Skip to content

Use SPDX /Core/Annotation and relationships to record provenance #97

Description

@bact

What problem does this solve?

Currently metadata provenance (where we collect/extract metadata from) is recorded in "comment" field, for SPDX 3 SBOM.

Proposed solution

SPDX 3 model provides Annotation that could be use to record provenance of Elements in a more systematic way.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions