OWASP/Software-Component-Verification-Standard

Issues

• Translate standard documentation into Vietnamese language

  #38 opened 2 years ago by ducthinh993
  1

• PDF links

  #37 opened 2 years ago by DaveJarvis
  1

• Translate to Japanese

  #33 opened 2 years ago by kannkyo
  2

• Create BOM Maturity Model in JSON

  #36 opened 2 years ago by stevespringett
  0

• Develop BOM Maturity Model - maturity levels and assignments

  #35 opened 2 years ago by stevespringett
  0

• Create BOM Maturity Model Taxonomy

  #34 opened 2 years ago by stevespringett
  0

• lvl 2 and lvl 3 is impossible due to requiring both reproducability and non-reproducability of SBOMs

  #31 opened 3 years ago by 06kellyjac
  11

• Wrong link to OSSC publication

  #29 opened 4 years ago by scovetta
  0

• Request for a bit more explanation

  #9 opened 5 years ago by commjoen
  2

• Control Mapping

  #28 opened 5 years ago by stevespringett
  0

• David A. Wheeler's comments

  #21 opened 5 years ago by david-a-wheeler
  1

• 2.4-SCVS-BOM-04 - Should this be applicable to Level 2 as the tools aren't readily available.

  #6 opened 5 years ago by pruddll
  2

• Add chain-of-custody for source code

  #4 opened 5 years ago by stevespringett
  0

• Add component-specific repo requirement

  #8 opened 5 years ago by stevespringett
  0

• Investigate additional resources

  #10 opened 5 years ago by stevespringett
  0

• Clarify "Devise a path to baseline and mature software supply chain vigilance"

  #14 opened 5 years ago by garretfick
  0

• Using SCVS: Clarify wording regarding levels of SCVS controls

  #20 opened 5 years ago by garretfick
  0

• Inventory: Ambiguity in 3rd party vs open source components

  #23 opened 5 years ago by garretfick
  2

• Change "impact costs" to "manage costs"

  #11 opened 5 years ago by garretfick
  0

• SCVS-INV-03 may way to specify machine readable (or add additional requirement)

  #2 opened 5 years ago by garretfick
  3

• SCVS-CAN-14 uses "component type" but the standard does not define the term

  #1 opened 5 years ago by garretfick
  3

• Preface: Bulleted list

  #3 opened 5 years ago by stevespringett
  0

• SCVS-BOM-17 Descriptor

  #7 opened 5 years ago by msymons
  0