chainloop CycloneDX 1.6 support as piece of evidence

CycloneDX 1.6 support as piece of evidence

Open migmartri opened this issue 1 year ago • 2 comments

Currently we support up to 1.5

https://cyclonedx.org/news/cyclonedx-v1.6-released/

For the record this is a task we did for 1.5 that could show you how to achieve this https://github.com/chainloop-dev/chainloop/issues/210

Apr 25 '24 13:04 migmartri

No ETA from the official maintainer of the library: https://github.com/CycloneDX/cyclonedx-go/issues/140

But, one community PR contribution already in the works: https://github.com/CycloneDX/cyclonedx-go/pull/142

Apr 25 '24 13:04 javirln

Let's try to find the json schema of the specification and try to validate the documents against it.

Json schema: https://cyclonedx.org/docs/1.6/json/

May 06 '24 15:05 javirln