From 1d1c45ac82c7927acc388489228a9b5990f68aa7 Mon Sep 17 00:00:00 2001
From: Paul Horton <paul.horton@owasp.org>
Date: Wed, 10 Apr 2024 11:22:43 +0200
Subject: [PATCH] feat: support `bom.properties` for CycloneDX v1.5+ (#585)

Signed-off-by: Paul Horton <paul.horton@owasp.org>
---
 cyclonedx/model/bom.py                        | 53 ++++++++++++-------
 docs/schema-support.rst                       | 28 ++--------
 tests/_data/models.py                         |  1 +
 .../enum_ComponentScope-1.5.json.bin          | 10 ++++
 .../snapshots/enum_ComponentScope-1.5.xml.bin |  4 ++
 .../enum_ComponentScope-1.6.json.bin          | 10 ++++
 .../snapshots/enum_ComponentScope-1.6.xml.bin |  4 ++
 .../snapshots/enum_ComponentType-1.5.json.bin | 10 ++++
 .../snapshots/enum_ComponentType-1.5.xml.bin  |  4 ++
 .../snapshots/enum_ComponentType-1.6.json.bin | 10 ++++
 .../snapshots/enum_ComponentType-1.6.xml.bin  |  4 ++
 .../snapshots/enum_DataFlow-1.5.json.bin      | 10 ++++
 .../_data/snapshots/enum_DataFlow-1.5.xml.bin |  4 ++
 .../snapshots/enum_DataFlow-1.6.json.bin      | 10 ++++
 .../_data/snapshots/enum_DataFlow-1.6.xml.bin |  4 ++
 .../snapshots/enum_Encoding-1.5.json.bin      | 10 ++++
 .../_data/snapshots/enum_Encoding-1.5.xml.bin |  4 ++
 .../snapshots/enum_Encoding-1.6.json.bin      | 10 ++++
 .../_data/snapshots/enum_Encoding-1.6.xml.bin |  4 ++
 .../enum_ExternalReferenceType-1.5.json.bin   | 10 ++++
 .../enum_ExternalReferenceType-1.5.xml.bin    |  4 ++
 .../enum_ExternalReferenceType-1.6.json.bin   | 10 ++++
 .../enum_ExternalReferenceType-1.6.xml.bin    |  4 ++
 .../snapshots/enum_HashAlgorithm-1.5.json.bin | 10 ++++
 .../snapshots/enum_HashAlgorithm-1.5.xml.bin  |  4 ++
 .../snapshots/enum_HashAlgorithm-1.6.json.bin | 10 ++++
 .../snapshots/enum_HashAlgorithm-1.6.xml.bin  |  4 ++
 ..._ImpactAnalysisAffectedStatus-1.5.json.bin | 10 ++++
 ...m_ImpactAnalysisAffectedStatus-1.5.xml.bin |  4 ++
 ..._ImpactAnalysisAffectedStatus-1.6.json.bin | 10 ++++
 ...m_ImpactAnalysisAffectedStatus-1.6.xml.bin |  4 ++
 ...m_ImpactAnalysisJustification-1.5.json.bin | 10 ++++
 ...um_ImpactAnalysisJustification-1.5.xml.bin |  4 ++
 ...m_ImpactAnalysisJustification-1.6.json.bin | 10 ++++
 ...um_ImpactAnalysisJustification-1.6.xml.bin |  4 ++
 .../enum_ImpactAnalysisResponse-1.5.json.bin  | 10 ++++
 .../enum_ImpactAnalysisResponse-1.5.xml.bin   |  4 ++
 .../enum_ImpactAnalysisResponse-1.6.json.bin  | 10 ++++
 .../enum_ImpactAnalysisResponse-1.6.xml.bin   |  4 ++
 .../enum_ImpactAnalysisState-1.5.json.bin     | 10 ++++
 .../enum_ImpactAnalysisState-1.5.xml.bin      |  4 ++
 .../enum_ImpactAnalysisState-1.6.json.bin     | 10 ++++
 .../enum_ImpactAnalysisState-1.6.xml.bin      |  4 ++
 .../enum_IssueClassification-1.5.json.bin     | 10 ++++
 .../enum_IssueClassification-1.5.xml.bin      |  4 ++
 .../enum_IssueClassification-1.6.json.bin     | 10 ++++
 .../enum_IssueClassification-1.6.xml.bin      |  4 ++
 .../enum_PatchClassification-1.5.json.bin     | 10 ++++
 .../enum_PatchClassification-1.5.xml.bin      |  4 ++
 .../enum_PatchClassification-1.6.json.bin     | 10 ++++
 .../enum_PatchClassification-1.6.xml.bin      |  4 ++
 ...enum_VulnerabilityScoreSource-1.5.json.bin | 10 ++++
 .../enum_VulnerabilityScoreSource-1.5.xml.bin |  4 ++
 ...enum_VulnerabilityScoreSource-1.6.json.bin | 10 ++++
 .../enum_VulnerabilityScoreSource-1.6.xml.bin |  4 ++
 .../enum_VulnerabilitySeverity-1.5.json.bin   | 10 ++++
 .../enum_VulnerabilitySeverity-1.5.xml.bin    |  4 ++
 .../enum_VulnerabilitySeverity-1.6.json.bin   | 10 ++++
 .../enum_VulnerabilitySeverity-1.6.xml.bin    |  4 ++
 ..._bom_for_issue_275_components-1.5.json.bin | 10 ++++
 ...t_bom_for_issue_275_components-1.5.xml.bin |  4 ++
 ..._bom_for_issue_275_components-1.6.json.bin | 10 ++++
 ...t_bom_for_issue_275_components-1.6.xml.bin |  4 ++
 ..._bom_for_issue_328_components-1.5.json.bin | 10 ++++
 ...t_bom_for_issue_328_components-1.5.xml.bin |  4 ++
 ..._bom_for_issue_328_components-1.6.json.bin | 10 ++++
 ...t_bom_for_issue_328_components-1.6.xml.bin |  4 ++
 .../get_bom_for_issue_497_urls-1.5.json.bin   | 10 ++++
 .../get_bom_for_issue_497_urls-1.5.xml.bin    |  4 ++
 .../get_bom_for_issue_497_urls-1.6.json.bin   | 10 ++++
 .../get_bom_for_issue_497_urls-1.6.xml.bin    |  4 ++
 ...et_bom_just_complete_metadata-1.5.json.bin | 10 ++++
 ...get_bom_just_complete_metadata-1.5.xml.bin |  4 ++
 ...et_bom_just_complete_metadata-1.6.json.bin | 10 ++++
 ...get_bom_just_complete_metadata-1.6.xml.bin |  4 ++
 ...om_v1_6_with_crypto_algorithm-1.6.json.bin | 10 ++++
 ...bom_v1_6_with_crypto_algorithm-1.6.xml.bin |  4 ++
 ..._v1_6_with_crypto_certificate-1.6.json.bin | 10 ++++
 ...m_v1_6_with_crypto_certificate-1.6.xml.bin |  4 ++
 ...bom_v1_6_with_crypto_protocol-1.6.json.bin | 10 ++++
 ..._bom_v1_6_with_crypto_protocol-1.6.xml.bin |  4 ++
 ..._with_crypto_related_material-1.6.json.bin | 10 ++++
 ...6_with_crypto_related_material-1.6.xml.bin |  4 ++
 ...th_component_setuptools_basic-1.5.json.bin | 10 ++++
 ...ith_component_setuptools_basic-1.5.xml.bin |  4 ++
 ...th_component_setuptools_basic-1.6.json.bin | 10 ++++
 ...ith_component_setuptools_basic-1.6.xml.bin |  4 ++
 ...component_setuptools_complete-1.5.json.bin | 10 ++++
 ..._component_setuptools_complete-1.5.xml.bin |  4 ++
 ...component_setuptools_complete-1.6.json.bin | 10 ++++
 ..._component_setuptools_complete-1.6.xml.bin |  4 ++
 ...tuptools_no_component_version-1.5.json.bin | 10 ++++
 ...etuptools_no_component_version-1.5.xml.bin |  4 ++
 ...tuptools_no_component_version-1.6.json.bin | 10 ++++
 ...etuptools_no_component_version-1.6.xml.bin |  4 ++
 ...component_setuptools_with_cpe-1.5.json.bin | 10 ++++
 ..._component_setuptools_with_cpe-1.5.xml.bin |  4 ++
 ...component_setuptools_with_cpe-1.6.json.bin | 10 ++++
 ..._component_setuptools_with_cpe-1.6.xml.bin |  4 ++
 ...setuptools_with_release_notes-1.5.json.bin | 10 ++++
 ..._setuptools_with_release_notes-1.5.xml.bin |  4 ++
 ...setuptools_with_release_notes-1.6.json.bin | 10 ++++
 ..._setuptools_with_release_notes-1.6.xml.bin |  4 ++
 ...nt_setuptools_with_v16_fields-1.5.json.bin | 10 ++++
 ...ent_setuptools_with_v16_fields-1.5.xml.bin |  4 ++
 ...nt_setuptools_with_v16_fields-1.6.json.bin | 10 ++++
