From bfba6198f61573804d76eaf27df5288eeef119a2 Mon Sep 17 00:00:00 2001 From: Andreas Fehlner Date: Sun, 8 Nov 2026 08:36:40 +0100 Subject: [PATCH] fix(VDR_VEX): spelling, placeholder heading, and broken image reference - 'Guiding Principals' -> 'Guiding Principles' in the Introduction. - Replaced leftover placeholder heading 'Some other section' with 'Alignment With Industry Standards' (section covers ISO/IEC 29147 and NIST SP 800-161). - Object Model chapter referenced a non-existent image (CycloneDX-Object-Type-Overview_with-Attestations.svg); now points to the existing CycloneDX-Object-Type-Overview.svg. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: Andreas Fehlner --- VDR_VEX/en/0x10-Introduction.md | 2 +- VDR_VEX/en/0x20-Object-Model.md | 2 +- VDR_VEX/en/0x30-VDR-Overview.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/VDR_VEX/en/0x10-Introduction.md b/VDR_VEX/en/0x10-Introduction.md index bdb709de..26523cc7 100644 --- a/VDR_VEX/en/0x10-Introduction.md +++ b/VDR_VEX/en/0x10-Introduction.md @@ -6,7 +6,7 @@ standard began life in 2017 in the Open Web Application Security Project (OWASP) matured into an OWASP Flagship project, has adopted a formal standardization process and governance model, and is supported by the global information security community. -## Design Philosophy and Guiding Principals +## Design Philosophy and Guiding Principles Simplicity of design is at the forefront of the CycloneDX philosophy. The format is easily approachable by a wide range of technical and non-technical roles. CycloneDX is a full-stack BOM format with many advanced capabilities which are achieved without sacrificing its design philosophy. Some guiding principals influencing its design include: diff --git a/VDR_VEX/en/0x20-Object-Model.md b/VDR_VEX/en/0x20-Object-Model.md index cf33b70b..0b2b7d5e 100644 --- a/VDR_VEX/en/0x20-Object-Model.md +++ b/VDR_VEX/en/0x20-Object-Model.md @@ -5,7 +5,7 @@ prescriptive, can easily describe complex relationships, and is extensible to su Within the root `bom` element, CycloneDX defines the following object types: -![BOM Metadata](../../images/Object-Model/CycloneDX-Object-Type-Overview_with-Attestations.svg) +![BOM Metadata](../../images/Object-Model/CycloneDX-Object-Type-Overview.svg) The object types are arranged in order and contain (but are not limited to) the following types of data: diff --git a/VDR_VEX/en/0x30-VDR-Overview.md b/VDR_VEX/en/0x30-VDR-Overview.md index 838df284..c4d9402e 100644 --- a/VDR_VEX/en/0x30-VDR-Overview.md +++ b/VDR_VEX/en/0x30-VDR-Overview.md @@ -45,7 +45,7 @@ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam ipsum sapien, v ![VDR+VEX-BOM-Cascade.png](images/VDR+VEX-BOM-Cascade.svg) -## Some other section +## Alignment With Industry Standards CycloneDX exceeds the data field requirements defined in [ISO/IEC 29147:2018](https://www.iso.org/standard/72311.html) for vulnerability disclosure information and provides a simple path for including Vulnerability Exploitability eXchange (VEX) information. VEX is covered is subsequent chapters.