# SBoM v0.10.0 - API Reference

## Modules

- [SBoM](SBoM.md): <!--
  SPDX-License-Identifier: BSD-3-Clause
  SPDX-FileCopyrightText: 2019 Bram Verburg
  SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation
-->
- [SBoM.CycloneDX](SBoM.CycloneDX.md): SBoM CycloneDX encoding and decoding.
- [SBoM.CycloneDX.V13.Aggregate](SBoM.CycloneDX.V13.Aggregate.md): CycloneDX Aggregate model.
- [SBoM.CycloneDX.V13.AttachedText](SBoM.CycloneDX.V13.AttachedText.md): Specifies attributes of the text

- [SBoM.CycloneDX.V13.Bom](SBoM.CycloneDX.V13.Bom.md): CycloneDX Bom model.
- [SBoM.CycloneDX.V13.Classification](SBoM.CycloneDX.V13.Classification.md): CycloneDX Classification model.
- [SBoM.CycloneDX.V13.Commit](SBoM.CycloneDX.V13.Commit.md): CycloneDX Commit model.
- [SBoM.CycloneDX.V13.Component](SBoM.CycloneDX.V13.Component.md): CycloneDX Component model.
- [SBoM.CycloneDX.V13.Composition](SBoM.CycloneDX.V13.Composition.md): CycloneDX Composition model.
- [SBoM.CycloneDX.V13.DataClassification](SBoM.CycloneDX.V13.DataClassification.md): Specifies the data classification.

- [SBoM.CycloneDX.V13.DataFlow](SBoM.CycloneDX.V13.DataFlow.md): Specifies the flow direction of the data. Valid values are: inbound, outbound, bi-directional, and unknown. Direction is relative to the service. Inbound flow states that data enters the service. Outbound flow states that data leaves the service. Bi-directional states that data flows both ways, and unknown states that the direction is not known.

- [SBoM.CycloneDX.V13.Dependency](SBoM.CycloneDX.V13.Dependency.md): CycloneDX Dependency model.
- [SBoM.CycloneDX.V13.Diff](SBoM.CycloneDX.V13.Diff.md): CycloneDX Diff model.
- [SBoM.CycloneDX.V13.Evidence](SBoM.CycloneDX.V13.Evidence.md): CycloneDX Evidence model.
- [SBoM.CycloneDX.V13.EvidenceCopyright](SBoM.CycloneDX.V13.EvidenceCopyright.md): CycloneDX EvidenceCopyright model.
- [SBoM.CycloneDX.V13.ExternalReference](SBoM.CycloneDX.V13.ExternalReference.md): CycloneDX ExternalReference model.
- [SBoM.CycloneDX.V13.ExternalReferenceType](SBoM.CycloneDX.V13.ExternalReferenceType.md): CycloneDX ExternalReferenceType model.
- [SBoM.CycloneDX.V13.Hash](SBoM.CycloneDX.V13.Hash.md): Specifies the file hash of the component

- [SBoM.CycloneDX.V13.HashAlg](SBoM.CycloneDX.V13.HashAlg.md): CycloneDX HashAlg model.
- [SBoM.CycloneDX.V13.IdentifiableAction](SBoM.CycloneDX.V13.IdentifiableAction.md): CycloneDX IdentifiableAction model.
- [SBoM.CycloneDX.V13.Issue](SBoM.CycloneDX.V13.Issue.md): CycloneDX Issue model.
- [SBoM.CycloneDX.V13.IssueClassification](SBoM.CycloneDX.V13.IssueClassification.md): CycloneDX IssueClassification model.
- [SBoM.CycloneDX.V13.License](SBoM.CycloneDX.V13.License.md): CycloneDX License model.
- [SBoM.CycloneDX.V13.LicenseChoice](SBoM.CycloneDX.V13.LicenseChoice.md): CycloneDX LicenseChoice model.
- [SBoM.CycloneDX.V13.Metadata](SBoM.CycloneDX.V13.Metadata.md): CycloneDX Metadata model.
- [SBoM.CycloneDX.V13.OrganizationalContact](SBoM.CycloneDX.V13.OrganizationalContact.md): CycloneDX OrganizationalContact model.
- [SBoM.CycloneDX.V13.OrganizationalEntity](SBoM.CycloneDX.V13.OrganizationalEntity.md): CycloneDX OrganizationalEntity model.
- [SBoM.CycloneDX.V13.Patch](SBoM.CycloneDX.V13.Patch.md): CycloneDX Patch model.
- [SBoM.CycloneDX.V13.PatchClassification](SBoM.CycloneDX.V13.PatchClassification.md): CycloneDX PatchClassification model.
- [SBoM.CycloneDX.V13.Pedigree](SBoM.CycloneDX.V13.Pedigree.md): Component pedigree is a way to document complex supply chain scenarios where components are created, distributed, modified, redistributed, combined with other components, etc. Pedigree supports viewing this complex chain from the beginning, the end, or anywhere in the middle. It also provides a way to document variants where the exact relation may not be known.

- [SBoM.CycloneDX.V13.Property](SBoM.CycloneDX.V13.Property.md): Specifies a property

- [SBoM.CycloneDX.V13.Scope](SBoM.CycloneDX.V13.Scope.md): CycloneDX Scope model.
- [SBoM.CycloneDX.V13.Service](SBoM.CycloneDX.V13.Service.md): CycloneDX Service model.
- [SBoM.CycloneDX.V13.Source](SBoM.CycloneDX.V13.Source.md): The source of the issue where it is documented.

- [SBoM.CycloneDX.V13.Swid](SBoM.CycloneDX.V13.Swid.md): CycloneDX Swid model.
- [SBoM.CycloneDX.V13.Tool](SBoM.CycloneDX.V13.Tool.md): Specifies a tool (manual or automated).

- [SBoM.CycloneDX.V14.Advisory](SBoM.CycloneDX.V14.Advisory.md): CycloneDX Advisory model.
- [SBoM.CycloneDX.V14.Aggregate](SBoM.CycloneDX.V14.Aggregate.md): CycloneDX Aggregate model.
- [SBoM.CycloneDX.V14.AttachedText](SBoM.CycloneDX.V14.AttachedText.md): Specifies attributes of the text

- [SBoM.CycloneDX.V14.Bom](SBoM.CycloneDX.V14.Bom.md): CycloneDX Bom model.
- [SBoM.CycloneDX.V14.Classification](SBoM.CycloneDX.V14.Classification.md): CycloneDX Classification model.
- [SBoM.CycloneDX.V14.Commit](SBoM.CycloneDX.V14.Commit.md): CycloneDX Commit model.
- [SBoM.CycloneDX.V14.Component](SBoM.CycloneDX.V14.Component.md): CycloneDX Component model.
- [SBoM.CycloneDX.V14.Composition](SBoM.CycloneDX.V14.Composition.md): CycloneDX Composition model.
- [SBoM.CycloneDX.V14.DataClassification](SBoM.CycloneDX.V14.DataClassification.md): Specifies the data classification.

- [SBoM.CycloneDX.V14.DataFlow](SBoM.CycloneDX.V14.DataFlow.md): Specifies the flow direction of the data. Valid values are: inbound, outbound, bi-directional, and unknown. Direction is relative to the service. Inbound flow states that data enters the service. Outbound flow states that data leaves the service. Bi-directional states that data flows both ways, and unknown states that the direction is not known.

- [SBoM.CycloneDX.V14.Dependency](SBoM.CycloneDX.V14.Dependency.md): CycloneDX Dependency model.
- [SBoM.CycloneDX.V14.Diff](SBoM.CycloneDX.V14.Diff.md): CycloneDX Diff model.
- [SBoM.CycloneDX.V14.Evidence](SBoM.CycloneDX.V14.Evidence.md): CycloneDX Evidence model.
- [SBoM.CycloneDX.V14.EvidenceCopyright](SBoM.CycloneDX.V14.EvidenceCopyright.md): CycloneDX EvidenceCopyright model.
- [SBoM.CycloneDX.V14.ExternalReference](SBoM.CycloneDX.V14.ExternalReference.md): CycloneDX ExternalReference model.
- [SBoM.CycloneDX.V14.ExternalReferenceType](SBoM.CycloneDX.V14.ExternalReferenceType.md): CycloneDX ExternalReferenceType model.
- [SBoM.CycloneDX.V14.Hash](SBoM.CycloneDX.V14.Hash.md): Specifies the file hash of the component

- [SBoM.CycloneDX.V14.HashAlg](SBoM.CycloneDX.V14.HashAlg.md): CycloneDX HashAlg model.
- [SBoM.CycloneDX.V14.IdentifiableAction](SBoM.CycloneDX.V14.IdentifiableAction.md): CycloneDX IdentifiableAction model.
- [SBoM.CycloneDX.V14.ImpactAnalysisJustification](SBoM.CycloneDX.V14.ImpactAnalysisJustification.md): CycloneDX ImpactAnalysisJustification model.
- [SBoM.CycloneDX.V14.ImpactAnalysisState](SBoM.CycloneDX.V14.ImpactAnalysisState.md): CycloneDX ImpactAnalysisState model.
- [SBoM.CycloneDX.V14.Issue](SBoM.CycloneDX.V14.Issue.md): CycloneDX Issue model.
- [SBoM.CycloneDX.V14.IssueClassification](SBoM.CycloneDX.V14.IssueClassification.md): CycloneDX IssueClassification model.
- [SBoM.CycloneDX.V14.License](SBoM.CycloneDX.V14.License.md): CycloneDX License model.
- [SBoM.CycloneDX.V14.LicenseChoice](SBoM.CycloneDX.V14.LicenseChoice.md): CycloneDX LicenseChoice model.
- [SBoM.CycloneDX.V14.Metadata](SBoM.CycloneDX.V14.Metadata.md): CycloneDX Metadata model.
- [SBoM.CycloneDX.V14.Note](SBoM.CycloneDX.V14.Note.md): CycloneDX Note model.
- [SBoM.CycloneDX.V14.OrganizationalContact](SBoM.CycloneDX.V14.OrganizationalContact.md): CycloneDX OrganizationalContact model.
- [SBoM.CycloneDX.V14.OrganizationalEntity](SBoM.CycloneDX.V14.OrganizationalEntity.md): CycloneDX OrganizationalEntity model.
- [SBoM.CycloneDX.V14.Patch](SBoM.CycloneDX.V14.Patch.md): CycloneDX Patch model.
- [SBoM.CycloneDX.V14.PatchClassification](SBoM.CycloneDX.V14.PatchClassification.md): CycloneDX PatchClassification model.
- [SBoM.CycloneDX.V14.Pedigree](SBoM.CycloneDX.V14.Pedigree.md): Component pedigree is a way to document complex supply chain scenarios where components are created, distributed, modified, redistributed, combined with other components, etc. Pedigree supports viewing this complex chain from the beginning, the end, or anywhere in the middle. It also provides a way to document variants where the exact relation may not be known.

- [SBoM.CycloneDX.V14.Property](SBoM.CycloneDX.V14.Property.md): Specifies a property

- [SBoM.CycloneDX.V14.ReleaseNotes](SBoM.CycloneDX.V14.ReleaseNotes.md): CycloneDX ReleaseNotes model.
- [SBoM.CycloneDX.V14.Scope](SBoM.CycloneDX.V14.Scope.md): CycloneDX Scope model.
- [SBoM.CycloneDX.V14.ScoreMethod](SBoM.CycloneDX.V14.ScoreMethod.md): CycloneDX ScoreMethod model.
- [SBoM.CycloneDX.V14.Service](SBoM.CycloneDX.V14.Service.md): CycloneDX Service model.
- [SBoM.CycloneDX.V14.Severity](SBoM.CycloneDX.V14.Severity.md): CycloneDX Severity model.
- [SBoM.CycloneDX.V14.Source](SBoM.CycloneDX.V14.Source.md): The source of the issue where it is documented.

