similar to sbom directory but all files will be in source tree (instead of generated like sbom are). The csaf files currently in /sbom will move to /csaf while the sbom files will stay in /sbom
How should we list those in /csaf folder? Do we need its own path i.e .well-known/csaf or should they be accessible via .well-known/sbom as before but just organised in a different directory?
similar to sbom directory but all files will be in source tree (instead of generated like sbom are). The csaf files currently in /sbom will move to /csaf while the sbom files will stay in /sbom