CycloneDX / CycloneDX/cyclonedx-python

feat: include `component.evidence.identity` in the SBOM

Offen
#829 1 Kommentar 1 Reaktion 0 zugewiesene Personen Auf GitHub ansehen
enhancement hacktoberfest help wanted
Vorherrschende Sprache
Python
Sterne
390
Forks
98
Ø Merge
2 T. 23 Std.
Gemergte PRs (30 T.)
2

Beschreibung

## Is your feature request related to a problem? Please describe.

Establishing accurate component identity is important in an SBOM, as it enables users to clearly understand how each component's identity was determined and the methods applied in this process.

## Describe the solution you'd like

By including Component's `.evidence.identity` within the SBOM, we provide transparency on the techniques and data sources used to verify component identity, enhancing both the reliability and trustworthiness of the SBOM.

https://cyclonedx.org/docs/1.6/json/#components_items_evidence_identity

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.