- [SBoM.CycloneDX.V14.Swid](SBoM.CycloneDX.V14.Swid.md): CycloneDX Swid model.
- [SBoM.CycloneDX.V14.Tool](SBoM.CycloneDX.V14.Tool.md): Specifies a tool (manual or automated).

- [SBoM.CycloneDX.V14.Vulnerability](SBoM.CycloneDX.V14.Vulnerability.md): CycloneDX Vulnerability model.
- [SBoM.CycloneDX.V14.VulnerabilityAffectedStatus](SBoM.CycloneDX.V14.VulnerabilityAffectedStatus.md): CycloneDX VulnerabilityAffectedStatus model.
- [SBoM.CycloneDX.V14.VulnerabilityAffectedVersions](SBoM.CycloneDX.V14.VulnerabilityAffectedVersions.md): CycloneDX VulnerabilityAffectedVersions model.
- [SBoM.CycloneDX.V14.VulnerabilityAffects](SBoM.CycloneDX.V14.VulnerabilityAffects.md): CycloneDX VulnerabilityAffects model.
- [SBoM.CycloneDX.V14.VulnerabilityAnalysis](SBoM.CycloneDX.V14.VulnerabilityAnalysis.md): CycloneDX VulnerabilityAnalysis model.
- [SBoM.CycloneDX.V14.VulnerabilityCredits](SBoM.CycloneDX.V14.VulnerabilityCredits.md): CycloneDX VulnerabilityCredits model.
- [SBoM.CycloneDX.V14.VulnerabilityRating](SBoM.CycloneDX.V14.VulnerabilityRating.md): CycloneDX VulnerabilityRating model.
- [SBoM.CycloneDX.V14.VulnerabilityReference](SBoM.CycloneDX.V14.VulnerabilityReference.md): CycloneDX VulnerabilityReference model.
- [SBoM.CycloneDX.V14.VulnerabilityResponse](SBoM.CycloneDX.V14.VulnerabilityResponse.md): CycloneDX VulnerabilityResponse model.
- [SBoM.CycloneDX.V15.Advisory](SBoM.CycloneDX.V15.Advisory.md): CycloneDX Advisory model.
- [SBoM.CycloneDX.V15.Aggregate](SBoM.CycloneDX.V15.Aggregate.md): CycloneDX Aggregate model.
- [SBoM.CycloneDX.V15.Annotation](SBoM.CycloneDX.V15.Annotation.md): CycloneDX Annotation model.
- [SBoM.CycloneDX.V15.AnnotatorChoice](SBoM.CycloneDX.V15.AnnotatorChoice.md): CycloneDX AnnotatorChoice model.
- [SBoM.CycloneDX.V15.AttachedText](SBoM.CycloneDX.V15.AttachedText.md): Specifies attributes of the text

- [SBoM.CycloneDX.V15.Bom](SBoM.CycloneDX.V15.Bom.md): CycloneDX Bom model.
- [SBoM.CycloneDX.V15.Callstack](SBoM.CycloneDX.V15.Callstack.md): Evidence of the components use through the callstack.

- [SBoM.CycloneDX.V15.Callstack.Frames](SBoM.CycloneDX.V15.Callstack.Frames.md): CycloneDX Callstack.Frames model.
- [SBoM.CycloneDX.V15.Classification](SBoM.CycloneDX.V15.Classification.md): CycloneDX Classification model.
- [SBoM.CycloneDX.V15.Command](SBoM.CycloneDX.V15.Command.md): CycloneDX Command model.
- [SBoM.CycloneDX.V15.Commit](SBoM.CycloneDX.V15.Commit.md): CycloneDX Commit model.
- [SBoM.CycloneDX.V15.Component](SBoM.CycloneDX.V15.Component.md): CycloneDX Component model.
- [SBoM.CycloneDX.V15.ComponentData](SBoM.CycloneDX.V15.ComponentData.md): CycloneDX ComponentData model.
- [SBoM.CycloneDX.V15.ComponentData.ComponentDataContents](SBoM.CycloneDX.V15.ComponentData.ComponentDataContents.md): CycloneDX ComponentData.ComponentDataContents model.
- [SBoM.CycloneDX.V15.ComponentDataType](SBoM.CycloneDX.V15.ComponentDataType.md): CycloneDX ComponentDataType model.
- [SBoM.CycloneDX.V15.Composition](SBoM.CycloneDX.V15.Composition.md): CycloneDX Composition model.
- [SBoM.CycloneDX.V15.Condition](SBoM.CycloneDX.V15.Condition.md): A condition that was used to determine a trigger should be activated.

- [SBoM.CycloneDX.V15.DataFlow](SBoM.CycloneDX.V15.DataFlow.md): Specifies the data flow.

- [SBoM.CycloneDX.V15.DataFlowDirection](SBoM.CycloneDX.V15.DataFlowDirection.md): Specifies the flow direction of the data. Valid values are: inbound, outbound, bi-directional, and unknown. Direction is relative to the service. Inbound flow states that data enters the service. Outbound flow states that data leaves the service. Bi-directional states that data flows both ways, and unknown states that the direction is not known.

- [SBoM.CycloneDX.V15.DataGovernance](SBoM.CycloneDX.V15.DataGovernance.md): CycloneDX DataGovernance model.
- [SBoM.CycloneDX.V15.DataGovernance.DataGovernanceResponsibleParty](SBoM.CycloneDX.V15.DataGovernance.DataGovernanceResponsibleParty.md): CycloneDX DataGovernance.DataGovernanceResponsibleParty model.
- [SBoM.CycloneDX.V15.Dependency](SBoM.CycloneDX.V15.Dependency.md): CycloneDX Dependency model.
- [SBoM.CycloneDX.V15.Diff](SBoM.CycloneDX.V15.Diff.md): CycloneDX Diff model.
- [SBoM.CycloneDX.V15.EnvironmentVars](SBoM.CycloneDX.V15.EnvironmentVars.md): CycloneDX EnvironmentVars model.
- [SBoM.CycloneDX.V15.Event](SBoM.CycloneDX.V15.Event.md): Represents something that happened that may trigger a response.

- [SBoM.CycloneDX.V15.Evidence](SBoM.CycloneDX.V15.Evidence.md): CycloneDX Evidence model.
- [SBoM.CycloneDX.V15.EvidenceCopyright](SBoM.CycloneDX.V15.EvidenceCopyright.md): CycloneDX EvidenceCopyright model.
- [SBoM.CycloneDX.V15.EvidenceFieldType](SBoM.CycloneDX.V15.EvidenceFieldType.md): CycloneDX EvidenceFieldType model.
- [SBoM.CycloneDX.V15.EvidenceIdentity](SBoM.CycloneDX.V15.EvidenceIdentity.md): CycloneDX EvidenceIdentity model.
- [SBoM.CycloneDX.V15.EvidenceMethods](SBoM.CycloneDX.V15.EvidenceMethods.md): CycloneDX EvidenceMethods model.
- [SBoM.CycloneDX.V15.EvidenceOccurrences](SBoM.CycloneDX.V15.EvidenceOccurrences.md): CycloneDX EvidenceOccurrences model.
- [SBoM.CycloneDX.V15.EvidenceTechnique](SBoM.CycloneDX.V15.EvidenceTechnique.md): CycloneDX EvidenceTechnique model.
- [SBoM.CycloneDX.V15.ExternalReference](SBoM.CycloneDX.V15.ExternalReference.md): CycloneDX ExternalReference model.
- [SBoM.CycloneDX.V15.ExternalReferenceType](SBoM.CycloneDX.V15.ExternalReferenceType.md): CycloneDX ExternalReferenceType model.
- [SBoM.CycloneDX.V15.Formula](SBoM.CycloneDX.V15.Formula.md): Describes workflows and resources that captures rules and other aspects of how the associated BOM component or service was formed.

- [SBoM.CycloneDX.V15.GraphicsCollection](SBoM.CycloneDX.V15.GraphicsCollection.md): CycloneDX GraphicsCollection model.
- [SBoM.CycloneDX.V15.GraphicsCollection.Graphic](SBoM.CycloneDX.V15.GraphicsCollection.Graphic.md): CycloneDX GraphicsCollection.Graphic model.
- [SBoM.CycloneDX.V15.Hash](SBoM.CycloneDX.V15.Hash.md): Specifies the file hash of the component

- [SBoM.CycloneDX.V15.HashAlg](SBoM.CycloneDX.V15.HashAlg.md): CycloneDX HashAlg model.
- [SBoM.CycloneDX.V15.IdentifiableAction](SBoM.CycloneDX.V15.IdentifiableAction.md): CycloneDX IdentifiableAction model.
- [SBoM.CycloneDX.V15.ImpactAnalysisJustification](SBoM.CycloneDX.V15.ImpactAnalysisJustification.md): CycloneDX ImpactAnalysisJustification model.
- [SBoM.CycloneDX.V15.ImpactAnalysisState](SBoM.CycloneDX.V15.ImpactAnalysisState.md): CycloneDX ImpactAnalysisState model.
- [SBoM.CycloneDX.V15.InputType](SBoM.CycloneDX.V15.InputType.md): Type that represents various input data types and formats.