 ...ent_setuptools_with_v16_fields-1.6.xml.bin |  4 ++
 ...setuptools_with_vulnerability-1.5.json.bin | 10 ++++
 ..._setuptools_with_vulnerability-1.5.xml.bin |  4 ++
 ...setuptools_with_vulnerability-1.6.json.bin | 10 ++++
 ..._setuptools_with_vulnerability-1.6.xml.bin |  4 ++
 ...get_bom_with_component_toml_1-1.5.json.bin | 10 ++++
 .../get_bom_with_component_toml_1-1.5.xml.bin |  4 ++
 ...get_bom_with_component_toml_1-1.6.json.bin | 10 ++++
 .../get_bom_with_component_toml_1-1.6.xml.bin |  4 ++
 ...bom_with_dependencies_hanging-1.5.json.bin | 10 ++++
 ..._bom_with_dependencies_hanging-1.5.xml.bin |  4 ++
 ...bom_with_dependencies_hanging-1.6.json.bin | 10 ++++
 ..._bom_with_dependencies_hanging-1.6.xml.bin |  4 ++
 ...t_bom_with_dependencies_valid-1.5.json.bin | 10 ++++
 ...et_bom_with_dependencies_valid-1.5.xml.bin |  4 ++
 ...t_bom_with_dependencies_valid-1.6.json.bin | 10 ++++
 ...et_bom_with_dependencies_valid-1.6.xml.bin |  4 ++
 ..._bom_with_external_references-1.5.json.bin | 10 ++++
 ...t_bom_with_external_references-1.5.xml.bin |  4 ++
 ..._bom_with_external_references-1.6.json.bin | 10 ++++
 ...t_bom_with_external_references-1.6.xml.bin |  4 ++
 .../get_bom_with_licenses-1.5.json.bin        | 10 ++++
 .../get_bom_with_licenses-1.5.xml.bin         |  4 ++
 .../get_bom_with_licenses-1.6.json.bin        | 10 ++++
 .../get_bom_with_licenses-1.6.xml.bin         |  4 ++
 ...ta_component_and_dependencies-1.5.json.bin | 10 ++++
 ...ata_component_and_dependencies-1.5.xml.bin |  4 ++
 ...ta_component_and_dependencies-1.6.json.bin | 10 ++++
 ...ata_component_and_dependencies-1.6.xml.bin |  4 ++
 ...et_bom_with_multiple_licenses-1.5.json.bin | 10 ++++
 ...get_bom_with_multiple_licenses-1.5.xml.bin |  4 ++
 ...et_bom_with_multiple_licenses-1.6.json.bin | 10 ++++
 ...get_bom_with_multiple_licenses-1.6.xml.bin |  4 ++
 .../get_bom_with_nested_services-1.5.json.bin | 10 ++++
 .../get_bom_with_nested_services-1.5.xml.bin  |  4 ++
 .../get_bom_with_nested_services-1.6.json.bin | 10 ++++
 .../get_bom_with_nested_services-1.6.xml.bin  |  4 ++
 ...get_bom_with_services_complex-1.5.json.bin | 10 ++++
 .../get_bom_with_services_complex-1.5.xml.bin |  4 ++
 ...get_bom_with_services_complex-1.6.json.bin | 10 ++++
 .../get_bom_with_services_complex-1.6.xml.bin |  4 ++
 .../get_bom_with_services_simple-1.5.json.bin | 10 ++++
 .../get_bom_with_services_simple-1.5.xml.bin  |  4 ++
 .../get_bom_with_services_simple-1.6.json.bin | 10 ++++
 .../get_bom_with_services_simple-1.6.xml.bin  |  4 ++
 151 files changed, 1074 insertions(+), 44 deletions(-)

diff --git a/cyclonedx/model/bom.py b/cyclonedx/model/bom.py
index b136f3fe..aaf61fe7 100644
--- a/cyclonedx/model/bom.py
+++ b/cyclonedx/model/bom.py
@@ -310,7 +310,8 @@ def __init__(self, *, components: Optional[Iterable[Component]] = None,
                  serial_number: Optional[UUID] = None, version: int = 1,
                  metadata: Optional[BomMetaData] = None,
                  dependencies: Optional[Iterable[Dependency]] = None,
-                 vulnerabilities: Optional[Iterable[Vulnerability]] = None) -> None:
+                 vulnerabilities: Optional[Iterable[Vulnerability]] = None,
+                 properties: Optional[Iterable[Property]] = None) -> None:
         """
         Create a new Bom that you can manually/programmatically add data to later.
 
@@ -325,6 +326,7 @@ def __init__(self, *, components: Optional[Iterable[Component]] = None,
         self.external_references = external_references or []  # type:ignore[assignment]
         self.vulnerabilities = vulnerabilities or []  # type:ignore[assignment]
         self.dependencies = dependencies or []  # type:ignore[assignment]
+        self.properties = properties or []  # type:ignore[assignment]
 
     @property
     @serializable.type_mapping(UrnUuidHelper)
@@ -364,7 +366,7 @@ def version(self, version: int) -> None:
     @serializable.view(SchemaVersion1Dot4)
     @serializable.view(SchemaVersion1Dot5)
     @serializable.view(SchemaVersion1Dot6)
-    @serializable.xml_sequence(1)
+    @serializable.xml_sequence(10)
     def metadata(self) -> BomMetaData:
         """
         Get our internal metadata object for this Bom.
@@ -385,7 +387,7 @@ def metadata(self, metadata: BomMetaData) -> None:
     @serializable.include_none(SchemaVersion1Dot0)
     @serializable.include_none(SchemaVersion1Dot1)
     @serializable.xml_array(serializable.XmlArraySerializationType.NESTED, 'component')
-    @serializable.xml_sequence(2)
+    @serializable.xml_sequence(20)
     def components(self) -> 'SortedSet[Component]':
         """
         Get all the Components currently in this Bom.
@@ -406,7 +408,7 @@ def components(self, components: Iterable[Component]) -> None:
     @serializable.view(SchemaVersion1Dot5)
     @serializable.view(SchemaVersion1Dot6)
     @serializable.xml_array(serializable.XmlArraySerializationType.NESTED, 'service')
-    @serializable.xml_sequence(3)
+    @serializable.xml_sequence(30)
     def services(self) -> 'SortedSet[Service]':
         """
         Get all the Services currently in this Bom.
@@ -428,7 +430,7 @@ def services(self, services: Iterable[Service]) -> None:
     @serializable.view(SchemaVersion1Dot5)
     @serializable.view(SchemaVersion1Dot6)
     @serializable.xml_array(serializable.XmlArraySerializationType.NESTED, 'reference')
-    @serializable.xml_sequence(4)
+    @serializable.xml_sequence(40)
     def external_references(self) -> 'SortedSet[ExternalReference]':
         """
         Provides the ability to document external references related to the BOM or to the project the BOM describes.
@@ -449,7 +451,7 @@ def external_references(self, external_references: Iterable[ExternalReference])
     @serializable.view(SchemaVersion1Dot5)
     @serializable.view(SchemaVersion1Dot6)
     @serializable.xml_array(serializable.XmlArraySerializationType.NESTED, 'dependency')
-    @serializable.xml_sequence(5)
+    @serializable.xml_sequence(50)
     def dependencies(self) -> 'SortedSet[Dependency]':
         return self._dependencies
 
@@ -470,25 +472,35 @@ def dependencies(self, dependencies: Iterable[Dependency]) -> None:
     # def compositions(self, ...) -> None:
     #     ...  # TODO Since CDX 1.3
 
-    # @property
-    # ...
