finalize 1.5 by jkowalleck · Pull Request #231 · CycloneDX/specification · GitHub
Skip to content

finalize 1.5 - #231

Merged
stevespringett merged 164 commits into
masterfrom
v1.5-dev
Jun 26, 2023
Merged

stevespringett merged 164 commits into
masterfrom
v1.5-dev

Conversation

@jkowalleck

Copy link
Copy Markdown
Member

No description provided.

Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
…parts of the spec

Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Added firstIssued and lastUpdated timestamps to vulnerability analysis
Resolves #130 - missing BOM properties in JSON and protobuf schemas
Add licensing support and unit tests
Signed-off-by: Steve Springett <steve@springett.us>
Added property support to license along with unit tests
Add annotations support and valid test cases
Adding support vulnerability rejected timestamp along with unit tests
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
stevespringett and others added 26 commits June 14, 2023 14:18
validate JSON test data against schema - JS
Add SSVC to existing rating methods
* remove `additionalItems` for non-array-`items`

see also #230

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Steve Springett <steve@springett.us>
Added formulation support and test cases
Signed-off-by: Steve Springett <steve@springett.us>
intro to explicitly linked elements
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
- add examples for licenses with links
- add `bom-ref` to license expressions, so ALL licenses are linkable

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
see #154 (comment)
fixes #154

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
…ice-ref-clarifications

V1.5 dev resourceReferenceChoice ref clarifications
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
V1.5  JSON: fix `oneOf` documentations
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
stevespringett marked this pull request as ready for review June 26, 2023 02:44
@stevespringett
stevespringett merged commit c320fc0 into master Jun 26, 2023
@jkowalleck jkowalleck changed the title [WIP] finalize 1.5 finalize 1.5 Apr 9, 2024
jvdsn pushed a commit to jvdsn/specification that referenced this pull request Feb 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants