cyclonedx-python-lib

cyclonedx-python-lib copied to clipboard

see https://github.com/CycloneDX/specification/releases/tag/1.5

The following items are not currently supported for CycloneDX v1.5 (as of release 6.4.x):

• [x] Missing lifecycles on bom.metadata see #698
• [ ] Missing modelCard on Component
• [ ] Missing data on Component
• [ ] Missing bom-ref attribute on OrganizationalContact
• [ ] Missing bom-ref attribute on OrganizationalEntity
• [ ] Missing bom-ref attribute on LicenseExpression
• [ ] Missing licensing on DisjunctiveLicense
• [ ] Missing properties on DisjunctiveLicense
• [ ] Missing bom-ref attribute on DisjunctiveLicense
• [ ] Missing identity on ComponentEvidence
• [ ] Missing occurrences on ComponentEvidence
• [ ] Missing callstack on ComponentEvidence
• [ ] Missing annotations on Bom
• [ ] Missing formulation on Bom
• [x] Bom.metadata.tools missing support for components and services along with deprecation of Tool
  • see #561
  • see https://github.com/CycloneDX/cyclonedx-python-lib/issues/597

@madpah, I opened this issue for public contribution