Skip to content

Pull requests: CycloneDX/specification

New pull request New
32 Open 489 Closed
32 Open 489 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix module naming convention for JSS CDX 2.0 related to release v2.0 defect
#1052 opened Aug 26, 2026 by jkowalleck Member Loading… 2.0
Add safety integrity level schema support CDX 2.0 related to release v2.0
#1041 opened Aug 24, 2026 by devashridatta-dotcom Loading… 2.0
2
[2.0] docs: update model readme CDX 2.0 related to release v2.0 documentation ready for review
#1036 opened Aug 21, 2026 by jkowalleck Member Loading… 2.0
[IDEA] Add OWASP Threat Model Library parity CDX 2.0 related to release v2.0
#1034 opened Aug 21, 2026 by P3tra-WP • Draft 2.0
10
fix: LMOTS pattern, add HSS variant (LMS family) cap: cryptography-registry Capability: Cryptography Registry
#1029 opened Aug 16, 2026 by Mehrn0ush Contributor Loading…
1
1
fix: extend GOST registry with 2012/2015 algorithms and curve OIDs cap: cryptography-registry Capability: Cryptography Registry
#1026 opened Aug 15, 2026 by Mehrn0ush Contributor Loading…
1
chore(deps-dev): bump org.junit.jupiter:junit-jupiter-api from 5.11.4 to 6.1.3 in /tools dependencies Pull requests that update a dependency file
#1023 opened Aug 15, 2026 by dependabot Bot Loading…
refactor: license expression as defined object CDX 2.0 related to release v2.0 ready for review
#1022 opened Aug 14, 2026 by jkowalleck Member Loading… 2.0
feat: licenses acknowledgement SHOULD be unique CDX 2.0 related to release v2.0 proposed core enhancement ready for review
#1021 opened Aug 14, 2026 by jkowalleck Member Loading… 2.0
1
fix(xml): allow protocol cryptographic relationships CDX 1.7 related to release v1.7 defect format: XML ready for review validated
#1019 opened Aug 13, 2026 by qkaiser Loading… 1.7.2
1
1
chore(deps): bump actions/setup-java from 5.6.0 to 5.7.0 dependencies Pull requests that update a dependency file
#1012 opened Aug 8, 2026 by dependabot Bot Loading…
CBOM: add protocol registry schema cap: cryptography Capability: Cryptography (CBOM) proposed core enhancement
#1010 opened Aug 7, 2026 by bhess Contributor • Draft 2.0
5
[2.0] enforce refType/refLinkType non-conflicting with BOM-Link breaking-changes CDX 2.0 related to release v2.0 defect ready for review
#997 opened Aug 3, 2026 by jkowalleck Member Loading… 2.0
1
14
Clean check-in of AI/ML. Supersedes #948. cap: ai/ml Capability: AI/ML proposed core enhancement
#990 opened Jul 29, 2026 by stevespringett Member • Draft 2.0
@stevespringett
12
chore(deps-dev): bump com.networknt:json-schema-validator from 1.5.5 to 3.0.6 in /tools dependencies Pull requests that update a dependency file
#977 opened Jul 18, 2026 by dependabot Bot Loading…
Add sample PQC readiness perspective for CBOM
#960 opened Jun 25, 2026 by bhess Contributor Loading…
2
chore(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.6 in /tools dependencies Pull requests that update a dependency file
#950 opened Jun 6, 2026 by dependabot Bot Loading…
1
Proposed 2.0 schema for AI/ML BOM cap: ai/ml Capability: AI/ML CDX 2.0 related to release v2.0 draft format: JSON
#948 opened Jun 3, 2026 by mrutkows Contributor Loading…
@mrutkows
10
chore(deps): bump lib.slf4j.api from 2.0.16 to 2.0.18 in /tools dependencies Pull requests that update a dependency file
#937 opened May 23, 2026 by dependabot Bot Loading…
2
Add outputLength property to schema cap: cryptography Capability: Cryptography (CBOM) proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#931 opened May 15, 2026 by jvdsn Contributor Loading… 2.0
1
13
fix: sync cryptographic algorithm family enum cap: cryptography Capability: Cryptography (CBOM) cap: cryptography-registry Capability: Cryptography Registry
#919 opened May 2, 2026 by Mehrn0ush Contributor Loading…
1
chore(deps): bump commons-io:commons-io from 2.17.0 to 2.22.0 in /tools dependencies Pull requests that update a dependency file
#916 opened Apr 25, 2026 by dependabot Bot Loading…
4
chore: update algorithm families
#893 opened Mar 26, 2026 by github-actions Bot Loading…
11
Implements conditional subschemas based on component type CDX 2.0 related to release v2.0
#774 opened Jan 13, 2026 by stevespringett Member Loading… 2.0
1
11
chore(deps): bump org.apache.commons:commons-text from 1.12.0 to 1.15.0 in /tools dependencies Pull requests that update a dependency file
#739 opened Dec 13, 2025 by dependabot Bot Loading…
4
ProTip! no:milestone will show everything without a milestone.