Skip to content

Pull requests: CycloneDX/specification

New pull request New
43 Open 462 Closed
43 Open 462 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix: LMOTS pattern, add HSS variant (LMS family)
#1029 opened Aug 16, 2026 by Mehrn0ush Contributor Loading…
1
2.0 dev fix bundler result schema name CDX 2.0 related to release v2.0 chore: QA A chore related to Quality Assurance defect
#1027 opened Aug 16, 2026 by jkowalleck Member Loading… 2.0
fix: extend GOST registry with 2012/2015 algorithms and curve OIDs
#1026 opened Aug 15, 2026 by Mehrn0ush Contributor Loading…
1
chore(deps-dev): bump org.junit.jupiter:junit-jupiter-api from 5.11.4 to 6.1.3 in /tools dependencies Pull requests that update a dependency file
#1023 opened Aug 15, 2026 by dependabot Bot Loading…
refactor: license expression as defined object
#1022 opened Aug 14, 2026 by jkowalleck Member Loading… 2.0
feat: licenses acknowledgement SHOULD be unique proposed core enhancement
#1021 opened Aug 14, 2026 by jkowalleck Member Loading… 2.0
1
fix(xml): allow protocol cryptographic relationships CDX 1.7 related to release v1.7 defect format: XML
#1019 opened Aug 13, 2026 by qkaiser Loading…
1
chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 dependencies Pull requests that update a dependency file
#1013 opened Aug 8, 2026 by dependabot Bot Loading…
chore(deps): bump actions/setup-java from 5.6.0 to 5.7.0 dependencies Pull requests that update a dependency file
#1012 opened Aug 8, 2026 by dependabot Bot Loading…
CBOM: add protocol registry schema cap: cryptography Capability: Cryptography (CBOM)
#1010 opened Aug 7, 2026 by bhess Contributor • Draft
4
[2.0] fixes on schema and test resources CDX 2.0 related to release v2.0 chore: QA A chore related to Quality Assurance defect
#1001 opened Aug 4, 2026 by jkowalleck Member Loading… 2.0
4
11
[2.0] enforce refType/refLinkType non-conflicting with BOM-Link breaking-changes CDX 2.0 related to release v2.0 defect
#997 opened Aug 3, 2026 by jkowalleck Member Loading… 2.0
1
11
Clean check-in of AI/ML. Supersedes #948. cap: ai/ml Capability: AI/ML proposed core enhancement
#990 opened Jul 29, 2026 by stevespringett Member • Draft 2.0
@stevespringett
4
Added first-class hardware support proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#982 opened Jul 21, 2026 by stevespringett Member Loading… 2.0
1
@stevespringett
1
Unified evidence model addressing #278, #333 and other concerns. breaking-changes proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#980 opened Jul 20, 2026 by stevespringett Member Loading… 2.0
2
@stevespringett
20
chore(deps-dev): bump com.networknt:json-schema-validator from 1.5.5 to 3.0.6 in /tools dependencies Pull requests that update a dependency file
#977 opened Jul 18, 2026 by dependabot Bot Loading…
Refactored service into a component type breaking-changes promote to tc54 Promote to Ecma Technical Committee 54 proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration RFC vote accepted
#975 opened Jul 12, 2026 by stevespringett Member Loading… 2.0
1
@stevespringett
2
Add sample PQC readiness perspective for CBOM
#960 opened Jun 25, 2026 by bhess Contributor Loading…
2
chore(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.6 in /tools dependencies Pull requests that update a dependency file
#950 opened Jun 6, 2026 by dependabot Bot Loading…
1
Proposed 2.0 schema for AI/ML BOM cap: ai/ml Capability: AI/ML CDX 2.0 related to release v2.0 draft format: JSON
#948 opened Jun 3, 2026 by mrutkows Contributor Loading…
@mrutkows
10
feat(cryptography): add cryptographic agility plane to CBOM cap: cryptography Capability: Cryptography (CBOM) proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#947 opened Jun 3, 2026 by bhess Contributor Loading… 2.0
1
19
chore(deps): bump lib.slf4j.api from 2.0.16 to 2.0.18 in /tools dependencies Pull requests that update a dependency file
#937 opened May 23, 2026 by dependabot Bot Loading…
2
Add outputLength property to schema cap: cryptography Capability: Cryptography (CBOM) proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#931 opened May 15, 2026 by jvdsn Contributor Loading… 2.0
1
8
fix: sync cryptographic algorithm family enum cap: cryptography Capability: Cryptography (CBOM) cap: cryptography-registry Capability: Cryptography Registry
#919 opened May 2, 2026 by Mehrn0ush Contributor Loading…
1
chore(deps): bump commons-io:commons-io from 2.17.0 to 2.22.0 in /tools dependencies Pull requests that update a dependency file
#916 opened Apr 25, 2026 by dependabot Bot Loading…
4
ProTip! Exclude everything labeled bug with -label:bug.