Hi @stevespringett just realised that I missed adding an email address to the code of conduct.
I can see that you have your owasp email address in the code of conduct in the spec repo. So I have used the same one here.
Just thought there should be a something@cyclonedx.org email address for this (even if it just goes direct to you).