OASIS TC Open Repository: A GitHub repository for management of non-normative information about the work of the CSAF Technical Committee, including documentation
This section indicates that the prod:Relationship element would contain ONE OR MORE prod:FullProductName elements
The prod:Relationship element MUST be present with cardinality [0, ∞] in prod:Tree and if given MUST contain one or more prod:FullProductName instances. » [CSAF-5.1.3-1]
My understanding of this element is that you are creating a new FullProductName object by relating multiple other elements. This makes sense,
However, I cant figure out an example where you would define MULTIPLE FullProductName objects from that relationship.
in version 1.2 (http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/csaf-cvrf-v1.2-cs01.html#_Toc493508771) section 5.1.3
This section indicates that the prod:Relationship element would contain ONE OR MORE prod:FullProductName elements
My understanding of this element is that you are creating a new FullProductName object by relating multiple other elements. This makes sense,
However, I cant figure out an example where you would define MULTIPLE FullProductName objects from that relationship.
So, from the docs, this woudl be legal.
<Relationship ProductReference="CVRFPID-0007" RelationType="Optional Component Of" RelatesToProductReference="CVRFPID-0008">
Is that the intent or is the "ONE or MORE" incorrect? and if it is correct, can you post an example of when that might be useful?