CycloneDX / CycloneDX/cyclonedx-python

feat: include `component.evidence.identity` in the SBOM

Open
#829 1 comment 1 reaction 0 assignees View on GitHub
enhancement hacktoberfest help wanted
Dominant language
Python
Stars
390
Forks
98
Avg merge
2d 14h
Merged PRs (30d)
1

Description

## Is your feature request related to a problem? Please describe.

Establishing accurate component identity is important in an SBOM, as it enables users to clearly understand how each component's identity was determined and the methods applied in this process.

## Describe the solution you'd like

By including Component's `.evidence.identity` within the SBOM, we provide transparency on the techniques and data sources used to verify component identity, enhancing both the reliability and trustworthiness of the SBOM.

https://cyclonedx.org/docs/1.6/json/#components_items_evidence_identity

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.