cyclonedx-python-lib
cyclonedx-python-lib copied to clipboard
Python implementation of OWASP CycloneDX
Bumps [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) from 9.1.1 to 9.7.1. Release notes Sourced from python-semantic-release/python-semantic-release's releases. v9.7.1 (2024-05-07) Fix gha: fix missing git_commit_author definition in action (#919) Resolved Issue #918: GHA of PSR 9.7.0...
This pull request aims to implement the `componentIdentityEvidence` type from 1.5 and 1.6 as part of fulfilling #578
Updates the requirements on [sphinx](https://github.com/sphinx-doc/sphinx) to permit the latest version. Release notes Sourced from sphinx's releases. Sphinx 8.0.2 Changelog: https://www.sphinx-doc.org/en/master/changes.html Changelog Sourced from sphinx's changelog. Release 8.0.2 (released Jul 30,...
Updates the requirements on [mypy](https://github.com/python/mypy) to permit the latest version. Changelog Sourced from mypy's changelog. Mypy Release Notes Next release Mypy 1.11 We’ve just uploaded mypy 1.11 to the Python...
CycloneDX spec 1.5 deprecated an array of tools in bom.metadata and instead prefers object with an array of components and an array of services. This PR implements that. This works...
Hello, Does the library rely on Rfc3987 or text-unidecode, even as transitive dependencies? Is there anywhere I can find a list of the dependencies of the library? Thank you very...
Hello, I use this library to generate a Vulnerability Disclosure Report for Adoptium Temurin (OpenJDK Build): https://github.com/adoptium/temurin-vdr-generator/blob/main/cvereporter/report.py As an example, see https://github.com/adoptium/temurin-vdr-generator/actions/runs/9914996771 However, it doesn't pass validation on https://cyclonedx.github.io/cyclonedx-web-tool/convert which...
In this file https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/cyclonedx/model/__init__.py, line 440 cannot make the correct key in HashAlgorithm. https://github.com/CycloneDX/cyclonedx-python-lib/blob/d7e517b160982fe9f4ea19d489f855db459d81fc/cyclonedx/model/__init__.py#L441-L444
Bumps [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) from 9.1.1 to 9.8.6. Release notes Sourced from python-semantic-release/python-semantic-release's releases. v9.8.6 (2024-07-20) Fixes version-cmd: resolve build command execution in powershell (#980, 32c8e70) Documentation configuration: correct GHA parameter name...