All registries
Industry consortium
CycloneDX Specification
CycloneDX
Security & cryptoCloud & APIs
WHY YOU NEED THIS
Many SCA tools default to CycloneDX JSON/XML alongside SPDX — ECMA-424 normative spec with VEX and attestations.
What It Is
OWASP-backed SBOM standard (ECMA-424) — lightweight bill of materials for application security, VEX, and supply chain analysis.
Taxonomy
By version: 1.5 · 1.6 · By use case: SBOM · VEX · Attestations · ML-BOM
Top-Level Categories
CycloneDX SBOMVEX (Vulnerability Exploitability)AttestationsECMA-424Tool center
Master Catalog
Sub-Indexes & Guides
Related Registry Sources
cyclonedxsbomvexecma-424