You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Property cdx:reproducible is added under metadata.properties.
Value is true, if BOM was build in reproducible mode, else value is false.
Describe alternatives you've considered
Property cdx:reproducible could also be added under global properties, which exists since CDX1.5.
This global space does not exist as long as metadata.properties, which exists since CDX1.3.
For a better compatibility version-downwards, let's use the area that exists longer.
Additional context
Idea: use the metadata.properties, because the metadata also houses the timestamp of document creation.
The text was updated successfully, but these errors were encountered:
Is your feature request related to a problem? Please describe.
If a BOM was generated as reproducible, this should be easily visible from the BOM.
Therefore, CycloneDX/cyclonedx-property-taxonomy#70 exists
Describe the solution you'd like
Property
cdx:reproducible
is added undermetadata.properties
.Value is
true
, if BOM was build in reproducible mode, else value isfalse
.Describe alternatives you've considered
Property
cdx:reproducible
could also be added under globalproperties
, which exists since CDX1.5.This global space does not exist as long as
metadata.properties
, which exists since CDX1.3.For a better compatibility version-downwards, let's use the area that exists longer.
Additional context
Idea: use the
metadata.properties
, because themetadata
also houses the timestamp of document creation.The text was updated successfully, but these errors were encountered: