Skip to content

Proposed 2.0 schema for AI/ML BOM#948

Open
mrutkows wants to merge 83 commits into
CycloneDX:2.0-devfrom
mrutkows:2.0-dev-ai-ml
Open

Proposed 2.0 schema for AI/ML BOM#948
mrutkows wants to merge 83 commits into
CycloneDX:2.0-devfrom
mrutkows:2.0-dev-ai-ml

Conversation

@mrutkows

@mrutkows mrutkows commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

Note: I rebased from "2.0-dev" and then manually brought in schemas from "2.0-threadmodeling" and also from "2.0-blueprints" and this PR is against master...

The only files that matter (if other branches are merged) are:

  • schema/2.0/model/cyclonedx-ai-ml-2.0.schema.json
  • .gitignore (to ignore files from MacOS and IDEs going forward)

Plus, want to delete the 1.7 port of:

  • schema/2.0/model/cyclonedx-ai-modelcard-2.0.schema.json

@mrutkows mrutkows self-assigned this Jun 3, 2026
@mrutkows mrutkows added draft format: JSON CDX 2.0 related to release v2.0 cap: ai/ml Capability: AI/ML labels Jun 3, 2026
@mrutkows mrutkows force-pushed the 2.0-dev-ai-ml branch 2 times, most recently from 550769f to d991431 Compare June 22, 2026 19:25
wiebe-vandendriessche and others added 23 commits June 22, 2026 14:28
…tch with json

Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
…proto)

Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
…roto files

Signed-off-by: wievdndr <wiebe.vandendriessche@ugent.be>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Mehrn0ush <mehrnoush.vaseghi@gmail.com>
Signed-off-by: Mehrn0ush <mehrnoush.vaseghi@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Steve Springett <steve@springett.us>
…in path expression

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
…dd hashAlgorithm prefix for yescrypt

Signed-off-by: Basil Hess <bhe@zurich.ibm.com>
…m over 30MB to 8.6MB, while preserving SEO.

Signed-off-by: Steve Springett <steve@springett.us>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
mrutkows added 5 commits June 22, 2026 15:35
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
@mrutkows mrutkows changed the base branch from master to 2.0-dev June 24, 2026 13:30
@mrutkows mrutkows changed the title WIP: Develop 2.0 schema for AI/ML BOM Proposed 2.0 schema for AI/ML BOM Jun 24, 2026
mrutkows added 18 commits June 24, 2026 08:38
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
@mrutkows mrutkows marked this pull request as ready for review June 25, 2026 15:49
@mrutkows mrutkows requested a review from a team as a code owner June 25, 2026 15:49
@mrutkows mrutkows requested a review from stevespringett June 25, 2026 15:49
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cap: ai/ml Capability: AI/ML CDX 2.0 related to release v2.0 draft format: JSON

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants