search

CycloneDX / transparency-exchange-api

A standard API specification for exchanging supply chain artifacts and intelligence
https://tc54.org/
Apache License 2.0
47 stars 5 forks source link

discovery: aliasing #25

Open noqcks opened 1 month ago

noqcks commented 1 month ago

hey there, im working on a related spec - Common Lifecycle Enumeration (CLE)

The CLEs goal is to provide an enumeration of lifecycle events (including EOL states) for components.

We started brainstorming on the CLE a little before TEA was off the ground and imagined that we would need to support component aliasing in some way, for lifecycle events such as a component being renamed. Acme App renamed to Acme Awesome App for example would change the PURL identifier used to identify it. And a user would like to be able to use either identifier to find supply chain information about the app.

we'd love for TEA to support a way to add or remove aliases for component identifiers

oej commented 1 month ago

I think we need to think hard on bundles and redirection. We won't get it right from start, but if we spend time on this we can get close :-)