Open Issues Need Help
View All on GitHubAI Summary: The task is to enhance the CycloneDX Python library to correctly handle XML files containing a digital signature (specifically, elements from the `http://www.w3.org/2000/09/xmldsig#` namespace) within the BOM structure. The current implementation fails to parse such files, raising a ValueError. The solution likely involves modifying the `Bom.from_xml` method to properly ignore or process these signature elements, ensuring compatibility with signed BOMs.
Python implementation of OWASP CycloneDX
AI Summary: Implement full support for CycloneDX v1.4 in the Python library, specifically addressing currently unsupported features like JSF signatures and any others identified in the CycloneDX v1.4 specification release notes. This involves updating data models, validators, and potentially other parts of the library to handle the new features and changes introduced in v1.4.
Python implementation of OWASP CycloneDX
AI Summary: Implement support for XML Signatures in the CycloneDX Python library, allowing the creation and verification of digitally signed XML BOMs. This involves integrating XML signature handling capabilities, potentially leveraging existing libraries, and adding comprehensive testing to ensure compatibility and security.
Python implementation of OWASP CycloneDX
AI Summary: Enhance the CycloneDX Python library's validation interface by adding a new method, `iterate_errors()`, to the `SchemabasedValidator` class. This method should iterate over all validation errors instead of returning only the first one, leveraging the existing `iter_errors()` functionality from the underlying `jsonschema` and XML libraries. The goal is to improve error handling and allow for more sophisticated error reporting.
Python implementation of OWASP CycloneDX
AI Summary: Improve the error handling and reporting of the CycloneDX Python library's validation process. This involves creating a more user-friendly abstraction over the underlying validation libraries (jsonschema and lxml) to prevent large, unwieldy error messages and provide more informative error locations and descriptions. The goal is to create a consistent `ValidationError` class with subclasses for JSON and XML, handling path information and potentially shortening excessively long error messages.
Python implementation of OWASP CycloneDX