-    # @serializable.view(SchemaVersion1Dot3)
-    # @serializable.view(SchemaVersion1Dot4)
-    # @serializable.view(SchemaVersion1Dot5)
-    # @serializable.xml_sequence(7)
-    # def properties(self) -> ...:
-    #     ... # TODO Since CDX 1.3
-    #
-    # @properties.setter
-    # def properties(self, ...) -> None:
-    #     ...  # TODO Since CDX 1.3
+    @property
+    # @serializable.view(SchemaVersion1Dot3) @todo: Update py-serializable to support view by OutputFormat filtering
+    # @serializable.view(SchemaVersion1Dot4) @todo: Update py-serializable to support view by OutputFormat filtering
+    @serializable.view(SchemaVersion1Dot5)
+    @serializable.view(SchemaVersion1Dot6)
+    @serializable.xml_array(serializable.XmlArraySerializationType.NESTED, 'property')
+    @serializable.xml_sequence(70)
+    def properties(self) -> 'SortedSet[Property]':
+        """
+        Provides the ability to document properties in a name/value store. This provides flexibility to include data
+        not officially supported in the standard without having to use additional namespaces or create extensions.
+        Property names of interest to the general public are encouraged to be registered in the CycloneDX Property
+        Taxonomy - https://github.com/CycloneDX/cyclonedx-property-taxonomy. Formal registration is OPTIONAL.
+
+        Return:
+            Set of `Property`
+        """
+        return self._properties
+
+    @properties.setter
+    def properties(self, properties: Iterable[Property]) -> None:
+        self._properties = SortedSet(properties)
 
     @property
     @serializable.view(SchemaVersion1Dot4)
     @serializable.view(SchemaVersion1Dot5)
     @serializable.view(SchemaVersion1Dot6)
     @serializable.xml_array(serializable.XmlArraySerializationType.NESTED, 'vulnerability')
-    @serializable.xml_sequence(8)
+    @serializable.xml_sequence(80)
     def vulnerabilities(self) -> 'SortedSet[Vulnerability]':
         """
         Get all the Vulnerabilities in this BOM.
@@ -682,7 +694,8 @@ def __eq__(self, other: object) -> bool:
     def __hash__(self) -> int:
         return hash((
             self.serial_number, self.version, self.metadata, tuple(self.components), tuple(self.services),
-            tuple(self.external_references), tuple(self.vulnerabilities), tuple(self.dependencies)
+            tuple(self.external_references), tuple(self.dependencies), tuple(self.properties),
+            tuple(self.vulnerabilities),
         ))
 
     def __repr__(self) -> str:
diff --git a/docs/schema-support.rst b/docs/schema-support.rst
index f8835bbc..43afec7a 100644
--- a/docs/schema-support.rst
+++ b/docs/schema-support.rst
@@ -21,9 +21,6 @@ The following sub-sections aim to explain what support this library provides and
 by calling out support for data as defined in the latest CycloneDX standard specification, regardless of whether it is
 supported in prior versions of the CycloneDX schema.
 
-Root Level Schema Support
--------------------------
-
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
 | Data Path                  | Supported?    | Notes                                                                                             |
 +============================+===============+===================================================================================================+
@@ -31,9 +28,9 @@ Root Level Schema Support
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
 | ``bom[@serialNumber]``     | Yes           |                                                                                                   |
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
-| ``bom.metadata``           | Yes           | Not supported: ``lifecycles``                                                                     |
+| ``bom.metadata``           | Yes           |                                                                                                   |
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
-| ``bom.components``         | Yes           | Not supported: ``modified`` (as it is deprecated), ``modelCard``, ``data``, ``signature``.        |
+| ``bom.components``         | Yes           | Not supported: ``modified`` (as it is deprecated), ``signature``.                                 |
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
 | ``bom.services``           | Yes           | Not supported: ``signature``.                                                                     |
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
@@ -43,6 +40,8 @@ Root Level Schema Support
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
 | ``bom.compositions``       | No            |                                                                                                   |
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
+| ``bom.properties``         | Yes           | Supported when outputting to Schema Version >= 1.5. See `schema specification bug 130`_           |
++----------------------------+---------------+---------------------------------------------------------------------------------------------------+
 | ``bom.vulnerabilities``    | Yes           | Note: Prior to CycloneDX 1.4, these were present under ``bom.components`` via a schema extension. |
 |                            |               | Note: As of ``cyclonedx-python-lib`` ``>3.0.0``, Vulnerability are modelled differently           |
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
@@ -54,27 +53,8 @@ Root Level Schema Support
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
 | ``bom.definitions``        | No            |                                                                                                   |
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
-| ``bom.properties``         | No            | See `schema specification bug 130`_                                                               |
-+----------------------------+---------------+---------------------------------------------------------------------------------------------------+
 | ``bom.signature``          | No            |                                                                                                   |
 +----------------------------+---------------+---------------------------------------------------------------------------------------------------+
 
-Internal Model Schema Support
------------------------------
-
-+----------------------------+---------------+----------------------------------------------------------------------------------------------+
-| Internal Model             | Supported?    | Notes                                                                                        |
-+============================+===============+==============================================================================================+
-| ``ComponentEvidence``      |Yes            | Not currently supported: ``callstack``, ``identity``, ``occurrences``.                       |
-+----------------------------+---------------+----------------------------------------------------------------------------------------------+
-| ``DisjunctiveLicense``     |Yes            | Not currently supported: ``@bom-ref``, ``licensing``, ``properties``.                        |
-+----------------------------+---------------+----------------------------------------------------------------------------------------------+
-| ``LicenseExpression``      |Yes            | Not currently supported: ``@bom-ref``                                                        |
-+----------------------------+---------------+----------------------------------------------------------------------------------------------+
-| ``OrganizationalContact``  |Yes            | Not currently supported: ``@bom-ref``                                                        |
-+----------------------------+---------------+----------------------------------------------------------------------------------------------+
-| ``OrganizationalEntity``   |Yes            | Not currently supported: ``@bom-ref``                                                        |
-+----------------------------+---------------+----------------------------------------------------------------------------------------------+
 
 .. _schema specification bug 130: https://github.com/CycloneDX/specification/issues/130
-
diff --git a/tests/_data/models.py b/tests/_data/models.py
index 0cb4c5fd..c3ee99e1 100644
--- a/tests/_data/models.py
+++ b/tests/_data/models.py
@@ -133,6 +133,7 @@ def _make_bom(**kwargs: Any) -> Bom:
     bom = Bom(**kwargs)
     bom.serial_number = BOM_SERIAL_NUMBER
     bom.metadata.timestamp = BOM_TIMESTAMP
+    bom.properties = get_properties_1()
     return bom
 
 
diff --git a/tests/_data/snapshots/enum_ComponentScope-1.5.json.bin b/tests/_data/snapshots/enum_ComponentScope-1.5.json.bin
index 1ae5f22b..056c088a 100644
--- a/tests/_data/snapshots/enum_ComponentScope-1.5.json.bin
+++ b/tests/_data/snapshots/enum_ComponentScope-1.5.json.bin
@@ -74,6 +74,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/enum_ComponentScope-1.5.xml.bin b/tests/_data/snapshots/enum_ComponentScope-1.5.xml.bin
index 00cb0e9e..7932de76 100644
--- a/tests/_data/snapshots/enum_ComponentScope-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_ComponentScope-1.5.xml.bin
@@ -55,4 +55,8 @@
     <dependency ref="scoped-OPTIONAL"/>