- [SBoM.CycloneDX.V15.Issue](SBoM.CycloneDX.V15.Issue.md): CycloneDX Issue model.
- [SBoM.CycloneDX.V15.IssueClassification](SBoM.CycloneDX.V15.IssueClassification.md): CycloneDX IssueClassification model.
- [SBoM.CycloneDX.V15.License](SBoM.CycloneDX.V15.License.md): CycloneDX License model.
- [SBoM.CycloneDX.V15.LicenseChoice](SBoM.CycloneDX.V15.LicenseChoice.md): CycloneDX LicenseChoice model.
- [SBoM.CycloneDX.V15.Licensing](SBoM.CycloneDX.V15.Licensing.md): CycloneDX Licensing model.
- [SBoM.CycloneDX.V15.LicensingTypeEnum](SBoM.CycloneDX.V15.LicensingTypeEnum.md): CycloneDX LicensingTypeEnum model.
- [SBoM.CycloneDX.V15.LifecyclePhase](SBoM.CycloneDX.V15.LifecyclePhase.md): CycloneDX LifecyclePhase model.
- [SBoM.CycloneDX.V15.Lifecycles](SBoM.CycloneDX.V15.Lifecycles.md): CycloneDX Lifecycles model.
- [SBoM.CycloneDX.V15.Metadata](SBoM.CycloneDX.V15.Metadata.md): CycloneDX Metadata model.
- [SBoM.CycloneDX.V15.ModelCard](SBoM.CycloneDX.V15.ModelCard.md): CycloneDX ModelCard model.
- [SBoM.CycloneDX.V15.ModelCard.ModelCardConsiderations](SBoM.CycloneDX.V15.ModelCard.ModelCardConsiderations.md): CycloneDX ModelCard.ModelCardConsiderations model.
- [SBoM.CycloneDX.V15.ModelCard.ModelCardConsiderations.EthicalConsiderations](SBoM.CycloneDX.V15.ModelCard.ModelCardConsiderations.EthicalConsiderations.md): CycloneDX ModelCard.ModelCardConsiderations.EthicalConsiderations model.
- [SBoM.CycloneDX.V15.ModelCard.ModelCardConsiderations.FairnessAssessments](SBoM.CycloneDX.V15.ModelCard.ModelCardConsiderations.FairnessAssessments.md): CycloneDX ModelCard.ModelCardConsiderations.FairnessAssessments model.
- [SBoM.CycloneDX.V15.ModelCard.ModelParameters](SBoM.CycloneDX.V15.ModelCard.ModelParameters.md): CycloneDX ModelCard.ModelParameters model.
- [SBoM.CycloneDX.V15.ModelCard.ModelParameters.Approach](SBoM.CycloneDX.V15.ModelCard.ModelParameters.Approach.md): CycloneDX ModelCard.ModelParameters.Approach model.
- [SBoM.CycloneDX.V15.ModelCard.ModelParameters.Datasets](SBoM.CycloneDX.V15.ModelCard.ModelParameters.Datasets.md): CycloneDX ModelCard.ModelParameters.Datasets model.
- [SBoM.CycloneDX.V15.ModelCard.ModelParameters.MachineLearningInputOutputParameters](SBoM.CycloneDX.V15.ModelCard.ModelParameters.MachineLearningInputOutputParameters.md): CycloneDX ModelCard.ModelParameters.MachineLearningInputOutputParameters model.
- [SBoM.CycloneDX.V15.ModelCard.QuantitativeAnalysis](SBoM.CycloneDX.V15.ModelCard.QuantitativeAnalysis.md): CycloneDX ModelCard.QuantitativeAnalysis model.
- [SBoM.CycloneDX.V15.ModelCard.QuantitativeAnalysis.PerformanceMetrics](SBoM.CycloneDX.V15.ModelCard.QuantitativeAnalysis.PerformanceMetrics.md): CycloneDX ModelCard.QuantitativeAnalysis.PerformanceMetrics model.
- [SBoM.CycloneDX.V15.ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval](SBoM.CycloneDX.V15.ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval.md): CycloneDX ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval model.
- [SBoM.CycloneDX.V15.ModelParameterApproachType](SBoM.CycloneDX.V15.ModelParameterApproachType.md): CycloneDX ModelParameterApproachType model.
- [SBoM.CycloneDX.V15.Note](SBoM.CycloneDX.V15.Note.md): CycloneDX Note model.
- [SBoM.CycloneDX.V15.OrganizationalContact](SBoM.CycloneDX.V15.OrganizationalContact.md): CycloneDX OrganizationalContact model.
- [SBoM.CycloneDX.V15.OrganizationalEntity](SBoM.CycloneDX.V15.OrganizationalEntity.md): CycloneDX OrganizationalEntity model.
- [SBoM.CycloneDX.V15.OrganizationalEntityOrContact](SBoM.CycloneDX.V15.OrganizationalEntityOrContact.md): CycloneDX OrganizationalEntityOrContact model.
- [SBoM.CycloneDX.V15.OutputType](SBoM.CycloneDX.V15.OutputType.md): CycloneDX OutputType model.
- [SBoM.CycloneDX.V15.OutputType.OutputTypeType](SBoM.CycloneDX.V15.OutputType.OutputTypeType.md): CycloneDX OutputType.OutputTypeType model.
- [SBoM.CycloneDX.V15.Parameter](SBoM.CycloneDX.V15.Parameter.md): A representation of a functional parameter.

- [SBoM.CycloneDX.V15.Patch](SBoM.CycloneDX.V15.Patch.md): CycloneDX Patch model.
- [SBoM.CycloneDX.V15.PatchClassification](SBoM.CycloneDX.V15.PatchClassification.md): CycloneDX PatchClassification model.
- [SBoM.CycloneDX.V15.Pedigree](SBoM.CycloneDX.V15.Pedigree.md): Component pedigree is a way to document complex supply chain scenarios where components are created, distributed, modified, redistributed, combined with other components, etc. Pedigree supports viewing this complex chain from the beginning, the end, or anywhere in the middle. It also provides a way to document variants where the exact relation may not be known.

- [SBoM.CycloneDX.V15.ProofOfConcept](SBoM.CycloneDX.V15.ProofOfConcept.md): CycloneDX ProofOfConcept model.
- [SBoM.CycloneDX.V15.Property](SBoM.CycloneDX.V15.Property.md): Specifies a property

- [SBoM.CycloneDX.V15.ReleaseNotes](SBoM.CycloneDX.V15.ReleaseNotes.md): CycloneDX ReleaseNotes model.
- [SBoM.CycloneDX.V15.ResourceReferenceChoice](SBoM.CycloneDX.V15.ResourceReferenceChoice.md): CycloneDX ResourceReferenceChoice model.
- [SBoM.CycloneDX.V15.Scope](SBoM.CycloneDX.V15.Scope.md): CycloneDX Scope model.
- [SBoM.CycloneDX.V15.ScoreMethod](SBoM.CycloneDX.V15.ScoreMethod.md): CycloneDX ScoreMethod model.
- [SBoM.CycloneDX.V15.Service](SBoM.CycloneDX.V15.Service.md): CycloneDX Service model.
- [SBoM.CycloneDX.V15.Severity](SBoM.CycloneDX.V15.Severity.md): CycloneDX Severity model.
- [SBoM.CycloneDX.V15.Source](SBoM.CycloneDX.V15.Source.md): The source of the issue where it is documented.

- [SBoM.CycloneDX.V15.Step](SBoM.CycloneDX.V15.Step.md): Executes specific commands or tools in order to accomplish its owning task as part of a sequence.

- [SBoM.CycloneDX.V15.Swid](SBoM.CycloneDX.V15.Swid.md): CycloneDX Swid model.
- [SBoM.CycloneDX.V15.Task](SBoM.CycloneDX.V15.Task.md): Describes the inputs, sequence of steps and resources used to accomplish a task and its output.

- [SBoM.CycloneDX.V15.TaskType](SBoM.CycloneDX.V15.TaskType.md): CycloneDX TaskType model.
- [SBoM.CycloneDX.V15.Tool](SBoM.CycloneDX.V15.Tool.md): Specifies a tool (manual or automated).

- [SBoM.CycloneDX.V15.Trigger](SBoM.CycloneDX.V15.Trigger.md): Represents a resource that can conditionally activate (or fire) tasks based upon associated events and their data.

- [SBoM.CycloneDX.V15.Trigger.TriggerType](SBoM.CycloneDX.V15.Trigger.TriggerType.md): CycloneDX Trigger.TriggerType model.
- [SBoM.CycloneDX.V15.Volume](SBoM.CycloneDX.V15.Volume.md): An identifiable, logical unit of data storage tied to a physical device.

- [SBoM.CycloneDX.V15.Volume.VolumeMode](SBoM.CycloneDX.V15.Volume.VolumeMode.md): CycloneDX Volume.VolumeMode model.
- [SBoM.CycloneDX.V15.Vulnerability](SBoM.CycloneDX.V15.Vulnerability.md): CycloneDX Vulnerability model.
- [SBoM.CycloneDX.V15.VulnerabilityAffectedStatus](SBoM.CycloneDX.V15.VulnerabilityAffectedStatus.md): CycloneDX VulnerabilityAffectedStatus model.
- [SBoM.CycloneDX.V15.VulnerabilityAffectedVersions](SBoM.CycloneDX.V15.VulnerabilityAffectedVersions.md): CycloneDX VulnerabilityAffectedVersions model.
- [SBoM.CycloneDX.V15.VulnerabilityAffects](SBoM.CycloneDX.V15.VulnerabilityAffects.md): CycloneDX VulnerabilityAffects model.
- [SBoM.CycloneDX.V15.VulnerabilityAnalysis](SBoM.CycloneDX.V15.VulnerabilityAnalysis.md): CycloneDX VulnerabilityAnalysis model.
- [SBoM.CycloneDX.V15.VulnerabilityCredits](SBoM.CycloneDX.V15.VulnerabilityCredits.md): CycloneDX VulnerabilityCredits model.
- [SBoM.CycloneDX.V15.VulnerabilityRating](SBoM.CycloneDX.V15.VulnerabilityRating.md): CycloneDX VulnerabilityRating model.
- [SBoM.CycloneDX.V15.VulnerabilityReference](SBoM.CycloneDX.V15.VulnerabilityReference.md): CycloneDX VulnerabilityReference model.
- [SBoM.CycloneDX.V15.VulnerabilityResponse](SBoM.CycloneDX.V15.VulnerabilityResponse.md): CycloneDX VulnerabilityResponse model.
- [SBoM.CycloneDX.V15.Workflow](SBoM.CycloneDX.V15.Workflow.md): A specialized orchestration task.

- [SBoM.CycloneDX.V15.Workspace](SBoM.CycloneDX.V15.Workspace.md): A named filesystem or data resource shareable by workflow tasks.

- [SBoM.CycloneDX.V15.Workspace.AccessMode](SBoM.CycloneDX.V15.Workspace.AccessMode.md): CycloneDX Workspace.AccessMode model.
- [SBoM.CycloneDX.V16.Advisory](SBoM.CycloneDX.V16.Advisory.md): Title and location where advisory information can be obtained. An advisory is a notification of a threat to a component, service, or system.

- [SBoM.CycloneDX.V16.Aggregate](SBoM.CycloneDX.V16.Aggregate.md): CycloneDX Aggregate model.
- [SBoM.CycloneDX.V16.Annotation](SBoM.CycloneDX.V16.Annotation.md): CycloneDX Annotation model.
- [SBoM.CycloneDX.V16.AnnotatorChoice](SBoM.CycloneDX.V16.AnnotatorChoice.md): CycloneDX AnnotatorChoice model.
- [SBoM.CycloneDX.V16.AttachedText](SBoM.CycloneDX.V16.AttachedText.md): Specifies attributes of the text

- [SBoM.CycloneDX.V16.Bom](SBoM.CycloneDX.V16.Bom.md): CycloneDX Bom model.
- [SBoM.CycloneDX.V16.CO2MeasureType](SBoM.CycloneDX.V16.CO2MeasureType.md): A measure of carbon dioxide (CO2).

- [SBoM.CycloneDX.V16.CO2MeasureType.CO2MeasureUnitType](SBoM.CycloneDX.V16.CO2MeasureType.CO2MeasureUnitType.md): CycloneDX CO2MeasureType.CO2MeasureUnitType model.
- [SBoM.CycloneDX.V16.Callstack](SBoM.CycloneDX.V16.Callstack.md): CycloneDX Callstack model.
- [SBoM.CycloneDX.V16.Callstack.Frames](SBoM.CycloneDX.V16.Callstack.Frames.md): CycloneDX Callstack.Frames model.
- [SBoM.CycloneDX.V16.Classification](SBoM.CycloneDX.V16.Classification.md): CycloneDX Classification model.
- [SBoM.CycloneDX.V16.Command](SBoM.CycloneDX.V16.Command.md): CycloneDX Command model.
- [SBoM.CycloneDX.V16.Commit](SBoM.CycloneDX.V16.Commit.md): CycloneDX Commit model.
- [SBoM.CycloneDX.V16.Component](SBoM.CycloneDX.V16.Component.md): CycloneDX Component model.
- [SBoM.CycloneDX.V16.ComponentData](SBoM.CycloneDX.V16.ComponentData.md): CycloneDX ComponentData model.
- [SBoM.CycloneDX.V16.ComponentData.ComponentDataContents](SBoM.CycloneDX.V16.ComponentData.ComponentDataContents.md): CycloneDX ComponentData.ComponentDataContents model.
- [SBoM.CycloneDX.V16.ComponentDataType](SBoM.CycloneDX.V16.ComponentDataType.md): CycloneDX ComponentDataType model.
- [SBoM.CycloneDX.V16.Composition](SBoM.CycloneDX.V16.Composition.md): CycloneDX Composition model.
- [SBoM.CycloneDX.V16.Condition](SBoM.CycloneDX.V16.Condition.md): A condition that was used to determine a trigger should be activated.

