Discussions

• 1 You must be logged in to vote

  🙏

  Clarification of which version of the SPDX licence expression is used

  rainer-exxcellent asked Dec 15, 2025 in Q&A · Unanswered

  

  

  3
• 2 You must be logged in to vote

  🙏

  How to reference a component 'external layer' belonging

  tperale asked Nov 13, 2025 in Q&A · Unanswered

  

  

  

  

  4
• 1 You must be logged in to vote

  💬

  Handling Multiple Identifiers for Uber JARs and Maven Hash Lookup Results

  Vishnu-2810 started Nov 19, 2025 in General

  

  

  1
• 1 You must be logged in to vote

  🙏

  Correct way to specify custom licenses in SPDX license expressions?

  Jasper-Ben asked Oct 31, 2025 in Q&A · Answered

  

  

  

  

  6
• 1 You must be logged in to vote

  🙏

  How to record OPTIONAL dynamic dependencies in an SBOM?

  AndrewStamper-OST asked Oct 29, 2025 in Q&A · Answered

  

  

  

  

  5
• 1 You must be logged in to vote

  🙏

  What is the logical operator between the elements of array licenses?

  nmalygin-com asked Sep 4, 2025 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  💡

  RFC: merging multiple CycloneDX documents

  jkowalleck started Oct 13, 2023 in Ideas, Proposals, RFCs

  

  

  

  

  50
• 1 You must be logged in to vote

  💡

  Bom-ref vs. bom-id?

  andreas-hilti started Aug 10, 2025 in Ideas, Proposals, RFCs

  

  

  

  

  3
• 1 You must be logged in to vote

  💡

  Is there any filed for commit id?

  robberphex started Jul 31, 2025 in Ideas, Proposals, RFCs

  

  

  2
• 1 You must be logged in to vote

  🙏

  Best practice for expressing “CONTAINS” in CycloneDX

  knqyf263 asked Jul 7, 2025 in Q&A · Closed · Unanswered

  

  

  

  

  10
• 1 You must be logged in to vote

  🙏

  How should a common container–image SBOM be structured?

  knqyf263 asked Jul 8, 2025 in Q&A · Unanswered

  

  

  

  

  4
• 1 You must be logged in to vote

  🙏

  What is the recommended way to distinguish between supplier and publisher?

  rajeevk-cmyk asked Jun 10, 2025 in Q&A · Unanswered

  

  

  

  

  9
• 1 You must be logged in to vote

  💡

  [FEATURE]: Component Type unknown

  proposed core enhancement

  VictorHuu started Apr 30, 2025 in Ideas, Proposals, RFCs · Closed

  

  

  

  

  15
• 1 You must be logged in to vote

  🙏

  Multiple CPEs and PURLs for a component

  alcroito asked May 9, 2025 in Q&A · Unanswered

  

  

  1
• 1 You must be logged in to vote

  💬

  [readme.md] Typo in default specification version

  denimoll started Apr 2, 2025 in General · Closed

  

  

  

  

  6
• 1 You must be logged in to vote

  🙏

  Capturing details about the BOM generation environment, workflows, tasks and steps

  prabhu asked Mar 29, 2025 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  💬

  Thoughts on removing default values from the spec

  prabhu started Mar 29, 2025 in General

  

  

  0
• 2 You must be logged in to vote

  🙏

  What is the correct way to refer to evidence components

  prabhu asked Mar 19, 2025 in Q&A · Answered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Mapping CycloneDX bi-directionally to Minimum Requirements for VEX

  RingoDev asked Mar 9, 2025 in Q&A · Unanswered

  

  

  2
• 1 You must be logged in to vote

  🙏

  Can CycloneDX support the specification of full virtualisations?

  ANWI-EA asked Mar 11, 2025 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  🙏

  Where to add level of support and component's end-of-support date

  braggpeaks asked Feb 17, 2025 in Q&A · Unanswered

  

  

  

  

  4
• 🌞

  Welcome to Google Summer of Code 2025

  jkowalleck started Feb 3, 2025 in Google Summer of Code 2025

  

  

  0
• 2 You must be logged in to vote

  💡

  Proposal: A way for the repo authors to customize the license for an SBOM

  prabhu started Jan 16, 2025 in Ideas, Proposals, RFCs

  

  

  3
• ❄️

  Welcome to Winter of Code 4.0

  jkowalleck started Jan 15, 2025 in Winter of Code 4.0 (2025)

  

  

  0
• 1 You must be logged in to vote

  🙏

  Does this spec support to describe the transitivity and scope of dependencies

  WestFarmer asked Sep 24, 2024 in Q&A · Answered

  

  

  5