CycloneDX/transparency-exchange-api

View on GitHub

A standard API specification for exchanging supply chain artifacts and intelligence

Stars: 116
Forks: 23
Open beginner issues: 4
Indexed issues: 92
Avg merge: 2d 11h
Merged PRs (30d): 63

Dominant language: Shell
License: Apache-2.0
Last GitHub push: Sep 20, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

align on terminology Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

CycloneDX/transparency-exchange-api#393 · 1 comment · Opened Sep 24, 2026
Shorten and simplify clause 5 discovery Open

TEI Discovery

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

CycloneDX/transparency-exchange-api#392 · Opened Sep 24, 2026
Definition/explanation should come before use Open

TEI Discovery

Difficulty 1/5 Under an hour Newbie friendliness 90/100

CycloneDX/transparency-exchange-api#391 · Opened Sep 24, 2026
Broken link to well-known schema Open

Prio 1 TEI Discovery

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

CycloneDX/transparency-exchange-api#390 · Opened Sep 24, 2026
Unclear discovery 404-related requirement Open

TEI Discovery

Difficulty 1/5 1-3 hours Newbie friendliness 88/100

CycloneDX/transparency-exchange-api#389 · Opened Sep 24, 2026
TC54: Don't use "canonical " Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

CycloneDX/transparency-exchange-api#385 · Opened Sep 24, 2026
TC54: Add mention of "open source projects" alongside "vendors" Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

CycloneDX/transparency-exchange-api#384 · Opened Sep 24, 2026
TC54: Add non-normative explanation of "HTTP" and "https://" Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

CycloneDX/transparency-exchange-api#383 · 1 comment · Opened Sep 24, 2026
TC54: Remove "cyclonedx.org" from examples Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

CycloneDX/transparency-exchange-api#382 · Opened Sep 24, 2026
Clarify PURL canonicalization and UUID lowercase requirements in the TEI registry Open

Difficulty 1/5 1-3 hours Newbie friendliness 88/100

CycloneDX/transparency-exchange-api#380 · Opened Sep 24, 2026
Normative: add attestation to terms? Open

Difficulty 1/5 Under an hour Newbie friendliness 85/100

CycloneDX/transparency-exchange-api#351 · Opened Sep 23, 2026
Normative: "needs to" is not permitted requirement terminology Open

Difficulty 1/5 Under an hour Newbie friendliness 85/100

CycloneDX/transparency-exchange-api#343 · 1 reaction · Opened Sep 23, 2026
ISO needs non-IETF shall, must etc Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

CycloneDX/transparency-exchange-api#342 · 1 comment · Opened Sep 23, 2026
For ECMA, each document needs to not have a separate SCOPE, terminology and reference section Open

Difficulty 2/5 1-3 hours Newbie friendliness 30/100

CycloneDX/transparency-exchange-api#341 · Opened Sep 23, 2026
Use-cases are not ready Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

CycloneDX/transparency-exchange-api#340 · Opened Sep 23, 2026
Drop `sortField` and `sortOrder`: they block static hosting and buy consumers little Open

Backlog Prio 2

Difficulty 5/5 Over a week Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#324 · 12 comments · Opened Sep 20, 2026
CLE endpoints: return ECMA-428 events verbatim, define the projection as a subset Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#322 · 2 comments · Opened Sep 20, 2026
Artifact download: let HTTP do the rest Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

CycloneDX/transparency-exchange-api#321 · 1 comment · Opened Sep 20, 2026
Use composition for parent references and component-ref Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#317 · Opened Sep 20, 2026
Harmonise operationIds in openapi.yaml Open

OpenAPI spec

Difficulty 5/5 Over a week Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#312 · 2 comments · Opened Sep 19, 2026
THe tea well known schema - is it part of the PDF doc? Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#291 · 1 comment · Opened Sep 15, 2026
Constrain collection/artifact revision bounds and define "latest" Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

CycloneDX/transparency-exchange-api#287 · Opened Sep 15, 2026
Component has no required fields Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

CycloneDX/transparency-exchange-api#259 · Opened Aug 26, 2026
Need standardized API for TEA Artifact downloading Open

Prio 1 TEA Artifact

Difficulty 5/5 Over a week Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#246 · 1 comment · Opened May 10, 2026
Can we outside of artefact indicate content Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

CycloneDX/transparency-exchange-api#244 · 3 comments · Opened Apr 10, 2026
Support identifier on the TEA Artifact level Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#242 · 2 comments · 2 reactions · Opened Apr 3, 2026
Align with CycloneDX taxonomy Open

Backlog

Difficulty 5/5 Over a week Newbie friendliness 25/100

CycloneDX/transparency-exchange-api#230 · 1 reaction · Opened Mar 11, 2026
Add `required` contraints to schema objects Open

