Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add Lite profile examples #91

Open
wants to merge 56 commits into
base: master
Choose a base branch
from
Open

add Lite profile examples #91

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
56 commits
Select commit Hold shift + click to select a range
94d44aa
Initial example1-with-VEX
no-ta Jul 1, 2024
d14f88e
change user.name
no-ta Jul 1, 2024
396caba
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 2, 2024
ea55dc8
Apply https://github.com/spdx/spdx-examples/pull/91
no-ta Jul 2, 2024
bddcddb
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 10, 2024
07d0403
Apply https://github.com/spdx/spdx-examples/pull/91
no-ta Jul 10, 2024
79aed87
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 10, 2024
c941fa5
Change file suffix from .jsonld to .json
no-ta Jul 10, 2024
c10db29
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 10, 2024
9c95165
Change spdxId in sotware_Sbom and packageVersion in software_Pacakge
no-ta Jul 10, 2024
cf9eb4e
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 10, 2024
1f83d0a
Change spdxId in sotware_Sbom and packageVersion in software_Pacakge
no-ta Jul 10, 2024
03c5ebe
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 10, 2024
ae7eb1e
Change spdxId in sotware_Sbom and packageVersion in software_Pacakge
no-ta Jul 10, 2024
1091965
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 10, 2024
db80bdd
Update png files for https://github.com/spdx/spdx-examples/pull/91
no-ta Jul 10, 2024
62bcac5
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 11, 2024
54fcef8
Update png files for https://github.com/spdx/spdx-examples/pull/91
no-ta Jul 11, 2024
c64a58f
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 11, 2024
552d82e
Add lite profile examples
NorioKobota Jul 2, 2024
b15cde1
modify to follow suggested at https://github.com/spdx/spdx-examples/p…
NorioKobota Jul 20, 2024
8a584c7
rename fname and move into spdx-3.0 dir to follow suggestions at http…
NorioKobota Jul 20, 2024
b04d429
applied the same modifications to sample2
NorioKobota Jul 20, 2024
8612d57
Merge pull request #3 from no-ta/merge-lite-example-1
NorioKobota Jul 20, 2024
d55f3a0
rename sample2.spdx.json
NorioKobota Jul 20, 2024
e92743b
Rename json file name .json to .spdx.json
no-ta Jul 11, 2024
ae3944e
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 21, 2024
595f7a2
Rename json file name .json to .spdx.json in README.md
no-ta Jul 21, 2024
3294f33
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 21, 2024
53e7389
Rename json file name .json to .spdx.json in README.md
no-ta Jul 21, 2024
e8b6ccd
Rename json file name .json to .spdx.json in README.md
no-ta Jul 21, 2024
391ffb4
Added spdx-3.0 directory
no-ta Jul 21, 2024
eac3284
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 21, 2024
0750598
Merge pull request #4 from no-ta/merge-lite-example-1
NorioKobota Jul 21, 2024
9750bfb
Added security_ prefix to types in Security profile
no-ta Jul 21, 2024
47a4c48
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 22, 2024
de67a55
Added security_ prefix to types in Security profile
no-ta Jul 22, 2024
53c888f
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 22, 2024
7d78340
Fix to add missing type and externalIdentifierType in Vulnerability c…
no-ta Jul 22, 2024
7014669
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 25, 2024
56e03a9
Merge pull request #5 from no-ta/merge-lite-example-1
NorioKobota Jul 25, 2024
70135c8
amends of relationshipType in VEX relationship is modified to amended…
no-ta Jul 25, 2024
3a0747d
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 31, 2024
138100c
PNG: amends of relationshipType in VEX relationship is modified to am…
no-ta Jul 31, 2024
c0e2a4a
Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…
no-ta Jul 31, 2024
9adf9e9
Update lite/example1-with-VEX/spdx-3.0/Lite-example-1-1-with-VEX.spdx…
NorioKobota Jan 9, 2025
7af0bd9
Update lite/example1-with-VEX/spdx-3.0/Lite-example-1-3-with-VEX.spdx…
NorioKobota Jan 9, 2025
2f66ffa
Update lite/example1-with-VEX/spdx-3.0/Lite-example-1-2-with-VEX.spdx…
NorioKobota Jan 9, 2025
522fe0c
Update lite/example1/spdx-3.0/lite-example-1.spdx.json
NorioKobota Jan 9, 2025
62bbc76
Update lite/example2/spdx-3.0/lite-example-2.spdx.json
NorioKobota Jan 9, 2025
31c6bc4
Merge pull request #6 from no-ta/merge-lite-example-1
NorioKobota Jan 27, 2025
ec20065
Merge branch 'spdx:master' into lite-profile
NorioKobota Jan 27, 2025
4589227
fix several items mentioned in #91
NorioKobota Jan 28, 2025
b83298d
Update lite/example2/README.md
NorioKobota Jan 28, 2025
f5c995b
Update lite/example1-with-VEX/spdx3.0/README.md
NorioKobota Jan 28, 2025
8084dca
Update lite/example1-with-VEX/spdx3.0/README.md
NorioKobota Jan 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
203 changes: 203 additions & 0 deletions lite/example1-with-VEX/spdx3.0/Lite-example-1-1-with-VEX.spdx.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,203 @@
{
"@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
"@graph": [
{
"type": "SpdxDocument",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Document/1",
"name": "Lite-SpdxDocument",
"comment": "if any",
"creationInfo": "_:creationinfo",
"verifiedUsing": [{
"type": "Hash",
"algorithm": "sha3_512",
"hashValue": "hash value of Sbom object"
}],
"rootElement": [ "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Sbom/1" ],
"element": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Sbom/1",
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Bom/1"
