Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add additional composition aggregate types #211

Closed
stevespringett opened this issue Apr 25, 2023 · 1 comment · Fixed by #212
Closed

Add additional composition aggregate types #211

stevespringett opened this issue Apr 25, 2023 · 1 comment · Fixed by #212
Assignees
@stevespringett
Labels
proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration RFC vote accepted
Milestone
1.5

Comments

@stevespringett
Copy link
Member

There are use cases that warrant the following aggregate types.

  • incomplete_first_party_proprietary_only = Contains only first-party components or services, limited specifically to those that are proprietary.
  • incomplete_first_party_opensource_only = Contains only first-party components or services, limited specifically to those that are opensource.
  • incomplete_third_party_proprietary_only = Contains only third-party components or services, limited specifically to those that are proprietary.
  • incomplete_third_party_opensource_only = Contains only third-party components or services, limited specifically to those that are opensource.
@stevespringett stevespringett added this to the 1.5 milestone Apr 25, 2023
@stevespringett stevespringett self-assigned this Apr 25, 2023
@stevespringett
Copy link
Member Author

In addition, there are use cases where CycloneDX annotations need to refer to a specific composition. Therefore, a composition needs a bom-ref.

@stevespringett stevespringett mentioned this issue Apr 25, 2023
Merged
@stevespringett stevespringett linked a pull request Apr 25, 2023 that will close this issue
Added additional compositions and identity #212
Merged
@stevespringett stevespringett added request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration labels Apr 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@stevespringett stevespringett

Labels
proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration RFC vote accepted
Projects
None yet
Milestone
1.5
Development

Successfully merging a pull request may close this issue.

Added additional compositions and identity CycloneDX/specification
1 participant
@stevespringett