Add source-distribution element to externalReferenceType (#269)

Resolves #98
CycloneDX · Jan 12, 2024 · 517e694 · 517e694
2 parents 6f4665c + ae45d7c
commit 517e694
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/schema/bom-1.6.proto b/schema/bom-1.6.proto
@@ -263,6 +263,8 @@ enum ExternalReferenceType {
   EXTERNAL_REFERENCE_TYPE_EVIDENCE = 36;
   // Describes how a component or service was manufactured or deployed.
   EXTERNAL_REFERENCE_TYPE_FORMULATION = 37;
+  // URL to a source archive.
+  EXTERNAL_REFERENCE_TYPE_SOURCE_DISTRIBUTION = 38;
 }
 
 enum HashAlg {

diff --git a/schema/bom-1.6.schema.json b/schema/bom-1.6.schema.json
@@ -1244,6 +1244,7 @@
             "chat",
             "documentation",
             "support",
+            "source-distribution",
             "distribution",
             "distribution-intake",
             "license",
@@ -1285,6 +1286,7 @@
             "chat": "Real-time chat platform",
             "documentation": "Documentation, guides, or how-to instructions",
             "support": "Community or commercial support",
+            "source-distribution": "URL to a source archive",
             "distribution": "Direct or repository download location",
             "distribution-intake": "The location where a component was published to. This is often the same as \"distribution\" but may also include specialized publishing processes that act as an intermediary.",
             "license": "The reference to the license file. If a license URL has been defined in the license node, it should also be defined as an external reference for completeness.",

diff --git a/schema/bom-1.6.xsd b/schema/bom-1.6.xsd
@@ -1259,6 +1259,11 @@ limitations under the License.
                     <xs:documentation>Community or commercial support</xs:documentation>
                 </xs:annotation>
             </xs:enumeration>
+            <xs:enumeration value="source-distribution">
+                <xs:annotation>
+                    <xs:documentation>URL to a source archive</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
             <xs:enumeration value="distribution">
                 <xs:annotation>
                     <xs:documentation>Direct or repository download location</xs:documentation>