[WIP] CycloneDX v2.0 Specification

.config/behavior-taxonomy.cdxlintrc.json

@@ -0,0 +1,25 @@
+{
+  "$comment": "This ia a cdxlinter config for file `../schema/behavior-taxonomy.schema.json`",
+  "checks": {
+    "formatting-indent": {
+      "spaces": 2
+    },
+    "schema-draft": {
+      "requiredSchema": "https://json-schema.org/draft/2020-12/schema"
+    },
+    "schema-id-filepath": {
+      "pattern": "^https://cyclonedx\\.org(/schema/[^/]+\\.schema\\.json)$"
+    },
+    "schema-id-pattern": {
+      "pattern": "^https://cyclonedx\\.org/schema/[^/]+\\.schema\\.json$"
+    }
+  },
+  "excludeChecks": [
+    "cdx2-reftype-usage",
+    "description-oxford-english",
+    "enum-value-formatting",
+    "module-structure",
+    "module-property-order",
+    "property-name-american-english"
+  ]
+}

.config/cryptography-defs.cdxlintrc.json

@@ -0,0 +1,31 @@
+{
+  "$comment": "This ia a cdxlinter config for file `../schema/cryptography-defs.schema.json`",
+  "checks": {
+    "formatting-indent": {
+      "spaces": 2
+    },
+    "property-name-american-english": {
+      "customTerms": ["enum"]
+    },
+    "schema-comment": {
+      "requiredCommentPattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}Z$"
+    },
+    "schema-draft": {
+      "requiredSchema": "http://json-schema.org/draft-07/schema#"
+    },
+    "schema-id-filepath": {
+      "pattern": "^http://cyclonedx\\.org(/schema/[^/]+\\.schema\\.json)$"
+    },
+    "schema-id-pattern": {
+      "pattern": "^http://cyclonedx\\.org/schema/[^/]+\\.schema\\.json$"
+    }
+  },
+  "excludeChecks": [
+    "cdx2-reftype-usage",
+    "description-oxford-english",
+    "duplicate-content",
+    "enum-value-formatting",
+    "module-structure",
+    "module-property-order"
+  ]
+}

.config/cyclonedx-2.0-bundled.cdxlintrc.json

@@ -0,0 +1,11 @@
+{
+  "$comment": "This ia a cdxlinter config for file `../schema/2.0/cyclonedx-2.0-bundled[.min].schema.json`",
+  "checks": {
+  },
+  "includeChecks": [
+    "schema-draft",
+    "schema-id-pattern",
+    "schema-id-filepath",
+    "schema-comment"
+  ]
+}

.config/jsf-0.82.cdxlintrc.json

@@ -0,0 +1,31 @@
+{
+  "$comment": "This ia a cdxlinter config for file `../schema/jsf-0.82.schema.json`",
+  "checks": {
+    "formatting-indent": {
+      "spaces": 2
+    },
+    "property-name-american-english": {
+      "customTerms": ["crv", "kty"]
+    },
+    "schema-comment": {
+      "requiredCommentPattern": "JSON Signature Format schema is published under the terms of the Apache License 2\\.0\\."
+    },
+    "schema-draft": {
+      "requiredSchema": "http://json-schema.org/draft-07/schema#"
+    },
+    "schema-id-filepath": {
+      "pattern": "^http://cyclonedx\\.org(/schema/[^/]+\\.schema\\.json)$"
+    },
+    "schema-id-pattern": {
+      "pattern": "^http://cyclonedx\\.org/schema/[^/]+\\.schema\\.json$"
+    }
+  },
+  "excludeChecks": [
+    "cdx2-reftype-usage",
+    "description-oxford-english",
+    "duplicate-content",
+    "module-structure",
+    "module-property-order",
+    "no-must-word"
+  ]
+}

.config/spdx.cdxlintrc.json

@@ -0,0 +1,32 @@
+{
+  "$comment": "This ia a cdxlinter config for file `../schema/spdx.schema.json`",
+  "checks": {
+    "formatting-indent": {
+      "spaces": 2
+    },
+    "schema-comment": {
+      "requiredCommentPattern": "^v(\\d+\\.\\d+)\\-(.+)$"
+    },
+    "schema-draft": {
+      "requiredSchema": "http://json-schema.org/draft-07/schema#"
+    },
+    "schema-id-filepath": {
+      "pattern": "^http://cyclonedx\\.org(/schema/[^/]+\\.schema\\.json)$"
+    },
+    "schema-id-pattern": {
+      "pattern": "^http://cyclonedx\\.org/schema/[^/]+\\.schema\\.json$"
+    }
+  },
+  "excludeChecks": [
+    "cdx2-reftype-usage",
+    "description-oxford-english",
+    "duplicate-content",
+    "enum-value-formatting",
+    "enum-value-no-other",
+    "meta-enum-full-stop",
+    "module-structure",
+    "module-property-order",
+    "no-must-word",
+    "property-name-american-english"
+  ]
+}

