Skip to content

Support identifier on the TEA Artifact level #242

@taleodor

Description

@taleodor

Currently we have identifiers on the following levels:

  • TEA Product
  • TEA Product Release
  • TEA Component
  • TEA Component Release
  • TEA Distribution
  • CLE Event

It would make sense to also add identifiers on the TEA Artifact level with addition of BOM specific identifier types, such as serialNumber for CycloneDX or documentNamespace / spdxId for SPDX.

To implement this, we would need to:

  1. Extend TEA Artifact type with list of identifiers
  2. Provide API to perform direct search for TEA Artifacts based on identifier

Note: while BOM standards may assume that document identifiers are globally unique, we may not have such assumptions from the perspective of TEA (see #217 ) - therefore, we always assume that everything is essentially namespaced by a particular TEA Server, where uniqueness can actually be guaranteed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions