CycloneDX / cyclonedx-cocoapods

Creates CycloneDX Software Bill-of-Materials (SBOM) from Objective-C and Swift projects that use CocoaPods.
Apache License 2.0
21 stars 12 forks source link

Update output to use specification v1.5 #57

Closed macblazer closed 7 months ago

macblazer commented 1 year ago

CycloneDX has been updated to specification v1.5 here. This tool should be updated to output v1.5 BOM files.

macblazer commented 7 months ago

For each component in the output XML change bomRef element to bom-ref attribute. When adding dependencies we didn't validate the XML vs the spec and accidentally put the unique component reference in the wrong place.