.github/dependabot.yml

@@ -25,7 +25,25 @@ updates:
       prefix: 'chore'   ## prefix maximum string length of 15
       include: 'scope'
     open-pull-requests-limit: 999
-  - package-ecosystem: 'maven'
+  # region docs
+  - # docs v1
+    package-ecosystem: 'pip'
+    directories:
+      - '/docgen/*'
+    schedule:
+      interval: 'weekly'
+      day: 'saturday'
+    cooldown:
+      default-days: 7
+    labels: [ 'dependencies' ]
+    commit-message:
+      prefix: 'chore'   ## prefix maximum string length of 15
+      include: 'scope'
+    open-pull-requests-limit: 999
+  # endregion docs
+  # region tools
+  - # tools Java
+    package-ecosystem: 'maven'
     directory: '/tools'
     schedule:
       interval: 'weekly'
@@ -37,8 +55,43 @@ updates:
       prefix: 'chore'   ## prefix maximum string length of 15
       include: 'scope'
     open-pull-requests-limit: 999
-  - package-ecosystem: 'composer'
-    directory: '/tools/src/test/php'
+  - # tools JS: bundler
+    package-ecosystem: 'npm'
+    directory: '/tools/src/main/js/bundler'
+    schedule:
+      interval: 'weekly'
+      day: 'saturday'
+    cooldown:
+      default-days: 7
+    labels: [ 'dependencies' ]
+    commit-message:
+      prefix: 'chore'   ## prefix maximum string length of 15
+      include: 'scope'
+    open-pull-requests-limit: 999
+    groups:
+      all-deps:  # we have a lockfile - we want all deps updates in one PR
+        applies-to: 'version-updates'
+        patterns: [ '*' ]
+  - # tools JS: linter
+    package-ecosystem: 'npm'
+    directory: '/tools/src/main/js/linter'
+    schedule:
+      interval: 'weekly'
+      day: 'saturday'
+    cooldown:
+      default-days: 7
+    labels: [ 'dependencies' ]
+    commit-message:
+      prefix: 'chore'   ## prefix maximum string length of 15
+      include: 'scope'
+    open-pull-requests-limit: 999
+    groups:
+      all-deps:   # we have a lockfile - we want all deps updates in one PR
+        applies-to: 'version-updates'
+        patterns: [ '*' ]
+  - # tools python
+    package-ecosystem: 'pip'
+    directory: '/tools/src/main/python'
     schedule:
       interval: 'weekly'
       day: 'saturday'
@@ -49,8 +102,10 @@ updates:
       prefix: 'chore'   ## prefix maximum string length of 15
       include: 'scope'
     open-pull-requests-limit: 999
-  - package-ecosystem: 'npm'
-    directory: '/tools/src/test/js'
+  - # tests PHP
+    package-ecosystem: 'composer'
+    directories:
+      - '/tools/src/test/php/*'
     schedule:
       interval: 'weekly'
       day: 'saturday'
@@ -61,8 +116,10 @@ updates:
       prefix: 'chore'   ## prefix maximum string length of 15
       include: 'scope'
     open-pull-requests-limit: 999
-  - package-ecosystem: 'pip'
-    directory: '/docgen/json'
+  - # tests JS
+    package-ecosystem: 'npm'
+    directories:
+      - '/tools/src/test/js/*'
     schedule:
       interval: 'weekly'
       day: 'saturday'
@@ -73,3 +130,4 @@ updates:
       prefix: 'chore'   ## prefix maximum string length of 15
       include: 'scope'
     open-pull-requests-limit: 999
+  # endregion tools

.github/workflows/build_docs.yml → .github/workflows/build_1.x_docs.yml

@@ -1,11 +1,15 @@
-name: Build Docs
+name: Build CDX-1.x Docs
 
 on:
   push:
     branches: ['master', 'main']
   pull_request:
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 env:
   PYTHON_VERSION_DEFAULT: "3.10"
 
@@ -17,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: docgen/xml
+        working-directory: docgen/schema-v1/xml
     steps:
     - name: Checkout
       # see https://github.com/actions/checkout
@@ -38,13 +42,13 @@ jobs:
       uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: XML-Schema-documentation
-        path: docgen/xml/docs
+        path: docgen/schema-v1/xml/docs
         if-no-files-found: error
   docs_json:
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: docgen/json
+        working-directory: docgen/schema-v1/json
     steps:
     - name: Checkout
       # see https://github.com/actions/checkout
@@ -64,13 +68,13 @@ jobs:
       uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: JSON-Schema-documentation
-        path: docgen/json/docs
+        path: docgen/schema-v1/json/docs
         if-no-files-found: error
   docs_proto:
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: docgen/proto
+        working-directory: docgen/schema-v1/proto
     steps:
     - name: Checkout
       # see https://github.com/actions/checkout
@@ -84,5 +88,5 @@ jobs:
       uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: PROTO-Schema-documentation
-        path: docgen/proto/docs
+        path: docgen/schema-v1/proto/docs
         if-no-files-found: error