Skip to content

Commit 55343ba

Browse files
Bump
Signed-off-by: Steve Springett <[email protected]>
1 parent c5032b8 commit 55343ba

File tree

1 file changed

+14
-21
lines changed

1 file changed

+14
-21
lines changed

Diff for: README.md

+14-21
Original file line numberDiff line numberDiff line change
@@ -11,10 +11,12 @@ OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides a
1111
* Software-as-a-Service Bill of Materials (SaaSBOM)
1212
* Hardware Bill of Materials (HBOM)
1313
* Machine Learning Bill of Materials (ML-BOM)
14+
* Cryptography Bill of Materials (CBOM)
1415
* Manufacturing Bill of Materials (MBOM)
1516
* Operations Bill of Materials (OBOM)
1617
* Vulnerability Disclosure Reports (VDR)
17-
* Vulnerability Exploitability eXchange (VEX).
18+
* Vulnerability Exploitability eXchange (VEX)
19+
* CycloneDX Attestations (CDXA)
1820

1921

2022
## Introduction
@@ -47,31 +49,25 @@ The following media types are officially registered with IANA:
4749
| application/vnd.cyclonedx+xml | XML | [IANA](https://www.iana.org/assignments/media-types/application/vnd.cyclonedx+xml) |
4850
| application/vnd.cyclonedx+json | JSON | [IANA](https://www.iana.org/assignments/media-types/application/vnd.cyclonedx+json) |
4951

50-
Specific versions of CycloneDX can be specified by using the version parameter. For example: `application/vnd.cyclonedx+xml; version=1.3`.
52+
Specific versions of CycloneDX can be specified by using the version parameter. For example: `application/vnd.cyclonedx+xml; version=1.6`.
5153

5254
The officially supported media type for Protocol Buffer format is `application/x.vnd.cyclonedx+protobuf`.
5355

5456

5557
## Release History
5658

57-
| Version | Release Date |
58-
| ------- | ------------ |
59-
| CycloneDX 1.5 | 26 June 2023 |
60-
| CycloneDX 1.4 | 12 January 2022 |
61-
| CycloneDX 1.3 | 04 May 2021 |
62-
| CycloneDX 1.2 | 26 May 2020 |
63-
| CycloneDX 1.1 | 03 March 2019 |
64-
| CycloneDX 1.0 | 26 March 2018 |
65-
| Initial Prototype | 01 May 2017 |
59+
| Version | Release Date |
60+
|-------------------|-----------------|
61+
| CycloneDX 1.6 | 09 April 2024 |
62+
| CycloneDX 1.5 | 26 June 2023 |
63+
| CycloneDX 1.4 | 12 January 2022 |
64+
| CycloneDX 1.3 | 04 May 2021 |
65+
| CycloneDX 1.2 | 26 May 2020 |
66+
| CycloneDX 1.1 | 03 March 2019 |
67+
| CycloneDX 1.0 | 26 March 2018 |
68+
| Initial Prototype | 01 May 2017 |
6669

6770

68-
## Related Work
69-
[SPDX (Software Package Data Exchange)][spdx-url] is a specification that provides low-level details of components, including all files, hashes, authors, and copyrights. SPDX also defines over 300 open source license IDs. CycloneDX builds on top of the work SPDX has accomplished with license IDs, but varies greatly in its approach towards building a software bill of material specification.
70-
71-
[SWID (ISO/IEC 19770-2:2015)][swid-url] is used primarily to identify installed software and is the preferred format of the NVD. SWID tags are used in the National Vulnerability Database to describe vulnerable components. The CycloneDX specification complements this work as CycloneDX documents can incorporate SWID tags and other high-level SWID metadata and optionally include entire SWID documents. Use of SWID tag ID's are useful in determining if a specific component has known vulnerabilities.
72-
73-
[CPE (Common Platform Enumeration)][cpe-url] is a specification that describes the vendor, name, and version for an application, operating system, or hardware device. CPE identifiers are used in the National Vulnerability Database to describe vulnerable components. The CycloneDX specification complements this work as CycloneDX documents can easily be used to construct exact CPE identifiers that are useful in determining if a specific component has known vulnerabilities.
74-
7571
## Copyright & License
7672

7773
CycloneDX Specification is Copyright (c) OWASP Foundation. All Rights Reserved.
@@ -80,6 +76,3 @@ Permission to modify and redistribute is granted under the terms of the [Apache
8076

8177
[license-image]: https://img.shields.io/badge/license-apache%20v2-brightgreen.svg
8278
[license-url]: https://github.com/CycloneDX/specification/blob/master/LICENSE
83-
[spdx-url]: https://spdx.org
84-
[swid-url]: https://www.iso.org/standard/65666.html
85-
[cpe-url]: https://nvd.nist.gov/products/cpe

0 commit comments

Comments
 (0)