Relaxing requirement of vendor_name in the product object (#1300)

#### Description of changes: 1. Relaxing requirement of `vendor_name` from required to recommended in the `product` object. This is being done to allow efficient utilization of `product` object in the [related_event](https://schema.ocsf.io/1.4.0-dev/objects/related_events) array in the Findings classes. Also, vendor name is not always available to be populated for the related events. --------- Signed-off-by: Rajas Panat <[email protected]>
ocsf · Jan 6, 2025 · 3f9f5d2 · 3f9f5d2
1 parent 5e1c79d
commit 3f9f5d2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -223,6 +223,7 @@ Thankyou! -->
 1. Added `resource_details.name` as an Observable type `type_id: 38`. #1250
 1. Added 3 new enums (Registry Value, Registry Key, Command Line) to `osint.type_id` and added TLP:WHITE to `osint.tlp` enums. #1264
 1. Relaxed attribute requirement for `name` in `observables` object; `title` in `finding_info` object. #1271
+1. Relaxed attribute requirement for `vendor_name` in the `product` object. #1300
 
 ## [v1.3.0] - August 1st, 2024
 

diff --git a/objects/product.json b/objects/product.json
@@ -35,7 +35,7 @@
     },
     "vendor_name": {
       "description": "The name of the vendor of the product.",
-      "requirement": "required"
+      "requirement": "recommended"
     },
     "version": {
       "description": "The version of the product, as defined by the event source. For example: <code>2013.1.3-beta</code>.",