Skip to content
This repository has been archived by the owner on Aug 27, 2022. It is now read-only.

remove snippets association from AbstractFile #13

Open
goneall opened this issue Jan 9, 2020 · 2 comments
Open

remove snippets association from AbstractFile #13

goneall opened this issue Jan 9, 2020 · 2 comments

Comments

@goneall
Copy link
Collaborator

goneall commented Jan 9, 2020

Remove the snippets attribute from AbstractFile and only have a one way association from snippet to the file since it may be difficult for a file to know all snippets associated with it at SBOM construction time.

This would also help with SPDX compatibility.

@CASTResearchLabs
Copy link
Collaborator

the association was only meant as a way to indicate that the snippet can't exists without a File or a ReferencedFile in the document; it doesn't say there aren't any other snippets from the same File or ReferencedFile (these are simply not of interest in this document and the model doesn't impose to know all other potential snippets)

@goneall
Copy link
Collaborator Author

goneall commented Jan 14, 2020

the association was only meant as a way to indicate that the snippet can't exists without a File or a ReferencedFile in the document

In SPDX, we allow the snippet to reference a file in an external document. The requirement for a file is taken care of by the mandatory field from the snippet back to the file.

The problem I stated above still remains. Perhaps something we need to discuss real-time since I may not be clearly stating the issue or not understanding the model.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants