add Lite profile examples #91

NorioKobota · 2024-07-06T03:19:15Z

We implemented three samples that show how to use Lite Profile.
We would appriciate your review.

Signed-off-by: notanaka <[email protected]>

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

JPEWdev

The CI with likely find many more problems once it runs. I'll admit that the output of the checks, while very through, can be difficult to interpret. If you run into trouble getting these to pass CI, let me know and I can help interpret the errors.

Overall, the structure of these documents seems fine, they just need to conform to the JSON schema and SHACL model (which is done by CI) and they should be OK

JPEWdev · 2024-07-09T00:30:26Z

lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld

@@ -0,0 +1,189 @@
+{
+    "@context": "https://raw.githubusercontent.com/spdx/spdx-3-serialization-prototype-playground/main/jsonld/spdx-3.0-context.json-ld",


This is the example context URL, the actual URL needs to be used now, which is:

"@context": "https://spdx.github.io/spdx-spec/v3.0/model/spdx-context.jsonld"

JPEWdev · 2024-07-09T00:35:47Z

lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld

+    "@graph": [
+        {
+            "type": "SpdxDocument",
+            "spdxId": "http://spdx.example.com/Document/1",


http://spdx.example.com/Document/1 is not a good example spdxId. An SPDX ID needs some universally unique identifier, and SPDX has a defined URL prefix of https://spdx.org/spdxdocs/ for the case where the producer doesn't have their own domain. Thus, your spdx ID should probably look something like:

"spdxId": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Document/1"

The https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/ prefix can be reused for all the other objects in this document keeping the existing scheme of appending the type and an index if you desire.

JPEWdev · 2024-07-09T00:36:36Z

lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld

+                "algorithm": "sha3_512",
+                "hashValue": "hash value of Sbom object"
+            }],
+            "rootElement": "http://spdx.example.com/Sbom/1",


I believe this has to be an array to validate:

"rootElement": [ "http://spdx.example.com/Sbom/1" ],

JPEWdev · 2024-07-09T00:37:24Z

lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld

+                "type": "NamespaceMap",
+                "prefix": "lite-example",
+                "namespace": "http://spdx.example.com/Lite/1"
+            }],


This namespace map is not used in the document, so please remove it for clarity

JPEWdev · 2024-07-09T00:39:41Z

lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld

+            "dataLicense": "CC0-1.0"
+        },
+        {
+            "type": "Sbom",


Object types are always prefixed by their namespace (e.g. profile) unless they are from core, so this needs to be:

"type": "software_Sbom",

Thanks! I will fix them.
Just curious, why prefix these with profile names?
In particular, JSON is structured, and I personally think that it is possible to understand the context depending on which closure contains the same key value.
If there are discussions in the past, I would appreciate it if you could give me pointers.

JPEWdev · 2024-07-09T00:42:48Z

lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld

+                "http://spdx.example.com/Relationship/2",
+                "http://spdx.example.com/Relationship/3"
+            ],
+            "sbomType": "build"


Property names are always prefix by their namespace (e.g. profile) unless they are from core, so this needs to be:

"software_sbomType": [ "build" ],

Also be aware that SPDX 3.0 JSON doesn't allow array eliding, so if a property has any max ordinality other than 1, it must be an array in JSON, even if it only contains one item.

JPEWdev · 2024-07-09T00:44:42Z

lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld

+                "http://spdx.example.com/Package/1"
+            ],
+            "relationshipType": "underInvestigationFor",
+            "/Core/suppliedBy": [


Just suppliedBy for the property name. Namespacing of properties and types is handled as described above

"/Core/suppliedBy" is the description in the SPDX specification as follows.
How can I modify this, is it acceptable to remove "/Core/"?

/Core/suppliedBy type: /Core/Agent minCount: 0 maxCount: 1

Yes, in this case it's just Agent, it's important to remember that the names of objects and properties in the "model" described in the SPDX 3 spec are not the same as the types and property names used in any given serialization format. The serialization formats have different rules for how to translate the model names to types and properties. The JSON rules are described in my other comments, but to be explicit, it is:

Object types and properties from the Core namespace have no prefix (e.g. /Core/Agent is Agent). Object types and properties from other namespaces are prefixed by a lower case version of the namespace + "_" (e.g. /Software/Sbom is software_Sbom, /Software/sbomType is software_sbomType).

And to be clear, the namespace of the object type is irrelevent to the naming of properties. For example, even though this software_Sbom object is in the Software namespace, the exact same rules described above apply to all its properties, so it's just suppliedBy not core_suppliedBy, and software_sbomType not sbomType.

The reason for this is that the mapping of type names and properties is context-free (e.g. global), so it doesn't depend on which specific object the property is found in.

Thank you for your clarification.
I can understand how to describe json format from the specification.

The reason for this is that the mapping of type names and properties is context-free (e.g. global), so it doesn't depend on which specific object the property is found in.

I don’t fully understand it yet, but I understand this is the answer for this comment. #91 (comment)
Thanks.

JPEWdev · 2024-07-09T00:46:53Z

lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld

@@ -0,0 +1,189 @@
+{


This document needs two things to be checked by CI:

It needs to have a ".json" extension instead of ".jsonld"

It needs to existing in a "spdx-3.0" directory

As such, I would recommend naming this file: lite/example1-with-VEX/spdx-3.0/Lite-example-1-1-with-VEX.spdx.json and naming the other examples in this PR similarly

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Norio Kobota <[email protected]>

Merge lite example 1

Signed-off-by: Norio Kobota <[email protected]>

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Merge example1-with-VEX under spdx-3.0 directory

NorioKobota · 2024-07-22T02:49:11Z

@JPEWdev Sorry to be late, but we have corrected the points you pointed out, so could you please take a look again?
Thank you!

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

…lass. Signed-off-by: Nobuyuki Tanaka <[email protected]>

…examples into merge-lite-example-1

Merge changes to add security_ prefix to type in Security profile

bact

Example 2 has few issues. Please see suggestions. @NorioKobota @no-ta

bact · 2024-09-03T14:15:32Z

lite/example2/spdx-3.0/lite-example-2.spdx.json

+            "externalIdentifier": {
+                "type": "ExternalIdentifier",
+                "externalIdentifierType": "email",
+                "identifier": "[email protected]"
+            }


Suggested change

"externalIdentifier": {

"type": "ExternalIdentifier",

"externalIdentifierType": "email",

"identifier": "[email protected]"

}

"externalIdentifier": [

{

"type": "ExternalIdentifier",

"externalIdentifierType": "email",

"identifier": "[email protected]"

}

]

externalIdentifier requires array, as its maxCount is *.

bact · 2024-09-03T14:19:07Z

lite/example2/spdx-3.0/lite-example-2.spdx.json

+            "software_packageVersion": "v1.0",
+            "software_downloadLocation": "http://dl.example.com/my-package_v1.0.tar",
+            "software_packageUrl": "pkg:github/example/my-package/releases/tag/v1.0",
+            "software_homepage": "website for the Package/1"


Suggested change

"software_homepage": "website for the Package/1"

"software_homePage": "website for the Package/1"

bact · 2024-09-03T14:19:43Z

lite/example2/spdx-3.0/lite-example-2.spdx.json

+            "simpleLicensing_licenseExpression": "GPL-2.0-only",
+            "simpleLicensing_licenseListVersion": "3.23.0"


Suggested change

"simpleLicensing_licenseExpression": "GPL-2.0-only",

"simpleLicensing_licenseListVersion": "3.23.0"

"simplelicensing_licenseExpression": "GPL-2.0-only",

"simplelicensing_licenseListVersion": "3.23.0"

lowercase L for licensing

bact · 2024-09-03T14:20:41Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-1-with-VEX.spdx.json

+            "specVersion": "3.0.0",
+            "comment": "if any",
+            "created": "2024-05-06T00:00:00Z",
+            "createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"


Suggested change

"createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

"createdBy": [

"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

]

bact · 2024-09-03T14:22:17Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-1-with-VEX.spdx.json

+            "software_copyrightText": "copyright text",
+            "software_attributionText": "other attribution text",


Suggested change

"software_copyrightText": "copyright text",

"software_attributionText": "other attribution text",

"software_copyrightText": "copyright text",

"software_attributionText": [

"other attribution text"

],

bact · 2024-09-03T14:23:47Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-2-with-VEX.spdx.json

+                "prefix": "lite-example",
+                "namespace": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Lite/1"
+            }],
+            "dataLicense": "CC0-1.0"


The value of dataLicense needs to be a License object of /SimpleLicensing/AnyLicenseInfo class, not string.