- [SBoM.CycloneDX.V16.CryptoProperties](SBoM.CycloneDX.V16.CryptoProperties.md): "Cryptographic Properties

- [SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties](SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.md): Algorithm Propertie

- [SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoAlgorithmFunction](SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoAlgorithmFunction.md): Cryptographic functions

- [SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoAlgorithmMode](SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoAlgorithmMode.md): Mode

- [SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoAlgorithmPadding](SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoAlgorithmPadding.md): Padding

- [SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoExecutionEnvironment](SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoExecutionEnvironment.md): Execution Environment

- [SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoImplementationPlatform](SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoImplementationPlatform.md): Implementation platform

- [SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoPrimitive](SBoM.CycloneDX.V16.CryptoProperties.AlgorithmProperties.CryptoPrimitive.md): Primitive

- [SBoM.CycloneDX.V16.CryptoProperties.CertificateProperties](SBoM.CycloneDX.V16.CryptoProperties.CertificateProperties.md): Certificate Properties

- [SBoM.CycloneDX.V16.CryptoProperties.CryptoAssetType](SBoM.CycloneDX.V16.CryptoProperties.CryptoAssetType.md): Asset Type

- [SBoM.CycloneDX.V16.CryptoProperties.ProtocolProperties](SBoM.CycloneDX.V16.CryptoProperties.ProtocolProperties.md): Protocol Properties

- [SBoM.CycloneDX.V16.CryptoProperties.ProtocolProperties.CryptoProtocolCipherSuite](SBoM.CycloneDX.V16.CryptoProperties.ProtocolProperties.CryptoProtocolCipherSuite.md): Object representing a cipher suite

- [SBoM.CycloneDX.V16.CryptoProperties.ProtocolProperties.CryptoProtocolType](SBoM.CycloneDX.V16.CryptoProperties.ProtocolProperties.CryptoProtocolType.md): CycloneDX CryptoProperties.ProtocolProperties.CryptoProtocolType model.
- [SBoM.CycloneDX.V16.CryptoProperties.ProtocolProperties.Ikev2TransformTypes](SBoM.CycloneDX.V16.CryptoProperties.ProtocolProperties.Ikev2TransformTypes.md): IKEv2 Transform Types

- [SBoM.CycloneDX.V16.CryptoProperties.RelatedCryptoMaterialProperties](SBoM.CycloneDX.V16.CryptoProperties.RelatedCryptoMaterialProperties.md): Related Cryptographic Material Properties

- [SBoM.CycloneDX.V16.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedSecuredBy](SBoM.CycloneDX.V16.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedSecuredBy.md): Secured By

- [SBoM.CycloneDX.V16.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedState](SBoM.CycloneDX.V16.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedState.md): State

- [SBoM.CycloneDX.V16.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedType](SBoM.CycloneDX.V16.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedType.md): relatedCryptoMaterialType

- [SBoM.CycloneDX.V16.DataFlow](SBoM.CycloneDX.V16.DataFlow.md): Specifies the data flow.

- [SBoM.CycloneDX.V16.DataFlowDirection](SBoM.CycloneDX.V16.DataFlowDirection.md): Specifies the flow direction of the data. Valid values are: inbound, outbound, bi-directional, and unknown. Direction is relative to the service. Inbound flow states that data enters the service. Outbound flow states that data leaves the service. Bi-directional states that data flows both ways, and unknown states that the direction is not known.
buf:lint:ignore ENUM_VALUE_PREFIX -- Enum value names should be prefixed with "DATA_FLOW_DIRECTION_"

- [SBoM.CycloneDX.V16.DataGovernance](SBoM.CycloneDX.V16.DataGovernance.md): Data governance captures information regarding data ownership, stewardship, and custodianship, providing insights into the individuals or entities responsible for managing, overseeing, and safeguarding the data throughout its lifecycle.

- [SBoM.CycloneDX.V16.DataGovernance.DataGovernanceResponsibleParty](SBoM.CycloneDX.V16.DataGovernance.DataGovernanceResponsibleParty.md): CycloneDX DataGovernance.DataGovernanceResponsibleParty model.
- [SBoM.CycloneDX.V16.Declarations](SBoM.CycloneDX.V16.Declarations.md): The list of declarations which describe the conformance to standards. Each declaration may include attestations, claims, and evidence.

- [SBoM.CycloneDX.V16.Declarations.Affirmation](SBoM.CycloneDX.V16.Declarations.Affirmation.md): CycloneDX Declarations.Affirmation model.
- [SBoM.CycloneDX.V16.Declarations.Affirmation.Signatory](SBoM.CycloneDX.V16.Declarations.Affirmation.Signatory.md): CycloneDX Declarations.Affirmation.Signatory model.
- [SBoM.CycloneDX.V16.Declarations.Assessor](SBoM.CycloneDX.V16.Declarations.Assessor.md): CycloneDX Declarations.Assessor model.
- [SBoM.CycloneDX.V16.Declarations.Attestation](SBoM.CycloneDX.V16.Declarations.Attestation.md): Attestation

- [SBoM.CycloneDX.V16.Declarations.Attestation.AttestationMap](SBoM.CycloneDX.V16.Declarations.Attestation.AttestationMap.md): Map

- [SBoM.CycloneDX.V16.Declarations.Attestation.AttestationMap.AttestationConfidence](SBoM.CycloneDX.V16.Declarations.Attestation.AttestationMap.AttestationConfidence.md): Confidence

- [SBoM.CycloneDX.V16.Declarations.Attestation.AttestationMap.AttestationConformance](SBoM.CycloneDX.V16.Declarations.Attestation.AttestationMap.AttestationConformance.md): Conformance

- [SBoM.CycloneDX.V16.Declarations.Claim](SBoM.CycloneDX.V16.Declarations.Claim.md): CycloneDX Declarations.Claim model.
- [SBoM.CycloneDX.V16.Declarations.Evidence](SBoM.CycloneDX.V16.Declarations.Evidence.md): CycloneDX Declarations.Evidence model.
- [SBoM.CycloneDX.V16.Declarations.Evidence.Data](SBoM.CycloneDX.V16.Declarations.Evidence.Data.md): CycloneDX Declarations.Evidence.Data model.
- [SBoM.CycloneDX.V16.Declarations.Evidence.Data.Contents](SBoM.CycloneDX.V16.Declarations.Evidence.Data.Contents.md): CycloneDX Declarations.Evidence.Data.Contents model.
- [SBoM.CycloneDX.V16.Declarations.Targets](SBoM.CycloneDX.V16.Declarations.Targets.md): CycloneDX Declarations.Targets model.
- [SBoM.CycloneDX.V16.Definition](SBoM.CycloneDX.V16.Definition.md): CycloneDX Definition model.
- [SBoM.CycloneDX.V16.Definition.Standard](SBoM.CycloneDX.V16.Definition.Standard.md): A standard may consist of regulations, industry or organizational-specific standards, maturity models, best practices, or any other requirements which can be evaluated against or attested to.

- [SBoM.CycloneDX.V16.Definition.Standard.Level](SBoM.CycloneDX.V16.Definition.Standard.Level.md): CycloneDX Definition.Standard.Level model.
- [SBoM.CycloneDX.V16.Definition.Standard.Requirement](SBoM.CycloneDX.V16.Definition.Standard.Requirement.md): CycloneDX Definition.Standard.Requirement model.
- [SBoM.CycloneDX.V16.Dependency](SBoM.CycloneDX.V16.Dependency.md): Defines the direct dependencies of a component, service, or the components provided/implemented by a given component. Components or services that do not have their own dependencies must be declared as empty elements within the graph. Components or services that are not represented in the dependency graph may have unknown dependencies. It is recommended that implementations assume this to be opaque and not an indicator of an object being dependency-free. It is recommended to leverage compositions to indicate unknown dependency graphs.

- [SBoM.CycloneDX.V16.Diff](SBoM.CycloneDX.V16.Diff.md): The patch file (or diff) that shows changes. Refer to https://en.wikipedia.org/wiki/Diff

- [SBoM.CycloneDX.V16.EnergyMeasureType](SBoM.CycloneDX.V16.EnergyMeasureType.md): A measure of energy.

- [SBoM.CycloneDX.V16.EnergyMeasureType.EnergyMeasureUnitType](SBoM.CycloneDX.V16.EnergyMeasureType.EnergyMeasureUnitType.md): CycloneDX EnergyMeasureType.EnergyMeasureUnitType model.
- [SBoM.CycloneDX.V16.EnergyProviderType](SBoM.CycloneDX.V16.EnergyProviderType.md): Describes the physical provider of energy used for model development or operations.

- [SBoM.CycloneDX.V16.EnergyProviderType.EnergySourceType](SBoM.CycloneDX.V16.EnergyProviderType.EnergySourceType.md): CycloneDX EnergyProviderType.EnergySourceType model.
- [SBoM.CycloneDX.V16.EnvironmentVars](SBoM.CycloneDX.V16.EnvironmentVars.md): CycloneDX EnvironmentVars model.
- [SBoM.CycloneDX.V16.Event](SBoM.CycloneDX.V16.Event.md): Represents something that happened that may trigger a response.

- [SBoM.CycloneDX.V16.Evidence](SBoM.CycloneDX.V16.Evidence.md): Provides the ability to document evidence collected through various forms of extraction or analysis.

- [SBoM.CycloneDX.V16.EvidenceCopyright](SBoM.CycloneDX.V16.EvidenceCopyright.md): CycloneDX EvidenceCopyright model.
- [SBoM.CycloneDX.V16.EvidenceFieldType](SBoM.CycloneDX.V16.EvidenceFieldType.md): buf:lint:ignore ENUM_VALUE_PREFIX -- Enum value names should be prefixed with "EVIDENCE_FIELD_TYPE_"

- [SBoM.CycloneDX.V16.EvidenceIdentity](SBoM.CycloneDX.V16.EvidenceIdentity.md): CycloneDX EvidenceIdentity model.
- [SBoM.CycloneDX.V16.EvidenceMethods](SBoM.CycloneDX.V16.EvidenceMethods.md): CycloneDX EvidenceMethods model.
- [SBoM.CycloneDX.V16.EvidenceOccurrences](SBoM.CycloneDX.V16.EvidenceOccurrences.md): CycloneDX EvidenceOccurrences model.
- [SBoM.CycloneDX.V16.EvidenceTechnique](SBoM.CycloneDX.V16.EvidenceTechnique.md): CycloneDX EvidenceTechnique model.
- [SBoM.CycloneDX.V16.ExternalReference](SBoM.CycloneDX.V16.ExternalReference.md): External references provide a way to document systems, sites, and information that may be relevant but are not included with the BOM. They may also establish specific relationships within or external to the BOM.

- [SBoM.CycloneDX.V16.ExternalReferenceType](SBoM.CycloneDX.V16.ExternalReferenceType.md): CycloneDX ExternalReferenceType model.
- [SBoM.CycloneDX.V16.Formula](SBoM.CycloneDX.V16.Formula.md): Describes workflows and resources that captures rules and other aspects of how the associated BOM component or service was formed.

- [SBoM.CycloneDX.V16.GraphicsCollection](SBoM.CycloneDX.V16.GraphicsCollection.md): A collection of graphics that represent various measurements.

- [SBoM.CycloneDX.V16.GraphicsCollection.Graphic](SBoM.CycloneDX.V16.GraphicsCollection.Graphic.md): CycloneDX GraphicsCollection.Graphic model.
- [SBoM.CycloneDX.V16.Hash](SBoM.CycloneDX.V16.Hash.md): Specifies the file hash of the component

- [SBoM.CycloneDX.V16.HashAlg](SBoM.CycloneDX.V16.HashAlg.md): CycloneDX HashAlg model.
- [SBoM.CycloneDX.V16.IdentifiableAction](SBoM.CycloneDX.V16.IdentifiableAction.md): CycloneDX IdentifiableAction model.
- [SBoM.CycloneDX.V16.ImpactAnalysisJustification](SBoM.CycloneDX.V16.ImpactAnalysisJustification.md): CycloneDX ImpactAnalysisJustification model.
- [SBoM.CycloneDX.V16.ImpactAnalysisState](SBoM.CycloneDX.V16.ImpactAnalysisState.md): CycloneDX ImpactAnalysisState model.
- [SBoM.CycloneDX.V16.InputType](SBoM.CycloneDX.V16.InputType.md): Type that represents various input data types and formats.

