Add formal CycloneDX and SLSA schema validation #3

Open
opened 2026-09-17 15:42:21 +00:00 by duaneAI · 0 comments
Member

Validate supported CycloneDX 1.7 ML-BOM and SLSA provenance v1 envelopes against pinned schemas before semantic policy checks. Keep malformed-format findings distinct from missing security evidence.

Validate supported CycloneDX 1.7 ML-BOM and SLSA provenance v1 envelopes against pinned schemas before semantic policy checks. Keep malformed-format findings distinct from missing security evidence.
duaneAI added this to the Research Milestone 2 - Evaluation and Provenance milestone 2026-09-17 15:42:21 +00:00
duaneAI added the researchprovenance labels 2026-09-17 15:42:21 +00:00
Sign in to join this conversation.