Repository: Checkmarx/kics (language: python)

Issue:
bug(results): wrong version of cyclonedx schema generated
Found a bug? You're welcome to [![GitHub Discussions](https://img.shields.io/badge/chat-discussions-blue.svg?style=flat-square)](https://github.com/Checkmarx/kics/discussions)

[Documentation](https://docs.kics.io/latest/results/#cyclonedx) mentions Cyclonedx schema 1.5 is used, but generated xml is using schema 1.3 still

### Expected Behavior

(Which results are expected from KICS?)
kics generates a bom schema in v1.5



### Actual Behavior

(Formatted logs and samples helps us to better understand the issue)
kics generates a bom schema in v1.3
![image](https://github.com/Checkmarx/kics/assets/89049008/d04dfb81-ef4d-4f68-95bd-d886134fe3c5)

It looks like version 1.3 is still hard coded in the [cyclonedx.go](https://github.com/Checkmarx/kics/blob/a11cc8545960d1940fe2389e8e1fe6f2532f8827/pkg/report/model/cyclonedx.go#L225) module on line 225

### Steps to Reproduce the Problem

(Command line arguments and flags used)

1.  run kics using the cyclonedx output type

### Specifications
(N/A if not applicable)

-   Version: 1.7.13
-   Platform: linux
-   Subsystem: 



Discussion / hints:

Fix patch:
diff --git a/docs/results.md b/docs/results.md
index 084b4eebdaf..0e883b9a461 100644
--- a/docs/results.md
+++ b/docs/results.md
@@ -682,7 +682,7 @@ PDF reports are sorted by severity (from high to info), the results will have qu
 
 ## CycloneDX
 
-Now, the CycloneDX report is only available in XML format since the vulnerability schema extension is not currently available in JSON. The guidelines used to build the CycloneDX report were the [bom schema 1.3](http://cyclonedx.org/schema/bom/1.3) and [vulnerability schema 1.0](https://github.com/CycloneDX/specification/blob/master/schema/ext/vulnerability-1.0.xsd).                                                                                               
+Now, the CycloneDX report is only available in XML format since the vulnerability schema extension is not currently available in JSON. The guidelines used to build the CycloneDX report were the [bom schema 1.5](http://cyclonedx.org/schema/bom/1.5) and [vulnerability schema 1.0](https://github.com/CycloneDX/specification/blob/master/schema/ext/vulnerability-1.0.xsd).                                                                                               
 **Note:** As of the latest update, the CycloneDX version utilized in the report is 1.5. However, it's important to clarify that no additional features or fields introduced in version 1.5 are currently utilized. The functionality remains consistent with the version 1.3 for KICS. Future updates will leverage the new features introduced in CycloneDX version 1.5.
 
 
@@ -690,7 +690,7 @@ You can export CycloneDX report by using `--report-formats "cyclonedx"`. The gen
 
 ```
 <?xml version="1.0" encoding="UTF-8"?>
-<bom xmlns="http://cyclonedx.org/schema/bom/1.3" serialNumber="urn:uuid:031053e5-97fa-4776-bd4b-d8705b37748c" xmlns:v="http://cyclonedx.org/schema/ext/vulnerability/1.0" version="1">
+<bom xmlns="http://cyclonedx.org/schema/bom/1.5" serialNumber="urn:uuid:031053e5-97fa-4776-bd4b-d8705b37748c" xmlns:v="http://cyclonedx.org/schema/ext/vulnerability/1.0" version="1">
 	<metadata>
 		<timestamp>2024-02-14T12:21:17Z</timestamp>
 		<tools>
diff --git a/pkg/report/model/cyclonedx.go b/pkg/report/model/cyclonedx.go
index 7d97f4b4ce4..8549c77f196 100644
--- a/pkg/report/model/cyclonedx.go
+++ b/pkg/report/model/cyclonedx.go
@@ -222,7 +222,7 @@ func InitCycloneDxReport() *CycloneDxReport {
 	}
 
 	return &CycloneDxReport{
-		XMLNS:        "http://cyclonedx.org/schema/bom/1.3",
+		XMLNS:        "http://cyclonedx.org/schema/bom/1.5",
 		XMLNSV:       "http://cyclonedx.org/schema/ext/vulnerability/1.0",
 		SerialNumber: "urn:uuid:" + uuid.New().String(),
 		Version:      1,


Test patch:
diff --git a/pkg/report/model/cyclonedx_test.go b/pkg/report/model/cyclonedx_test.go
index 0abe80c1adc..7b161273c6f 100644
--- a/pkg/report/model/cyclonedx_test.go
+++ b/pkg/report/model/cyclonedx_test.go
@@ -26,7 +26,7 @@ var metadata Metadata = Metadata{
 }
 
 var initCycloneDxReport CycloneDxReport = CycloneDxReport{
-	XMLNS:        "http://cyclonedx.org/schema/bom/1.3",
+	XMLNS:        "http://cyclonedx.org/schema/bom/1.5",
 	XMLNSV:       "http://cyclonedx.org/schema/ext/vulnerability/1.0",
 	SerialNumber: "urn:uuid:", // set to "urn:uuid:" because it will be different for every report
 	Version:      1,