- [SBoM.CycloneDX.V16.Issue](SBoM.CycloneDX.V16.Issue.md): An individual issue that has been resolved.

- [SBoM.CycloneDX.V16.IssueClassification](SBoM.CycloneDX.V16.IssueClassification.md): CycloneDX IssueClassification model.
- [SBoM.CycloneDX.V16.License](SBoM.CycloneDX.V16.License.md): Specifies the details and attributes related to a software license. It can either include a valid SPDX license identifier or a named license, along with additional properties such as license acknowledgment, comprehensive commercial licensing information, and the full text of the license.

- [SBoM.CycloneDX.V16.LicenseAcknowledgementEnumeration](SBoM.CycloneDX.V16.LicenseAcknowledgementEnumeration.md): Declared licenses and concluded licenses represent two different stages in the licensing process within software development. Declared licenses refer to the initial intention of the software authors regarding the licensing terms under which their code is released. On the other hand, concluded licenses are the result of a comprehensive analysis of the project's codebase to identify and confirm the actual licenses of the components used, which may differ from the initially declared licenses. While declared licenses provide an upfront indication of the licensing intentions, concluded licenses offer a more thorough understanding of the actual licensing within a project, facilitating proper compliance and risk management. Observed licenses are defined in `@.evidence.licenses`. Observed licenses form the evidence necessary to substantiate a concluded license.

- [SBoM.CycloneDX.V16.LicenseChoice](SBoM.CycloneDX.V16.LicenseChoice.md): CycloneDX LicenseChoice model.
- [SBoM.CycloneDX.V16.Licensing](SBoM.CycloneDX.V16.Licensing.md): CycloneDX Licensing model.
- [SBoM.CycloneDX.V16.LicensingTypeEnum](SBoM.CycloneDX.V16.LicensingTypeEnum.md): buf:lint:ignore ENUM_VALUE_PREFIX -- Enum value names should be prefixed with "LICENSING_TYPE_ENUM_"

- [SBoM.CycloneDX.V16.LifecyclePhase](SBoM.CycloneDX.V16.LifecyclePhase.md): CycloneDX LifecyclePhase model.
- [SBoM.CycloneDX.V16.Lifecycles](SBoM.CycloneDX.V16.Lifecycles.md): CycloneDX Lifecycles model.
- [SBoM.CycloneDX.V16.Metadata](SBoM.CycloneDX.V16.Metadata.md): CycloneDX Metadata model.
- [SBoM.CycloneDX.V16.ModelCard](SBoM.CycloneDX.V16.ModelCard.md): *
A model card describes the intended uses of a machine learning model and potential limitations, including biases and ethical considerations. Model cards typically contain the training parameters, which datasets were used to train the model, performance metrics, and other relevant data useful for ML transparency. This object SHOULD be specified for any component of type `machine-learning-model` and must not be specified for other component types.
- [SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations](SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.md): CycloneDX ModelCard.ModelCardConsiderations model.
- [SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.EnergyConsumption](SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.EnergyConsumption.md): Describes energy consumption information incurred for the specified lifecycle activity.

- [SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.EnergyConsumption.ActivityType](SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.EnergyConsumption.ActivityType.md): An activity that is part of a machine learning model development or operational lifecycle.

- [SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.EnvironmentalConsiderations](SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.EnvironmentalConsiderations.md): CycloneDX ModelCard.ModelCardConsiderations.EnvironmentalConsiderations model.
- [SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.EthicalConsiderations](SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.EthicalConsiderations.md): CycloneDX ModelCard.ModelCardConsiderations.EthicalConsiderations model.
- [SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.FairnessAssessments](SBoM.CycloneDX.V16.ModelCard.ModelCardConsiderations.FairnessAssessments.md): CycloneDX ModelCard.ModelCardConsiderations.FairnessAssessments model.
- [SBoM.CycloneDX.V16.ModelCard.ModelParameters](SBoM.CycloneDX.V16.ModelCard.ModelParameters.md): CycloneDX ModelCard.ModelParameters model.
- [SBoM.CycloneDX.V16.ModelCard.ModelParameters.Approach](SBoM.CycloneDX.V16.ModelCard.ModelParameters.Approach.md): CycloneDX ModelCard.ModelParameters.Approach model.
- [SBoM.CycloneDX.V16.ModelCard.ModelParameters.Datasets](SBoM.CycloneDX.V16.ModelCard.ModelParameters.Datasets.md): CycloneDX ModelCard.ModelParameters.Datasets model.
- [SBoM.CycloneDX.V16.ModelCard.ModelParameters.MachineLearningInputOutputParameters](SBoM.CycloneDX.V16.ModelCard.ModelParameters.MachineLearningInputOutputParameters.md): CycloneDX ModelCard.ModelParameters.MachineLearningInputOutputParameters model.
- [SBoM.CycloneDX.V16.ModelCard.QuantitativeAnalysis](SBoM.CycloneDX.V16.ModelCard.QuantitativeAnalysis.md): CycloneDX ModelCard.QuantitativeAnalysis model.
- [SBoM.CycloneDX.V16.ModelCard.QuantitativeAnalysis.PerformanceMetrics](SBoM.CycloneDX.V16.ModelCard.QuantitativeAnalysis.PerformanceMetrics.md): CycloneDX ModelCard.QuantitativeAnalysis.PerformanceMetrics model.
- [SBoM.CycloneDX.V16.ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval](SBoM.CycloneDX.V16.ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval.md): CycloneDX ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval model.
- [SBoM.CycloneDX.V16.ModelParameterApproachType](SBoM.CycloneDX.V16.ModelParameterApproachType.md): CycloneDX ModelParameterApproachType model.
- [SBoM.CycloneDX.V16.Note](SBoM.CycloneDX.V16.Note.md): A note containing the locale and content.

- [SBoM.CycloneDX.V16.OrganizationalContact](SBoM.CycloneDX.V16.OrganizationalContact.md): CycloneDX OrganizationalContact model.
- [SBoM.CycloneDX.V16.OrganizationalEntity](SBoM.CycloneDX.V16.OrganizationalEntity.md): CycloneDX OrganizationalEntity model.
- [SBoM.CycloneDX.V16.OrganizationalEntityOrContact](SBoM.CycloneDX.V16.OrganizationalEntityOrContact.md): EITHER an organization OR an individual

- [SBoM.CycloneDX.V16.OutputType](SBoM.CycloneDX.V16.OutputType.md): Type that represents various output data types and formats.

- [SBoM.CycloneDX.V16.OutputType.OutputTypeType](SBoM.CycloneDX.V16.OutputType.OutputTypeType.md): buf:lint:ignore ENUM_VALUE_PREFIX -- Enum value names should be prefixed with "OUTPUT_TYPE_TYPE_"

- [SBoM.CycloneDX.V16.Parameter](SBoM.CycloneDX.V16.Parameter.md): A representation of a functional parameter.

- [SBoM.CycloneDX.V16.Patch](SBoM.CycloneDX.V16.Patch.md): Specifies an individual patch

- [SBoM.CycloneDX.V16.PatchClassification](SBoM.CycloneDX.V16.PatchClassification.md): CycloneDX PatchClassification model.
- [SBoM.CycloneDX.V16.Pedigree](SBoM.CycloneDX.V16.Pedigree.md): Component pedigree is a way to document complex supply chain scenarios where components are created, distributed, modified, redistributed, combined with other components, etc. Pedigree supports viewing this complex chain from the beginning, the end, or anywhere in the middle. It also provides a way to document variants where the exact relation may not be known.

- [SBoM.CycloneDX.V16.PostalAddressType](SBoM.CycloneDX.V16.PostalAddressType.md): An address used to identify a contactable location.

- [SBoM.CycloneDX.V16.ProofOfConcept](SBoM.CycloneDX.V16.ProofOfConcept.md): CycloneDX ProofOfConcept model.
- [SBoM.CycloneDX.V16.Property](SBoM.CycloneDX.V16.Property.md): Specifies a property

- [SBoM.CycloneDX.V16.ReleaseNotes](SBoM.CycloneDX.V16.ReleaseNotes.md): CycloneDX ReleaseNotes model.
- [SBoM.CycloneDX.V16.ResourceReferenceChoice](SBoM.CycloneDX.V16.ResourceReferenceChoice.md): Type that permits a choice to reference a resource using an iternal bom-ref identifier or an external reference.

- [SBoM.CycloneDX.V16.Scope](SBoM.CycloneDX.V16.Scope.md): CycloneDX Scope model.
- [SBoM.CycloneDX.V16.ScoreMethod](SBoM.CycloneDX.V16.ScoreMethod.md): CycloneDX ScoreMethod model.
- [SBoM.CycloneDX.V16.Service](SBoM.CycloneDX.V16.Service.md): CycloneDX Service model.
- [SBoM.CycloneDX.V16.Severity](SBoM.CycloneDX.V16.Severity.md): Textual representation of the severity of the vulnerability adopted by the analysis method. If the analysis method uses values other than what is provided, the user is expected to translate appropriately.

- [SBoM.CycloneDX.V16.Source](SBoM.CycloneDX.V16.Source.md): The source of the issue where it is documented.

- [SBoM.CycloneDX.V16.Step](SBoM.CycloneDX.V16.Step.md): Executes specific commands or tools in order to accomplish its owning task as part of a sequence.

- [SBoM.CycloneDX.V16.Swid](SBoM.CycloneDX.V16.Swid.md): Specifies metadata and content for ISO-IEC 19770-2 Software Identification (SWID) Tags.

- [SBoM.CycloneDX.V16.Task](SBoM.CycloneDX.V16.Task.md): Describes the inputs, sequence of steps and resources used to accomplish a task and its output.

- [SBoM.CycloneDX.V16.TaskType](SBoM.CycloneDX.V16.TaskType.md): CycloneDX TaskType model.
- [SBoM.CycloneDX.V16.Tool](SBoM.CycloneDX.V16.Tool.md): Specifies a tool (manual or automated).

- [SBoM.CycloneDX.V16.Trigger](SBoM.CycloneDX.V16.Trigger.md): Represents a resource that can conditionally activate (or fire) tasks based upon associated events and their data.

- [SBoM.CycloneDX.V16.Trigger.TriggerType](SBoM.CycloneDX.V16.Trigger.TriggerType.md): CycloneDX Trigger.TriggerType model.
- [SBoM.CycloneDX.V16.Volume](SBoM.CycloneDX.V16.Volume.md): An identifiable, logical unit of data storage tied to a physical device.

- [SBoM.CycloneDX.V16.Volume.VolumeMode](SBoM.CycloneDX.V16.Volume.VolumeMode.md): CycloneDX Volume.VolumeMode model.
- [SBoM.CycloneDX.V16.Vulnerability](SBoM.CycloneDX.V16.Vulnerability.md): Defines a weakness in a component or service that could be exploited or triggered by a threat source.

- [SBoM.CycloneDX.V16.VulnerabilityAffectedStatus](SBoM.CycloneDX.V16.VulnerabilityAffectedStatus.md): The vulnerability status of a given version or range of versions of a product. The statuses 'affected' and 'unaffected' indicate that the version is affected or unaffected by the vulnerability. The status 'unknown' indicates that it is unknown or unspecified whether the given version is affected. There can be many reasons for an 'unknown' status, including that an investigation has not been undertaken or that a vendor has not disclosed the status.

