CycloneDX / CycloneDX/transparency-exchange-api
CoSWID and SWID BOM Support
Open
enhancement
- Dominant language
- Shell
- Stars
- 113
- Forks
- 22
- Avg merge
- 8d 12h
- Merged PRs (30d)
- 5
Description
Hello 👋. I have quickly reviewed the spec draft here and noticed that only CycloneDX and SPDX are identified. Is SWID, more specifically the compact CBOR alterntive [in IETF RFC9393](https://datatracker.ietf.org/doc/rfc9393/) supported? If not, would you open to contributions to align identifiers and other metadata from this other BOM format in this API spec?
Contributor guide
Assessment
This issue has not been assessed yet.