·
-
CycloneDX/specification#77 · 7 comments · 1 reaction · 0 assignees ·
-
documentation
CycloneDX/specification#85 · 11 comments · 1 reaction · 0 assignees ·
-
CycloneDX/specification#96 · 6 comments · 2 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#103 · 3 comments · 2 reactions · 1 assignee ·
-
CycloneDX/specification#118 · 0 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#131 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#135 · 7 comments · 1 reaction · 0 assignees ·
-
CycloneDX/specification#137 · 4 comments · 0 reactions · 0 assignees ·
-
question
CycloneDX/specification#141 · 2 comments · 1 reaction · 0 assignees ·
-
CycloneDX/specification#146 · 2 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#150 · 3 comments · 0 reactions · 0 assignees ·
-
question
CycloneDX/specification#151 · 4 comments · 0 reactions · 0 assignees ·
-
help wanted proposed core enhancement
CycloneDX/specification#155 · 8 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#157 · 4 comments · 1 reaction · 0 assignees ·
-
CycloneDX/specification#160 · 5 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#163 · 3 comments · 0 reactions · 0 assignees ·
-
help wanted proposed core enhancement
CycloneDX/specification#173 · 1 comment · 3 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#185 · 7 comments · 0 reactions · 1 assignee ·
-
help wanted proposed core enhancement
CycloneDX/specification#197 · 25 comments · 2 reactions · 1 assignee ·
-
CycloneDX/specification#201 · 0 comments · 0 reactions · 0 assignees ·
-
documentation format: JSON
CycloneDX/specification#203 · 3 comments · 0 reactions · 0 assignees ·
-
cap: ai/ml help wanted
CycloneDX/specification#206 · 2 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#207 · 0 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#210 · 2 comments · 0 reactions · 1 assignee ·
-
cap: formulation
CycloneDX/specification#246 · 2 comments · 0 reactions · 1 assignee ·
-
breaking-changes cap: formulation
CycloneDX/specification#247 · 1 comment · 0 reactions · 1 assignee ·
-
breaking-changes cap: formulation request for comment RFC notice sent
CycloneDX/specification#248 · 1 comment · 0 reactions · 1 assignee ·
-
breaking-changes cap: formulation request for comment RFC notice sent
CycloneDX/specification#249 · 1 comment · 0 reactions · 1 assignee ·
-
format: ProtoBuf
CycloneDX/specification#261 · 0 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#262 · 6 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#263 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#268 · 2 comments · 0 reactions · 0 assignees ·
-
breaking-changes CDX 1.5 format: JSON
CycloneDX/specification#270 · 6 comments · 1 reaction · 0 assignees ·
-
CDX 1.5
CycloneDX/specification#271 · 1 comment · 0 reactions · 0 assignees ·
-
breaking-changes CDX 1.5
CycloneDX/specification#274 · 0 comments · 0 reactions · 0 assignees ·
-
CDX 1.5 defect format: ProtoBuf validated
CycloneDX/specification#276 · 4 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#277 · 3 comments · 0 reactions · 1 assignee ·
-
CycloneDX/specification#279 · 0 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#280 · 11 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#282 · 2 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#283 · 2 comments · 0 reactions · 0 assignees ·
-
CycloneDX/specification#284 · 2 comments · 0 reactions · 0 assignees ·
-
proposed core enhancement
CycloneDX/specification#287 · 5 comments · 0 reactions · 1 assignee ·
-
CycloneDX/specification#290 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#312 · 3 comments · 0 reactions · 0 assignees ·
-
breaking-changes CDX 1.3
CycloneDX/specification#319 · 1 comment · 0 reactions · 0 assignees ·
-
CycloneDX/specification#341 · 1 comment · 0 reactions · 0 assignees ·