- [SBoM.CycloneDX.V16.VulnerabilityAffectedVersions](SBoM.CycloneDX.V16.VulnerabilityAffectedVersions.md): CycloneDX VulnerabilityAffectedVersions model.
- [SBoM.CycloneDX.V16.VulnerabilityAffects](SBoM.CycloneDX.V16.VulnerabilityAffects.md): CycloneDX VulnerabilityAffects model.
- [SBoM.CycloneDX.V16.VulnerabilityAnalysis](SBoM.CycloneDX.V16.VulnerabilityAnalysis.md): CycloneDX VulnerabilityAnalysis model.
- [SBoM.CycloneDX.V16.VulnerabilityCredits](SBoM.CycloneDX.V16.VulnerabilityCredits.md): CycloneDX VulnerabilityCredits model.
- [SBoM.CycloneDX.V16.VulnerabilityRating](SBoM.CycloneDX.V16.VulnerabilityRating.md): CycloneDX VulnerabilityRating model.
- [SBoM.CycloneDX.V16.VulnerabilityReference](SBoM.CycloneDX.V16.VulnerabilityReference.md): CycloneDX VulnerabilityReference model.
- [SBoM.CycloneDX.V16.VulnerabilityResponse](SBoM.CycloneDX.V16.VulnerabilityResponse.md): CycloneDX VulnerabilityResponse model.
- [SBoM.CycloneDX.V16.Workflow](SBoM.CycloneDX.V16.Workflow.md): A specialized orchestration task.

- [SBoM.CycloneDX.V16.Workspace](SBoM.CycloneDX.V16.Workspace.md): A named filesystem or data resource shareable by workflow tasks.

- [SBoM.CycloneDX.V16.Workspace.AccessMode](SBoM.CycloneDX.V16.Workspace.AccessMode.md): CycloneDX Workspace.AccessMode model.
- [SBoM.CycloneDX.V17.Advisory](SBoM.CycloneDX.V17.Advisory.md): Title and location where advisory information can be obtained. An advisory is a notification of a threat to a component, service, or system.

- [SBoM.CycloneDX.V17.Aggregate](SBoM.CycloneDX.V17.Aggregate.md): CycloneDX Aggregate model.
- [SBoM.CycloneDX.V17.Annotation](SBoM.CycloneDX.V17.Annotation.md): CycloneDX Annotation model.
- [SBoM.CycloneDX.V17.AnnotatorChoice](SBoM.CycloneDX.V17.AnnotatorChoice.md): CycloneDX AnnotatorChoice model.
- [SBoM.CycloneDX.V17.Asserter](SBoM.CycloneDX.V17.Asserter.md): CycloneDX Asserter model.
- [SBoM.CycloneDX.V17.AttachedText](SBoM.CycloneDX.V17.AttachedText.md): Specifies attributes of the text

- [SBoM.CycloneDX.V17.Bom](SBoM.CycloneDX.V17.Bom.md): CycloneDX Bom model.
- [SBoM.CycloneDX.V17.CO2MeasureType](SBoM.CycloneDX.V17.CO2MeasureType.md): A measure of carbon dioxide (CO2).

- [SBoM.CycloneDX.V17.CO2MeasureType.CO2MeasureUnitType](SBoM.CycloneDX.V17.CO2MeasureType.CO2MeasureUnitType.md): CycloneDX CO2MeasureType.CO2MeasureUnitType model.
- [SBoM.CycloneDX.V17.Callstack](SBoM.CycloneDX.V17.Callstack.md): CycloneDX Callstack model.
- [SBoM.CycloneDX.V17.Callstack.Frames](SBoM.CycloneDX.V17.Callstack.Frames.md): CycloneDX Callstack.Frames model.
- [SBoM.CycloneDX.V17.Citation](SBoM.CycloneDX.V17.Citation.md): Details a specific attribution of data within the BOM to a contributing entity or process.

- [SBoM.CycloneDX.V17.Citation.Expressions](SBoM.CycloneDX.V17.Citation.Expressions.md): CycloneDX Citation.Expressions model.
- [SBoM.CycloneDX.V17.Citation.Pointers](SBoM.CycloneDX.V17.Citation.Pointers.md): CycloneDX Citation.Pointers model.
- [SBoM.CycloneDX.V17.Classification](SBoM.CycloneDX.V17.Classification.md): CycloneDX Classification model.
- [SBoM.CycloneDX.V17.Command](SBoM.CycloneDX.V17.Command.md): CycloneDX Command model.
- [SBoM.CycloneDX.V17.Commit](SBoM.CycloneDX.V17.Commit.md): CycloneDX Commit model.
- [SBoM.CycloneDX.V17.Component](SBoM.CycloneDX.V17.Component.md): CycloneDX Component model.
- [SBoM.CycloneDX.V17.ComponentData](SBoM.CycloneDX.V17.ComponentData.md): CycloneDX ComponentData model.
- [SBoM.CycloneDX.V17.ComponentData.ComponentDataContents](SBoM.CycloneDX.V17.ComponentData.ComponentDataContents.md): CycloneDX ComponentData.ComponentDataContents model.
- [SBoM.CycloneDX.V17.ComponentDataType](SBoM.CycloneDX.V17.ComponentDataType.md): CycloneDX ComponentDataType model.
- [SBoM.CycloneDX.V17.Composition](SBoM.CycloneDX.V17.Composition.md): CycloneDX Composition model.
- [SBoM.CycloneDX.V17.Condition](SBoM.CycloneDX.V17.Condition.md): A condition that was used to determine a trigger should be activated.

- [SBoM.CycloneDX.V17.CryptoProperties](SBoM.CycloneDX.V17.CryptoProperties.md): "Cryptographic Properties

- [SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties](SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.md): Algorithm Propertie

- [SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoAlgorithmFunction](SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoAlgorithmFunction.md): Cryptographic functions

- [SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoAlgorithmMode](SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoAlgorithmMode.md): Mode

- [SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoAlgorithmPadding](SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoAlgorithmPadding.md): Padding

- [SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoExecutionEnvironment](SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoExecutionEnvironment.md): Execution Environment

- [SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoImplementationPlatform](SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoImplementationPlatform.md): Implementation platform

- [SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoPrimitive](SBoM.CycloneDX.V17.CryptoProperties.AlgorithmProperties.CryptoPrimitive.md): Primitive

- [SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions](SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.md): Certificate Extensions

- [SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.CommonExtension](SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.CommonExtension.md): Common extension with predefined name

- [SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.CommonExtensionName](SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.CommonExtensionName.md): Common extension names

- [SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.CustomExtension](SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.CustomExtension.md): Custom extension with user-defined name

- [SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.Extension](SBoM.CycloneDX.V17.CryptoProperties.CertificateExtensions.Extension.md): Extension represents either a common extension or a custom extension

- [SBoM.CycloneDX.V17.CryptoProperties.CertificateProperties](SBoM.CycloneDX.V17.CryptoProperties.CertificateProperties.md): Certificate Properties

- [SBoM.CycloneDX.V17.CryptoProperties.CertificateState](SBoM.CycloneDX.V17.CryptoProperties.CertificateState.md): Certificate State

- [SBoM.CycloneDX.V17.CryptoProperties.CertificateState.PredefinedState](SBoM.CycloneDX.V17.CryptoProperties.CertificateState.PredefinedState.md): Pre-defined certificate states

- [SBoM.CycloneDX.V17.CryptoProperties.CryptoAssetType](SBoM.CycloneDX.V17.CryptoProperties.CryptoAssetType.md): Asset Type

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.md): Protocol Properties

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.CryptoProtocolCipherSuite](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.CryptoProtocolCipherSuite.md): Object representing a cipher suite

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.CryptoProtocolType](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.CryptoProtocolType.md): CycloneDX CryptoProperties.ProtocolProperties.CryptoProtocolType model.
- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypes](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypes.md): DEPRECATED - DO NOT USE - This will be removed in a future version.
IKEv2 Transform Types

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.md): IKEv2 Transform Types Detailed

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Auth](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Auth.md): IKEv2 Authentication method

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Encr](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Encr.md): IKEv2 Encryption Algorithm (ENCR)

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Integ](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Integ.md): IKEv2 Integrity Algorithm (INTEG)

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Ke](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Ke.md): IKEv2 Key Exchange Method (KE)

- [SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Prf](SBoM.CycloneDX.V17.CryptoProperties.ProtocolProperties.Ikev2TransformTypesDetailed.Prf.md): IKEv2 Pseudorandom Function (PRF)

- [SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptoMaterialProperties](SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptoMaterialProperties.md): Related Cryptographic Material Properties

- [SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedSecuredBy](SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedSecuredBy.md): Secured By

- [SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedState](SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedState.md): State

- [SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedType](SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptoMaterialProperties.CryptoRelatedType.md): relatedCryptoMaterialType

- [SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptographicAssets](SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptographicAssets.md): Related Cryptographic Assets

- [SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptographicAssets.RelatedCryptographicAsset](SBoM.CycloneDX.V17.CryptoProperties.RelatedCryptographicAssets.RelatedCryptographicAsset.md): Related Cryptographic Asset

- [SBoM.CycloneDX.V17.DataFlow](SBoM.CycloneDX.V17.DataFlow.md): Specifies the data flow.

- [SBoM.CycloneDX.V17.DataFlowDirection](SBoM.CycloneDX.V17.DataFlowDirection.md): Specifies the flow direction of the data. Valid values are: inbound, outbound, bi-directional, and unknown. Direction is relative to the service. Inbound flow states that data enters the service. Outbound flow states that data leaves the service. Bi-directional states that data flows both ways, and unknown states that the direction is not known.
buf:lint:ignore ENUM_VALUE_PREFIX -- Enum value names should be prefixed with "DATA_FLOW_DIRECTION_"

- [SBoM.CycloneDX.V17.DataGovernance](SBoM.CycloneDX.V17.DataGovernance.md): Data governance captures information regarding data ownership, stewardship, and custodianship, providing insights into the individuals or entities responsible for managing, overseeing, and safeguarding the data throughout its lifecycle.

- [SBoM.CycloneDX.V17.DataGovernance.DataGovernanceResponsibleParty](SBoM.CycloneDX.V17.DataGovernance.DataGovernanceResponsibleParty.md): CycloneDX DataGovernance.DataGovernanceResponsibleParty model.
- [SBoM.CycloneDX.V17.Declarations](SBoM.CycloneDX.V17.Declarations.md): The list of declarations which describe the conformance to standards. Each declaration may include attestations, claims, and evidence.

- [SBoM.CycloneDX.V17.Declarations.Affirmation](SBoM.CycloneDX.V17.Declarations.Affirmation.md): CycloneDX Declarations.Affirmation model.
- [SBoM.CycloneDX.V17.Declarations.Affirmation.Signatory](SBoM.CycloneDX.V17.Declarations.Affirmation.Signatory.md): CycloneDX Declarations.Affirmation.Signatory model.
- [SBoM.CycloneDX.V17.Declarations.Assessor](SBoM.CycloneDX.V17.Declarations.Assessor.md): CycloneDX Declarations.Assessor model.
- [SBoM.CycloneDX.V17.Declarations.Attestation](SBoM.CycloneDX.V17.Declarations.Attestation.md): Attestation

- [SBoM.CycloneDX.V17.Declarations.Attestation.AttestationMap](SBoM.CycloneDX.V17.Declarations.Attestation.AttestationMap.md): Map

- [SBoM.CycloneDX.V17.Declarations.Attestation.AttestationMap.AttestationConfidence](SBoM.CycloneDX.V17.Declarations.Attestation.AttestationMap.AttestationConfidence.md): Confidence

- [SBoM.CycloneDX.V17.Declarations.Attestation.AttestationMap.AttestationConformance](SBoM.CycloneDX.V17.Declarations.Attestation.AttestationMap.AttestationConformance.md): Conformance

- [SBoM.CycloneDX.V17.Declarations.Claim](SBoM.CycloneDX.V17.Declarations.Claim.md): CycloneDX Declarations.Claim model.
- [SBoM.CycloneDX.V17.Declarations.Evidence](SBoM.CycloneDX.V17.Declarations.Evidence.md): CycloneDX Declarations.Evidence model.
- [SBoM.CycloneDX.V17.Declarations.Evidence.Data](SBoM.CycloneDX.V17.Declarations.Evidence.Data.md): CycloneDX Declarations.Evidence.Data model.
- [SBoM.CycloneDX.V17.Declarations.Evidence.Data.Contents](SBoM.CycloneDX.V17.Declarations.Evidence.Data.Contents.md): CycloneDX Declarations.Evidence.Data.Contents model.
- [SBoM.CycloneDX.V17.Declarations.Targets](SBoM.CycloneDX.V17.Declarations.Targets.md): CycloneDX Declarations.Targets model.
- [SBoM.CycloneDX.V17.Definition](SBoM.CycloneDX.V17.Definition.md): CycloneDX Definition model.
- [SBoM.CycloneDX.V17.Definition.Standard](SBoM.CycloneDX.V17.Definition.Standard.md): A standard may consist of regulations, industry or organizational-specific standards, maturity models, best practices, or any other requirements which can be evaluated against or attested to.

- [SBoM.CycloneDX.V17.Definition.Standard.Level](SBoM.CycloneDX.V17.Definition.Standard.Level.md): CycloneDX Definition.Standard.Level model.
- [SBoM.CycloneDX.V17.Definition.Standard.Requirement](SBoM.CycloneDX.V17.Definition.Standard.Requirement.md): CycloneDX Definition.Standard.Requirement model.
- [SBoM.CycloneDX.V17.Dependency](SBoM.CycloneDX.V17.Dependency.md): Defines the direct dependencies of a component, service, or the components provided/implemented by a given component. Components or services that do not have their own dependencies must be declared as empty elements within the graph. Components or services that are not represented in the dependency graph may have unknown dependencies. It is recommended that implementations assume this to be opaque and not an indicator of an object being dependency-free. It is recommended to leverage compositions to indicate unknown dependency graphs.

- [SBoM.CycloneDX.V17.Diff](SBoM.CycloneDX.V17.Diff.md): The patch file (or diff) that shows changes. Refer to https://en.wikipedia.org/wiki/Diff

- [SBoM.CycloneDX.V17.EnergyMeasureType](SBoM.CycloneDX.V17.EnergyMeasureType.md): A measure of energy.

- [SBoM.CycloneDX.V17.EnergyMeasureType.EnergyMeasureUnitType](SBoM.CycloneDX.V17.EnergyMeasureType.EnergyMeasureUnitType.md): CycloneDX EnergyMeasureType.EnergyMeasureUnitType model.
- [SBoM.CycloneDX.V17.EnergyProviderType](SBoM.CycloneDX.V17.EnergyProviderType.md): Describes the physical provider of energy used for model development or operations.

- [SBoM.CycloneDX.V17.EnergyProviderType.EnergySourceType](SBoM.CycloneDX.V17.EnergyProviderType.EnergySourceType.md): CycloneDX EnergyProviderType.EnergySourceType model.
- [SBoM.CycloneDX.V17.EnvironmentVars](SBoM.CycloneDX.V17.EnvironmentVars.md): CycloneDX EnvironmentVars model.
- [SBoM.CycloneDX.V17.Event](SBoM.CycloneDX.V17.Event.md): Represents something that happened that may trigger a response.

- [SBoM.CycloneDX.V17.Evidence](SBoM.CycloneDX.V17.Evidence.md): Provides the ability to document evidence collected through various forms of extraction or analysis.

- [SBoM.CycloneDX.V17.EvidenceCopyright](SBoM.CycloneDX.V17.EvidenceCopyright.md): CycloneDX EvidenceCopyright model.
- [SBoM.CycloneDX.V17.EvidenceFieldType](SBoM.CycloneDX.V17.EvidenceFieldType.md): buf:lint:ignore ENUM_VALUE_PREFIX -- Enum value names should be prefixed with "EVIDENCE_FIELD_TYPE_"

- [SBoM.CycloneDX.V17.EvidenceIdentity](SBoM.CycloneDX.V17.EvidenceIdentity.md): CycloneDX EvidenceIdentity model.
- [SBoM.CycloneDX.V17.EvidenceMethods](SBoM.CycloneDX.V17.EvidenceMethods.md): CycloneDX EvidenceMethods model.
- [SBoM.CycloneDX.V17.EvidenceOccurrences](SBoM.CycloneDX.V17.EvidenceOccurrences.md): CycloneDX EvidenceOccurrences model.
- [SBoM.CycloneDX.V17.EvidenceTechnique](SBoM.CycloneDX.V17.EvidenceTechnique.md): CycloneDX EvidenceTechnique model.
- [SBoM.CycloneDX.V17.ExternalReference](SBoM.CycloneDX.V17.ExternalReference.md): External references provide a way to document systems, sites, and information that may be relevant but are not included with the BOM. They may also establish specific relationships within or external to the BOM.

- [SBoM.CycloneDX.V17.ExternalReferenceType](SBoM.CycloneDX.V17.ExternalReferenceType.md): CycloneDX ExternalReferenceType model.
- [SBoM.CycloneDX.V17.Formula](SBoM.CycloneDX.V17.Formula.md): Describes workflows and resources that captures rules and other aspects of how the associated BOM component or service was formed.

- [SBoM.CycloneDX.V17.GraphicsCollection](SBoM.CycloneDX.V17.GraphicsCollection.md): A collection of graphics that represent various measurements.

- [SBoM.CycloneDX.V17.GraphicsCollection.Graphic](SBoM.CycloneDX.V17.GraphicsCollection.Graphic.md): CycloneDX GraphicsCollection.Graphic model.
- [SBoM.CycloneDX.V17.Hash](SBoM.CycloneDX.V17.Hash.md): Specifies the file hash of the component

- [SBoM.CycloneDX.V17.HashAlg](SBoM.CycloneDX.V17.HashAlg.md): CycloneDX HashAlg model.
- [SBoM.CycloneDX.V17.IdentifiableAction](SBoM.CycloneDX.V17.IdentifiableAction.md): CycloneDX IdentifiableAction model.
- [SBoM.CycloneDX.V17.ImpactAnalysisJustification](SBoM.CycloneDX.V17.ImpactAnalysisJustification.md): CycloneDX ImpactAnalysisJustification model.
- [SBoM.CycloneDX.V17.ImpactAnalysisState](SBoM.CycloneDX.V17.ImpactAnalysisState.md): CycloneDX ImpactAnalysisState model.
- [SBoM.CycloneDX.V17.InputType](SBoM.CycloneDX.V17.InputType.md): Type that represents various input data types and formats.

- [SBoM.CycloneDX.V17.Issue](SBoM.CycloneDX.V17.Issue.md): An individual issue that has been resolved.

- [SBoM.CycloneDX.V17.IssueClassification](SBoM.CycloneDX.V17.IssueClassification.md): CycloneDX IssueClassification model.
- [SBoM.CycloneDX.V17.License](SBoM.CycloneDX.V17.License.md): Specifies the details and attributes related to a software license. It can either include a valid SPDX license identifier or a named license, along with additional properties such as license acknowledgment, comprehensive commercial licensing information, and the full text of the license.

- [SBoM.CycloneDX.V17.LicenseAcknowledgementEnumeration](SBoM.CycloneDX.V17.LicenseAcknowledgementEnumeration.md): Declared licenses and concluded licenses represent two different stages in the licensing process within software development. Declared licenses refer to the initial intention of the software authors regarding the licensing terms under which their code is released. On the other hand, concluded licenses are the result of a comprehensive analysis of the project's codebase to identify and confirm the actual licenses of the components used, which may differ from the initially declared licenses. While declared licenses provide an upfront indication of the licensing intentions, concluded licenses offer a more thorough understanding of the actual licensing within a project, facilitating proper compliance and risk management. Observed licenses are defined in `@.evidence.licenses`. Observed licenses form the evidence necessary to substantiate a concluded license.

- [SBoM.CycloneDX.V17.LicenseChoice](SBoM.CycloneDX.V17.LicenseChoice.md): CycloneDX LicenseChoice model.
- [SBoM.CycloneDX.V17.LicenseExpressionDetailed](SBoM.CycloneDX.V17.LicenseExpressionDetailed.md): Specifies the details and attributes related to a software license.
It must be a valid SPDX license expression, along with additional properties such as license acknowledgment.

- [SBoM.CycloneDX.V17.LicenseExpressionDetailed.ExpressionDetails](SBoM.CycloneDX.V17.LicenseExpressionDetailed.ExpressionDetails.md): This document specifies the details and attributes related to a software license identifier. An SPDX expression may be a compound of license identifiers.
The `license_identifier` field serves as the key that identifies each record. Note that this key is not required to be unique, as the same license identifier could apply to multiple, different but similar license details, texts, etc.

- [SBoM.CycloneDX.V17.Licensing](SBoM.CycloneDX.V17.Licensing.md): CycloneDX Licensing model.
- [SBoM.CycloneDX.V17.LicensingTypeEnum](SBoM.CycloneDX.V17.LicensingTypeEnum.md): buf:lint:ignore ENUM_VALUE_PREFIX -- Enum value names should be prefixed with "LICENSING_TYPE_ENUM_"

- [SBoM.CycloneDX.V17.LifecyclePhase](SBoM.CycloneDX.V17.LifecyclePhase.md): CycloneDX LifecyclePhase model.
- [SBoM.CycloneDX.V17.Lifecycles](SBoM.CycloneDX.V17.Lifecycles.md): CycloneDX Lifecycles model.
- [SBoM.CycloneDX.V17.Metadata](SBoM.CycloneDX.V17.Metadata.md): CycloneDX Metadata model.
- [SBoM.CycloneDX.V17.Metadata.DistributionConstraints](SBoM.CycloneDX.V17.Metadata.DistributionConstraints.md): CycloneDX Metadata.DistributionConstraints model.
- [SBoM.CycloneDX.V17.ModelCard](SBoM.CycloneDX.V17.ModelCard.md): *
A model card describes the intended uses of a machine learning model and potential limitations, including biases and ethical considerations. Model cards typically contain the training parameters, which datasets were used to train the model, performance metrics, and other relevant data useful for ML transparency. This object SHOULD be specified for any component of type `machine-learning-model` and must not be specified for other component types.
- [SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations](SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.md): CycloneDX ModelCard.ModelCardConsiderations model.
- [SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.EnergyConsumption](SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.EnergyConsumption.md): Describes energy consumption information incurred for the specified lifecycle activity.

- [SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.EnergyConsumption.ActivityType](SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.EnergyConsumption.ActivityType.md): An activity that is part of a machine learning model development or operational lifecycle.

