Skip to content

WIP: Proposed CycloneDX v2.0 additions to the AI/ML property Taxonomy - #175

Open
mrutkows wants to merge 8 commits into
CycloneDX:mainfrom
mrutkows:ai-ml-2.0-props
Open

WIP: Proposed CycloneDX v2.0 additions to the AI/ML property Taxonomy#175
mrutkows wants to merge 8 commits into
CycloneDX:mainfrom
mrutkows:ai-ml-2.0-props

Conversation

@mrutkows

@mrutkows mrutkows commented Jun 28, 2026

Copy link
Copy Markdown
Contributor

See proposed CycloneDX v2.0 AI/ML JSON schema (proposed): CycloneDX/specification#948

Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
@mrutkows mrutkows self-assigned this Jun 28, 2026
@mrutkows mrutkows added the enhancement New feature or request label Jun 28, 2026
mrutkows added 2 commits June 27, 2026 22:04
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
mrutkows added 4 commits July 8, 2026 11:41
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
@mrutkows
mrutkows marked this pull request as ready for review July 22, 2026 14:59
@mrutkows
mrutkows requested a review from a team as a code owner July 22, 2026 14:59
@mrutkows
mrutkows requested a review from stevespringett July 22, 2026 14:59
Comment thread cdx/ai-ml.md

| Property | Description |
| -------- | ----------- |
| `cdx:ai-ml:model:tokenizer` | Mark a component as a (model) tokenizer. _Boolean value_. </br> This property MAY appear once. |

@jkowalleck jkowalleck Jul 22, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why is cdx:ai-ml:model:tokenizer under cdx:ai-ml:model:language Namespace Taxonomy ?
It is supposed to be under cdx:ai-ml:model Namespace Taxonomy

@mrutkows mrutkows Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch Jan, I broke it back out as its own property table (as it appeared before this PR) and added an example as well.

@mrutkows
mrutkows requested a review from jkowalleck July 23, 2026 15:27
Comment thread cdx/ai-ml.md
```

### Example: Using multiple `cdx:ai-ml:model:language`
### `cdx:ai-ml:model:language` Namespace Taxonomy

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

somehow, this makes no sense.
the namespace is cdx:ai-ml:model:tokenizer and the properties are cdx:ai-ml:model:*

Comment thread cdx/ai-ml.md
| `cdx:ai-ml:model:parameter:count` | Total number of learned parameters for the model. This reflects the model's design and structure (e.g., number of layers in a neural network, nodes, and connectivity). </br> The value SHOULD use the industry-standard naming convention of number followed by one of the letters: `M` (Million), `B` (Billion) or `T` (Trillion). This property MAY appear once. |
| `cdx:ai-ml:model:parameter:tune_method` | Describes how the model was fine-tuned on or adapted to new data. Value SHOULD be of industry-standard keywords such as those [listed in the section below](#names-of-industry-standard-fine-tuning-methods). Value MUST be a single keyword (e.g., `lora`) or a comma separated list of keywords (e.g., `sft,rlhf`). </br> This property MAY appear multiple times. |
| `cdx:ai-ml:model:parameter:count` | Total number of learned parameters for the model. This reflects the model's design and structure (e.g., number of layers in a neural network, nodes, and connectivity). </br> The value SHOULD use the industry-standard naming convention of number followed by one of the letters: `M` (Million), `B` (Billion) or `T` (Trillion). May appear once. |
| `cdx:ai-ml:model:parameter:tune_method` | Describes how the model was fine-tuned on or adapted to new data. This property MAY appear multiple times. Value SHOULD be of industry-standard keywords such as those [listed in the section below](#names-of-industry-standard-fine-tuning-methods). Value MUST be a single keyword (e.g., `lora`) or a comma separated list of keywords (e.g., `sft,rlhf`). </br> This property MAY occur multiple times. |

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This property MAY appear multiple times.
and
This property MAY occur multiple times.

this are duplicates

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants