CycloneDX / CycloneDX/specification
Support for Cloud Primitives
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
This is probably a duplicate of #77. However, I didn't want to comment to add to it in case there is a divergence from the feedback provided here.
Currently, component types are limited to:
* Application
* Framework
* Library
* Container
* Operating System
* Device
* Firmware
* File
Is there a path to add Cloud Primitives to this list.
For example, AWS AMI could be a good addition because both Firmware and Operating System do not cover the entirety of the scope. I also don't think this specification should be aligned to specific cloud vendors' terminology.
e.g `AWS AMI` == `Azure Image` == `GCP Images`
I think it makes sense to add `Image` as a generic type to the components type. Potentially, there is room for it to eventually replace `Container` unless I'm missing some context.
Contributor guide
Assessment
This issue has not been assessed yet.