You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: schema/bom-1.7.proto
+15-9Lines changed: 15 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -101,7 +101,8 @@ message Component {
101
101
optionalstringbom_ref=3;
102
102
// The organization that supplied the component. The supplier may often be the manufacturer but may also be a distributor or repackager.
103
103
optionalOrganizationalEntitysupplier=4;
104
-
// DEPRECATED - DO NOT USE - This will be removed in a future version - Use `.authors` or `.manufacturer` instead. The person(s) or organization(s) that authored the component
104
+
// DEPRECATED - DO NOT USE - This will be removed in a future version - Use `.authors` or `.manufacturer` instead.
105
+
// The person(s) or organization(s) that authored the component
105
106
optionalstringauthor=5 [deprecated = true];
106
107
// The person(s) or organization(s) that published the component
107
108
optionalstringpublisher=6;
@@ -577,7 +578,8 @@ message Metadata {
577
578
repeatedOrganizationalContactauthors=3;
578
579
// The component that the BOM describes.
579
580
optionalComponentcomponent=4;
580
-
// DEPRECATED - DO NOT USE - This will be removed in a future version - Use the `.component.manufacturer` instead. The organization that manufactured the component that the BOM describes.
581
+
// DEPRECATED - DO NOT USE - This will be removed in a future version - Use the `.component.manufacturer` instead.
582
+
// The organization that manufactured the component that the BOM describes.
// The organization that supplied the component that the BOM describes. The supplier may often be the manufacture, but may also be a distributor or repackager.
583
585
optionalOrganizationalEntitysupplier=6;
@@ -773,15 +775,19 @@ enum TlpClassification {
773
775
774
776
// Specifies a tool (manual or automated).
775
777
messageTool {
776
-
// DEPRECATED - DO NOT USE - The vendor of the tool used to create the BOM.
778
+
// DEPRECATED - DO NOT USE - This will be removed in a future version.
779
+
// The vendor of the tool used to create the BOM.
777
780
optionalstringvendor=1 [deprecated = true];
778
-
// DEPRECATED - DO NOT USE - The name of the tool used to create the BOM.
781
+
// DEPRECATED - DO NOT USE - This will be removed in a future version.
782
+
// The name of the tool used to create the BOM.
779
783
optionalstringname=2 [deprecated = true];
780
-
// DEPRECATED - DO NOT USE - The version of the tool used to create the BOM.
784
+
// DEPRECATED - DO NOT USE - This will be removed in a future version.
785
+
// The version of the tool used to create the BOM.
781
786
optionalstringversion=3 [deprecated = true];
782
-
// DEPRECATED - DO NOT USE
787
+
// DEPRECATED - DO NOT USE - This will be removed in a future version.
783
788
repeatedHashhashes=4 [deprecated = true];
784
-
// DEPRECATED - DO NOT USE - Provides the ability to document external references related to the tool.
789
+
// DEPRECATED - DO NOT USE - This will be removed in a future version.
790
+
// Provides the ability to document external references related to the tool.
// A list of software and hardware components used as tools
787
793
repeatedComponentcomponents=6;
@@ -2293,7 +2299,7 @@ message CryptoProperties {
2293
2299
optionalstringalgorithmFamily=12;
2294
2300
// An identifier for the parameter set of the cryptographic algorithm. Examples: in AES128, '128' identifies the key length in bits, in SHA256, '256' identifies the digest length, '128' in SHAKE128 identifies its maximum security level in bits, and 'SHA2-128s' identifies a parameter set used in SLH-DSA (FIPS205).
2295
2301
optionalstringparameterSetIdentifier=2;
2296
-
// DEPRECATED - DO NOT USE - This will be removed in a future version - Use `.ellipticCurve` Instead.
2302
+
// DEPRECATED - DO NOT USE - This will be removed in a future version - Use `.ellipticCurve` instead.
2297
2303
// The specific underlying Elliptic Curve (EC) definition employed which is an indicator of the level of security strength, performance and complexity. Absent an authoritative source of curve names, CycloneDX recommends use of curve names as defined at [https://neuromancer.sk/std/](https://neuromancer.sk/std/), the source from which can be found at [https://github.com/J08nY/std-curves](https://github.com/J08nY/std-curves).
