Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Should cryptoProperties only be specified for components of type cryptographic-asset? #522

Open
stevespringett opened this issue Sep 11, 2024 Discussed in #520 · 0 comments

Comments

@stevespringett
Copy link
Member

Discussed in #520

Originally posted by andreas-hilti September 11, 2024
ModelCard
https://cyclonedx.org/docs/1.6/json/#components_items_modelCard
has the following restriction:

This object SHOULD be specified for any component of type machine-learning-model and MUST NOT be specified for other component types.

Similarly, data
https://cyclonedx.org/docs/1.6/json/#components_items_data
has the restriction:

This object SHOULD be specified for any component of type data and MUST NOT be specified for other component types.

This makes me wonder whether the CryptoProperties:
https://cyclonedx.org/docs/1.6/json/#components_items_cryptoProperties
should have a similar restriction? Should they be specified only for components of type cryptographic-asset? The description kind of implies it, however, it is not explicitly specified.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant