Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion VDR_VEX/en/0x10-Introduction.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ standard began life in 2017 in the Open Web Application Security Project (OWASP)
matured into an OWASP Flagship project, has adopted a formal standardization process and governance model, and is
supported by the global information security community.

## Design Philosophy and Guiding Principals
## Design Philosophy and Guiding Principles
Simplicity of design is at the forefront of the CycloneDX philosophy. The format is easily approachable by a wide range
of technical and non-technical roles. CycloneDX is a full-stack BOM format with many advanced capabilities which are
achieved without sacrificing its design philosophy. Some guiding principals influencing its design include:
Expand Down
2 changes: 1 addition & 1 deletion VDR_VEX/en/0x20-Object-Model.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ prescriptive, can easily describe complex relationships, and is extensible to su

Within the root `bom` element, CycloneDX defines the following object types:

![BOM Metadata](../../images/Object-Model/CycloneDX-Object-Type-Overview_with-Attestations.svg)
![BOM Metadata](../../images/Object-Model/CycloneDX-Object-Type-Overview.svg)

The object types are arranged in order and contain (but are not limited to) the following types of data:

Expand Down
2 changes: 1 addition & 1 deletion VDR_VEX/en/0x30-VDR-Overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ Lorem ipsum dolor sit amet, consectetur adipiscing elit. Aliquam ipsum sapien, v

![VDR+VEX-BOM-Cascade.png](images/VDR+VEX-BOM-Cascade.svg)

## Some other section
## Alignment With Industry Standards
CycloneDX exceeds the data field requirements defined in [ISO/IEC 29147:2018](https://www.iso.org/standard/72311.html)
for vulnerability disclosure information and provides a simple path for including Vulnerability Exploitability eXchange
(VEX) information. VEX is covered is subsequent chapters.
Expand Down