You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The 2.0 draft currently has two parallel representations of "who made this":
Components use the new party model — components[].parties[] with roles[] (manufacturer, author, supplier, …) and an organization / person / system / persona identity
(cyclonedx-party-2.0.schema.json, introduced in Initial commit of the party model and test cases. #930).
BOM metadata still uses the 1.x discrete fields — metadata.manufacturer (organizationalEntity), metadata.authors[]
(organizationalContact), and metadata.supplier
(cyclonedx-metadata-2.0.schema.json).
Possible solutions
Replace metadata.manufacturer / metadata.authors / metadata.supplier
with metadata.parties[].
Describe the feature
The 2.0 draft currently has two parallel representations of "who made this":
components[].parties[]withroles[](manufacturer,author,supplier, …) and anorganization/person/system/personaidentity(
cyclonedx-party-2.0.schema.json, introduced in Initial commit of the party model and test cases. #930).metadata.manufacturer(organizationalEntity),metadata.authors[](
organizationalContact), andmetadata.supplier(
cyclonedx-metadata-2.0.schema.json).Possible solutions
Replace metadata.manufacturer / metadata.authors / metadata.supplier
with metadata.parties[].