Draft talk:CycloneDX

This draft does not require a rating on Wikipedia's content assessment scale.
It is of interest to the following WikiProjects:

Computer security: Computing

This draft is within the scope of WikiProject Computer security, a collaborative effort to improve the coverage of computer security on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.Computer securityWikipedia:WikiProject Computer securityTemplate:WikiProject Computer securityComputer security

This draft is supported by WikiProject Computing.

Things you can help WikiProject Computer security with:

How you can help:

Add to your watchlist the project talk page! Post there for help with articles or to suggest articles that need work.
Request editing suggestions on your talk page by entering WikiProject_Computer_security into this template.
Check the article alerts to participate in deletion discussions, review Good Article nominees, and review draft articles.
Edit any articles that interest you. Recommended:
- Most popular articles that need the most work (last refreshed 1 August 2026)
- Popular articles (monthly top articles by views)
- High-importance stub-quality articles
- High-importance start-quality articles
- Mid-importance stub-quality articles
- Mid-importance start-quality articles
- Unknown-importance stub-quality articles
- Unknown-importance start-quality articles
Review changes to popular articles or changes to talk pages.
Replace deprecated archival service links.
Recategorize articles in Category:Security to more specific categories
Fix something on the list of articles that need cleanup, including:
- Clarification needed
- Rewrite needed
- Expansion needed
- Style editing needed
- Update needed
- Orphaned (add links from other articles to these articles)
- Conflict of interest
- Original research
- Promotional tone
- Biographies of living persons (BLP) articles lacking sources
- Cites no sources
- Cites unreliable sources
Review unreviewed articles, if you're a new pages patroller.

Of the 3629 articles in this project 2011 or 55% are marked for cleanup, with 4098 issues in total.

Editing resources:

Computer science

This draft is within the scope of WikiProject Computer science, a collaborative effort to improve the coverage of Computer science related articles on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.Computer scienceWikipedia:WikiProject Computer scienceTemplate:WikiProject Computer scienceComputer science

Things you can help WikiProject Computer science with:

Here are some tasks awaiting attention:

Article requests :
- Requested articles/Applied arts and sciences/Computer science, computing, and Internet
Cleanup :
- Computer science articles needing attention
- Computer science articles needing expert attention
Copyedit :
- Computing
Expand :
- Computer science
Infobox :
- Computer science articles without infoboxes
Maintain :
- Timeline of computing 2020–present
Photo :
- Find pictures for the biographies of computer scientists (see List of computer scientists)
- Computing articles needing images
Stubs :
- Computer science stubs
Unreferenced :
- WikiProject Computer science/Unreferenced BLPs
Project-related :
- Tag all relevant articles in Category:Computer science and sub-categories with {{WikiProject Computer science}}

The following reference(s) may be useful when improving this article in the future:

Wilson, Steve (September 2024). The Developer's Playbook for Large Language Model Security. O'Reilly Media. p. 118. ISBN 978-1-0981-6217-7. CycloneDX, managed by the OWSP Foundation, has become the most powerful standard for SBOMs.
Hughes, Chris; Turner, Tony (May 2023). Software Transparency: Supply Chain Security in an Era of a Software-Driven Society. John Wiley & Sons. p. 74. ISBN 978-1-394-15849-2.
Manzi Muneza, A. Redempta; Keefe, Aidan; O’Donoghue, Eric; Izurieta, Clemente; Reinhold, Ann Marie (4 March 2025). "SBOM Generation Tools and Formats Affect Compliance with US Standard". 2025 IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C): 81–88. doi:10.1109/SANER-C66551.2025.00019.
Halbritter, Andreas; Merli, Dominik (30 July 2024). "Accuracy Evaluation of SBOM Tools for Web Applications and System-Level Software". ARES '24: Proceedings of the 19th International Conference on Availability, Reliability and Security: 1–9. doi:10.1145/3664476.3670926.
Zhao, Abdul Ali Bangash, Tongxu Ge, Arshdeep Singh, Zitao Wang, Bram Adams, Zhimin; Bangash, Abdul Ali; Ge, Tongxu; Singh, Arshdeep; Wang, Zitao; Adams, Bram (11 Jun 2026). "The State of the SBOM Tool Ecosystems: A Comparative Analysis of SPDX and CycloneDX". Arxiv.{{cite journal}}: CS1 maint: multiple names: authors list (link)
NTIA Multistakeholder Process on Software Component Transparency Standards and Formats Working Group (2021). "Survey of Existing SBOM Formats and Standards - Version 2021" (PDF). ntia.gov. National Telecommunications and Information Administration.

Refideas

Latest comment: 1 month ago1 comment1 person in discussion

I added a Refideas template above with some publications that discuss CycloneDX, based on it being an SBOM standard recognized by the U.S. National Telecommunications and Information Administration. Unfortunately, I don't know enough about it to productively contribute to the article. I came to Wikipedia to learn more about it and was surprised to see that the draft submission had been rejected for not demonstrating notability by being discussed in third-party publications. Hopefully, in addition to providing references to help flesh out the article, this may also be used to make more clear to the reviewers that this is indeed notable. TJRC (talk) 23:52, 9 July 2026 (UTC)Reply