CycloneDX / transparency-exchange-api

A standard API specification for exchanging supply chain artifacts and intelligence
https://tc54.org/
Apache License 2.0
59 stars 9 forks source link

Requirement: Artefacts may apply to many versions #17

Open oej opened 5 months ago

oej commented 5 months ago

In the publication side of the API we need to handle that a published artefact may apply to many versions. This means that the same artefact may be part of multiple TEA collections.

This can be handled by having all artefacts in an object store, giving each one a unique ID (hash, UUID) and including the artefact ID in the collection.

The API will need methods to handle publication and retrieval of

by ID

Which means we need

These IDs needs to be persistent.

oej commented 3 months ago
Screenshot 2024-08-20 at 09 06 14

Illustration of this from our meeting