See https://spdx.github.io/spdx-spec/v3.0/model/Core/Properties/dataLicense/

bact · 2024-09-03T16:58:21Z

lite/example1/spdx-3.0/lite-example-1.spdx.json

+            "externalIdentifier": {
+                "type": "ExternalIdentifier",
+                "externalIdentifierType": "email",
+                "identifier": "[email protected]"
+            }


Suggested change

"externalIdentifier": {

"type": "ExternalIdentifier",

"externalIdentifierType": "email",

"identifier": "[email protected]"

}

"externalIdentifier": [

{

"type": "ExternalIdentifier",

"externalIdentifierType": "email",

"identifier": "[email protected]"

}

]

Entries must be inside an array.

bact · 2024-09-03T16:59:13Z

lite/example1/spdx-3.0/lite-example-1.spdx.json

+            "specVersion": "3.0.0",
+            "comment": "if any",
+            "created": "2024-05-06T00:00:00Z",
+            "createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"


Suggested change

"createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

"createdBy": [

"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

]

bact · 2024-09-03T16:59:37Z

lite/example1/spdx-3.0/lite-example-1.spdx.json

+            "software_packageVersion": "v1.0",
+            "software_downloadLocation": "http://dl.example.com/my-package_v1.0.tar",
+            "software_packageUrl": "pkg:github/example/my-package/releases/tag/v1.0",
+            "software_homepage": "website for the Package/1"


Suggested change

"software_homepage": "website for the Package/1"

"software_homePage": "website for the Package/1"

bact · 2024-09-03T16:59:51Z

lite/example1/spdx-3.0/lite-example-1.spdx.json

+            "simpleLicensing_licenseExpression": "MIT",
+            "simpleLicensing_licenseListVersion": "3.23.0"


Suggested change

"simpleLicensing_licenseExpression": "MIT",

"simpleLicensing_licenseListVersion": "3.23.0"

"simplelicensing_licenseExpression": "MIT",

"simplelicensing_licenseListVersion": "3.23.0"

bact · 2024-09-03T17:00:53Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-1-with-VEX.spdx.json

+            "supportLevel": "limitedSupport",
+            "software_copyrightText": "copyright text",
+            "software_attributionText": "other attribution text",


Suggested change

"supportLevel": "limitedSupport",

"software_copyrightText": "copyright text",

"software_attributionText": "other attribution text",

"supportLevel": [

"limitedSupport"

],

"software_copyrightText": "copyright text",

"software_attributionText": [

"other attribution text"

],

bact · 2024-09-03T17:01:29Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-1-with-VEX.spdx.json

+            "simpleLicensing_licenseExpression": "MIT",
+            "simpleLicensing_licenseListVersion": "3.23.0"


Suggested change

"simpleLicensing_licenseExpression": "MIT",

"simpleLicensing_licenseListVersion": "3.23.0"

"simplelicensing_licenseExpression": "MIT",

"simplelicensing_licenseListVersion": "3.23.0"

bact · 2024-09-03T17:01:49Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-1-with-VEX.spdx.json

+            "software_homepage": "website for the Package/1"
+        },
+        {
+            "type": "simpleLicensing_LicenseExpression",


Suggested change

"type": "simpleLicensing_LicenseExpression",

"type": "simplelicensing_LicenseExpression",

bact · 2024-09-03T17:04:56Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-1-with-VEX.spdx.json

+            "builtTime": "2024-05-06T00:00:00Z",
+            "releaseTime": "2024-05-06T00:00:00Z",
+            "validUntilTime": "2034-05-06T00:00:00Z",
+            "supportLevel": "limitedSupport",


Suggested change

"supportLevel": "limitedSupport",

"supportLevel": [

"limitedSupport"

],

bact · 2024-09-03T17:05:30Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-2-with-VEX.spdx.json

+            "software_homepage": "website for the Package/1"
+        },
+        {
+            "type": "simpleLicensing_LicenseExpression",


Suggested change

"type": "simpleLicensing_LicenseExpression",

"type": "simplelicensing_LicenseExpression",

bact · 2024-09-03T17:07:03Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-2-with-VEX.spdx.json

+            "specVersion": "3.0.0",
+            "comment": "if any",
+            "created": "2024-05-06T00:00:00Z",
+            "createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"


Suggested change

"createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

"createdBy": [

"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

]

bact · 2024-09-03T17:07:18Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-2-with-VEX.spdx.json

+            "specVersion": "3.0.0",
+            "comment": "if any",
+            "created": "2024-05-07T00:00:00Z",
+            "createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"


Suggested change

"createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

"createdBy": [

"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

]

bact · 2024-09-03T17:07:49Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-2-with-VEX.spdx.json

+            "externalIdentifier": {
+                "type": "ExternalIdentifier",
+                "externalIdentifierType": "email",
+                "identifier": "[email protected]"
+            }


Suggested change

"externalIdentifier": {

"type": "ExternalIdentifier",

"externalIdentifierType": "email",

"identifier": "[email protected]"

}

"externalIdentifier": [

{

"type": "ExternalIdentifier",

"externalIdentifierType": "email",

"identifier": "[email protected]"

}

]

bact · 2024-09-03T17:08:16Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-2-with-VEX.spdx.json

+            "builtTime": "2024-05-06T00:00:00Z",
+            "releaseTime": "2024-05-06T00:00:00Z",
+            "validUntilTime": "2034-05-06T00:00:00Z",
+            "supportLevel": "limitedSupport",


Suggested change

"supportLevel": "limitedSupport",

"supportLevel": [

"limitedSupport"

],

bact · 2024-09-03T17:08:42Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-2-with-VEX.spdx.json

+            "validUntilTime": "2034-05-06T00:00:00Z",
+            "supportLevel": "limitedSupport",
+            "software_copyrightText": "copyright text",
+            "software_attributionText": "other attribution text",


Suggested change

"software_attributionText": "other attribution text",

"software_attributionText": [

"other attribution text"

],

bact · 2024-09-03T17:12:58Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-3-with-VEX.spdx.json

+            "specVersion": "3.0.0",
+            "comment": "if any",
+            "created": "2024-05-06T00:00:00Z",
+            "createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"


Suggested change

"createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

"createdBy": [

"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

]

bact · 2024-09-03T17:13:10Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-3-with-VEX.spdx.json

+            "specVersion": "3.0.0",
+            "comment": "if any",
+            "created": "2024-05-07T00:00:00Z",
+            "createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"


Suggested change

"createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

"createdBy": [

"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

]

bact · 2024-09-03T17:13:20Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-3-with-VEX.spdx.json

+            "specVersion": "3.0.0",
+            "comment": "if any",
+            "created": "2024-05-08T00:00:00Z",
+            "createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"


Suggested change

"createdBy": "https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

"createdBy": [

"https://spdx.org/spdxdocs/08f113e9-a0b0-4482-a0ed-c4e18e5136be/Agent/NorioKobota"

]

bact · 2024-09-03T17:13:46Z

lite/example1-with-VEX/spdx-3.0/Lite-example-1-3-with-VEX.spdx.json

+            "externalIdetifier": {
+                "type": "ExternalIdentifier",
+                "externalIdentifierType": "cve",
+                "identifier": "CVE-1234-1234",
+                "comment": "must"
+            },


Suggested change

"externalIdetifier": {

"type": "ExternalIdentifier",

"externalIdentifierType": "cve",

"identifier": "CVE-1234-1234",

"comment": "must"

},

"externalIdetifier": [

{

"type": "ExternalIdentifier",

"externalIdentifierType": "cve",

"identifier": "CVE-1234-1234",

"comment": "must"

}

],

bact · 2024-09-03T17:14:41Z

lite/example1-with-VEX/spdx-3.0/README.md

+```
+
+## Comments
+There is no property to describe "2.2.1 Document ID" in [Minimum Requirements for Vulnerability Exploitability eXchange (VEX)](https://www.cisa.gov/resources-tools/resources/minimum-requirements-vulnerability-exploitability-exchange-vex) in the current SPDX3.0 specification.


Suggested change

There is no property to describe "2.2.1 Document ID" in [Minimum Requirements for Vulnerability Exploitability eXchange (VEX)](https://www.cisa.gov/resources-tools/resources/minimum-requirements-vulnerability-exploitability-exchange-vex) in the current SPDX3.0 specification.

There is no property to describe "2.2.1 Document ID" in

[Minimum Requirements for Vulnerability Exploitability eXchange (VEX)](https://www.cisa.gov/resources-tools/resources/minimum-requirements-vulnerability-exploitability-exchange-vex)

in the current SPDX 3.0 specification.

no-ta added 3 commits July 1, 2024 21:28

Initial example1-with-VEX

94d44aa

Signed-off-by: notanaka <[email protected]>

change user.name

d14f88e

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

396caba

…examples into merge-lite-example-1

JPEWdev reviewed Jul 9, 2024

View reviewed changes

no-ta added 16 commits July 10, 2024 17:46

Apply spdx#91

ea55dc8

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

bddcddb

…examples into merge-lite-example-1

Apply spdx#91

07d0403

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

79aed87

…examples into merge-lite-example-1

Change file suffix from .jsonld to .json

c941fa5

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

c10db29

…examples into merge-lite-example-1

Change spdxId in sotware_Sbom and packageVersion in software_Pacakge

9c95165

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

cf9eb4e

…examples into merge-lite-example-1

Change spdxId in sotware_Sbom and packageVersion in software_Pacakge

1f83d0a

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

03c5ebe

…examples into merge-lite-example-1

Change spdxId in sotware_Sbom and packageVersion in software_Pacakge

ae7eb1e

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

1091965

…examples into merge-lite-example-1

Update png files for spdx#91

db80bdd

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

62bcac5

…examples into merge-lite-example-1

Update png files for spdx#91

54fcef8

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

c64a58f

…examples into merge-lite-example-1

NorioKobota mentioned this pull request Jul 11, 2024

Bug fixes for Lite profile annex spdx/spdx-spec#991

Merged

Add lite profile examples

552d82e

Signed-off-by: Norio Kobota <[email protected]>

NorioKobota force-pushed the lite-profile branch from 3b13c8f to 552d82e Compare July 12, 2024 07:47

NorioKobota added 3 commits July 20, 2024 10:31

modify to follow suggested at spdx#91

b15cde1

Signed-off-by: Norio Kobota <[email protected]>

rename fname and move into spdx-3.0 dir to follow suggestions at spdx#91

8a584c7

Signed-off-by: Norio Kobota <[email protected]>

applied the same modifications to sample2

b04d429

Signed-off-by: Norio Kobota <[email protected]>

no-ta mentioned this pull request Jul 20, 2024

Merge lite example 1 NorioKobota/spdx-examples#3

Merged

NorioKobota and others added 3 commits July 20, 2024 22:24

Merge pull request #3 from no-ta/merge-lite-example-1

8612d57

Merge lite example 1

rename sample2.spdx.json

d55f3a0

Signed-off-by: Norio Kobota <[email protected]>

Rename json file name .json to .spdx.json

e92743b

Signed-off-by: Nobuyuki Tanaka <[email protected]>

no-ta and others added 8 commits July 21, 2024 10:49

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

ae3944e

…examples into merge-lite-example-1

Rename json file name .json to .spdx.json in README.md

595f7a2

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

3294f33

…examples into merge-lite-example-1

Rename json file name .json to .spdx.json in README.md

53e7389

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Rename json file name .json to .spdx.json in README.md

e8b6ccd

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Added spdx-3.0 directory

391ffb4

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

eac3284

…examples into merge-lite-example-1

Merge pull request #4 from no-ta/merge-lite-example-1

0750598

Merge example1-with-VEX under spdx-3.0 directory

no-ta and others added 7 commits July 22, 2024 19:01

Added security_ prefix to types in Security profile

9750bfb

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

47a4c48

…examples into merge-lite-example-1

Added security_ prefix to types in Security profile

de67a55

Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

53c888f

…examples into merge-lite-example-1

Fix to add missing type and externalIdentifierType in Vulnerability c…

7d78340

…lass. Signed-off-by: Nobuyuki Tanaka <[email protected]>

Merge branch 'merge-lite-example-1' of https://github.com/no-ta/spdx-…

7014669

…examples into merge-lite-example-1

Merge pull request #5 from no-ta/merge-lite-example-1

56e03a9

Merge changes to add security_ prefix to type in Security profile

kestewart requested a review from JPEWdev August 20, 2024 16:13

bact suggested changes Sep 3, 2024

View reviewed changes

bact reviewed Sep 3, 2024

View reviewed changes

bact suggested changes Sep 3, 2024

View reviewed changes

		@@ -0,0 +1,189 @@
		{
		"@context": "https://raw.githubusercontent.com/spdx/spdx-3-serialization-prototype-playground/main/jsonld/spdx-3.0-context.json-ld",

	"software_homepage": "website for the Package/1"
	"software_homePage": "website for the Package/1"

		"simpleLicensing_licenseExpression": "GPL-2.0-only",
		"simpleLicensing_licenseListVersion": "3.23.0"

		"software_copyrightText": "copyright text",
		"software_attributionText": "other attribution text",

		"simpleLicensing_licenseExpression": "MIT",
		"simpleLicensing_licenseListVersion": "3.23.0"

	"type": "simpleLicensing_LicenseExpression",
	"type": "simplelicensing_LicenseExpression",

add Lite profile examples #91

Are you sure you want to change the base?

add Lite profile examples #91

Conversation

NorioKobota commented Jul 6, 2024

JPEWdev left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

no-ta Jul 9, 2024 • edited Loading

Choose a reason for hiding this comment

JPEWdev Jul 9, 2024 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

NorioKobota commented Jul 22, 2024

bact left a comment • edited Loading

Choose a reason for hiding this comment

bact Sep 3, 2024 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

bact Sep 3, 2024 • edited Loading

Choose a reason for hiding this comment

bact Sep 3, 2024 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

no-ta Jul 9, 2024 •

edited

Loading

JPEWdev Jul 9, 2024 •

edited

Loading

bact left a comment •

edited

Loading

bact Sep 3, 2024 •

edited

Loading

bact Sep 3, 2024 •

edited

Loading

bact Sep 3, 2024 •

edited

Loading