     <dependency ref="scoped-REQUIRED"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_ComponentScope-1.6.json.bin b/tests/_data/snapshots/enum_ComponentScope-1.6.json.bin
index 79f5677e..348cec53 100644
--- a/tests/_data/snapshots/enum_ComponentScope-1.6.json.bin
+++ b/tests/_data/snapshots/enum_ComponentScope-1.6.json.bin
@@ -74,6 +74,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/enum_ComponentScope-1.6.xml.bin b/tests/_data/snapshots/enum_ComponentScope-1.6.xml.bin
index 8f7732bf..173aab7a 100644
--- a/tests/_data/snapshots/enum_ComponentScope-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_ComponentScope-1.6.xml.bin
@@ -55,4 +55,8 @@
     <dependency ref="scoped-OPTIONAL"/>
     <dependency ref="scoped-REQUIRED"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_ComponentType-1.5.json.bin b/tests/_data/snapshots/enum_ComponentType-1.5.json.bin
index 823b2eb9..7a2b9196 100644
--- a/tests/_data/snapshots/enum_ComponentType-1.5.json.bin
+++ b/tests/_data/snapshots/enum_ComponentType-1.5.json.bin
@@ -143,6 +143,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/enum_ComponentType-1.5.xml.bin b/tests/_data/snapshots/enum_ComponentType-1.5.xml.bin
index 82fd6dd7..4340d7b9 100644
--- a/tests/_data/snapshots/enum_ComponentType-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_ComponentType-1.5.xml.bin
@@ -88,4 +88,8 @@
     <dependency ref="typed-OPERATING_SYSTEM"/>
     <dependency ref="typed-PLATFORM"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_ComponentType-1.6.json.bin b/tests/_data/snapshots/enum_ComponentType-1.6.json.bin
index 0884bdeb..e9aa8150 100644
--- a/tests/_data/snapshots/enum_ComponentType-1.6.json.bin
+++ b/tests/_data/snapshots/enum_ComponentType-1.6.json.bin
@@ -151,6 +151,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/enum_ComponentType-1.6.xml.bin b/tests/_data/snapshots/enum_ComponentType-1.6.xml.bin
index a9cf6e8c..63c01ad0 100644
--- a/tests/_data/snapshots/enum_ComponentType-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_ComponentType-1.6.xml.bin
@@ -92,4 +92,8 @@
     <dependency ref="typed-OPERATING_SYSTEM"/>
     <dependency ref="typed-PLATFORM"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_DataFlow-1.5.json.bin b/tests/_data/snapshots/enum_DataFlow-1.5.json.bin
index 92e50851..e5127933 100644
--- a/tests/_data/snapshots/enum_DataFlow-1.5.json.bin
+++ b/tests/_data/snapshots/enum_DataFlow-1.5.json.bin
@@ -48,6 +48,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/enum_DataFlow-1.5.xml.bin b/tests/_data/snapshots/enum_DataFlow-1.5.xml.bin
index 1c595ad0..690af434 100644
--- a/tests/_data/snapshots/enum_DataFlow-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_DataFlow-1.5.xml.bin
@@ -50,4 +50,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_DataFlow-1.6.json.bin b/tests/_data/snapshots/enum_DataFlow-1.6.json.bin
index 81a97850..35932cd8 100644
--- a/tests/_data/snapshots/enum_DataFlow-1.6.json.bin
+++ b/tests/_data/snapshots/enum_DataFlow-1.6.json.bin
@@ -48,6 +48,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/enum_DataFlow-1.6.xml.bin b/tests/_data/snapshots/enum_DataFlow-1.6.xml.bin
index 965b9c72..2a10ba25 100644
--- a/tests/_data/snapshots/enum_DataFlow-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_DataFlow-1.6.xml.bin
@@ -50,4 +50,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_Encoding-1.5.json.bin b/tests/_data/snapshots/enum_Encoding-1.5.json.bin
index 62199fbf..a1acc445 100644
--- a/tests/_data/snapshots/enum_Encoding-1.5.json.bin
+++ b/tests/_data/snapshots/enum_Encoding-1.5.json.bin
@@ -67,6 +67,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/enum_Encoding-1.5.xml.bin b/tests/_data/snapshots/enum_Encoding-1.5.xml.bin
index a1dc28dd..6dbc122c 100644
--- a/tests/_data/snapshots/enum_Encoding-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_Encoding-1.5.xml.bin
@@ -50,4 +50,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_Encoding-1.6.json.bin b/tests/_data/snapshots/enum_Encoding-1.6.json.bin
index 96fb83f6..b4f02e19 100644
--- a/tests/_data/snapshots/enum_Encoding-1.6.json.bin
+++ b/tests/_data/snapshots/enum_Encoding-1.6.json.bin
@@ -67,6 +67,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/enum_Encoding-1.6.xml.bin b/tests/_data/snapshots/enum_Encoding-1.6.xml.bin
index 1a16c6bb..e1731428 100644
--- a/tests/_data/snapshots/enum_Encoding-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_Encoding-1.6.xml.bin
@@ -50,4 +50,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_ExternalReferenceType-1.5.json.bin b/tests/_data/snapshots/enum_ExternalReferenceType-1.5.json.bin
index f187319c..81fd9040 100644
--- a/tests/_data/snapshots/enum_ExternalReferenceType-1.5.json.bin
+++ b/tests/_data/snapshots/enum_ExternalReferenceType-1.5.json.bin
@@ -229,6 +229,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/enum_ExternalReferenceType-1.5.xml.bin b/tests/_data/snapshots/enum_ExternalReferenceType-1.5.xml.bin
index ee260bf9..e4d7319f 100644
--- a/tests/_data/snapshots/enum_ExternalReferenceType-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_ExternalReferenceType-1.5.xml.bin
@@ -175,4 +175,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_ExternalReferenceType-1.6.json.bin b/tests/_data/snapshots/enum_ExternalReferenceType-1.6.json.bin
index c99f3f17..42eb7ff0 100644
--- a/tests/_data/snapshots/enum_ExternalReferenceType-1.6.json.bin
+++ b/tests/_data/snapshots/enum_ExternalReferenceType-1.6.json.bin
@@ -229,6 +229,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/enum_ExternalReferenceType-1.6.xml.bin b/tests/_data/snapshots/enum_ExternalReferenceType-1.6.xml.bin
index 6af4cbb6..fdfb8faf 100644
--- a/tests/_data/snapshots/enum_ExternalReferenceType-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_ExternalReferenceType-1.6.xml.bin
@@ -175,4 +175,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_HashAlgorithm-1.5.json.bin b/tests/_data/snapshots/enum_HashAlgorithm-1.5.json.bin
index 7f2a4b01..d41c835e 100644
--- a/tests/_data/snapshots/enum_HashAlgorithm-1.5.json.bin
+++ b/tests/_data/snapshots/enum_HashAlgorithm-1.5.json.bin
@@ -105,6 +105,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/enum_HashAlgorithm-1.5.xml.bin b/tests/_data/snapshots/enum_HashAlgorithm-1.5.xml.bin
index 219ba7bd..24190ff6 100644
--- a/tests/_data/snapshots/enum_HashAlgorithm-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_HashAlgorithm-1.5.xml.bin
@@ -58,4 +58,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_HashAlgorithm-1.6.json.bin b/tests/_data/snapshots/enum_HashAlgorithm-1.6.json.bin
index c3d56302..eecd5c97 100644
--- a/tests/_data/snapshots/enum_HashAlgorithm-1.6.json.bin
+++ b/tests/_data/snapshots/enum_HashAlgorithm-1.6.json.bin
@@ -105,6 +105,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/enum_HashAlgorithm-1.6.xml.bin b/tests/_data/snapshots/enum_HashAlgorithm-1.6.xml.bin
index c2cb7188..3764bc6e 100644
--- a/tests/_data/snapshots/enum_HashAlgorithm-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_HashAlgorithm-1.6.xml.bin
@@ -58,4 +58,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.5.json.bin b/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.5.json.bin
index 27801778..ded7909a 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.5.json.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.5.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.5.xml.bin b/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.5.xml.bin
index 3997fd6f..7bd9da31 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.5.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="dummy">
       <id>dummy</id>
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.6.json.bin b/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.6.json.bin
index 3ed7e813..9344693a 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.6.json.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.6.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.6.xml.bin b/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.6.xml.bin
index 988d31fb..17391b4b 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisAffectedStatus-1.6.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="dummy">
       <id>dummy</id>
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.5.json.bin b/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.5.json.bin
index 1d9d033c..0e572da1 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.5.json.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.5.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.5.xml.bin b/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.5.xml.bin
index a904a0f8..8d627f7c 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.5.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="vuln-with-CODE_NOT_PRESENT">
       <id>vuln-with-CODE_NOT_PRESENT</id>
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.6.json.bin b/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.6.json.bin
index 4a5218ed..d337334a 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.6.json.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.6.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.6.xml.bin b/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.6.xml.bin
index 29cb5ed2..89122cf5 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisJustification-1.6.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="vuln-with-CODE_NOT_PRESENT">
       <id>vuln-with-CODE_NOT_PRESENT</id>
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.5.json.bin b/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.5.json.bin
