CycloneDX

CycloneDX/specification

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

5 good first / help-wanted issues · XSLT · last activity Aug 24, 2026

542 stars 92 forks 542 watchers XSLT Apache License 2.0
bill-of-materials bom cbom cpe cyclonedx license machine-learning mbom owasp saasbom sbom software software-bill-of-materials spdx specification standard supply-chain swid tc54 vex
View on GitHub Website
5 Open Issues Need Help Last updated: Aug 24, 2026

Open Issues Need Help

View All on GitHub
CycloneDX 2.0 - SPIKE: Investigate .xsd auto generation from JSON Schema about 1 month ago
help wanted format: XML
CycloneDX/specification
542

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

XSLT
#bill-of-materials#bom#cbom#cpe#cyclonedx#license#machine-learning#mbom#owasp#saasbom#sbom#software#software-bill-of-materials#spdx#specification#standard#supply-chain#swid#tc54#vex
Grammar and style check about 2 months ago
defect help wanted documentation CDX 2.0
CycloneDX/specification
542

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

XSLT
#bill-of-materials#bom#cbom#cpe#cyclonedx#license#machine-learning#mbom#owasp#saasbom#sbom#software#software-bill-of-materials#spdx#specification#standard#supply-chain#swid#tc54#vex
Expand upon ML explainability about 2 months ago
help wanted cap: ai/ml
CycloneDX/specification
542

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

XSLT
#bill-of-materials#bom#cbom#cpe#cyclonedx#license#machine-learning#mbom#owasp#saasbom#sbom#software#software-bill-of-materials#spdx#specification#standard#supply-chain#swid#tc54#vex
Enhance metadata with richer description of custom code about 1 year ago
proposed core enhancement help wanted
CycloneDX/specification
542

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

XSLT
#bill-of-materials#bom#cbom#cpe#cyclonedx#license#machine-learning#mbom#owasp#saasbom#sbom#software#software-bill-of-materials#spdx#specification#standard#supply-chain#swid#tc54#vex
Add tight scoping to nodes in the dependency graph about 1 year ago
proposed core enhancement help wanted
CycloneDX/specification
542

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX

XSLT
#bill-of-materials#bom#cbom#cpe#cyclonedx#license#machine-learning#mbom#owasp#saasbom#sbom#software#software-bill-of-materials#spdx#specification#standard#supply-chain#swid#tc54#vex