Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v1.4 General Availability #121

Merged
merged 92 commits into from
Jan 12, 2022
Merged

v1.4 General Availability #121

merged 92 commits into from
Jan 12, 2022

Conversation

stevespringett
Copy link
Member

No description provided.

stevespringett and others added 30 commits September 16, 2021 18:01
@stevespringett
Prepared v1.4 development branch from current master
46440f2
@stevespringett
Fixed 1.4 namespace
7d9c574
@stevespringett
#87 - Implemented release notes in XML, JSON, and Protobuf. Added uni…
dccbe44 
…t test samples.
@stevespringett
#87 - Added release notes as an external reference type
cc4105f
@stevespringett
#38 - Added initial support for vulnerabilities as part of core spec.…
adb75ab 
… Based on work by @garethr.
@stevespringett
Corrected issues preventing validation
173b781
@stevespringett
Made component version optional. Updated minimal viable unit tests
431eeb2
@stevespringett
Reverted changes to version being optional in proto schema. Added doc…
8f240ab 
… not on recommendations. Resolves #92 (comment)

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added support for properties to release notes. #88 (comment)
a1e2909 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added documentation to attachment text that states "Proactive control…
18d0a43 
…s such as input validation and sanitization should be employed to prevent misuse of attachment text". #88 (comment)

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Clarified description of when the vulnerability was created per #91 (…
a04e72f 
…comment)

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Refactored 'affects' by incorporating ranges and versions into indivi…
821fdfa 
…dual objects that require a ref.

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Refactored 'affects' by incorporating ranges and versions into indivi…
df947e9 
…dual objects that require a ref.

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
spelling
d290235 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Initial implementation of JSF 0.82 as JSON Schema. Required to #89
f58b508 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added JSF support to core schema supporting component, service, compo…
fb39f04 
…sition, and bom objects. Added valid example. #89

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added json schema doc generation. Initial commit for automation of docs.
00ad666 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Updating title and description
77a50f2 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
fixed issue with quoted variable in docs
0252b8d 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added not_affected justifications based on discussion #91 (comment)
b7e37c6 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Removed not_set as its implied if value is not specified. Added expli…
f15b462 
…cit resolved and resolved_with_pedigree. In some cases, it may be necessary to simply state an issue is resolved without providing evidence of the resolution.

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added description for vulnerability reference
052e702 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added description for vulnerability reference
485456c 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Standardizing on version range syntax from CVE v5.0 JSON schema
8db5a20 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Minor hardening. Added default to affected status as unlike the CVE 5…
35b5bc0 
….0 spec, CycloneDX does not support specifying a default.

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added external references support to tools
3bc4c0d 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Documentation updates
d3f0e50 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added info to severity
dcad6ef 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Documentation updates
6c62cc6 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
#91 - Added analysis (vendor) response
0ac6b87 
Signed-off-by: Steve Springett <steve@springett.us>
stevespringett and others added 24 commits December 27, 2021 19:42
@stevespringett
Updates to support docgen
617ea4b 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Updates to support docgen
33c4dbb 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Updates to support docgen
0018071 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Updates to support docgen
6513ba6 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Updates to support docgen
20b1d36 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
#99 - Doc updates
ab88610 
Signed-off-by: Steve Springett <steve@springett.us>
@jkowalleck
schema spec1.4: own type for ref/bom-ref
31be6e0 
part of  #114

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@jkowalleck
spec 1.4 JSON schema: removed redundant/self-sadowing $ids
0c503ec 
part of #83

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@jkowalleck
spec 1.4 JSON schema: removed unused $ids
886aa6a 
part of #83

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
@stevespringett
Merge pull request #116 from jkowalleck/v1.4-dev_ref-type
f62480b 
schema spec1.4: own type for `ref`/`bom-ref`
@stevespringett
Merge pull request #117 from jkowalleck/v1.4-dev_bugfix_issue83
374aa4c 
spec1.4 JSON schema : bugfixes  #83
@stevespringett
#99 - Doc updates
bc7deaf 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
#99 - Hiding $ attributes from generated docs.
bafd260 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Updated json-schema-for-humans to v0.39.3
24f5984 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Added deprecated doc support
7b6350a 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Corrected grammar
86ed6c1 
Signed-off-by: Steve Springett <steve@springett.us>
@coderpatros
Add service release notes to v1.4 proto file
fa1ede2 
This was missing from the proto file, but is present in JSON and XML schemas.
@stevespringett
Merge pull request #120 from CycloneDX/service-release-notes
7348609 
Add service release notes to v1.4 proto file
@stevespringett
Updating json-schema-for-humans to 0.39.5 which resolves coveooss/jso…
618bcda 
…n-schema-for-humans#123

Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Documentation updates
1e5c939 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
#89 - Added additional hardening
ba894e0 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Removed SNAPSHOT
eb7b3c9 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Removed SNAPSHOT from docgen
1383156 
Signed-off-by: Steve Springett <steve@springett.us>
@stevespringett
Removed SNAPSHOT from docgen
d9ed1f1 
Signed-off-by: Steve Springett <steve@springett.us>
coderpatros
coderpatros approved these changes Jan 8, 2022
View reviewed changes
Copy link
Member

@coderpatros coderpatros left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 from me.

As mentioned on slack, I've done a feature complete implementation of v1.4 and done some performance regression tests. This is in good shape for release IMHO.

@stevespringett stevespringett merged commit ccbf7b5 into master Jan 12, 2022
@stevespringett stevespringett deleted the v1.4-dev branch December 10, 2022 02:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@coderpatros coderpatros coderpatros approved these changes

@DarthHater DarthHater Awaiting requested review from DarthHater

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@stevespringett @coderpatros @jkowalleck