CycloneDX / CycloneDX/specification

[FEATURE]: Patch type for component data type

Open
#900 4 comments 0 reactions 0 assignees View on GitHub
proposed core enhancement
Dominant language
XSLT
Stars
547
Forks
93
Avg merge
7h 11m
Merged PRs (30d)
37

Description

## Describe the feature

Add a "patch" type to component's `data`, this would be used to classify the component as being used for patching the software.

## Possible solutions

Add the "patch" type

## Alternatives

I don't see any other alternative, we already have a source code component data type. Having a patch one would pair nicely.

## Additional context

This is useful for build tools like Nix or Guix where everything is a derivation. Even source code is a derivation that is known as FOD (fixed output derivation). Patches can be derivations as patches can be fetched from the Internet or referenced via a path to be pulled in locally.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.