Daniel Nebenzahl

Support more relationship types

5

Hi, Currently, CycloneDX supports only relationships of parts in a system - dependencies and compositions. There is a need express several types of relationships. A thorough list of examples can...

Support JSF signatures

1

It is not clear to me - does the cli tool support JSF signatures? The advantage is that verification can be done on the SBOM without an additional public key...

Backward compatibility: the CycloneDX 1.5 metadata->tools case

6

Hi, There is already an ecosystem of tools that are starting to break due to "breaking changes"; Take for exmple the Tools section. Syft produces the 1.5-introduced object: "metadata": {...

App launched ofline hangs when last source was a source sheet

1

In the above mentioned situation, the only way to bypass the issue was to go online. Desires behaviour: if cannot display last source open the app with some default or...

Following #58 [here](https://github.com/in-toto/attestation/issues/58#issuecomment-998099897), opening the mentioned issue. The statement-level meta-data should hold enough information to enable: 1. Simple policy decisions that are agnostic to the predicate details. 2. Enable a...