-
-
Notifications
You must be signed in to change notification settings - Fork 9
Open
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomershacktoberfesthelp wantedExtra attention is neededExtra attention is needed
Description
Is your feature request related to a problem? Please describe.
If a BOM was generated as reproducible, this should be easily visible from the BOM.
Therefore, CycloneDX/cyclonedx-property-taxonomy#70 exists
Describe the solution you'd like
Property cdx:reproducible
is added under metadata.properties
.
Value is true
, if BOM was build in reproducible mode, else value is false
.
Describe alternatives you've considered
Property cdx:reproducible
could also be added under global properties
, which exists since CDX1.5.
This global space does not exist as long as metadata.properties
, which exists since CDX1.3.
For a better compatibility version-downwards, let's use the area that exists longer.
Additional context
Idea: use the metadata.properties
, because the metadata
also houses the timestamp of document creation.
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomershacktoberfesthelp wantedExtra attention is neededExtra attention is needed