Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add consistent creationInformation as a SBOM Quality Check #77

Closed
surendrapathak opened this issue Feb 27, 2023 · 0 comments · Fixed by #97
Closed

Add consistent creationInformation as a SBOM Quality Check #77

surendrapathak opened this issue Feb 27, 2023 · 0 comments · Fixed by #97
Labels
Next Release P3

Comments

@surendrapathak
Copy link
Collaborator

Creator tool information is critical to tracking the creator's capabilities and maturity.

Rule Proposal Creator Tool information must be valid and include the tool's name and version.
Category Quality
Notes

  • SPDX requires the tool and version to be in this format:
    Tool: toolidentifier-version
  • CycloneDX requires tool and version to be present within metadata
name: The name of the tool
version: The version of the tool

Score
0 if either tool name or version is missing
10 if both tool name and version are present.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Next Release P3
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

77 add consistent creationinformation as a SBOM quality check interlynk-io/sbomqs
1 participant
@surendrapathak