Issues

• Is there a way to integrate cyclonedx within Maven site reports?

  CycloneDX/cyclonedx-maven-plugin#710 · Filter by author ottlinger opened on Oct 12, 2026

• [help] Could you please tell us when this open-source component is expected to release a release version that supports CycloneDX 1.7?

  question
  CycloneDX/cyclonedx-maven-plugin#707 · Filter by author jessonlwang2 opened on Sep 22, 2026
  2

• Wrong recognized license

  CycloneDX/cyclonedx-maven-plugin#699 · Filter by author slawekjaranowski opened on Sep 5, 2026
  1

• Build the SBOM incrementally through the lifecycle

  major-rfe
  CycloneDX/cyclonedx-maven-plugin#683 · Filter by author ppkarwasz opened on Aug 25, 2026
  2

• Support npm dependency resolution for WebJars in generated SBOM

  major-rfeon holdwaiting for feedback
  CycloneDX/cyclonedx-maven-plugin#680 · Filter by author philippe-granet opened on Aug 5, 2026
  3

• change *-cyclonedx.xml/json to *.cdx.xml/json

  major-rfe
  CycloneDX/cyclonedx-maven-plugin#658 · Filter by author slawekjaranowski opened on Jun 19, 2026
  11

• Some compile/runtime dependencies missing from SBOM

  CycloneDX/cyclonedx-maven-plugin#656 · Filter by author creckord opened on Jun 13, 2026
  5

• Some vcs (and website) urls are invalid as a component name is appended

  duplicateinvalid
  CycloneDX/cyclonedx-maven-plugin#646 · Filter by author apupier opened on May 28, 2026
  5

• Incorrect dependency scope resolution when imported Maven bom declares scope

  CycloneDX/cyclonedx-maven-plugin#644 · Filter by author christophejan opened on May 11, 2026

• Transitive dependencies missing in SBOM for multi-module build when Module depends on WAR module

  cannot reproducewaiting for feedback
  CycloneDX/cyclonedx-maven-plugin#641 · Filter by author InkognitoDev opened on Mar 11, 2026
  1

• Use outputTimestamp as SBOM timestamp instead of omitting it in reproducible builds

  CycloneDX/cyclonedx-maven-plugin#638 · Filter by author alerosmile opened on Jan 14, 2026
  1

• Generated boms are always of type "library" allthough <projectType>application</projectType> is configured

  help wantedwaiting for feedback
  CycloneDX/cyclonedx-maven-plugin#632 · Filter by author Ulathar opened on Nov 20, 2025
  2

• Generate BOM based on spring boot fat jar

  wontfix
  CycloneDX/cyclonedx-maven-plugin#628 · Filter by author tutufool opened on Nov 17, 2025
  2

• Invalid ExternalReference URLs in Generated CycloneDX SBOMs

  waiting for feedback
  CycloneDX/cyclonedx-maven-plugin#614 · Filter by author MeikelVielhauer opened on Sep 11, 2025
  1

• Requests to wrong repositories causing block from apache.org

  CycloneDX/cyclonedx-maven-plugin#613 · Filter by author mguillem opened on Sep 1, 2025
  5

• Feature: The option to generate a Cryptography Bill of Materials (CBOM) using the maven plugin

  waiting for feedback
  CycloneDX/cyclonedx-maven-plugin#611 · Filter by author Pentaguin opened on Aug 18, 2025
  2

• Feature: License overrides

  enhancementhelp wanted
  CycloneDX/cyclonedx-maven-plugin#610 · Filter by author jakub-bochenski opened on Jul 24, 2025
  4

• SerialNumber of SBOMs are not unique

  CycloneDX/cyclonedx-maven-plugin#603 · Filter by author MeikelVielhauer opened on May 6, 2025 · 2.10.0
  10

• cyclonedx will generate extreme big log with so many duplicate info when enable maven debug mode

  duplicate
  CycloneDX/cyclonedx-maven-plugin#602 · Filter by author TianMing2018 opened on May 3, 2025
  1

• Add support for supplementing POM models

  enhancement
  CycloneDX/cyclonedx-maven-plugin#599 · Filter by author ppkarwasz opened on Apr 25, 2025

• Cyclonedx seems to ignore some configuration options

  CycloneDX/cyclonedx-maven-plugin#595 · Filter by author Boreasos opened on Feb 27, 2025
  3

• Add a range of JRE versions as external dependency

  CycloneDX/cyclonedx-maven-plugin#591 · Filter by author ppkarwasz opened on Feb 22, 2025
  5

• Feature: detect shipped vs non shipped dependency => generate version-less component when not shipped

  major-rfe
  Enhancement

  CycloneDX/cyclonedx-maven-plugin#589 · Filter by author hboutemy opened on Jan 30, 2025
  9

• Jenkins-core with minimal version is included in bom.json when running makeAggregateBom for a Jenkins plugin

  CycloneDX/cyclonedx-maven-plugin#588 · Filter by author Bruceliu-rs opened on Dec 17, 2024
  6

• Incomplete manifest generated in case of intermediate issues in resolving artifacts

  CycloneDX/cyclonedx-maven-plugin#583 · Filter by author goldmann opened on Nov 20, 2024
  7