-
-
Notifications
You must be signed in to change notification settings - Fork 41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Support for CycloneDX v1.6 #576
Conversation
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Coverage summary from CodacySee diff coverage on Codacy
Coverage variation details
Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: Diff coverage details
Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: See your quality gate settings Change summary preferencesYou may notice some variations in coverage metrics with the latest Coverage engine update. For more details, visit the documentation |
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
…onent.manufacturer` Signed-off-by: Paul Horton <paul.horton@owasp.org>
…fail due to schema differences (`.component.author` not in 1.6) Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
… deserialization to XML Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
…ion < 1.6 Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
Signed-off-by: Paul Horton <paul.horton@owasp.org>
@jkowalleck - ready for review. Kept this PR to the minimum requirements to support v1.6 without resolving gaps in v1.5 or v1.4 schema support as noted in #578 and #581 . If we can ship this as is, happy to tackle the gaps separately. |
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Automatically generated by python-semantic-release Signed-off-by: semantic-release <semantic-release>
Work in progress to add initial support for CycloneDX v1.6 specification (still in draft as this PR starts).
Resolves #577 whilst NOT resolving #578 currently.
This means new fields and values introduced by CycloneDX v1.6 are being added / supported, and fields marked as Deprecated in v1.6 are being marked as such, but any gap notes in #578 is not being addressed by this PR currently.
Whilst producing this PR gaps in v1.5 were captured in #578 and for v1.4 in #581 .
Summary of Changes
bom.metadata.manufacture
bom.metadata.manufacturer
bom.metadata.component.manufacturer
ifbom.metadata.manufacture
used?.component.manufacturer
.component.authors
.component.author
.component.manufacturer
or.component.authors
if.component.author
used?.component.omniborId
.component.swhid
.component.cryptoProperties
.component.tags
postalAddress
address
toOrganizationalEntity
Component.Version
max length 1024 restriction raises a Warning if exceededacknowledgement
attribute tolicenseChoiceType.expression
via addacknowledgement
toLicenseExpression
#582