search

innolitics / fda-readable-sbom

A python script that translates machine-readable SBOMs into a format suitable for FDA submissions.
2 stars 0 forks source link

Include the "Relationship" column #2

Open johndgiese opened 6 months ago

johndgiese commented 6 months ago

The main item in the SBOM should have a value of "primary" while others should say "included in" as appropriate. See https://www.ntia.gov/sites/default/files/publications/ntia_sbom_framing_2nd_edition_20211021_0.pdf for details.

johndgiese commented 6 months ago

It may be good to stick in the two FDA additional properties (see https://innolitics.com/articles/sbom-best-practices-faqs-examples/#what-information-do-we-need-to-include-for-each-component-in-our-sbom)