CycloneDX/cyclonedx-cli issues and pull requests

#443 - Bump coverlet.collector and 8 others

Pull Request - State: open - Opened by dependabot[bot] 17 days ago
Labels: dependencies, .NET

#441 - Bump coverlet.collector and 8 others

Pull Request - State: closed - Opened by dependabot[bot] 18 days ago - 1 comment
Labels: dependencies, .NET

#426 - spdx to cyclondx conversion failure

Issue - State: open - Opened by trekcampy 2 months ago

#425 - Validation of sbom file fails when externalReferences url is ssh from GitHub

Issue - State: open - Opened by owegelid 2 months ago

#424 - SPDX to Cyclonedx: no purl in converted component

Issue - State: open - Opened by pstoeckle 4 months ago

#423 - Convert command bug for vulnerability versions affected status

Issue - State: open - Opened by tommyrousey 5 months ago - 3 comments

#422 - Give option to add added files as dependencies

Issue - State: open - Opened by Whathecode 5 months ago

#421 - Error when converting GitHub's SPDXv2.3 JSON -> CycloneDX JSON

Issue - State: open - Opened by stefanstojanovskin26 5 months ago - 1 comment

#420 - La dernière version linux Cyclonedx-cli valide avec succés le fichier json cycloneDX alors que CyberWatch détecte une erreur fatale lors de l'import

Issue - State: open - Opened by freygagne 5 months ago - 1 comment

#419 - Duplicate components are valid with sbom in json format but not in xml

Issue - State: open - Opened by Frazerus 7 months ago - 3 comments

#418 - Switch to .NET 8

Pull Request - State: open - Opened by andreas-hilti 7 months ago

#417 - VirusTotal detects cyclonedx-win-x64.exe version 0.27.2 24 Nov 2024 as a Malicious file notified by SecureAge Acronis (Static ML)

Issue - State: open - Opened by freygagne 7 months ago - 1 comment

#416 - Update DotNet version

Issue - State: open - Opened by xanderio 8 months ago

#415 - Fix command line documentation

Pull Request - State: open - Opened by andreas-hilti 8 months ago - 2 comments

#414 - [docs] Clarify Option Placement in verify file Command Help

Issue - State: open - Opened by viveksahu26 9 months ago - 2 comments

#413 - Fix verification of signature with namespace prefix

Pull Request - State: closed - Opened by andreas-hilti 9 months ago

#412 - XML signature with namespace prefix can not be verified

Issue - State: closed - Opened by andreas-hilti 9 months ago

#411 - Bump actions/setup-dotnet from 3.0.2 to 4.1.0

Pull Request - State: open - Opened by dependabot[bot] 9 months ago
Labels: dependencies, github_actions

#410 - Bump actions/checkout from 3.1.0 to 4.2.2

Pull Request - State: open - Opened by dependabot[bot] 9 months ago
Labels: dependencies, github_actions

#409 - Merge produces incorrect ratings.method Null values

Issue - State: open - Opened by wkoot 9 months ago - 2 comments

#408 - `metadata.tools` not merged correctly when one SBOM uses legacy format and the other uses the newer format

Issue - State: open - Opened by WIStudent 10 months ago - 2 comments

#407 - Error validating CycloneDX format in version 1.6

Issue - State: open - Opened by simonfrancaix 10 months ago - 3 comments

#405 - Bump System.Security.Cryptography.Xml from 6.0.1 to 8.0.2

Pull Request - State: open - Opened by dependabot[bot] 10 months ago
Labels: dependencies, .NET

#404 - Bump actions/checkout from 3.1.0 to 4.2.1

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, github_actions

#403 - Unable to Validate CycloneDX Format Versions 1.5 and 1.6 with ModelCard and Data Elements

Issue - State: open - Opened by cbsMartin 10 months ago - 1 comment

#402 - Bump actions/checkout from 3.1.0 to 4.2.0

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, github_actions

#401 - Support CycloneDX v1.6

Pull Request - State: closed - Opened by andreas-hilti 11 months ago

#400 - Bump CycloneDX-Library to version 8.0.0

Pull Request - State: closed - Opened by mtsfoni 11 months ago

#399 - Merge does not deduplicate components with differing bom-ref

Issue - State: open - Opened by wkoot 11 months ago - 1 comment

#398 - Regression: 'cyclonedx-cli convert' fails to convert an xml to json that is declared as valid by 'cyclonedx-cli validate', worked with 0.25.1

Issue - State: open - Opened by schlenk 11 months ago - 2 comments

#372 - Validation failure: Invalid CycloneDX JSON generated for specific images like "monetdb/monetdb:Jun2023-SP1" and "redis"

Issue - State: closed - Opened by Parisha7 about 1 year ago - 1 comment

#344 - Vadation failure: The value 'Kazlib' is invalid according to its datatype 'http://cyclonedx.org/schema/spdx:licenseId'

Issue - State: closed - Opened by DavidJuanes almost 2 years ago - 4 comments

#322 - When converting cyclonedx xml to json and a dependency has multiple licenses, only the first license is taken into account

Issue - State: closed - Opened by mawl about 2 years ago - 2 comments

GitHub / CycloneDX/cyclonedx-cli issues and pull requests