2298
2304
optionalstringcurve=3 [deprecated = true];
2299
2305
// The specific underlying Elliptic Curve (EC) definition employed which is an indicator of the level of security strength, performance and complexity.
@@ -2669,7 +2675,7 @@ message CryptoProperties {
2669
2675
optionalstringversion=2;
2670
2676
// A list of cipher suites related to the protocol.
2671
2677
repeatedCryptoProtocolCipherSuitecipherSuites=3;
2672
-
// DEPRECATED - DO NOT USE - This will be removed in a future version - Use `.ikev2TransformTypesDetailed` Instead.
2678
+
// DEPRECATED - DO NOT USE - This will be removed in a future version - Use `.ikev2TransformTypesDetailed` instead.
2673
2679
// The IKEv2 transform types supported (types 1-4), defined in RFC7296 section 3.3.2, and additional properties.
Copy file name to clipboardExpand all lines: schema/bom-1.7.schema.json
+13-12Lines changed: 13 additions & 12 deletions
Original file line number
Diff line number
Diff line change
@@ -687,7 +687,7 @@
687
687
{
688
688
"type": "array",
689
689
"title": "Tools (legacy)",
690
-
"description": "[Deprecated] The tool(s) used in the creation, enrichment, and validation of the BOM.",
690
+
"description": "[Deprecated]\nThe tool(s) used in the creation, enrichment, and validation of the BOM.",
691
691
"items": {"$ref": "#/definitions/tool"}
692
692
}
693
693
]
@@ -767,7 +767,7 @@
767
767
"tool": {
768
768
"type": "object",
769
769
"title": "Tool",
770
-
"description": "[Deprecated] This will be removed in a future version. Use component or service instead. Information about the automated or manual tool used",
770
+
"description": "[Deprecated] This will be removed in a future version. Use component or service instead.\nInformation about the automated or manual tool used",
771
771
"additionalProperties": false,
772
772
"properties": {
773
773
"vendor": {
@@ -1063,7 +1063,7 @@
1063
1063
"modified": {
1064
1064
"type": "boolean",
1065
1065
"title": "Component Modified From Original",
1066
-
"description": "[Deprecated] This will be removed in a future version. Use the pedigree element instead to supply information on exactly how the component was modified. A boolean value indicating if the component has been modified from the original. A value of true indicates the component is a derivative of the original. A value of false indicates the component has not been modified from the original."
1066
+
"description": "[Deprecated] This will be removed in a future version. Use the pedigree element instead to supply information on exactly how the component was modified.\nA boolean value indicating if the component has been modified from the original. A value of true indicates the component is a derivative of the original. A value of false indicates the component has not been modified from the original."
1067
1067
},
1068
1068
"pedigree": {
1069
1069
"type": "object",
@@ -2978,7 +2978,7 @@
2978
2978
{
2979
2979
"type": "array",
2980
2980
"title": "Tools (legacy)",
2981
-
"description": "[Deprecated] The tool(s) used to identify, confirm, or score the vulnerability.",
2981
+
"description": "[Deprecated]\nThe tool(s) used to identify, confirm, or score the vulnerability.",
2982
2982
"items": {"$ref": "#/definitions/tool"}
2983
2983
}
2984
2984
]
@@ -5534,7 +5534,7 @@
5534
5534
"deprecated": true,
5535
5535
"$ref": "#/definitions/refType",
5536
5536
"title": "Key reference",
5537
-
"description": "[DEPRECATED] This will be removed in a future version. Use `@.relatedCryptographicAssets` instead. The bom-ref to the public key of the subject"
5537
+
"description": "[DEPRECATED] This will be removed in a future version. Use `@.relatedCryptographicAssets` instead.\nThe bom-ref to the public key of the subject"
5538
5538
},
5539
5539
"certificateFormat": {
5540
5540
"type": "string",
@@ -5837,7 +5837,7 @@
5837
5837
"deprecated": true,
5838
5838
"$ref": "#/definitions/refType",
5839
5839
"title": "Algorithm Reference",
5840
-
"description": "[DEPRECATED] Use `relatedCryptographicAssets` instead.\nThe bom-ref to the algorithm used to generate the related cryptographic material."