index 7669e03b..8e6b3c97 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.5.json.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.5.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.5.xml.bin b/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.5.xml.bin
index 4f497a06..3a18b561 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.5.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="dummy">
       <id>dummy</id>
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.6.json.bin b/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.6.json.bin
index c8016f89..501be21d 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.6.json.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.6.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.6.xml.bin b/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.6.xml.bin
index 9f5def30..64e134ad 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisResponse-1.6.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="dummy">
       <id>dummy</id>
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisState-1.5.json.bin b/tests/_data/snapshots/enum_ImpactAnalysisState-1.5.json.bin
index 7c1492a3..c5bacd23 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisState-1.5.json.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisState-1.5.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisState-1.5.xml.bin b/tests/_data/snapshots/enum_ImpactAnalysisState-1.5.xml.bin
index 336bb97b..3fb0930f 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisState-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisState-1.5.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="vuln-wit-state-EXPLOITABLE">
       <id>vuln-wit-state-EXPLOITABLE</id>
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisState-1.6.json.bin b/tests/_data/snapshots/enum_ImpactAnalysisState-1.6.json.bin
index cfef9e1d..24bc78df 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisState-1.6.json.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisState-1.6.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_ImpactAnalysisState-1.6.xml.bin b/tests/_data/snapshots/enum_ImpactAnalysisState-1.6.xml.bin
index 0612ed36..6f3e92a5 100644
--- a/tests/_data/snapshots/enum_ImpactAnalysisState-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_ImpactAnalysisState-1.6.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="vuln-wit-state-EXPLOITABLE">
       <id>vuln-wit-state-EXPLOITABLE</id>
diff --git a/tests/_data/snapshots/enum_IssueClassification-1.5.json.bin b/tests/_data/snapshots/enum_IssueClassification-1.5.json.bin
index 1cd8949b..ae28fa1c 100644
--- a/tests/_data/snapshots/enum_IssueClassification-1.5.json.bin
+++ b/tests/_data/snapshots/enum_IssueClassification-1.5.json.bin
@@ -76,6 +76,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/enum_IssueClassification-1.5.xml.bin b/tests/_data/snapshots/enum_IssueClassification-1.5.xml.bin
index 99324a7d..fc1aaf0b 100644
--- a/tests/_data/snapshots/enum_IssueClassification-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_IssueClassification-1.5.xml.bin
@@ -61,4 +61,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_IssueClassification-1.6.json.bin b/tests/_data/snapshots/enum_IssueClassification-1.6.json.bin
index 7d680b30..58bd90af 100644
--- a/tests/_data/snapshots/enum_IssueClassification-1.6.json.bin
+++ b/tests/_data/snapshots/enum_IssueClassification-1.6.json.bin
@@ -76,6 +76,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/enum_IssueClassification-1.6.xml.bin b/tests/_data/snapshots/enum_IssueClassification-1.6.xml.bin
index 5a400262..76eb838c 100644
--- a/tests/_data/snapshots/enum_IssueClassification-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_IssueClassification-1.6.xml.bin
@@ -61,4 +61,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_PatchClassification-1.5.json.bin b/tests/_data/snapshots/enum_PatchClassification-1.5.json.bin
index 71463382..c8516b80 100644
--- a/tests/_data/snapshots/enum_PatchClassification-1.5.json.bin
+++ b/tests/_data/snapshots/enum_PatchClassification-1.5.json.bin
@@ -71,6 +71,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/enum_PatchClassification-1.5.xml.bin b/tests/_data/snapshots/enum_PatchClassification-1.5.xml.bin
index 5fcc6ab8..167bb471 100644
--- a/tests/_data/snapshots/enum_PatchClassification-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_PatchClassification-1.5.xml.bin
@@ -52,4 +52,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_PatchClassification-1.6.json.bin b/tests/_data/snapshots/enum_PatchClassification-1.6.json.bin
index 488056a1..3266ccce 100644
--- a/tests/_data/snapshots/enum_PatchClassification-1.6.json.bin
+++ b/tests/_data/snapshots/enum_PatchClassification-1.6.json.bin
@@ -71,6 +71,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/enum_PatchClassification-1.6.xml.bin b/tests/_data/snapshots/enum_PatchClassification-1.6.xml.bin
index 09d26b44..2d9298b4 100644
--- a/tests/_data/snapshots/enum_PatchClassification-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_PatchClassification-1.6.xml.bin
@@ -52,4 +52,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.5.json.bin b/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.5.json.bin
index cc05811f..c9140433 100644
--- a/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.5.json.bin
+++ b/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.5.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.5.xml.bin b/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.5.xml.bin
index b2bec3ac..063ff38f 100644
--- a/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.5.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="dummy">
       <id>dummy</id>
diff --git a/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.6.json.bin b/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.6.json.bin
index 7fc1cbe5..9e6d0afa 100644
--- a/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.6.json.bin
+++ b/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.6.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.6.xml.bin b/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.6.xml.bin
index a12eb59b..c3b3e0da 100644
--- a/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_VulnerabilityScoreSource-1.6.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="dummy">
       <id>dummy</id>
diff --git a/tests/_data/snapshots/enum_VulnerabilitySeverity-1.5.json.bin b/tests/_data/snapshots/enum_VulnerabilitySeverity-1.5.json.bin
index 3b73d89f..a2f56899 100644
--- a/tests/_data/snapshots/enum_VulnerabilitySeverity-1.5.json.bin
+++ b/tests/_data/snapshots/enum_VulnerabilitySeverity-1.5.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_VulnerabilitySeverity-1.5.xml.bin b/tests/_data/snapshots/enum_VulnerabilitySeverity-1.5.xml.bin
index 7d50f5ea..da88fc9b 100644
--- a/tests/_data/snapshots/enum_VulnerabilitySeverity-1.5.xml.bin
+++ b/tests/_data/snapshots/enum_VulnerabilitySeverity-1.5.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="dummy">
       <id>dummy</id>
diff --git a/tests/_data/snapshots/enum_VulnerabilitySeverity-1.6.json.bin b/tests/_data/snapshots/enum_VulnerabilitySeverity-1.6.json.bin
index b65ef467..50036d7f 100644
--- a/tests/_data/snapshots/enum_VulnerabilitySeverity-1.6.json.bin
+++ b/tests/_data/snapshots/enum_VulnerabilitySeverity-1.6.json.bin
@@ -43,6 +43,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/enum_VulnerabilitySeverity-1.6.xml.bin b/tests/_data/snapshots/enum_VulnerabilitySeverity-1.6.xml.bin
index 84277450..40270e21 100644
--- a/tests/_data/snapshots/enum_VulnerabilitySeverity-1.6.xml.bin
+++ b/tests/_data/snapshots/enum_VulnerabilitySeverity-1.6.xml.bin
@@ -36,6 +36,10 @@
       </tool>
     </tools>
   </metadata>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="dummy">
       <id>dummy</id>
diff --git a/tests/_data/snapshots/get_bom_for_issue_275_components-1.5.json.bin b/tests/_data/snapshots/get_bom_for_issue_275_components-1.5.json.bin
index 756e3aa2..3fed7c54 100644
--- a/tests/_data/snapshots/get_bom_for_issue_275_components-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_275_components-1.5.json.bin
@@ -92,6 +92,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_for_issue_275_components-1.5.xml.bin b/tests/_data/snapshots/get_bom_for_issue_275_components-1.5.xml.bin
index cfa3419a..d271c76c 100644
--- a/tests/_data/snapshots/get_bom_for_issue_275_components-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_275_components-1.5.xml.bin
@@ -67,4 +67,8 @@
     </dependency>
     <dependency ref="cd3e9c95-9d41-49e7-9924-8cf0465ae789"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_for_issue_275_components-1.6.json.bin b/tests/_data/snapshots/get_bom_for_issue_275_components-1.6.json.bin
index ef7af836..a9c00dd4 100644
--- a/tests/_data/snapshots/get_bom_for_issue_275_components-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_275_components-1.6.json.bin
@@ -92,6 +92,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_for_issue_275_components-1.6.xml.bin b/tests/_data/snapshots/get_bom_for_issue_275_components-1.6.xml.bin
index b40fd79f..887cb11b 100644
--- a/tests/_data/snapshots/get_bom_for_issue_275_components-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_275_components-1.6.xml.bin
@@ -67,4 +67,8 @@
     </dependency>
     <dependency ref="cd3e9c95-9d41-49e7-9924-8cf0465ae789"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_for_issue_328_components-1.5.json.bin b/tests/_data/snapshots/get_bom_for_issue_328_components-1.5.json.bin
index ff006646..be8fe01e 100644
