Skip to content

Commit 8df9e30

Browse files
authored
Add crosswalk page for SPDX 2.3 (#61)
The crosswalk CSV is at https://github.com/codemeta/codemeta/blob/master/crosswalks/SPDX_2_3.csv
1 parent 8db8d35 commit 8df9e30

File tree

2 files changed

+22
-0
lines changed

2 files changed

+22
-0
lines changed

content/crosswalk/spdx2_3.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
title: "Crosswalk for SPDX 2.3 SBOM"
3+
image: "/img/spdx.png"
4+
date: "2024-01-15"
5+
---
6+
7+
The [Software Package Data Exchange® (SPDX®)](https://spdx.dev/) specification defines a standard data format for communicating the component and metadata information associated with software packages, widely known as "software bill of materials" or "SBOM". An SPDX document can be associated with a set of software packages, files or snippets.
8+
9+
SPDX 2.3 supports multiple serialization formats and often uses the following file extensions:
10+
11+
| Serialization format | File extension(s) |
12+
|----------------------|--------------------------------|
13+
| tag:value | `*.spdx` |
14+
| JSON | `*.spdx.json` |
15+
| RDF (RDF/XML) | `*.spdx.rdf`, `*.spdx.rdf.xml` |
16+
| XLS spreadsheet | `*.spdx.xls`, `*.spdx.xlsx` |
17+
| XML | `*.spdx.xml` |
18+
| YAML 1.2 | `*.spdx.yaml`, `*.spdx.yml` |
19+
20+
The crosswalk for the SPDX 2.3 SBOM is as follows:
21+
22+
{{< crosswalk name="SPDX_2_3" >}}

static/img/spdx.png

16 KB
Loading

0 commit comments

Comments
 (0)