5840
+
"description": "[DEPRECATED] Use `@.relatedCryptographicAssets` instead.\nThe bom-ref to the algorithm used to generate the related cryptographic material."
5841
5841
},
5842
5842
"creationDate": {
5843
5843
"type": "string",
@@ -5978,7 +5978,7 @@
5978
5978
{
5979
5979
"deprecated": true,
5980
5980
"$ref": "#/definitions/cryptoRefArray",
5981
-
"description": "[DEPRECATED] This will be removed in a future version. Transform Type 1: encryption algorithms"
5981
+
"description": "[DEPRECATED] This will be removed in a future version.\nTransform Type 1: encryption algorithms"
5982
5982
}
5983
5983
]
5984
5984
},
@@ -5996,7 +5996,7 @@
5996
5996
{
5997
5997
"deprecated": true,
5998
5998
"$ref": "#/definitions/cryptoRefArray",
5999
-
"description": "[DEPRECATED] This will be removed in a future version. Transform Type 2: pseudorandom functions"
5999
+
"description": "[DEPRECATED] This will be removed in a future version.\nTransform Type 2: pseudorandom functions"
6000
6000
}
6001
6001
]
6002
6002
},
@@ -6014,7 +6014,7 @@
6014
6014
{
6015
6015
"deprecated": true,
6016
6016
"$ref": "#/definitions/cryptoRefArray",
6017
-
"description": "[DEPRECATED] This will be removed in a future version. Transform Type 3: integrity algorithms"
6017
+
"description": "[DEPRECATED] This will be removed in a future version.\nTransform Type 3: integrity algorithms"
6018
6018
}
6019
6019
]
6020
6020
},
@@ -6032,7 +6032,7 @@
6032
6032
{
6033
6033
"deprecated": true,
6034
6034
"$ref": "#/definitions/cryptoRefArray",
6035
-
"description": "[DEPRECATED] This will be removed in a future version. Transform Type 4: Key Exchange Method (KE) per [RFC 9370](https://www.ietf.org/rfc/rfc9370.html), formerly called Diffie-Hellman Group (D-H)."
6035
+
"description": "[DEPRECATED] This will be removed in a future version.\nTransform Type 4: Key Exchange Method (KE) per [RFC 9370](https://www.ietf.org/rfc/rfc9370.html), formerly called Diffie-Hellman Group (D-H)."
6036
6036
}
6037
6037
]
6038
6038
},
@@ -6055,7 +6055,7 @@
6055
6055
{
6056
6056
"deprecated": true,
6057
6057
"$ref": "#/definitions/cryptoRefArray",
6058
-
"description": "[DEPRECATED] This will be removed in a future version. IKEv2 Authentication method"
6058
+
"description": "[DEPRECATED] This will be removed in a future version.\nIKEv2 Authentication method"
6059
6059
}
6060
6060
]
6061
6061
}
@@ -6065,7 +6065,7 @@
6065
6065
"deprecated": true,
6066
6066
"$ref": "#/definitions/cryptoRefArray",
6067
6067
"title": "Cryptographic References",
6068
-
"description": "[DEPRECATED] Use `relatedCryptographicAssets` instead. A list of protocol-related cryptographic assets"
6068
+
"description": "[DEPRECATED] Use `@.relatedCryptographicAssets` instead.\nA list of protocol-related cryptographic assets"
<xs:documentation>DEPRECATED: Specifies the data classification. THIS FIELD IS DEPRECATED AS OF v1.5. Use dataflow\classification instead</xs:documentation>
2380
+
<xs:documentation>DEPRECATED: Specifies the data classification. THIS FIELD IS DEPRECATED AS OF v1.5. Use `./dataflow/classification` instead</xs:documentation>
2381
2381
</xs:annotation>
2382
2382
</xs:element>
2383
2383
</xs:sequence>
@@ -4604,7 +4604,7 @@ limitations under the License.
0 commit comments