Owner

protobom

4 indexed repositories · View on GitHub

protobom
A universal SBOM representation in protocol buffers

Go · 334 stars
sbom-convert
Example CLI project to demo API architecture and protobom library

Go · 26 stars
storage
Storage backends for protobom

Go · 8 stars
cel
Protobom CEL integration

Go · 1 star

Beginner friendly Everything

Open All

SPDX 2.3 serializer writes invalid SPDXIDs when node IDs come from CycloneDX bom-refs Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

protobom/protobom#478 · Opened Sep 18, 2026
Consider validating SPDX id's and expressions Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 45/100

protobom/protobom#449 · Opened Aug 13, 2026
I've created a Vulnerability Disclosure Report (VDR) for Protobom V 0.5.8 Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

protobom/protobom#439 · Opened Jul 26, 2026
CycloneDX unserializer drops `metadata.tools` — `Document.Metadata.Tools` always empty Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

protobom/protobom#417 · 2 comments · Opened Jun 3, 2026
CycloneDX `dependsOn` relationships converted to SPDX `CONTAINS` instead of `DEPENDS_ON` Open

bug triage

protobom/sbom-convert#172 · 1 comment · 1 assignee · Opened Feb 18, 2026
Repo setup: Create teams and permissions Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

protobom/cel#12 · Opened Jan 21, 2025
Silent Failure to store with partially identical documents Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

protobom/storage#48 · 1 comment · Opened Dec 12, 2024
Potential Bug: SBOM File Format Naming Conventions and File Format Auto-Detection Open

bug question

Difficulty 3/5 1-2 days Newbie friendliness 38/100

protobom/sbom-convert#12 · 6 comments · 1 reaction · Opened Aug 15, 2023
Proposal: Deprecate Tool and use Node instead Open

proposal

Difficulty 5/5 Over a week Newbie friendliness 25/100

protobom/protobom#68 · 3 comments · Opened Aug 9, 2023

protobom

Get new issues in your inbox