Skip to content

FEAT: render property cdx:reproducible #1054

Description

@jkowalleck

Is your feature request related to a problem? Please describe.

If a BOM was generated as reproducible, this should be easily visible from the BOM.
Therefore, CycloneDX/cyclonedx-property-taxonomy#70 exists
see https://cyclonedx.github.io/cyclonedx-property-taxonomy/cdx.html

Describe the solution you'd like

Property cdx:reproducible is added under metadata.properties.
Value is true, if BOM was build in reproducible mode, else value is false.

Describe alternatives you've considered

Property cdx:reproducible could also be added under global properties, which exists since CDX1.5.
This global space does not exist as long as metadata.properties, which exists since CDX1.3.
For a better compatibility version-downwards, let's use the area that exists longer.

Additional context

Idea: use the metadata.properties, because the metadata also houses the timestamp of document creation.

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions