Skip to content

Pull requests: CycloneDX/specification

New pull request New
45 Open 529 Closed
45 Open 529 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Added RDX risk alignment. Add safety. Minor refactor proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1120 opened Sep 21, 2026 by stevespringett Member Loading… 2.0
@stevespringett
2
chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 dependencies Pull requests that update a dependency file
#1119 opened Sep 19, 2026 by dependabot Bot Loading…
chore(deps): bump actions/setup-java from 5.6.0 to 6.0.1 dependencies Pull requests that update a dependency file
#1118 opened Sep 19, 2026 by dependabot Bot Loading…
Add EPSS and other scoring systems that leverage measurements rather than scores. proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1117 opened Sep 18, 2026 by stevespringett Member Loading… 2.0
1
@stevespringett
fix(proto): remove stale CPE deprecation comment (1.4-1.7)
#1116 opened Sep 18, 2026 by yusuke-koyoshi Loading…
Changed bom-ref to refId. Title and description updated. Updated test… breaking-changes proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1113 opened Sep 17, 2026 by stevespringett Member Loading… 2.0
1
@stevespringett
5
chore(deps): bump lib.slf4j.api from 2.0.16 to 2.0.19 in /tools dependencies Pull requests that update a dependency file
#1102 opened Sep 12, 2026 by dependabot Bot Loading…
chore(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.6.0 in /tools dependencies Pull requests that update a dependency file
#1101 opened Sep 12, 2026 by dependabot Bot Loading…
[WIP] harmonize actors with party model breaking-changes proposed core enhancement
#1100 opened Sep 10, 2026 by jkowalleck Member • Draft 2.0
Add EAX to cryptography registry
#1099 opened Sep 10, 2026 by jvdsn Contributor Loading…
1
streamline bom-ref descriptions documentation ready for review
#1091 opened Sep 8, 2026 by jkowalleck Member Loading… 2.0
remove metadata.supplier breaking-changes ready for review
#1090 opened Sep 8, 2026 by jkowalleck Member Loading… 2.0
formulation environmentVars as system-independent key-value breaking-changes cap: formulation Capability: Formulation proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1088 opened Sep 8, 2026 by jkowalleck Member Loading… 2.0
3
6
specFormat as const ready for review
#1087 opened Sep 8, 2026 by jkowalleck Member Loading… 2.0
docs: streamline descriptions - literals, references, code CDX 2.0 related to release v2.0 documentation ready for review
#1084 opened Sep 7, 2026 by jkowalleck Member Loading… 2.0
1
15
2.0 dev fix links CDX 2.0 related to release v2.0 documentation ready for review
#1080 opened Sep 3, 2026 by jkowalleck Member Loading… 2.0
1
Inventory refactor and definitions registry breaking-changes proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1075 opened Sep 2, 2026 by stevespringett Member Loading… 2.0
1
@stevespringett
4
Introduce pre-defined perspectives CDX 2.0 related to release v2.0 proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1067 opened Aug 29, 2026 by taleodor Loading… 2.0
@stevespringett
37
chore(deps-dev): bump com.networknt:json-schema-validator from 1.5.5 to 3.0.7 in /tools dependencies Pull requests that update a dependency file
#1065 opened Aug 29, 2026 by dependabot Bot Loading…
Add ATLAS threat taxonomy support
#1054 opened Aug 27, 2026 by devashridatta-dotcom Loading… 2.0
1
fix module naming convention for JSS CDX 2.0 related to release v2.0 defect
#1052 opened Aug 26, 2026 by jkowalleck Member • Draft 2.0
Add safety integrity level schema support CDX 2.0 related to release v2.0
#1041 opened Aug 24, 2026 by devashridatta-dotcom Loading… 2.0
@stevespringett
3
[2.0] docs: update model readme CDX 2.0 related to release v2.0 documentation ready for review
#1036 opened Aug 21, 2026 by jkowalleck Member Loading… 2.0
feat: Add OWASP Threat Model Library parity CDX 2.0 related to release v2.0 request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration
#1034 opened Aug 21, 2026 by P3tra-WP Loading… 2.0
@stevespringett
20
fix: LMOTS pattern, add HSS variant (LMS family) cap: cryptography-registry Capability: Cryptography Registry
#1029 opened Aug 16, 2026 by Mehrn0ush Contributor Loading…
1
2
ProTip! Type g i on any issue or pull request to go back to the issue listing page.