Add predicate specification for CycloneDX #129
Conversation
Sorry about that, for some reason I though it was in that format. I'll take a look at this next week and update 👍 |
I'm afraid I don't know the answer to this question as I have very little practical experience with CycloneDX. Hopefully others can chime in that do have experience. |
There was a problem hiding this comment.
This should be good to go. It does reference the most up-to-date CDX schema as the predicate
spec/predicates/cyclonedx.md
Outdated
| "subject": [{ ... }], | ||
|
|
||
| // Predicate: | ||
| "predicateType": "https://cyclonedx.org/BOM", |
There was a problem hiding this comment.
Is it supposed to just be https://cyclonedx.org/bom? The page doesn't include the version (which I assume is embedded in the predicate field as it is for SPDX?
There was a problem hiding this comment.
Thanks for the updates @danbev ! I have a few more change suggestions for clarity.
There was a problem hiding this comment.
Thank you for the changes, @danbev !
One more thing: Could you please add a link to the CycloneDX spec in the predicates list?
This commit adds a predicate specification for CycloneDX using the example specification from issue in-toto#82. The motivation for doing this is only to offer help with getting this into in-toto, in case the original author currently does not have time. Co-authored-by: samj1912 <[email protected]> Resolves: in-toto#82 Signed-off-by: Daniel Bevenius <[email protected]>
Update list of vetted predicates. Signed-off-by: Daniel Bevenius <[email protected]>
danbev
force-pushed
the
cyclonedx-predicate
branch
from
91382c3
to
cc2737a
Compare
Add link to README.md and remove tentative. Signed-off-by: Daniel Bevenius <[email protected]>
This commit adds a predicate specification for CycloneDX using the example specification from issue #82.
The motivation for doing this is only to offer help with getting this into in-toto, in case the original author currently does not have time.
Co-authored-by: samj1912 [email protected]
Resolves: #82
Signed-off-by: Daniel Bevenius [email protected]