search

CycloneDX / bom-examples

A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
https://cyclonedx.org
Creative Commons Zero v1.0 Universal
158 stars 55 forks source link

License for the Repo #22

Closed goneall closed 2 years ago

goneall commented 2 years ago

I would like to use these examples in unit tests for some software I am developing.

Is there a license for the examples or any restrictions on its use?

I realize that some may argue some data can not be copyrighted. However, it would be nice to make it clear in the README and a LICENSE file how the data can be used.

CC-BY-4.0 is a common license for this type of data if you would like attribution and CC0-1.0 is a common license if you don't care about the attribution.

stevespringett commented 2 years ago

Thanks Gary. We've licensed it under CC0-1.0.

Also note that in the specification repo, we have several hundred BOMs we use for testing each version of the specification. v1.4 schema test BOMs are here: https://github.com/CycloneDX/specification/tree/master/tools/src/test/resources/1.4 That repo and all its contents are Apache 2.0 licensed.

goneall commented 2 years ago

Thanks @stevespringett for the license info and the test resource pointer.