Proposed 2.0 schema for AI/ML BOM#948

Open

mrutkows wants to merge 83 commits into

CycloneDX:2.0-devfrom

mrutkows:2.0-dev-ai-ml

Commits on Jun 22, 2026

fix: add properties field to ModelCard xml and proto to resolve mismatch with json

wiebe-vandendriessche
authored and
mrutkows
committed
fix: removed some unnecessary whitespace

wiebe-vandendriessche
authored and
mrutkows
committed
fix: bump version numbers in BOM schema files to 1.5.1, 1.6.2, and 1.7.1

wiebe-vandendriessche
authored and
mrutkows
committed
test: add tests for custom properties field in modelCard (json, xml, proto)

wiebe-vandendriessche
authored and
mrutkows
committed
fix: add another custom property to ModelCard across JSON, XML, and proto files

wiebe-vandendriessche
authored and
mrutkows
committed
feat: enum labels for spdx.schema.json

jkowalleck
authored and
mrutkows
committed
fix(schema): correct typos in content-type text and refType comment

Mehrn0ush
authored and
mrutkows
committed
fix(crypto-registry): normalize RFC/FIPS standard name formatting

Mehrn0ush
authored and
mrutkows
committed
chore: update algorithm families [skip ci]

github-actions[bot]
authored and
mrutkows
committed
chore: harden schema validators

jkowalleck
authored and
mrutkows
committed
Added missing scarf to docs.

stevespringett
authored and
mrutkows
committed
Updated documentation generation

stevespringett
authored and
mrutkows
committed
Updated documentation generation

stevespringett
authored and
mrutkows
committed
Fixed potential security issue

stevespringett
authored and
mrutkows
committed
Fixed potential security issue

stevespringett
authored and
mrutkows
committed
Potential fix for code scanning alert no. 39: Uncontrolled data used in path expression

authored and
mrutkows
committed
Update crypto definitions

bhess
authored and
mrutkows
committed
Remove duplicate KDF, merge with kdf with SP800-108r1

bhess
authored and
mrutkows
committed
Consistent use of kdf for password-based key derivation algorithms, add hashAlgorithm prefix for yescrypt

bhess
authored and
mrutkows
committed
chore: update algorithm families [skip ci]

github-actions[bot]
authored and
mrutkows
committed
major changes to json template doc generation - reducing filesize from over 30MB to 8.6MB, while preserving SEO.

stevespringett
authored and
mrutkows
committed
remove buf comments

jkowalleck
authored and
mrutkows
committed
fix scroll-padding-top for XML

jkowalleck
authored and
mrutkows
committed
Add RSA-X931

jvdsn
authored and
mrutkows
committed
Add standard

jvdsn
authored and
mrutkows
committed
Add TLS-PRF family

jvdsn
authored and
mrutkows
committed
Separate out AES KW / KWP

jvdsn
authored and
mrutkows
committed
Add SP800-56C family

jvdsn
authored and
mrutkows
committed
Add two variants instead of one

jvdsn
authored and
mrutkows
committed
Fix primitive

jvdsn
authored and
mrutkows
committed
Fix SipHash primitive classification in cryptography registry

Mehrn0ush
authored and
mrutkows
committed
Add AES-OCB to cryptography registry

Mehrn0ush
authored and
mrutkows
committed
Add ANSI KDFs

jvdsn
authored and
mrutkows
committed
Deduplicate MD4 and MD5 entries in cryptography registry

Mehrn0ush
authored and
mrutkows
committed
Remove dash from SHA-3 hash algorithms

jvdsn
authored and
mrutkows
committed
Remove dash from EdDSA

jvdsn
authored and
mrutkows
committed
Add hashAlgorithm to IKE-PRF

jvdsn
authored and
mrutkows
committed
Fixed JSON issue

stevespringett
authored and
mrutkows
committed
Add SSH-KDF

jvdsn
authored and
mrutkows
committed
Initial plan

Copilot
authored and
mrutkows
committed
chore: pin GitHub Actions to immutable commit SHAs

authored and
mrutkows
committed
chore(workflows): add zizmor security gate and harden Actions credential handling (#925)

authored and
mrutkows
committed
chore: bump schema versions for upcoming changes

jkowalleck
authored and
mrutkows
committed
fix: allow multiple entries for ModelCard considerations lists in xml (so it matches the json spec)

wiebe-vandendriessche
authored and
mrutkows
committed
test: Add second entry for users, useCases, technicalLimitations, and

wiebe-vandendriessche
authored and
mrutkows
committed
fix: add test cases for all supported formats

wiebe-vandendriessche
authored and
mrutkows
committed
fix: correct BLS12 algorithm pattern

Mehrn0ush
authored and
mrutkows
committed
fix: correct GOST 28147 algorithm names

Mehrn0ush
authored and
mrutkows
committed
chore(deps): bump shivammathur/setup-php from 2.37.0 to 2.37.1

dependabot[bot]
authored and
mrutkows
committed
chore(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6

dependabot[bot]
authored and
mrutkows
committed
ci: pinned action comments exact versions

jkowalleck
authored and
mrutkows
committed
chore: adjust zizmor

jkowalleck
authored and
mrutkows
committed
chore: adjust zizmor

jkowalleck
authored and
mrutkows
committed
wip

jkowalleck
authored and
mrutkows
committed
wip

jkowalleck
authored and
mrutkows
committed
wip

jkowalleck
authored and
mrutkows
committed
wip

jkowalleck
authored and
mrutkows
committed
Add AI/ML schema and update .gitignore
mrutkows
committed
Encode the AI/ML schema draft for v2.0
mrutkows
committed
Encode the AI/ML schema draft for v2.0
mrutkows
committed
Update AI/ML v2.0 schema
mrutkows
committed

Commits on Jun 23, 2026

Commits on Jun 24, 2026

Commits on Jun 25, 2026