Update CycloneDX predicate

This is in line with the decision from the CycloneDX project: in-toto/attestation#82 (comment) This resolves an incompatibility between cosign and syft. Signed-off-by: Arnaud J Le Hors <[email protected]>
lehors · Oct 17, 2022 · 86e515c · 86e515c
1 parent bb518a5
commit 86e515c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/in_toto/model.go b/in_toto/model.go
@@ -82,7 +82,7 @@ const (
 	// version.
 	PredicateSPDX = "https://spdx.dev/Document"
 	// PredicateCycloneDX represents a CycloneDX SBOM
-	PredicateCycloneDX = "https://cyclonedx.org/schema"
+	PredicateCycloneDX = "https://cyclonedx.org/bom"
 	// PredicateLinkV1 represents an in-toto 0.9 link.
 	PredicateLinkV1 = "https://in-toto.io/Link/v1"
 )