Prio 2

Difficulty 3/5 1-2 days Newbie friendliness 52/100

CycloneDX/transparency-exchange-api#223 · 2 comments · Opened Feb 25, 2026
Add examples to all schema objects Open

Prio 1

Difficulty 4/5 3-5 days Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#222 · 1 comment · Opened Feb 25, 2026
Compatibility between TEA and SCID Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

CycloneDX/transparency-exchange-api#214 · 1 comment · 1 reaction · Opened Feb 19, 2026
Guides for manufacturers: How to include TEIs with various product ecosystems Open

documentation

Difficulty 4/5 3-5 days Newbie friendliness 35/100

CycloneDX/transparency-exchange-api#203 · Opened Nov 11, 2025
USECASE: Third Party Aggregator Open

enhancement wontfix

Difficulty 5/5 Over a week Newbie friendliness 30/100

CycloneDX/transparency-exchange-api#202 · 1 comment · Opened Nov 10, 2025
Application-level TEA redirects Open

Backlog enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

CycloneDX/transparency-exchange-api#197 · Opened Oct 8, 2025
Proposal: Document discovery mechanism for IoT devices Open

documentation enhancement TEI Discovery

Difficulty 5/5 Over a week Newbie friendliness 30/100

CycloneDX/transparency-exchange-api#193 · 1 comment · Opened Jul 30, 2025
Add SKU TEI type Open

TEI Discovery

Difficulty 5/5 Over a week Newbie friendliness 15/100

CycloneDX/transparency-exchange-api#188 · 5 comments · Opened Jun 18, 2025
TEA release staging and releasing Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

CycloneDX/transparency-exchange-api#184 · Opened Jun 4, 2025
Publisher implementation guidelines Open

documentation Publish

Difficulty 5/5 Over a week Newbie friendliness 25/100

CycloneDX/transparency-exchange-api#183 · Opened Jun 3, 2025
Doc: Create use case and requirements on TEA Events Open

Backlog documentation TEA Events

Difficulty 4/5 3-5 days Newbie friendliness 30/100

CycloneDX/transparency-exchange-api#182 · 2 comments · Opened Jun 3, 2025
`date-format` used in OpenAPI Spec is not high enough resolution Open

OpenAPI spec Prio 2

Difficulty 3/5 1-2 days Newbie friendliness 42/100

CycloneDX/transparency-exchange-api#178 · 2 comments · Opened May 28, 2025
Create a Taxonomy Open

hackathon Prio 2

Difficulty 5/5 Over a week Newbie friendliness 20/100

CycloneDX/transparency-exchange-api#169 · 1 comment · Opened May 28, 2025
Discovery - Document other HTTP response codes for error scenarios Open

documentation hackathon Prio 1 TEI Discovery

CycloneDX/transparency-exchange-api#165 · 2 comments · 1 assignee · Opened May 28, 2025
Allow nesting Products Open

question TEA Product

Difficulty 5/5 Over a week Newbie friendliness 30/100

CycloneDX/transparency-exchange-api#156 · 14 comments · Opened May 13, 2025
Approach to Collections' Publisher API Open

Publish

Difficulty 5/5 Over a week Newbie friendliness 25/100

CycloneDX/transparency-exchange-api#152 · 3 comments · Opened May 11, 2025
Bring back Artifact author to the Spec Open

Prio 2 TEA Artifact

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

CycloneDX/transparency-exchange-api#149 · 6 comments · Opened May 10, 2025
Add reference to TEA objects from CycloneDX Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

CycloneDX/transparency-exchange-api#135 · 1 comment · Opened May 5, 2025
Add query parameters to `/release/{uuid}/collections` Open

enhancement Prio 2 TEA Collection

CycloneDX/transparency-exchange-api#132 · 3 comments · 1 assignee · Opened May 4, 2025
Add specification of release target Open

Prio 2 TEA Release

Difficulty 5/5 Over a week Newbie friendliness 25/100

CycloneDX/transparency-exchange-api#131 · 8 comments · 1 reaction · Opened May 4, 2025
pre-release flag name Open

Prio 2 TEA Release

Difficulty 5/5 Over a week Newbie friendliness 25/100

CycloneDX/transparency-exchange-api#108 · 2 comments · Opened Apr 10, 2025
Integration with PURL/SWID Open

Prio 2 TEA Component

Difficulty 1/5 Under an hour Newbie friendliness 45/100

CycloneDX/transparency-exchange-api#107 · Opened Mar 26, 2025
Integration of CLE Open

Prio 1 TEA Release

Difficulty 5/5 Over a week Newbie friendliness 20/100

CycloneDX/transparency-exchange-api#106 · 9 comments · Opened Mar 18, 2025

CycloneDX/transparency-exchange-api

Get new issues in your inbox