Проверка BOM-файлов на соответствие CycloneDX

★ 6.9 · testing

cyclonedx-spec-reviewer is a Claude Code skill that reviews cdxgen changes for CycloneDX schema compliance, semantic field correctness, and unnecessary custom properties across spec versions 1.5 through 2.0. It uses local JSON schemas — `bom-1.5`, `bom-1.6`, `bom-1.7`, and `cyclonedx-2.0-bundled` — alongside official CycloneDX property-taxonomy guidance. The skill should be applied to any pull request that touches BOM output, schema handling, validators, package-manager integrations, BOM enrichment, or custom properties. AI-BOM modeling receives dedicated scrutiny: the skill checks whether `formulation`, `modelCard`, `pedigree`, `evidence`, and `services` are used correctly instead of shifting standard semantics into custom properties. It is most useful for engineers building or reviewing cdxgen integrations and anyone responsible for SBOM generation and CycloneDX specification validation.