CycloneDX / CycloneDX/specification

Add support for CoSWID tags

Open
#150 3 comments 0 reactions 0 assignees View on GitHub
proposed core enhancement
Dominant language
XSLT
Stars
547
Forks
93
Avg merge
7h 11m
Merged PRs (30d)
37

Description

CoSWID defines a concise representation of SWID Tags. It's very suited for devices with network and storage constraints. It would be quite useful for a firmware use case I have. Moreover it's not behind a ISO paywall like SWID. It's using the CBOR data format (binary format), which means it's probably not suited for the text representations like JSON and XML, but very well as field/message for the protobuf representation. On could probably just use the 'AttachedText' message in the 'swid' message (since it is essentially SWID) and specify the 'encoding' and/or 'content_type' as CoSWID/CBOR, but the 'value' property is of string type. Maybe someone got a better implementation idea for the specification?
https://www.ietf.org/archive/id/draft-ietf-sacm-coswid-21.html

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.