- [SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.EnvironmentalConsiderations](SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.EnvironmentalConsiderations.md): CycloneDX ModelCard.ModelCardConsiderations.EnvironmentalConsiderations model.
- [SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.EthicalConsiderations](SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.EthicalConsiderations.md): CycloneDX ModelCard.ModelCardConsiderations.EthicalConsiderations model.
- [SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.FairnessAssessments](SBoM.CycloneDX.V17.ModelCard.ModelCardConsiderations.FairnessAssessments.md): CycloneDX ModelCard.ModelCardConsiderations.FairnessAssessments model.
- [SBoM.CycloneDX.V17.ModelCard.ModelParameters](SBoM.CycloneDX.V17.ModelCard.ModelParameters.md): CycloneDX ModelCard.ModelParameters model.
- [SBoM.CycloneDX.V17.ModelCard.ModelParameters.Approach](SBoM.CycloneDX.V17.ModelCard.ModelParameters.Approach.md): CycloneDX ModelCard.ModelParameters.Approach model.
- [SBoM.CycloneDX.V17.ModelCard.ModelParameters.Datasets](SBoM.CycloneDX.V17.ModelCard.ModelParameters.Datasets.md): CycloneDX ModelCard.ModelParameters.Datasets model.
- [SBoM.CycloneDX.V17.ModelCard.ModelParameters.MachineLearningInputOutputParameters](SBoM.CycloneDX.V17.ModelCard.ModelParameters.MachineLearningInputOutputParameters.md): CycloneDX ModelCard.ModelParameters.MachineLearningInputOutputParameters model.
- [SBoM.CycloneDX.V17.ModelCard.QuantitativeAnalysis](SBoM.CycloneDX.V17.ModelCard.QuantitativeAnalysis.md): CycloneDX ModelCard.QuantitativeAnalysis model.
- [SBoM.CycloneDX.V17.ModelCard.QuantitativeAnalysis.PerformanceMetrics](SBoM.CycloneDX.V17.ModelCard.QuantitativeAnalysis.PerformanceMetrics.md): CycloneDX ModelCard.QuantitativeAnalysis.PerformanceMetrics model.
- [SBoM.CycloneDX.V17.ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval](SBoM.CycloneDX.V17.ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval.md): CycloneDX ModelCard.QuantitativeAnalysis.PerformanceMetrics.ConfidenceInterval model.
- [SBoM.CycloneDX.V17.ModelParameterApproachType](SBoM.CycloneDX.V17.ModelParameterApproachType.md): CycloneDX ModelParameterApproachType model.
- [SBoM.CycloneDX.V17.Note](SBoM.CycloneDX.V17.Note.md): A note containing the locale and content.

- [SBoM.CycloneDX.V17.OrganizationalContact](SBoM.CycloneDX.V17.OrganizationalContact.md): CycloneDX OrganizationalContact model.
- [SBoM.CycloneDX.V17.OrganizationalEntity](SBoM.CycloneDX.V17.OrganizationalEntity.md): CycloneDX OrganizationalEntity model.
- [SBoM.CycloneDX.V17.OrganizationalEntityOrContact](SBoM.CycloneDX.V17.OrganizationalEntityOrContact.md): EITHER an organization OR an individual

- [SBoM.CycloneDX.V17.OutputType](SBoM.CycloneDX.V17.OutputType.md): Type that represents various output data types and formats.

- [SBoM.CycloneDX.V17.OutputType.OutputTypeType](SBoM.CycloneDX.V17.OutputType.OutputTypeType.md): buf:lint:ignore ENUM_VALUE_PREFIX -- Enum value names should be prefixed with "OUTPUT_TYPE_TYPE_"

- [SBoM.CycloneDX.V17.Parameter](SBoM.CycloneDX.V17.Parameter.md): A representation of a functional parameter.

- [SBoM.CycloneDX.V17.Patch](SBoM.CycloneDX.V17.Patch.md): Specifies an individual patch

- [SBoM.CycloneDX.V17.PatchClassification](SBoM.CycloneDX.V17.PatchClassification.md): CycloneDX PatchClassification model.
- [SBoM.CycloneDX.V17.Patent](SBoM.CycloneDX.V17.Patent.md): A patent is a legal instrument, granted by an authority, that confers certain rights over an invention for a specified period, contingent on public disclosure and adherence to relevant legal requirements. The summary information in this object is aligned with [WIPO ST.96](https://www.wipo.int/standards/en/st96/) principles where applicable.

- [SBoM.CycloneDX.V17.PatentAssertion](SBoM.CycloneDX.V17.PatentAssertion.md): An assertion linking a patent or patent family to this component or service.

- [SBoM.CycloneDX.V17.PatentAssertionType](SBoM.CycloneDX.V17.PatentAssertionType.md): The type of assertion being made about the patent or patent family. Examples include ownership, licensing, and standards inclusion.

- [SBoM.CycloneDX.V17.PatentFamily](SBoM.CycloneDX.V17.PatentFamily.md): A patent family is a group of related patent applications or granted patents that cover the same or similar invention. These patents are filed in multiple jurisdictions to protect the invention across different regions or countries. A patent family typically includes patents that share a common priority date, originating from the same initial application, and may vary slightly in scope or claims to comply with regional legal frameworks. Fields align with WIPO ST.96 standards where applicable.

- [SBoM.CycloneDX.V17.PatentLegalStatus](SBoM.CycloneDX.V17.PatentLegalStatus.md): Indicates the current legal status of the patent or patent application, based on the WIPO ST.27 standard. This status reflects administrative, procedural, or legal events. Values include both active and inactive states and are useful for determining enforceability, procedural history, and maintenance status.

- [SBoM.CycloneDX.V17.PatentOrFamily](SBoM.CycloneDX.V17.PatentOrFamily.md): Either an individual patents or patent families.

- [SBoM.CycloneDX.V17.Pedigree](SBoM.CycloneDX.V17.Pedigree.md): Component pedigree is a way to document complex supply chain scenarios where components are created, distributed, modified, redistributed, combined with other components, etc. Pedigree supports viewing this complex chain from the beginning, the end, or anywhere in the middle. It also provides a way to document variants where the exact relation may not be known.

- [SBoM.CycloneDX.V17.PostalAddressType](SBoM.CycloneDX.V17.PostalAddressType.md): An address used to identify a contactable location.

- [SBoM.CycloneDX.V17.PriorityApplication](SBoM.CycloneDX.V17.PriorityApplication.md): The priorityApplication contains the essential data necessary to identify and reference an earlier patent filing for priority rights. In line with WIPO ST.96 guidelines, it includes the jurisdiction (office code), application number, and filing date-the three key elements that uniquely specify the priority application in a global patent context.

- [SBoM.CycloneDX.V17.ProofOfConcept](SBoM.CycloneDX.V17.ProofOfConcept.md): CycloneDX ProofOfConcept model.
- [SBoM.CycloneDX.V17.Property](SBoM.CycloneDX.V17.Property.md): Specifies a property

- [SBoM.CycloneDX.V17.ReleaseNotes](SBoM.CycloneDX.V17.ReleaseNotes.md): CycloneDX ReleaseNotes model.
- [SBoM.CycloneDX.V17.ResourceReferenceChoice](SBoM.CycloneDX.V17.ResourceReferenceChoice.md): Type that permits a choice to reference a resource using an iternal bom_ref identifier or an external reference.

- [SBoM.CycloneDX.V17.Scope](SBoM.CycloneDX.V17.Scope.md): CycloneDX Scope model.
- [SBoM.CycloneDX.V17.ScoreMethod](SBoM.CycloneDX.V17.ScoreMethod.md): CycloneDX ScoreMethod model.
- [SBoM.CycloneDX.V17.Service](SBoM.CycloneDX.V17.Service.md): CycloneDX Service model.
- [SBoM.CycloneDX.V17.Severity](SBoM.CycloneDX.V17.Severity.md): Textual representation of the severity of the vulnerability adopted by the analysis method. If the analysis method uses values other than what is provided, the user is expected to translate appropriately.

- [SBoM.CycloneDX.V17.Source](SBoM.CycloneDX.V17.Source.md): The source of the issue where it is documented.

- [SBoM.CycloneDX.V17.Step](SBoM.CycloneDX.V17.Step.md): Executes specific commands or tools in order to accomplish its owning task as part of a sequence.

- [SBoM.CycloneDX.V17.Swid](SBoM.CycloneDX.V17.Swid.md): Specifies metadata and content for ISO-IEC 19770-2 Software Identification (SWID) Tags.

- [SBoM.CycloneDX.V17.Task](SBoM.CycloneDX.V17.Task.md): Describes the inputs, sequence of steps and resources used to accomplish a task and its output.

- [SBoM.CycloneDX.V17.TaskType](SBoM.CycloneDX.V17.TaskType.md): CycloneDX TaskType model.
- [SBoM.CycloneDX.V17.TlpClassification](SBoM.CycloneDX.V17.TlpClassification.md): Traffic Light Protocol (TLP) is a classification system for identifying the potential risk associated with artefact, including whether it is subject to certain types of legal, financial, or technical threats. Refer to https://www.first.org/tlp/ for further information.
The default classification is "CLEAR"

- [SBoM.CycloneDX.V17.Tool](SBoM.CycloneDX.V17.Tool.md): Specifies a tool (manual or automated).

- [SBoM.CycloneDX.V17.Trigger](SBoM.CycloneDX.V17.Trigger.md): Represents a resource that can conditionally activate (or fire) tasks based upon associated events and their data.

- [SBoM.CycloneDX.V17.Trigger.TriggerType](SBoM.CycloneDX.V17.Trigger.TriggerType.md): CycloneDX Trigger.TriggerType model.
- [SBoM.CycloneDX.V17.Volume](SBoM.CycloneDX.V17.Volume.md): An identifiable, logical unit of data storage tied to a physical device.

- [SBoM.CycloneDX.V17.Volume.VolumeMode](SBoM.CycloneDX.V17.Volume.VolumeMode.md): CycloneDX Volume.VolumeMode model.
- [SBoM.CycloneDX.V17.Vulnerability](SBoM.CycloneDX.V17.Vulnerability.md): Defines a weakness in a component or service that could be exploited or triggered by a threat source.

- [SBoM.CycloneDX.V17.VulnerabilityAffectedStatus](SBoM.CycloneDX.V17.VulnerabilityAffectedStatus.md): The vulnerability status of a given version or range of versions of a product. The statuses 'affected' and 'unaffected' indicate that the version is affected or unaffected by the vulnerability. The status 'unknown' indicates that it is unknown or unspecified whether the given version is affected. There can be many reasons for an 'unknown' status, including that an investigation has not been undertaken or that a vendor has not disclosed the status.

- [SBoM.CycloneDX.V17.VulnerabilityAffectedVersions](SBoM.CycloneDX.V17.VulnerabilityAffectedVersions.md): CycloneDX VulnerabilityAffectedVersions model.
- [SBoM.CycloneDX.V17.VulnerabilityAffects](SBoM.CycloneDX.V17.VulnerabilityAffects.md): CycloneDX VulnerabilityAffects model.
- [SBoM.CycloneDX.V17.VulnerabilityAnalysis](SBoM.CycloneDX.V17.VulnerabilityAnalysis.md): CycloneDX VulnerabilityAnalysis model.
- [SBoM.CycloneDX.V17.VulnerabilityCredits](SBoM.CycloneDX.V17.VulnerabilityCredits.md): CycloneDX VulnerabilityCredits model.
- [SBoM.CycloneDX.V17.VulnerabilityRating](SBoM.CycloneDX.V17.VulnerabilityRating.md): CycloneDX VulnerabilityRating model.
- [SBoM.CycloneDX.V17.VulnerabilityReference](SBoM.CycloneDX.V17.VulnerabilityReference.md): CycloneDX VulnerabilityReference model.
- [SBoM.CycloneDX.V17.VulnerabilityResponse](SBoM.CycloneDX.V17.VulnerabilityResponse.md): CycloneDX VulnerabilityResponse model.
- [SBoM.CycloneDX.V17.Workflow](SBoM.CycloneDX.V17.Workflow.md): A specialized orchestration task.

- [SBoM.CycloneDX.V17.Workspace](SBoM.CycloneDX.V17.Workspace.md): A named filesystem or data resource shareable by workflow tasks.

- [SBoM.CycloneDX.V17.Workspace.AccessMode](SBoM.CycloneDX.V17.Workspace.AccessMode.md): CycloneDX Workspace.AccessMode model.

## Mix Tasks

- [mix sbom.cyclonedx](Mix.Tasks.Sbom.Cyclonedx.md): Mix SBoM 0.10.0
Erlang Ecosystem Foundation
Generate CycloneDX SBoM