--- a/tests/_data/snapshots/get_bom_for_issue_328_components-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_328_components-1.5.json.bin
@@ -96,6 +96,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_for_issue_328_components-1.5.xml.bin b/tests/_data/snapshots/get_bom_for_issue_328_components-1.5.xml.bin
index e4a04cfb..b2892f99 100644
--- a/tests/_data/snapshots/get_bom_for_issue_328_components-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_328_components-1.5.xml.bin
@@ -70,4 +70,8 @@
       <dependency ref="component-A"/>
     </dependency>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_for_issue_328_components-1.6.json.bin b/tests/_data/snapshots/get_bom_for_issue_328_components-1.6.json.bin
index 2d3041ae..e06c31c6 100644
--- a/tests/_data/snapshots/get_bom_for_issue_328_components-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_328_components-1.6.json.bin
@@ -96,6 +96,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_for_issue_328_components-1.6.xml.bin b/tests/_data/snapshots/get_bom_for_issue_328_components-1.6.xml.bin
index 5e4b7684..2422cea8 100644
--- a/tests/_data/snapshots/get_bom_for_issue_328_components-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_328_components-1.6.xml.bin
@@ -70,4 +70,8 @@
       <dependency ref="component-A"/>
     </dependency>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_for_issue_497_urls-1.5.json.bin b/tests/_data/snapshots/get_bom_for_issue_497_urls-1.5.json.bin
index 1e9bcb35..d4b48413 100644
--- a/tests/_data/snapshots/get_bom_for_issue_497_urls-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_497_urls-1.5.json.bin
@@ -72,6 +72,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_for_issue_497_urls-1.5.xml.bin b/tests/_data/snapshots/get_bom_for_issue_497_urls-1.5.xml.bin
index 48d2e123..1df947ba 100644
--- a/tests/_data/snapshots/get_bom_for_issue_497_urls-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_497_urls-1.5.xml.bin
@@ -58,4 +58,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_for_issue_497_urls-1.6.json.bin b/tests/_data/snapshots/get_bom_for_issue_497_urls-1.6.json.bin
index 1697779c..9d39da84 100644
--- a/tests/_data/snapshots/get_bom_for_issue_497_urls-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_497_urls-1.6.json.bin
@@ -72,6 +72,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_for_issue_497_urls-1.6.xml.bin b/tests/_data/snapshots/get_bom_for_issue_497_urls-1.6.xml.bin
index 2dd3edaf..ecb4c429 100644
--- a/tests/_data/snapshots/get_bom_for_issue_497_urls-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_for_issue_497_urls-1.6.xml.bin
@@ -58,4 +58,8 @@
   <dependencies>
     <dependency ref="dummy"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_just_complete_metadata-1.5.json.bin b/tests/_data/snapshots/get_bom_just_complete_metadata-1.5.json.bin
index 69efaef9..8fdcbc66 100644
--- a/tests/_data/snapshots/get_bom_just_complete_metadata-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_just_complete_metadata-1.5.json.bin
@@ -434,6 +434,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_just_complete_metadata-1.5.xml.bin b/tests/_data/snapshots/get_bom_just_complete_metadata-1.5.xml.bin
index cf5cc4e5..a9ac8fcf 100644
--- a/tests/_data/snapshots/get_bom_just_complete_metadata-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_just_complete_metadata-1.5.xml.bin
@@ -309,4 +309,8 @@
   <dependencies>
     <dependency ref="my-specific-bom-ref-for-dings"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_just_complete_metadata-1.6.json.bin b/tests/_data/snapshots/get_bom_just_complete_metadata-1.6.json.bin
index c1f5676d..0d854562 100644
--- a/tests/_data/snapshots/get_bom_just_complete_metadata-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_just_complete_metadata-1.6.json.bin
@@ -478,6 +478,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_just_complete_metadata-1.6.xml.bin b/tests/_data/snapshots/get_bom_just_complete_metadata-1.6.xml.bin
index 15b10c1b..56618e7e 100644
--- a/tests/_data/snapshots/get_bom_just_complete_metadata-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_just_complete_metadata-1.6.xml.bin
@@ -349,4 +349,8 @@
   <dependencies>
     <dependency ref="my-specific-bom-ref-for-dings"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_v1_6_with_crypto_algorithm-1.6.json.bin b/tests/_data/snapshots/get_bom_v1_6_with_crypto_algorithm-1.6.json.bin
index 42fdd278..712a1aa0 100644
--- a/tests/_data/snapshots/get_bom_v1_6_with_crypto_algorithm-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_v1_6_with_crypto_algorithm-1.6.json.bin
@@ -83,6 +83,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_v1_6_with_crypto_algorithm-1.6.xml.bin b/tests/_data/snapshots/get_bom_v1_6_with_crypto_algorithm-1.6.xml.bin
index 72f36feb..d0a5b749 100644
--- a/tests/_data/snapshots/get_bom_v1_6_with_crypto_algorithm-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_v1_6_with_crypto_algorithm-1.6.xml.bin
@@ -70,4 +70,8 @@
   <dependencies>
     <dependency ref="8182921e-0588-472e-b8f9-9c527c68f067"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_v1_6_with_crypto_certificate-1.6.json.bin b/tests/_data/snapshots/get_bom_v1_6_with_crypto_certificate-1.6.json.bin
index 3fa0c680..ff2fefef 100644
--- a/tests/_data/snapshots/get_bom_v1_6_with_crypto_certificate-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_v1_6_with_crypto_certificate-1.6.json.bin
@@ -71,6 +71,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_v1_6_with_crypto_certificate-1.6.xml.bin b/tests/_data/snapshots/get_bom_v1_6_with_crypto_certificate-1.6.xml.bin
index 661c73f8..846567cb 100644
--- a/tests/_data/snapshots/get_bom_v1_6_with_crypto_certificate-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_v1_6_with_crypto_certificate-1.6.xml.bin
@@ -60,4 +60,8 @@
   <dependencies>
     <dependency ref="1f4ed1e4-582a-4fa0-8c38-1b4facc16972"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_v1_6_with_crypto_protocol-1.6.json.bin b/tests/_data/snapshots/get_bom_v1_6_with_crypto_protocol-1.6.json.bin
index 46c4d952..812e4e2e 100644
--- a/tests/_data/snapshots/get_bom_v1_6_with_crypto_protocol-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_v1_6_with_crypto_protocol-1.6.json.bin
@@ -100,6 +100,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_v1_6_with_crypto_protocol-1.6.xml.bin b/tests/_data/snapshots/get_bom_v1_6_with_crypto_protocol-1.6.xml.bin
index 72618139..6025d3b3 100644
--- a/tests/_data/snapshots/get_bom_v1_6_with_crypto_protocol-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_v1_6_with_crypto_protocol-1.6.xml.bin
@@ -89,4 +89,8 @@
   <dependencies>
     <dependency ref="26b1ce0f-bec6-4bfe-9db1-03b75a4ed1ec"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_v1_6_with_crypto_related_material-1.6.json.bin b/tests/_data/snapshots/get_bom_v1_6_with_crypto_related_material-1.6.json.bin
index e36be8f5..0358af5a 100644
--- a/tests/_data/snapshots/get_bom_v1_6_with_crypto_related_material-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_v1_6_with_crypto_related_material-1.6.json.bin
@@ -78,6 +78,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_v1_6_with_crypto_related_material-1.6.xml.bin b/tests/_data/snapshots/get_bom_v1_6_with_crypto_related_material-1.6.xml.bin
index 03f83320..e3da9531 100644
--- a/tests/_data/snapshots/get_bom_v1_6_with_crypto_related_material-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_v1_6_with_crypto_related_material-1.6.xml.bin
@@ -67,4 +67,8 @@
   <dependencies>
     <dependency ref="332b3cee-078c-4789-ab15-887565b6fac5"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.5.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.5.json.bin
index 29e45b11..d5daf9b3 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.5.json.bin
@@ -65,6 +65,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.5.xml.bin
index 65cfbd59..547eacda 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.5.xml.bin
@@ -52,4 +52,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.6.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.6.json.bin
index f80a8852..ea2735d1 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.6.json.bin
@@ -65,6 +65,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.6.xml.bin
index b514b8ca..fea7e2ec 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_basic-1.6.xml.bin
@@ -52,4 +52,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.5.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.5.json.bin
index e20b947f..a4edc202 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.5.json.bin
@@ -371,6 +371,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.5.xml.bin
index 1db3e774..c786be39 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.5.xml.bin
@@ -266,4 +266,8 @@
   <dependencies>
     <dependency ref="my-specific-bom-ref-for-dings"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.6.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.6.json.bin
index b78fae4e..44e35f92 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.6.json.bin
@@ -377,6 +377,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.6.xml.bin
index dd787ce9..a53231ce 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_complete-1.6.xml.bin
@@ -272,4 +272,8 @@
   <dependencies>
     <dependency ref="my-specific-bom-ref-for-dings"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.5.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.5.json.bin
index a23eb992..1250e296 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.5.json.bin
