This doesn't preclude the user of SPDX and CycloneDX at all. Manifests is a pluggable claim so any SBOM can be used as long as a CoAP content type is registered for it.
It seems that these registrations are better done elsewhere and by people expert with these two SBOMs.
This also simplifies and shortens the EAT draft which is a good thing.
This doesn't preclude the user of SPDX and CycloneDX at all. Manifests is a pluggable claim so any SBOM can be used as long as a CoAP content type is registered for it.
It seems that these registrations are better done elsewhere and by people expert with these two SBOMs.
This also simplifies and shortens the EAT draft which is a good thing.