search

CycloneDX / bom-examples

A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
https://cyclonedx.org
Creative Commons Zero v1.0 Universal
174 stars 61 forks source link

Add CycloneDX SBOMs example for version supporting 1.5 and 1.6 #44

Open viveksahu26 opened 4 months ago

viveksahu26 commented 4 months ago

Currently there are are SBOM CycloneDX examples of version <1.4. It would be great to add more examples supporting CycloneDX version 1.5 and 1.6.

stevespringett commented 4 months ago

Are there any specific features of v1.5 or 1.6 that you'd like to see in the SBOM examples?

viveksahu26 commented 4 months ago

Yes, Basically In version 1.5 and 1.6, there are 2 new section components and services added under Metadata --> Tools. Whereas in version 1.4 it doesn't have those section inside Metadata --> Tools. So, i am bit curious to see those fields.

jkowalleck commented 3 weeks ago

Yes, Basically In version 1.5 and 1.6, there are 2 new section components and services added under Metadata --> Tools. Whereas in version 1.4 it doesn't have those section inside Metadata --> Tools. So, i am bit curious to see those fields.

see here for CDX 1.6: https://github.com/CycloneDX/cyclonedx-python/blob/main/tests/_data/snapshots/environment/pep639-texts_with-license-pep639_1.6.xml.bin#L4-L52 versus 1.4: https://github.com/CycloneDX/cyclonedx-python/blob/main/tests/_data/snapshots/environment/pep639-texts_with-license-pep639_1.4.xml.bin#L4-L42