Skip to content

Commit 05b85ee

Browse files
committed
Develop 2.0 schema for AI/ML BOM
Signed-off-by: Matt Rutkowski <mrutkows@us.ibm.com>
1 parent db041a4 commit 05b85ee

2 files changed

Lines changed: 78 additions & 0 deletions

File tree

.gitignore

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,7 @@
1+
# Filesystem
2+
.DS_Store
3+
4+
# Tooling
15
.idea/
26
.vscode/
37
tools/target/
Lines changed: 74 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
1+
{
2+
"$schema": "https://json-schema.org/draft/2020-12/schema",
3+
"$id": "https://cyclonedx.org/schema/2.0/model/cyclonedx-ai-ml-2.0.schema.json",
4+
"type": "null",
5+
"title": "CycloneDX Threat Model",
6+
"$comment": "OWASP CycloneDX is an Ecma International standard (ECMA-424) developed in collaboration between the OWASP Foundation and Ecma Technical Committee 54 (TC54). The standard is published under a royalty-free patent policy. This JSON schema is the reference implementation and is licensed under the Apache License 2.0.",
7+
"$defs": {
8+
"designConsiderations": {
9+
"type": "object",
10+
"properties": {
11+
"users": {
12+
"$comment": "Attempting to reuse actor defn.",
13+
"$todos": [
14+
"Move actor from blueprints to common",
15+
"Add externalReferences to actor as these may be defined by external orgs. and their docs."
16+
],
17+
"type": "array",
18+
"title": "Users",
19+
"description": "List users the model is designed for.",
20+
"uniqueItems": true,
21+
"items": {
22+
"$ref": "cyclonedx-blueprint-2.0.schema.json$defs/actor"
23+
}
24+
},
25+
"useCases": {
26+
"$comment": "",
27+
"$todos": [
28+
"TODO"
29+
],
30+
"$ref": "cyclonedx-usecase-2.0.schema.json#/$defs/useCases",
31+
"title": "User cases",
32+
"description": "Lists use cases the model was designed for."
33+
},
34+
"technicalLimitations": {
35+
"$comment": "",
36+
"$ref": "",
37+
"description": ""
38+
},
39+
"performanceTradeoffs": {
40+
"$comment": "",
41+
"$ref": "",
42+
"description": ""
43+
},
44+
"ethicalConsiderations": {
45+
"$comment": "",
46+
"$ref": "",
47+
"description": ""
48+
},
49+
"environmentalConsiderations": {
50+
"$comment": "",
51+
"$ref": "",
52+
"description": ""
53+
},
54+
"fairnessAssessments": {
55+
"$comment": "",
56+
"$ref": "",
57+
"description": ""
58+
}
59+
}
60+
},
61+
"trainingProfile": {
62+
"type": "object",
63+
"description": "Reference to data and datasets used for training.",
64+
"$comment": "",
65+
"allOf": [
66+
{
67+
"$ref": "#/$defs/cyclonedx-data-2.0/$defs/dataProfile"
68+
},
69+
{
70+
}
71+
]
72+
}
73+
}
74+
}

0 commit comments

Comments
 (0)