Added first-class hardware support #982
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,102 @@ | ||
| { | ||
| "$schema": "https://json-schema.org/draft/2020-12/schema", | ||
| "$id": "https://cyclonedx.org/schema/2.0/model/cyclonedx-certification-2.0.schema.json", | ||
| "type": "null", | ||
| "title": "CycloneDX Certification Model", | ||
| "$comment" : "OWASP CycloneDX is an Ecma International standard (ECMA-424) developed in collaboration between the OWASP Foundation and Ecma Technical Committee 54 (TC54). The standard is published under a royalty-free patent policy. This JSON schema is the reference implementation and is licensed under the Apache License 2.0.", | ||
| "$defs": { | ||
| "certifications": { | ||
| "type": "array", | ||
| "title": "Certifications", | ||
| "description": "Certifications held by or applicable to the subject.", | ||
| "items": { "$ref": "#/$defs/certification" } | ||
| }, | ||
| "certification": { | ||
| "type": "object", | ||
| "title": "Certification", | ||
| "description": "A certification, accreditation, or compliance mark applied to a subject. The subject may be a person, an organization, a system, a product, a service, or any other component. The certification names the standard or scheme, optionally records the certificate identifier, issuer, validity dates, scope, and jurisdiction.", | ||
| "required": [ "standard" ], | ||
| "additionalProperties": false, | ||
| "properties": { | ||
| "bom-ref": { | ||
| "$ref": "cyclonedx-common-2.0.schema.json#/$defs/refType", | ||
| "title": "BOM Reference", | ||
| "description": "An optional identifier that can be used to reference the certification from elsewhere. Every bom-ref shall be unique within the containing instance. The value should not start with the prefix `urn:cdx:` to avoid conflicts with BOM-Link identifiers." | ||
| }, | ||
| "standard": { | ||
| "type": "string", | ||
| "minLength": 1, | ||
| "title": "Standard", | ||
| "description": "The certification standard, regulatory scheme, or compliance mark.", | ||
| "examples": [ "ISO 9001:2015", "IATF 16949:2016", "ISO/IEC 27001:2022", "AS9100D", "FCC Part 15", "CE", "UKCA", "RCM", "Common Criteria (ISO/IEC 15408)", "FIPS 140-3", "SOC 2 Type II" ] | ||
| }, | ||
| "identifier": { | ||
| "type": "string", | ||
| "title": "Identifier", | ||
| "description": "Certificate, registration, filing, or scheme identifier issued by the authority." | ||
| }, | ||
| "issuer": { | ||
| "$ref": "cyclonedx-common-2.0.schema.json#/$defs/refLinkType", | ||
| "title": "Issuer", | ||
| "description": "Reference using bom-link or bom-ref to the party that issued the certification. Typically a certification body, accreditation organization, or regulatory authority." | ||
| }, | ||
| "issuedDate": { | ||
| "type": "string", | ||
| "format": "date", | ||
| "title": "Issued Date", | ||
| "description": "Date on which the certification was issued." | ||
| }, | ||
| "expirationDate": { | ||
| "type": "string", | ||
| "format": "date", | ||
| "title": "Expiration Date", | ||
| "description": "Date on which the certification expires or requires renewal." | ||
| }, | ||
| "scope": { | ||
| "type": "string", | ||
| "title": "Scope", | ||
| "description": "Description of the activities, facilities, products, services, or operations covered by the certification." | ||
| }, | ||
| "jurisdiction": { | ||
| "type": "string", | ||
| "title": "Jurisdiction", | ||
| "description": "ISO 3166-1 alpha-2 country code, ISO 3166-2 subdivision, or supranational identifier such as `EU`, where the certification applies.", | ||
| "examples": [ "US", "EU", "GB", "AU", "US-CA" ] | ||
| }, | ||
| "level": { | ||
| "type": "string", | ||
| "title": "Level", | ||
| "description": "The level, class, or grade achieved within the certification scheme, where the scheme defines one.", | ||
| "examples": [ "EAL4+", "Level 2", "Class B" ] | ||
| }, | ||
| "url": { | ||
| "type": "string", | ||
| "format": "iri-reference", | ||
| "title": "URL", | ||
| "description": "URL to the certificate record, filing, or supporting documentation." | ||
| }, | ||
| "relatedClaims": { | ||
| "type": "array", | ||
| "uniqueItems": true, | ||
| "title": "Related Claims", | ||
| "description": "References using bom-link or bom-ref to CycloneDX Attestations (CDXA) claims that substantiate the certification, such as the claims, evidence, and counter evidence assembled during the conformity assessment.", | ||
| "items": { | ||
| "anyOf": [ | ||
| { | ||
| "title": "Ref", | ||
| "$ref": "cyclonedx-common-2.0.schema.json#/$defs/refLinkType" | ||
| }, | ||
| { | ||
| "title": "BOM-Link Element", | ||
| "$ref": "cyclonedx-common-2.0.schema.json#/$defs/bomLinkElementType" | ||
| } | ||
| ] | ||
| } | ||
| }, | ||
| "properties": { | ||
| "$ref": "cyclonedx-common-2.0.schema.json#/$defs/properties" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -36,6 +36,7 @@ | |
| "machine-learning-model", | ||
| "data", | ||
| "cryptographic-asset", | ||
| "material" | ||
| "service" | ||
| ], | ||
| "meta:enum": { | ||
|
|
@@ -52,6 +53,7 @@ | |
| "machine-learning-model": "A model based on training data that can make predictions or decisions without being explicitly programmed to do so.", | ||
| "data": "A collection of discrete values that convey information.", | ||
| "cryptographic-asset": "A cryptographic asset including algorithms, protocols, certificates, keys, tokens, and secrets.", | ||
| "material": "A physical substance in raw or processed form that is used to make, maintain, or repair an item, such as a metal, alloy, polymer, chemical, or other matter. Materials are commonly tracked for sourcing, provenance, and regulatory compliance. A finished physical item should be classified as 'device' instead." | ||
