sscoble/speckl
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions
speckl/speckdl
History
Content Agent ba70962f8c feat: dual BOM output — support both CycloneDX v1.6 and SPDX 3.0.1 
SpeckBOM compilation manifest now supports two output formats:

- CycloneDX v1.6 JSON (OWASP/ECMA-424) — preferred for security tooling
- SPDX 3.0.1 JSON-LD (ISO 5962:2023) — preferred for regulated environments

Key changes:
- §4.5: Restructured as 'Compilation Manifest (SpeckBOM Output)' with dual format
  support, comparison table (CycloneDX vs SPDX capabilities), both JSON examples,
  and separate field mapping tables for each format
- Added compiler output section: --bom-format cdx|spdx|both (default: both)
- Appendix B restructured into 4 sections:
  B.1 Provenance Graph (JSON-LD / PROV-O) — intent layer
  B.2 SpeckBOM — CycloneDX v1.6 mapping table
  B.3 SpeckBOM — SPDX 3.0.1 mapping table
  B.4 Three-layer architecture: intent (PROV-O) + composition (CycloneDX or SPDX)

Rationale: Different regulators mandate different formats. DO-178C shops
need SPDX (ISO normative), security teams need CycloneDX (OWASP ecosystem).
Supporting both makes SpeckBOM universally adoptable.
2026-04-28 17:11:31 -07:00
..
.gitkeep Initial commit: Speckl project scaffold 2026-04-28 01:20:22 -07:00
SPEC.md feat: whitepaper sections 2-6, README overhaul, SpeckDL spec v0.1, reference agent scaffold 2026-04-28 09:33:48 -07:00
SPEC.v2-dp-primitives.md feat: dual BOM output — support both CycloneDX v1.6 and SPDX 3.0.1 2026-04-28 17:11:31 -07:00