Issues

• Add OpenSSF Best Practices (CII) badge

  documentationenhancementgood first issuepriority-high
  CycloneDX/sbom-utility#163 · Filter by author mrutkows opened on Aug 3, 2026
  2

  

• Custom Validator Capability Question

  documentationworking as designed
  CycloneDX/sbom-utility#144 · Filter by author ralphie79 opened on Jan 19, 2026
  1

  

• Explore support for SPDX 3.x validation and conformance with JSON-LD

  enhancementhelp wanted
  CycloneDX/sbom-utility#143 · Filter by author mrutkows opened on Jan 9, 2026
  1

• Allow whitelisting dependencies in the list command

  enhancementhelp wantedinvestigating
  CycloneDX/sbom-utility#133 · Filter by author AeroqualHayden opened on Jul 24, 2025
  5

  

• SBOM Utility passing SBOM with unexpected WITH clause

  enhancementhelp wantedworking as designed
  CycloneDX/sbom-utility#131 · Filter by author nigellh opened on Jun 12, 2025
  3

• License Scanning does not work on license name containing url to license

  working as designed
  Task

  CycloneDX/sbom-utility#117 · Filter by author LeonKolataAtGov opened on Jan 21, 2025
  2

• Utility is passing an SBOM with an invalid iri-reference

  bugenhancementhelp wanted
  CycloneDX/sbom-utility#115 · Filter by author nigellh opened on Dec 24, 2024
  3

• Documentation for custom.json

  documentationquestion
  Task

  CycloneDX/sbom-utility#107 · Filter by author ghost opened on Aug 1, 2024
  4

  

• Support for both the v1.5 component evidence identity and the v1.6 array of componentIdentityEvidence

  enhancementhelp wantedpriority-high
  CycloneDX/sbom-utility#92 · Filter by author mrutkows opened on May 8, 2024
  2

• Add support for "legacy" and new Tool structure introduced in CycloneDX v1.5

  help wanted
  CycloneDX/sbom-utility#91 · Filter by author mrutkows opened on May 8, 2024
  1

• Support SPDX in the "patch" command

  enhancementgood first issuehelp wanted
  CycloneDX/sbom-utility#82 · Filter by author mrutkows opened on Apr 8, 2024

• TODO: Change Formulation and ModelCard schemas to use pointers

  enhancementgood first issuehelp wanted
  CycloneDX/sbom-utility#79 · Filter by author mrutkows opened on Apr 1, 2024
  2

• diff panics while diffing two files

  bugenhancementhelp wanted
  CycloneDX/sbom-utility#74 · Filter by author SimoneLazzaris opened on Mar 20, 2024
  9

  

• Support OWASP SCVS "Profiles" for use in validation, trimming, etc. commands

  documentationenhancement
  CycloneDX/sbom-utility#64 · Filter by author mrutkows opened on Nov 9, 2023

• Testcase: Need testcase that has a CDXService with no "bom-ref"

  enhancementgood first issuehelp wanted
  CycloneDX/sbom-utility#61 · Filter by author mrutkows opened on Oct 25, 2023

• Testcase: Need new test case for new "Creation Tools" object

  enhancementgood first issuehelp wanted
  CycloneDX/sbom-utility#51 · Filter by author mrutkows opened on Jul 31, 2023

• Create Microsoft Softare Installer (MSI) file for Windows

  enhancement
  CycloneDX/sbom-utility#50 · Filter by author mrutkows opened on Jul 31, 2023

• Testcase: Need test for new complex "licenseChoice" schema defn.

  enhancementgood first issuehelp wanted
  CycloneDX/sbom-utility#49 · Filter by author mrutkows opened on Jul 26, 2023
  1

• Support Graph rendering of dependences and formatted (graph) output

  enhancement
  CycloneDX/sbom-utility#47 · Filter by author mrutkows opened on Jul 25, 2023

• Enhancement: Add testcases to validate JSF signatures

  enhancement
  CycloneDX/sbom-utility#38 · Filter by author mrutkows opened on Jun 8, 2023
  1

• Enhancement: Summarize "duplicate components" schema error

  enhancementhelp wanted
  CycloneDX/sbom-utility#37 · Filter by author mrutkows opened on Jun 8, 2023
  5

• Provide a means to "truncate" long column data for list subcommands

  enhancementhelp wanted
  CycloneDX/sbom-utility#31 · Filter by author mrutkows opened on May 24, 2023

• Add support for displaying/validating CDX Signature schema (struct)

  enhancementhelp wanted
  CycloneDX/sbom-utility#27 · Filter by author mrutkows opened on May 19, 2023

• Add custom JSON Marshallers functions for CycloneDX vulnerability data structures

  enhancementhelp wanted
  CycloneDX/sbom-utility#25 · Filter by author mrutkows opened on May 18, 2023
  1

• Explore using custom struct tags for CycloneDX property versioning

  enhancementhelp wanted
  CycloneDX/sbom-utility#24 · Filter by author mrutkows opened on May 18, 2023
  2