CycloneDX / CycloneDX/specification
[FEATURE]: Patch type for component data type
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
## Describe the feature
Add a "patch" type to component's `data`, this would be used to classify the component as being used for patching the software.
## Possible solutions
Add the "patch" type
## Alternatives
I don't see any other alternative, we already have a source code component data type. Having a patch one would pair nicely.
## Additional context
This is useful for build tools like Nix or Guix where everything is a derivation. Even source code is a derivation that is known as FOD (fixed output derivation). Patches can be derivations as patches can be fetched from the Internet or referenced via a path to be pulled in locally.
Contributor guide
Assessment
This issue has not been assessed yet.