interlynk-io/sbomqs

Issues

• Add Openchain Telco SBOM Compliance report.

  #243 opened a month ago by riteshnoronha
  0

• Add schema validation as a scoring criteria.

  #248 opened a month ago by riteshnoronha
  0

• Container image ghcr.io/interlynk-io/sbomqs doesn't run in GitLab CI/CD job

  #238 opened a month ago by rutger-gerritsen
  11

• Add FDA & IMDRF SBOM Compliance report

  #245 opened a month ago by riteshnoronha
  0

• Add PCI-DSS v4.0 & PCI-SSF v1.2.1 compliance report

  #244 opened a month ago by riteshnoronha
  0

• Add NTIA minimum element compliance report.

  #242 opened a month ago by riteshnoronha
  0

• Please remove cdxgen from sbombenchmark.dev

  #225 opened 2 months ago by prabhu
  4

• bug: run latest sbom score returns with panic

  #233 opened 2 months ago by kid9
  2

• sbomqs incorrectly detects AWS and fails to parse the file

  #232 opened 2 months ago by gimocoder
  2

• CycloneDX 1.5 is not considered a valid spec

  #213 opened 3 months ago by riteshnoronha
  5

• Add Support for Cyclonedx 1.5

  #203 opened 6 months ago by riteshnoronha
  3

• Doesn't work with CycloneDX 1.5

  #202 opened 6 months ago by anthonyharrison
  2

• [New Check] Existence of primary component must be checked

  #198 opened 6 months ago by surendrapathak
  0

• Add support for component types

  #164 opened 7 months ago by riteshnoronha
  1

• Improve error reporting from processing of the file

  #72 opened 8 months ago by surendrapathak
  1

• Ability to install sbomqs using yum or apt-get

  #189 opened 8 months ago by riteshnoronha
  1

• DTrack Score: Failed to get project: invalid character '<'

  #181 opened 10 months ago by aravindparappil46
  17

• SPDX Creator Name may include spaces in the tool name

  #180 opened 10 months ago by surendrapathak
  3

• [Scoring] Add depth of sbom components to metadata

  #86 opened a year ago by riteshnoronha
  0

• JSON ouptput breaks when newer version of sbomqs is available

  #173 opened a year ago by surendrapathak
  1

• containerized app is missing version

  #171 opened a year ago by surendrapathak
  0

• Remove default options from Dockerfile

  #168 opened a year ago by surendrapathak
  1

• Improvements in reportFormat JSON for errors during processing

  #76 opened a year ago by surendrapathak
  0

• [New Check] Primary component lack of version goes undetected

  #136 opened a year ago by surendrapathak
  0

• Containerize sbomqs and host on ghcr

  #158 opened a year ago by riteshnoronha
  0

• Provide ability to run the tool in air-gap environment

  #155 opened a year ago by pushkargr
  4

• Align Supplier Check with SPDX specification

  #146 opened a year ago by pushkargr
  3

• Integrate with DT

  #144 opened a year ago by riteshnoronha
  1

• Refactor Score

  #142 opened a year ago by riteshnoronha
  0

• configpath and feature flags do not filter

  #139 opened a year ago by mattymo30
  6

• Support for strict specification adherence with analysis

  #138 opened a year ago by surendrapathak
  0

• Tool does not report correct number of components for nested CycloneDX SBOMs

  #133 opened a year ago by schlenk
  3

• JSON format is printing debug statement

  #124 opened a year ago by surendrapathak
  0

• Add goreleaser supply chain template

  #120 opened a year ago by riteshnoronha
  0

• Add sbomqs sbom to our release output

  #88 opened a year ago by riteshnoronha
  1

• Report format should not include full-path

  #106 opened a year ago by surendrapathak
  1

• Fix ShareLink to point to sbombenchmark.dev

  #112 opened a year ago by surendrapathak
  0

• Adding creationInfo details for each sbom being processed

  #73 opened a year ago by surendrapathak
  1

• Multi Vuln lookup rule re-evaluate

  #110 opened a year ago by riteshnoronha
  0

• On readme.md #Goals: 1: Assess is misspelled

  #107 opened a year ago by david-thrower
  1

• On readme - Goals - 1, Assess is misspelled

  #108 opened a year ago by david-thrower
  1

• Share your score with others.

  #99 opened a year ago by riteshnoronha
  2

• Empty component list should not be treated as low quality

  #89 opened a year ago by surendrapathak
  2

• [Scoring] Quality - Describes a main document

  #94 opened a year ago by riteshnoronha
  0

• Add consistent creationInformation as a SBOM Quality Check

  #77 opened a year ago by surendrapathak
  0

• [SCVS] Implement tests from SCVS Bom Maturity Model V2 Control Family

  #93 opened a year ago by surendrapathak
  0

• Integrate quality scoring on Known Unknowns from NTIA Minimum Elements

  #95 opened a year ago by surendrapathak
  0

• Result ordering is not fixed across SBOM types

  #90 opened a year ago by surendrapathak
  0

• Add component count to json output

  #83 opened a year ago by riteshnoronha
  0

• CycloneDX XML SBOM incorrectly checks for bomFormat

  #80 opened a year ago by surendrapathak
  0