feat(validation): add CycloneDX 1.6 schema validation

[arunsanna]

Summary

Implements CycloneDX 1.6 JSON schema validation for generated AIBOMs to ensure compliance and interoperability.

Changes

• New validation.py module with full schema validation capabilities:

  • validate_aibom(): Full schema validation against CycloneDX 1.6 JSON schema
  • validate_minimal_requirements(): Lightweight sanity check without full schema
  • get_validation_summary(): Get validation results for completeness reports
  • Schema caching (in-memory + file-based) for performance

• Generator integration:

  • Validates AIBOM after creation, logs warnings if issues found
  • Includes validation results in enhancement report

• Completeness scoring integration:

  • Adds schema validation summary to scoring results
  • Available via schema_validation key in results

• Test suite: 11 comprehensive tests covering:

  • Minimal requirements validation
  • Validation summary generation
  • Full schema validation
  • Schema caching

New dependency

• jsonschema>=4.17.0 added to requirements.txt

Test Plan

• Run validation module tests (pytest tests/test_validation.py -v)
• Verify schema downloads and caches correctly
• Test with valid and invalid AIBOMs
• Verify integration with generator

Test Results

tests/test_validation.py::TestMinimalRequirements::test_valid_minimal_aibom PASSED
tests/test_validation.py::TestMinimalRequirements::test_missing_bomformat PASSED
tests/test_validation.py::TestMinimalRequirements::test_invalid_bomformat PASSED
tests/test_validation.py::TestMinimalRequirements::test_unsupported_specversion PASSED
tests/test_validation.py::TestMinimalRequirements::test_invalid_serialnumber_format PASSED
tests/test_validation.py::TestMinimalRequirements::test_components_not_array PASSED
tests/test_validation.py::TestValidationSummary::test_valid_aibom_summary PASSED
tests/test_validation.py::TestValidationSummary::test_invalid_aibom_summary PASSED
tests/test_validation.py::TestSchemaValidation::test_valid_complete_aibom PASSED
tests/test_validation.py::TestSchemaValidation::test_schema_loading PASSED
tests/test_validation.py::TestSchemaCache::test_schema_caching PASSED

============================== 11 passed in 0.05s ==============================

Closes #17

[Copilot]

Pull request overview

This pull request adds CycloneDX 1.6 JSON schema validation capabilities to the AIBOM generator to ensure compliance and interoperability.

Changes:

• Adds a new validation.py module with schema validation functions including full schema validation, minimal requirements checking, and validation summary generation
• Integrates validation into the generator workflow with warnings for schema violations
• Adds schema validation results to completeness scoring and enhancement reports

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
validation.py	New module providing CycloneDX 1.6 schema validation with caching support
test_validation.py	Comprehensive test suite with 11 tests covering validation functions
generator.py	Integrates schema validation into AIBOM generation workflow
utils.py	Adds schema validation summary to completeness scoring results
requirements.txt	Adds jsonschema>=4.17.0 dependency

Comments suppressed due to low confidence (1)

HF_files/aibom-generator/src/aibom-generator/generator.py:1

• Duplicate import of 'json' on lines 1 and 4. Remove one of the duplicate imports.

import json

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[arunsanna]

✅ Testing Completed - VERIFIED

Test Space: https://megamind1-aibom-pr22-schema-validation.hf.space

Test Results

Test	Result
App functionality	✅ Working
Schema validation integration	✅ Confirmed
AIBOM generation	✅ CycloneDX 1.6 compliant

Files Verified

• src/aibom-generator/validation.py ✓
• src/aibom-generator/schemas/bom-1.6.schema.json ✓
• tests/test_validation.py ✓

Ready for merge. ✓

[arunsanna]

Status Update: Superseded by v0.2

The CycloneDX 1.6 schema validation has been incorporated into the v0.2 branch architecture.

Evidence: src/utils/validation.py implements:

• validate_aibom() - Full schema validation
• load_schema() - Schema loading with caching
• get_validation_summary() - Validation reporting

Schema files in src/schemas/:

• bom-1.6.schema.json
• spdx.schema.json

This PR can be closed as schema validation is already in v0.2.