@@ -64,6 +64,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.5.xml.bin
index 07877cd0..01851806 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.5.xml.bin
@@ -51,4 +51,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.6.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.6.json.bin
index 47d7da08..80a74ce8 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.6.json.bin
@@ -64,6 +64,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.6.xml.bin
index 227aede9..70a34c40 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_no_component_version-1.6.xml.bin
@@ -51,4 +51,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.5.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.5.json.bin
index 9bb1a15c..8381f9f1 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.5.json.bin
@@ -66,6 +66,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.5.xml.bin
index ca8a2537..68a0c03d 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.5.xml.bin
@@ -53,4 +53,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.6.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.6.json.bin
index 8c89c632..a45ce579 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.6.json.bin
@@ -66,6 +66,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.6.xml.bin
index cc5df48f..9c499c56 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_cpe-1.6.xml.bin
@@ -53,4 +53,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.5.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.5.json.bin
index f542519c..9e02ddb5 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.5.json.bin
@@ -124,6 +124,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.5.xml.bin
index 40b79aed..60fec7ea 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.5.xml.bin
@@ -96,4 +96,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.6.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.6.json.bin
index a14f0ec9..f9aedace 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.6.json.bin
@@ -124,6 +124,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.6.xml.bin
index e28283c8..051bac9f 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_release_notes-1.6.xml.bin
@@ -96,4 +96,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.5.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.5.json.bin
index 29e45b11..d5daf9b3 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.5.json.bin
@@ -65,6 +65,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.5.xml.bin
index 65cfbd59..547eacda 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.5.xml.bin
@@ -52,4 +52,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.6.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.6.json.bin
index 72a80263..441ca484 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.6.json.bin
@@ -109,6 +109,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.6.xml.bin
index 36a593c9..7fa2c86b 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_v16_fields-1.6.xml.bin
@@ -88,4 +88,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.5.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.5.json.bin
index 960b631a..d6fca330 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.5.json.bin
@@ -65,6 +65,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.5.xml.bin
index d5942b3f..b5903265 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.5.xml.bin
@@ -52,6 +52,10 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="my-vuln-ref-1">
       <id>CVE-2018-7489</id>
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.6.json.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.6.json.bin
index 88ab6676..b158c3ff 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.6.json.bin
@@ -65,6 +65,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "vulnerabilities": [
diff --git a/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.6.xml.bin
index e8be69dd..d115c19c 100644
--- a/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_setuptools_with_vulnerability-1.6.xml.bin
@@ -52,6 +52,10 @@
   <dependencies>
     <dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
   <vulnerabilities>
     <vulnerability bom-ref="my-vuln-ref-1">
       <id>CVE-2018-7489</id>
diff --git a/tests/_data/snapshots/get_bom_with_component_toml_1-1.5.json.bin b/tests/_data/snapshots/get_bom_with_component_toml_1-1.5.json.bin
index 1c26cc4d..340772aa 100644
--- a/tests/_data/snapshots/get_bom_with_component_toml_1-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_toml_1-1.5.json.bin
@@ -76,6 +76,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_toml_1-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_component_toml_1-1.5.xml.bin
index 7ad5a775..d633bdf4 100644
--- a/tests/_data/snapshots/get_bom_with_component_toml_1-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_toml_1-1.5.xml.bin
@@ -58,4 +58,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/toml@0.10.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_component_toml_1-1.6.json.bin b/tests/_data/snapshots/get_bom_with_component_toml_1-1.6.json.bin
index 16e8d58a..4a49b413 100644
--- a/tests/_data/snapshots/get_bom_with_component_toml_1-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_component_toml_1-1.6.json.bin
@@ -76,6 +76,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_component_toml_1-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_component_toml_1-1.6.xml.bin
index 9f0b897c..4aa9e789 100644
--- a/tests/_data/snapshots/get_bom_with_component_toml_1-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_component_toml_1-1.6.xml.bin
@@ -58,4 +58,8 @@
   <dependencies>
     <dependency ref="pkg:pypi/toml@0.10.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.5.json.bin b/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.5.json.bin
index 8b1f1a70..502827d9 100644
--- a/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.5.json.bin
@@ -105,6 +105,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 23,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.5.xml.bin
index 0c69f359..b27f09d6 100644
--- a/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.5.xml.bin
@@ -76,4 +76,8 @@
     </dependency>
     <dependency ref="toml"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.6.json.bin b/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.6.json.bin
index f018704c..c59624ab 100644
--- a/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.6.json.bin
@@ -105,6 +105,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 23,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.6.xml.bin
index b61b9ce0..7b29a08a 100644
--- a/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_dependencies_hanging-1.6.xml.bin
@@ -76,4 +76,8 @@
     </dependency>
     <dependency ref="toml"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_dependencies_valid-1.5.json.bin b/tests/_data/snapshots/get_bom_with_dependencies_valid-1.5.json.bin
index e012e747..0c3a6b38 100644
--- a/tests/_data/snapshots/get_bom_with_dependencies_valid-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_dependencies_valid-1.5.json.bin
@@ -97,6 +97,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_dependencies_valid-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_dependencies_valid-1.5.xml.bin
index cbdc448f..8fed61b7 100644
--- a/tests/_data/snapshots/get_bom_with_dependencies_valid-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_dependencies_valid-1.5.xml.bin
@@ -72,4 +72,8 @@
     </dependency>
     <dependency ref="pkg:pypi/toml@0.10.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_dependencies_valid-1.6.json.bin b/tests/_data/snapshots/get_bom_with_dependencies_valid-1.6.json.bin
index 030f8559..45d62795 100644
--- a/tests/_data/snapshots/get_bom_with_dependencies_valid-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_dependencies_valid-1.6.json.bin
@@ -97,6 +97,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_dependencies_valid-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_dependencies_valid-1.6.xml.bin
index d7e65f7b..910d8a19 100644
--- a/tests/_data/snapshots/get_bom_with_dependencies_valid-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_dependencies_valid-1.6.xml.bin
@@ -72,4 +72,8 @@
     </dependency>
     <dependency ref="pkg:pypi/toml@0.10.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_external_references-1.5.json.bin b/tests/_data/snapshots/get_bom_with_external_references-1.5.json.bin
index f7a3b02b..efd728cc 100644
--- a/tests/_data/snapshots/get_bom_with_external_references-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_external_references-1.5.json.bin
@@ -60,6 +60,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_external_references-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_external_references-1.5.xml.bin
index 45c18fce..7d3acd73 100644
--- a/tests/_data/snapshots/get_bom_with_external_references-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_external_references-1.5.xml.bin
@@ -48,4 +48,8 @@
       <url>https://cyclonedx.org</url>
     </reference>
   </externalReferences>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_external_references-1.6.json.bin b/tests/_data/snapshots/get_bom_with_external_references-1.6.json.bin
index 0ad4ee7c..f8a2f5b0 100644
--- a/tests/_data/snapshots/get_bom_with_external_references-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_external_references-1.6.json.bin
@@ -60,6 +60,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_external_references-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_external_references-1.6.xml.bin
index 3234cd32..f0e24adf 100644