| "service": "A service, including microservices, function-as-a-service, and other types of network or intra-process services. Service-specific attributes, endpoints and the data profiles characterizing the data the service handles, apply exclusively to this component type." | ||
| }, | ||
| "title": "Component Type", | ||
|
|
@@ -73,6 +75,13 @@ | |
| "parties": { | ||
| "$ref": "cyclonedx-party-2.0.schema.json#/$defs/parties" | ||
| }, | ||
| "origins": { | ||
| "type": "array", | ||
| "title": "Component Origins", | ||
| "description": "The geographic origins of the component, each expressed as a distribution across one or more countries or subdivisions. Multiple origins are allowed, each calculated on a different basis.", | ||
| "minItems": 1, | ||
| "items": { "$ref": "cyclonedx-common-2.0.schema.json#/$defs/origin" } | ||
| }, | ||
| "group": { | ||
| "type": "string", | ||
| "title": "Component Group", | ||
|
|
@@ -224,6 +233,40 @@ | |
| "$ref": "cyclonedx-cryptography-2.0.schema.json#/$defs/cryptoProperties", | ||
| "title": "Cryptographic Properties" | ||
| }, | ||
| "classification": { | ||
| "$ref": "cyclonedx-physical-2.0.schema.json#/$defs/classification", | ||
| "title": "Classification", | ||
| "description": "Hierarchical classification of the item, with optional taxonomy codes from external standards. This object may only be specified for components of type `device` or `material` and shall not be specified for other component types." | ||
| }, | ||
| "boardLocation": { | ||
| "$ref": "cyclonedx-physical-2.0.schema.json#/$defs/boardLocation", | ||
| "title": "Board Location", | ||
| "description": "Placement of the item on a printed circuit board, panel, or assembly. This object may only be specified for components of type `device` and shall not be specified for other component types." | ||
| }, | ||
| "deviceType": { | ||
| "$ref": "cyclonedx-physical-2.0.schema.json#/$defs/deviceType", | ||
| "title": "Device Type", | ||
| "description": "Package or mounting style of the physical item, expressed as a predefined device type or a custom device type. This object may only be specified for components of type `device` and shall not be specified for other component types." | ||
| }, | ||
| "leadTime": { | ||
| "$ref": "cyclonedx-physical-2.0.schema.json#/$defs/leadTime", | ||
| "title": "Lead Time", | ||
| "description": "Supplier lead time for procuring the item. This object may only be specified for components of type `device` or `material` and shall not be specified for other component types." | ||
| }, | ||
| "materialForm": { | ||
| "$ref": "cyclonedx-physical-2.0.schema.json#/$defs/materialForm", | ||
| "title": "Material Form", | ||
| "description": "Physical form in which the material is supplied, expressed as a predefined material form or a custom material form. This object may only be specified for components of type `material` and shall not be specified for other component types." | ||
| }, | ||
| "quantity": { | ||
| "$ref": "cyclonedx-physical-2.0.schema.json#/$defs/quantity", | ||
| "title": "Quantity", | ||
| "description": "The quantity of the item in the context in which it is declared, such as the number of identical parts within the enclosing assembly or the amount of material in the described lot. This object may only be specified for components of type `device` or `material` and shall not be specified for other component types." | ||
| }, | ||
| "certifications": { | ||
| "$ref": "cyclonedx-certification-2.0.schema.json#/$defs/certifications", | ||
| "title": "Certifications", | ||
| "description": "Certifications held by or applicable to the component. Applicable to components of any type, hardware and software alike." | ||
| "endpoints": { | ||
| "type": "array", | ||
| "items": { | ||
|
|
@@ -272,12 +315,53 @@ | |
| }, | ||
| "else": true | ||
| }, | ||
| { | ||
| "description": "Requirement: `classification`, `leadTime`, and `quantity` may only be present when `type` is `device` or `material`.", | ||
| "if": { | ||
| "properties": { "type": { "enum": ["device", "material"] } }, | ||
| "required": ["type"] | ||
| }, | ||
| "then": true, | ||
| "else": { | ||
| "properties": { | ||
| "classification": false, | ||
| "leadTime": false, | ||
| "quantity": false | ||
| } | ||
| } | ||
| }, | ||
| { | ||
| "description": "Requirement: `boardLocation` and `deviceType` may only be present when `type` is `device`.", | ||
| "if": { | ||
| "properties": { "type": { "const": "device" } }, | ||
| "required": ["type"] | ||
| }, | ||
| "then": true, | ||
| "else": { | ||
| "properties": { | ||
| "boardLocation": false, | ||
| "deviceType": false | ||
| } | ||
| } | ||
| }, | ||
| { | ||
| "description": "Requirement: `materialForm` may only be present when `type` is `material`.", | ||
| "if": { | ||
| "properties": { "type": { "const": "material" } }, | ||
| "required": ["type"] | ||
| }, | ||
| "then": true, | ||
| "else": { | ||
| "properties": { | ||
| "materialForm": false | ||
| } | ||
| } | ||
| } | ||
| { | ||
| "title": "Service Requirement", | ||
| "description": "Requirement: endpoints and dataProfiles may only be used for components of type `service`.", | ||
| "if": { | ||
| "properties": { "type": { "const": "service" } }, | ||
| }, | ||
| "then": true, | ||
| "else": { | ||
|
|
||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thougtsL
adding up to some full value might be funny ...
i mean, 1/3 + 2/3 = 1
so this would be 33.333333333....
and 66.666666666666....
which might not add up to the full 100 per programming language.