protobom/protobom

Issues

• Retaining Original SBOM format

  #213 opened 4 months ago by houdini91
  4

• Author information not included when serializing as spdx 2.3

  #261 opened 3 months ago by ashearin
  0

• OpenSSF WG alignment on main page

  #245 opened 5 months ago by sevansdell
  3

• Add support for CDX Properties and SPDX Annotations (needed for SBOMit)

  #255 opened 3 months ago by idunbarh
  1

• Allow `edges` from `Nodes` to `Documents` to allow multiple document linking

  #254 opened 3 months ago by idunbarh
  1

• Supplier overwrites Originator in SPDX output

  #251 opened 3 months ago by cdupuis
  0

• Suggestion SBOM Serialize Diff Conformance Test

  #239 opened 3 months ago by houdini91
  4

• Crashes found by fuzzing

  #197 opened 3 months ago by Nifury
  2

• Missing SPDX LicenseDeclared and LicenseConcluded in Document

  #179 opened 4 months ago by nishakm
  5

• Support for CycloneDX 1.6

  #226 opened 5 months ago by ursachec
  4

• Enhancement - SBOM Diff, Extract, and Merge: Protobom's Comprehensive Approach to Format-Agnostic Operations

  #178 opened 6 months ago by houdini91
  5

• Release process broken due to breaking change upstream

  #221 opened 6 months ago by puerco
  0

• GORM model enhancements

  #176 opened 7 months ago by jhoward-lm
  3

• Package maps not in GOROOT

  #220 opened 8 months ago by jeremiah
  2

• Request SPDX tool Center To add Open Source Protobom

  #175 opened 9 months ago by houdini91
  3

• Protobom Document - Documentation

  #162 opened 9 months ago by houdini91
  4

• Sniffer simplification

  #74 opened 9 months ago by houdini91
  5

• Consistent writer output

  #159 opened 10 months ago by manifestori
  4

• Support CycloneDX 1.5

  #62 opened 10 months ago by manifestori
  7

• Support annotations / properties for components / sboms

  #71 opened a year ago by manifestori
  7

• License Boilerplates

  #84 opened a year ago by puerco
  6

• SPDX serializer includes protobom as creator but CycloneDX serializer does not

  #142 opened a year ago by veramine
  1

• External reference type should be enumerated

  #148 opened a year ago by puerco
  3

• Unserialize SPDX v2.2 to Protobom

  #105 opened a year ago by veramine
  3

• Governance Model

  #85 opened a year ago by puerco
  1

• Syft-generated SPDX 2.3 SBOM cannot be written to CDX due to root node missing from node list

  #126 opened a year ago by veramine
  2

• Remove log and prints from protobom

  #55 opened a year ago by manifestori
  4

• Implement DCO Checker

  #135 opened a year ago by tannerjones4075
  1

• Component type / Primary purpose enummeration

  #124 opened a year ago by puerco
  1

• Proposal: Deprecate Tool and use Node instead

  #68 opened a year ago by manifestori
  1

• Reader Implementation Unit Tests

  #82 opened a year ago by puerco
  1

• Writer Implementation Unit Tests

  #83 opened a year ago by puerco
  6

• Inconsistent behavior with new options structs

  #122 opened a year ago by puerco
  1

• Update README to use writer.WithFormat

  #116 opened a year ago by veramine
  0

• Semantic PR and conventional commits

  #50 opened a year ago by manifestori
  4

• Installation/use documentation?

  #101 opened a year ago by rnjudge
  7

• pkg/formats/sniffer.go can't detect CycloneDX files if they are minified to one line

  #112 opened a year ago by sweoggy
  1

• Normalize license when importing to protobuf

  #38 opened a year ago by dn-scribe
  5

• spec & design: input-validation strategy

  #48 opened a year ago by dn-scribe
  2

• Proposal: Integrate Fuzzing for Enhanced Code Quality

  #49 opened a year ago by wei-deepbits
  1

• Separating cli and core

  #52 opened a year ago by manifestori
  3

• Hash algorithm enumerations are not used

  #89 opened a year ago by puerco
  5

• Incomplete (?) CycloneDX 1.4 JSON from Protobom structure

  #73 opened a year ago by veramine
  4

• Code of Conduct

  #86 opened a year ago by puerco
  0

• Add Design Documents to Version Control

  #56 opened a year ago by jspeed-meyers
  1

• CI Lint Is Failing

  #78 opened a year ago by jspeed-meyers
  3

• Docs: Is the README Supported Versions and Formats Table Up to Date?

  #69 opened a year ago by jspeed-meyers
  2

• Proposal: Change software identifier data type to map

  #64 opened a year ago by puerco
  2

• nit for later: We should wrap this error or return it directly

  #43 opened a year ago by jspeed-meyers
  1

• I think is a bug, I'll fix it in a follow up

  #42 opened a year ago by jspeed-meyers
  1