-
-
Notifications
You must be signed in to change notification settings - Fork 11
render property cdx:reproducible #1201
Copy link
Copy link
Open
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomershacktoberfesthelp wantedExtra attention is neededExtra attention is needed
Description
Activity
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomershacktoberfesthelp wantedExtra attention is neededExtra attention is needed
Is your feature request related to a problem? Please describe.
If a BOM was generated as reproducible, this should be easily visible from the BOM.
Therefore, CycloneDX/cyclonedx-property-taxonomy#70 exists
Describe the solution you'd like
Property
cdx:reproducibleis added undermetadata.properties.Value is
true, if BOM was build in reproducible mode, else value isfalse.Describe alternatives you've considered
Property
cdx:reproduciblecould also be added under globalproperties, which exists since CDX1.5.This global space does not exist as long as
metadata.properties, which exists since CDX1.3.For a better compatibility version-downwards, let's use the area that exists longer.
Additional context
Idea: use the
metadata.properties, because themetadataalso houses the timestamp of document creation.