Кастомные свойства CycloneDX SBOM

★ 6.9 · documentation

custom-property-author is a Claude Code skill that guides defining and emitting CycloneDX cdx: custom properties in cdxgen output, enforcing correct namespacing, safe value shapes, and mandatory documentation. It applies four sequential gates: preferring standard CycloneDX fields (supplier, externalReferences, evidence, pedigree, hashes, etc.) over custom properties; following the cdx:<ecosystem>:<field> naming convention and rejecting unnamespaced or new internal: entries; keeping values secret-safe by emitting booleans, counts, or category labels instead of raw tokens, API keys, full command lines, or URLs with signature parameters; and requiring every new property to be registered in docs/CUSTOM_PROPERTIES.md — a build-breaking check enforced by lib/customProperties.poku.js. Use it when adding, changing, or reviewing cdx: properties on components, metadata, services, or evidence in SBOM generation workflows.