Migrated enveloped signature support from JSF to JSS. Expanded on the number of valid and invalid use cases.

Signed-off-by: Steve Springett <steve@springett.us>

Author: stevespringett

schema/2.0/cyclonedx-2.0.schema.json

@@ -85,8 +85,8 @@
     "externalReferences": {
       "$ref": "model/cyclonedx-common-2.0.schema.json#/$defs/externalReferences"
     },
-    "signature": {
-      "$ref": "model/cyclonedx-common-2.0.schema.json#/$defs/signature"
+    "signatures": {
+      "$ref": "model/cyclonedx-common-2.0.schema.json#/$defs/signatures"
     }
   },
   "allOf": [

schema/2.0/model/cyclonedx-annotation-2.0.schema.json

@@ -104,8 +104,8 @@
           "title": "Text",
           "description": "The textual content of the annotation."
         },
-        "signature": {
-          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+        "signatures": {
+          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
           "title": "Signature",
           "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
         }

schema/2.0/model/cyclonedx-citation-2.0.schema.json

@@ -65,8 +65,8 @@
           "title": "Note",
           "description": "A description or comment about the context or quality of the data attribution."
         },
-        "signature": {
-          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+        "signatures": {
+          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
           "title": "Signature",
           "description": "A digital signature verifying the authenticity or integrity of the attribution."
         }

schema/2.0/model/cyclonedx-common-2.0.schema.json

@@ -763,10 +763,10 @@
       "title": "Locale",
       "description": "Defines a syntax for representing two character language code (ISO-639) followed by an optional two character country code. The language code must be lower case. If the country code is specified, the country code must be upper case. The language code and country code must be separated by a minus sign. Examples: en, en-US, fr, fr-CA"
     },
-    "signature": {
-      "$ref": "../jsf-0.82.schema.json#/definitions/signature",
-      "title": "Signature",
-      "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
+    "signatures": {
+      "$ref": "cyclonedx-jss_X590_2023_10-2.0.schema.json#/$defs/signatures",
+      "title": "Signatures",
+      "description": "Enveloped signatures in [JSON Signature Scheme (JSS/ITU-T X.590)](https://www.itu.int/epublications/publication/itu-t-x-590-2023-10-json-signature-scheme-jss)."
     }
   }
 }

schema/2.0/model/cyclonedx-component-2.0.schema.json

@@ -274,8 +274,8 @@
         "externalReferences": {
           "$ref": "cyclonedx-common-2.0.schema.json#/$defs/externalReferences"
         },
-        "signature": {
-          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+        "signatures": {
+          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
           "title": "Signature",
           "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
         }

schema/2.0/model/cyclonedx-composition-2.0.schema.json

@@ -66,8 +66,8 @@
           "title": "BOM references",
           "description": "The bom-ref identifiers of the vulnerabilities being described."
         },
-        "signature": {
-          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+        "signatures": {
+          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
           "title": "Signature",
           "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
         }

schema/2.0/model/cyclonedx-declaration-2.0.schema.json

@@ -133,8 +133,8 @@
                   }
                 }
               },
-              "signature": {
-                "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+              "signatures": {
+                "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
                 "title": "Signature",
                 "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
               }
@@ -191,8 +191,8 @@
               "externalReferences": {
                 "$ref": "cyclonedx-common-2.0.schema.json#/$defs/externalReferences"
               },
-              "signature": {
-                "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+              "signatures": {
+                "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
                 "title": "Signature",
                 "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
               }
@@ -296,8 +296,8 @@
                 "title": "Reviewer",
                 "description": "The reviewer of the evidence."
               },
-              "signature": {
-                "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+              "signatures": {
+                "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
                 "title": "Signature",
                 "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
               }
@@ -369,8 +369,8 @@
                     "title": "Role",
                     "description": "The signatory's role within an organization."
                   },
-                  "signature": {
-                    "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+                  "signatures": {
+                    "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
                     "title": "Signature",
                     "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
                   },
@@ -385,15 +385,15 @@
                 }
               }
             },
-            "signature": {
-              "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+            "signatures": {
+              "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
               "title": "Signature",
               "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
             }
           }
         },
-        "signature": {
-          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signature",
+        "signatures": {
+          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/signatures",
           "title": "Signature",
           "description": "Enveloped signature in [JSON Signature Format (JSF)](https://cyberphone.github.io/doc/security/jsf.html)."
         }