],
"namespaceMap": [{
"type": "NamespaceMap",
"prefix": "lite-example",
"namespace": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Lite/1"
}],
"dataLicense": "CC0-1.0"
},
{
"type": "software_Sbom",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Sbom/1",
"creationInfo": "_:creationinfo",
"rootElement": [ "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Package/1" ],
"element": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Package/1",
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/LicenseExpression/1",
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Relationship/1",
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Relationship/2",
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Relationship/3"
],
"software_sbomType": [ "build" ]
},
{
"type": "CreationInfo",
"@id": "_:creationinfo",
"specVersion": "3.0.0",
"comment": "if any",
"created": "2024-05-06T00:00:00Z",
"createdBy": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"
]
},
{
"type": "Person",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota",
"name": "Norio Kobota",
"creationInfo": "_:creationinfo",
"externalIdentifier": [
{
"type": "ExternalIdentifier",
"externalIdentifierType": "email",
"identifier": "[email protected]"
}
]
},
{
"type": "software_Package",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Package/1",
"name": "my-package",
"comment": "if any",
"creationInfo": "_:creationinfo",
"verifiedUsing": [{
"type": "Hash",
"algorithm": "sha3_512",
"hashValue": "hash value of the package file"
}],
"originatedBy": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"
],
"suppliedBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota",
"builtTime": "2024-05-06T00:00:00Z",
"releaseTime": "2024-05-06T00:00:00Z",
"validUntilTime": "2034-05-06T00:00:00Z",
"supportLevel": [
"limitedSupport"
],
"software_copyrightText": "copyright text",
"software_attributionText": [
"other attribution text"
],
"software_packageVersion": "v1.0",
"software_downloadLocation": "http://dl.example.com/my-package_v1.0.tar",
"software_packageUrl": "pkg:github/example/my-package/releases/tag/v1.0",
"software_homePage": "website for the Package/1"
},
{
"type": "simplelicensing_LicenseExpression",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/LicenseExpression/1",
"creationInfo": "_:creationinfo",
"simplelicensing_licenseExpression": "MIT",
"simplelicensing_licenseListVersion": "3.23.0"
},
{
"type": "Relationship",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Relationship/1",
"creationInfo": "_:creationinfo",
"from": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Sbom/1",
"to": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Package/1"
],
"relationshipType": "contains"
},
{
"type": "Relationship",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Relationship/2",
"creationInfo": "_:creationinfo",
"from": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Package/1",
"to": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/LicenseExpression/1"
],
"relationshipType": "hasDeclaredLicense"
},
{
"type": "Relationship",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Relationship/3",
"creationInfo": "_:creationinfo",
"from": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Package/1",
"to": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/LicenseExpression/1"
],
"relationshipType": "hasConcludedLicense"
},
{
"type": "Bom",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Bom/1",
"creationInfo": "_:creationinfo_vex1",
"extension": [{
"cdxPropName": "VexDocumentVersion",
"cdxPropValue": "0"
}],
"rootElement": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Vulnerability/1"
],
"element": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Vunlnerability/1",
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Relationship/vul1",
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/VexUnderInvestigationVulnAssessmentRelationship/1"
]
},
{
"type": "CreationInfo",
"@id": "_:creationinfo_vex1",
"specVersion": "3.0.0",
"comment": "if any",
"created": "2024-05-06T00:00:00Z",
"createdBy": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"
]
},
{
"type": "security_Vulnerability",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Vulnerability/1",
"name": "CVE-1234-1234",
"comment": "if any",
"creationInfo": "_:creationinfo_vex1",
"externalIdetifier": [
{
"type": "ExternalIdentifier",
"externalIdentifierType": "cve",
"identifier": "CVE-1234-1234",
"comment": "must"
}
],
"security_publishedTime": "2024-05-06T00:00:00Z",
"security_modifiedTime": "2024-05-06T00:00:00Z"
},
{
"type": "Relationship",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Relationship/vul1",
"creationInfo": "_:creationinfo_vex1",
"from": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Package/1",
"to": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Vulnerability/1"
],
"relationshipType": "hasAssociatedVulnerability"
},
{
"type": "security_VexUnderInvestigationVulnAssessmentRelationship",
"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/VexUnderInvestigationVulnAssessmentRelationship/1",
"name": "if any",
"comment": "if any",
"creationInfo": "_:creationinfo_vex1",
"from": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Vulnerability/1",
"to": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Package/1"
],
"relationshipType": "underInvestigationFor",
"suppliedBy": [
"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"
],
"security_vexVersion": "0",
"security_statusNotes": "if any"
}
]
}
Loading
Loading