--- a/tests/_data/snapshots/get_bom_with_external_references-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_external_references-1.6.xml.bin
@@ -48,4 +48,8 @@
       <url>https://cyclonedx.org</url>
     </reference>
   </externalReferences>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_licenses-1.5.json.bin b/tests/_data/snapshots/get_bom_with_licenses-1.5.json.bin
index 43fbd59b..7c30ecba 100644
--- a/tests/_data/snapshots/get_bom_with_licenses-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_licenses-1.5.json.bin
@@ -121,6 +121,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_licenses-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_licenses-1.5.xml.bin
index 53e0c3cc..cd4c8d1d 100644
--- a/tests/_data/snapshots/get_bom_with_licenses-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_licenses-1.5.xml.bin
@@ -106,4 +106,8 @@
     <dependency ref="S3"/>
     <dependency ref="my-app"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_licenses-1.6.json.bin b/tests/_data/snapshots/get_bom_with_licenses-1.6.json.bin
index a7688a45..6d4b46e0 100644
--- a/tests/_data/snapshots/get_bom_with_licenses-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_licenses-1.6.json.bin
@@ -122,6 +122,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_licenses-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_licenses-1.6.xml.bin
index c9d918a1..e191cd7a 100644
--- a/tests/_data/snapshots/get_bom_with_licenses-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_licenses-1.6.xml.bin
@@ -106,4 +106,8 @@
     <dependency ref="S3"/>
     <dependency ref="my-app"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.5.json.bin b/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.5.json.bin
index e6805424..66edb924 100644
--- a/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.5.json.bin
@@ -97,6 +97,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.5.xml.bin
index 5daf37b9..358958e9 100644
--- a/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.5.xml.bin
@@ -72,4 +72,8 @@
     </dependency>
     <dependency ref="pkg:pypi/toml@0.10.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.6.json.bin b/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.6.json.bin
index abc5b4dd..accf4887 100644
--- a/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.6.json.bin
@@ -97,6 +97,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
diff --git a/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.6.xml.bin
index d6961679..7b73d353 100644
--- a/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_metadata_component_and_dependencies-1.6.xml.bin
@@ -72,4 +72,8 @@
     </dependency>
     <dependency ref="pkg:pypi/toml@0.10.2?extension=tar.gz"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_multiple_licenses-1.5.json.bin b/tests/_data/snapshots/get_bom_with_multiple_licenses-1.5.json.bin
index 6f12f024..33849b38 100644
--- a/tests/_data/snapshots/get_bom_with_multiple_licenses-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_multiple_licenses-1.5.json.bin
@@ -102,6 +102,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_multiple_licenses-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_multiple_licenses-1.5.xml.bin
index 5e8ec45a..8fedd3e7 100644
--- a/tests/_data/snapshots/get_bom_with_multiple_licenses-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_multiple_licenses-1.5.xml.bin
@@ -86,4 +86,8 @@
     <dependency ref="my-compo"/>
     <dependency ref="my-serv"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_multiple_licenses-1.6.json.bin b/tests/_data/snapshots/get_bom_with_multiple_licenses-1.6.json.bin
index a37c717d..d590951c 100644
--- a/tests/_data/snapshots/get_bom_with_multiple_licenses-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_multiple_licenses-1.6.json.bin
@@ -102,6 +102,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_multiple_licenses-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_multiple_licenses-1.6.xml.bin
index 86fda112..8b1c9c9b 100644
--- a/tests/_data/snapshots/get_bom_with_multiple_licenses-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_multiple_licenses-1.6.xml.bin
@@ -86,4 +86,8 @@
     <dependency ref="my-compo"/>
     <dependency ref="my-serv"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_nested_services-1.5.json.bin b/tests/_data/snapshots/get_bom_with_nested_services-1.5.json.bin
index 552c4227..e286d6fe 100644
--- a/tests/_data/snapshots/get_bom_with_nested_services-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_nested_services-1.5.json.bin
@@ -60,6 +60,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_nested_services-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_nested_services-1.5.xml.bin
index a03c0dd8..5b1865d2 100644
--- a/tests/_data/snapshots/get_bom_with_nested_services-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_nested_services-1.5.xml.bin
@@ -191,4 +191,8 @@
     <dependency ref="my-specific-bom-ref-for-my-first-service"/>
     <dependency ref="my-specific-bom-ref-for-my-second-service"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_nested_services-1.6.json.bin b/tests/_data/snapshots/get_bom_with_nested_services-1.6.json.bin
index 72500543..ea5e7d27 100644
--- a/tests/_data/snapshots/get_bom_with_nested_services-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_nested_services-1.6.json.bin
@@ -60,6 +60,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_nested_services-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_nested_services-1.6.xml.bin
index 05a99778..030d9d47 100644
--- a/tests/_data/snapshots/get_bom_with_nested_services-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_nested_services-1.6.xml.bin
@@ -209,4 +209,8 @@
     <dependency ref="my-specific-bom-ref-for-my-first-service"/>
     <dependency ref="my-specific-bom-ref-for-my-second-service"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_services_complex-1.5.json.bin b/tests/_data/snapshots/get_bom_with_services_complex-1.5.json.bin
index d7366dc4..71c4d2d1 100644
--- a/tests/_data/snapshots/get_bom_with_services_complex-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_services_complex-1.5.json.bin
@@ -60,6 +60,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_services_complex-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_services_complex-1.5.xml.bin
index f12b33bf..539e964f 100644
--- a/tests/_data/snapshots/get_bom_with_services_complex-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_services_complex-1.5.xml.bin
@@ -141,4 +141,8 @@
     <dependency ref="my-specific-bom-ref-for-my-first-service"/>
     <dependency ref="my-specific-bom-ref-for-my-second-service"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_services_complex-1.6.json.bin b/tests/_data/snapshots/get_bom_with_services_complex-1.6.json.bin
index 71df6c03..13e17526 100644
--- a/tests/_data/snapshots/get_bom_with_services_complex-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_services_complex-1.6.json.bin
@@ -60,6 +60,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_services_complex-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_services_complex-1.6.xml.bin
index d950f3e9..b541b17f 100644
--- a/tests/_data/snapshots/get_bom_with_services_complex-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_services_complex-1.6.xml.bin
@@ -147,4 +147,8 @@
     <dependency ref="my-specific-bom-ref-for-my-first-service"/>
     <dependency ref="my-specific-bom-ref-for-my-second-service"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_services_simple-1.5.json.bin b/tests/_data/snapshots/get_bom_with_services_simple-1.5.json.bin
index 86baea13..7ca30ec6 100644
--- a/tests/_data/snapshots/get_bom_with_services_simple-1.5.json.bin
+++ b/tests/_data/snapshots/get_bom_with_services_simple-1.5.json.bin
@@ -60,6 +60,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_services_simple-1.5.xml.bin b/tests/_data/snapshots/get_bom_with_services_simple-1.5.xml.bin
index 4ecb2524..608a8dbf 100644
--- a/tests/_data/snapshots/get_bom_with_services_simple-1.5.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_services_simple-1.5.xml.bin
@@ -53,4 +53,8 @@
     <dependency ref="my-specific-bom-ref-for-my-first-service"/>
     <dependency ref="my-specific-bom-ref-for-my-second-service"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>
diff --git a/tests/_data/snapshots/get_bom_with_services_simple-1.6.json.bin b/tests/_data/snapshots/get_bom_with_services_simple-1.6.json.bin
index 78c8472b..1b421189 100644
--- a/tests/_data/snapshots/get_bom_with_services_simple-1.6.json.bin
+++ b/tests/_data/snapshots/get_bom_with_services_simple-1.6.json.bin
@@ -60,6 +60,16 @@
       }
     ]
   },
+  "properties": [
+    {
+      "name": "key1",
+      "value": "val1"
+    },
+    {
+      "name": "key2",
+      "value": "val2"
+    }
+  ],
   "serialNumber": "urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac",
   "services": [
     {
diff --git a/tests/_data/snapshots/get_bom_with_services_simple-1.6.xml.bin b/tests/_data/snapshots/get_bom_with_services_simple-1.6.xml.bin
index 51195422..a46b2d21 100644
--- a/tests/_data/snapshots/get_bom_with_services_simple-1.6.xml.bin
+++ b/tests/_data/snapshots/get_bom_with_services_simple-1.6.xml.bin
@@ -53,4 +53,8 @@
     <dependency ref="my-specific-bom-ref-for-my-first-service"/>
     <dependency ref="my-specific-bom-ref-for-my-second-service"/>
   </dependencies>
+  <properties>
+    <property name="key1">val1</property>
+    <property name="key2">val2</property>
+  </properties>
 </bom>