cyclonedx-spec-reviewer

To validate CycloneDX schema compliance for cdxgen changes, review changes against CycloneDX schemas and property-taxonomy guidance to ensure attributes are used for the correct purpose and custom properties are necessary.

Semantic correctness in a CycloneDX BOM review ensures that BOM attributes are used for their intended purpose and that any custom properties added are genuinely necessary for accurate data representation.

Review AI/ML modeling components in a CycloneDX BOM by checking AI-related output for adherence to CycloneDX standards, ensuring standard field usage and data completeness for AI-BOM changes.

Yes, this CycloneDX spec reviewer supports custom properties and BOM enrichment by validating changes against property-taxonomy guidance and ensuring custom properties are semantically necessary.

The expected output format for a CycloneDX BOM review provides clear findings including field names, identified problems, preferred approaches, and the schema basis for each issue.

You need to run a CycloneDX schema compliance review when evaluating pull requests that modify CycloneDX schema handling, validators, package-manager integrations, BOM enrichment, or custom properties.