Skip to content
This repository has been archived by the owner on Aug 27, 2022. It is now read-only.

Add originator attribute to AbstractArtifact #12

Open
goneall opened this issue Jan 9, 2020 · 2 comments
Open

Add originator attribute to AbstractArtifact #12

goneall opened this issue Jan 9, 2020 · 2 comments

Comments

@goneall
Copy link
Collaborator

goneall commented Jan 9, 2020

Originator is an optional attribute of Package in SPDX.

It is an important field for several use cases. Although some of the more detailed (and complex) types and classes in SBOM may provide similar information, having a simple text field would be quite useful and allow for compatibility.

@CASTResearchLabs
Copy link
Collaborator

the current proposition already has a "supplier" attribute and would handle any additional information as annotation
this was an attempt to keep the model lean

@goneall
Copy link
Collaborator Author

goneall commented Jan 14, 2020

I would disagree with the annotation approach, but perhaps replacing it with some of the other more detailed pedigree fields would be appropriate.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants