CycloneDX cyclonedx-cli issues

CycloneDX / cyclonedx-cli

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

https://cyclonedx.org/

Apache License 2.0

317 stars 62 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Fix command line documentation

#415 andreas-hilti opened 2 days ago
2
[docs] Clarify Option Placement in verify file Command Help

#414 viveksahu26 opened 6 days ago
2
Fix verification of signature with namespace prefix

#413 andreas-hilti closed 2 days ago
0
XML signature with namespace prefix can not be verified

#412 andreas-hilti closed 2 days ago
0
Bump actions/setup-dotnet from 3.0.2 to 4.1.0

#411 dependabot[bot] opened 1 month ago
0
Bump actions/checkout from 3.1.0 to 4.2.2

#410 dependabot[bot] opened 1 month ago
0
Merge produces incorrect ratings.method Null values

#409 wkoot opened 1 month ago
2
`metadata.tools` not merged correctly when one SBOM uses legacy format and the other uses the newer format

#408 WIStudent opened 1 month ago
2
Error validating CycloneDX format in version 1.6

#407 simonfrancaix opened 1 month ago
5
Bump System.Security.Cryptography.Xml from 6.0.1 to 8.0.2

#405 dependabot[bot] opened 1 month ago
0
Bump actions/checkout from 3.1.0 to 4.2.1

#404 dependabot[bot] closed 1 month ago
1
Unable to Validate CycloneDX Format Versions 1.5 and 1.6 with ModelCard and Data Elements

#403 cbsMartin opened 1 month ago
1
Bump actions/checkout from 3.1.0 to 4.2.0

#402 dependabot[bot] closed 1 month ago
1
Support CycloneDX v1.6

#401 andreas-hilti closed 2 months ago
0
Bump CycloneDX-Library to version 8.0.0

#400 mtsfoni closed 2 months ago
0
Merge does not deduplicate components with differing bom-ref

#399 wkoot opened 2 months ago
1
Regression: 'cyclonedx-cli convert' fails to convert an xml to json that is declared as valid by 'cyclonedx-cli validate', worked with 0.25.1

#398 schlenk opened 2 months ago
2
Add OCI image annotation, sbom, provenance to docker images

#397 candrews opened 3 months ago
0
Introduce "cyclonedx rename-entity" command (bis)

#396 jimklimov opened 3 months ago
1
Bump actions/checkout from 3.1.0 to 4.1.7

#395 dependabot[bot] closed 2 months ago
1
Bump actions/setup-dotnet from 3.0.2 to 4.0.1

#394 dependabot[bot] closed 1 month ago
1
Bump dotnet/runtime-deps from 6.0 to 8.0

#393 dependabot[bot] opened 3 months ago
0
Bump System.Security.Cryptography.Xml from 6.0.1 to 8.0.1

#392 dependabot[bot] closed 1 month ago
1
Bump CsvHelper from 29.0.0 to 33.0.1

#391 dependabot[bot] opened 3 months ago
0
Bump coverlet.collector from 3.1.2 to 6.0.2

#390 dependabot[bot] opened 3 months ago
0
Bump Snapshooter.Xunit from 0.7.1 to 0.14.1

#389 dependabot[bot] opened 3 months ago
0
Add output version argument to merge command

#388 mtsfoni closed 3 months ago
0
Update snapshots

#387 andreas-hilti closed 3 months ago
0
chore: bump CycloneDX Library to 7.1.0

#386 mtsfoni closed 3 months ago
3
SBOM conversion issue.

#385 mbower10 opened 3 months ago
1
`cyclonedx` does not know about all SPDX license IDs

#384 tmuehlbacher closed 3 months ago
2
`cyclonedx convert` causes `cyclonedx validate` to fail

#383 tmuehlbacher closed 3 months ago
2
Help is in the wrong order?

#382 Gilesey opened 4 months ago
2
converting issues

#381 AJquetta opened 4 months ago
10
Using diff command always produces empty output even if there are changes in SBOM's provided as inputs.

#380 bharathkolanda opened 4 months ago
3
How to sign a SBOM which is in xml format facing this issue

#379 itmanju opened 4 months ago
1
How to run cyclonedx-cli

#378 spnzig opened 4 months ago
3
Merging vcpkg created sboms

#377 KUGA2 closed 4 months ago
5
cyclonedx merge command does not support v1.6 format

#376 ferben opened 5 months ago
7
Support for CycloneDX schema version 1.6

#375 V3ct0r-v opened 5 months ago
7
Cyclonedx win x64 startup crash

#374 wujunhuge closed 5 months ago
2
Converting spdx (obtained via docker-scout) to cyclonedx results in empty file

#373 ghost opened 5 months ago
2
Validation failure: Invalid CycloneDX JSON generated for specific images like "monetdb/monetdb:Jun2023-SP1" and "redis"

#372 Parisha7 closed 5 months ago
1
cyclonedx-cli merge Command Produces SBOM with Null Values for Tools

#371 anubhav-tyagi1 closed 3 months ago
1
Unable to convert from Github Generated SPDX to CycloneDX

#370 bhafner13 opened 6 months ago
3
Bump CDX library to 7.0.0

#369 nodeax closed 6 months ago
1
Tests on MacOS fail due issue with snapshooter

#368 andreas-hilti opened 6 months ago
0
Fix build

#367 andreas-hilti closed 6 months ago
1
Add output version argument to merge command

#366 andreas-hilti closed 3 months ago
1
Component type null causing validation error

#365 DudusB closed 6 months ago
1