cdevents / spec

A common specification for Continuous Delivery events

Apache License 2.0

133 stars 23 forks source link

Add an SBOM URI field to artifact events #171

Closed afrittoli closed 10 months ago

afrittoli commented 1 year ago

Changes

Artifact packaged and/or published events may include a link to a published SBOM. Since there is no default storage location for such SBOM documents, CDEvents may help linking the artifact with its SBOM by including a link to the SBOM in the artifact events.

Partially-addresses: #132

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

[ ] Has the primer doc been updated if a design decision is involved
[x] Have the JSON schemas been updated if the specification changed
[x] Has spec version and event versions been updated according to the versioning policy
[x] Meets the CDEvents contributor standards

afrittoli commented 10 months ago

@xibz @e-backmark-ericsson rebased and addressed all comments.