CycloneDX / CycloneDX/specification

Support for Cloud Primitives

Open
#137 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
XSLT
Stars
547
Forks
93
Avg merge
7h 11m
Merged PRs (30d)
37

Description

This is probably a duplicate of #77. However, I didn't want to comment to add to it in case there is a divergence from the feedback provided here.

Currently, component types are limited to:

* Application
* Framework
* Library
* Container
* Operating System
* Device
* Firmware
* File

Is there a path to add Cloud Primitives to this list.

For example, AWS AMI could be a good addition because both Firmware and Operating System do not cover the entirety of the scope. I also don't think this specification should be aligned to specific cloud vendors' terminology.

e.g `AWS AMI` == `Azure Image` == `GCP Images`

I think it makes sense to add `Image` as a generic type to the components type. Potentially, there is room for it to eventually replace `Container` unless I'm missing some context.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.