Skip to content

Commit 3b13c8f

Browse files
no-taNorioKobota
no-ta
authored and
NorioKobota
committed
Initial example1-with-VEX
Signed-off-by: notanaka <No.Tanaka@sony.com>
1 parent 4b49a28 commit 3b13c8f

7 files changed

Lines changed: 723 additions & 0 deletions

‎lite/example1-with-VEX/Lite-example-1-1-with-VEX.jsonld‎

Lines changed: 189 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,189 @@
1+
{
2+
"@context": "https://raw.githubusercontent.com/spdx/spdx-3-serialization-prototype-playground/main/jsonld/spdx-3.0-context.json-ld",
3+
"@graph": [
4+
{
5+
"type": "SpdxDocument",
6+
"spdxId": "http://spdx.example.com/Document/1",
7+
"name": "Lite-SpdxDocument",
8+
"comment": "if any",
9+
"creationInfo": "_:creationinfo",
10+
"verifiedUsing": [{
11+
"type": "Hash",
12+
"algorithm": "sha3_512",
13+
"hashValue": "hash value of Sbom object"
14+
}],
15+
"rootElement": "http://spdx.example.com/Sbom/1",
16+
"element": [
17+
"http://spdx.example.com/Sbom/1",
18+
"http://spdx.example.com/Bom/1"
19+
],
20+
"namespaceMap": [{
21+
"type": "NamespaceMap",
22+
"prefix": "lite-example",
23+
"namespace": "http://spdx.example.com/Lite/1"
24+
}],
25+
"dataLicense": "CC0-1.0"
26+
},
27+
{
28+
"type": "Sbom",
29+
"spdxId": "http://spdx.example.com/Sbom/1",
30+
"creationInfo": "_:creationinfo",
31+
"rootElement": "http://spdx.example.com/Package/1",
32+
"element": [
33+
"http://spdx.example.com/Package/1",
34+
"http://spdx.example.com/LicenseExpression/1",
35+
"http://spdx.example.com/Relationship/1",
36+
"http://spdx.example.com/Relationship/2",
37+
"http://spdx.example.com/Relationship/3"
38+
],
39+
"sbomType": "build"
40+
},
41+
{
42+
"type": "CreationInfo",
43+
"@id": "_:creationinfo",
44+
"specVersion": "3.0.0",
45+
"comment": "if any",
46+
"created": "2024-05-06T00:00:00Z",
47+
"createdBy": "http://spdx.example.com/Agent/NorioKobota"
48+
},
49+
{
50+
"type": "Person",
51+
"spdxId": "http://spdx.example.com/Agent/NorioKobota",
52+
"name": "Norio Kobota",
53+
"creationInfo": "_:creationinfo",
54+
"externalIdentifier": {
55+
"type": "ExternalIdentifier",
56+
"externalIdentifierType": "email",
57+
"identifier": "norio.kobota@sony.com"
58+
}
59+
},
60+
{
61+
"type": "Package",
62+
"spdxId": "http://spdx.example.com/Package/1",
63+
"name": "my-package",
64+
"comment": "if any",
65+
"creationInfo": "_:creationinfo",
66+
"verifiedUsing": [{
67+
"type": "Hash",
68+
"algorithm": "sha3_512",
69+
"hashValue": "hash value of the package file"
70+
}],
71+
"originatedBy": [
72+
"http://spdx.example.com/Agent/NorioKobota"
73+
],
74+
"suppliedBy": "http://spdx.example.com/Agent/NorioKobota",
75+
"builtTime": "2024-05-06T00:00:00Z",
76+
"releaseTime": "2024-05-06T00:00:00Z",
77+
"validUntilTime": "2034-05-06T00:00:00Z",
78+
"supportLevel": "limitedSupport",
79+
"copyrightText": "copyright text",
80+
"attributionText": "other attribution text",
81+
"packageVersion": "v1.0",
82+
"downloadLocation": "http://dl.example.com/my-package_v1.0.tar",
83+
"packageUrl": "pkg:github/example/my-package/releases/tag/v1.0",
84+
"homepage": "website for the Package/1"
85+
},
86+
{
87+
"type": "LicenseExpression",
88+
"spdxId": "http://spdx.example.com/LicenseExpression/1",
89+
"creationInfo": "_:creationinfo",
90+
"licenseExpression": "MIT",
91+
"licenseListVersion": "3.23.0"
92+
},
93+
{
94+
"type": "Relationship",
95+
"spdxId": "http://spdx.example.com/Relationship/1",
96+
"creationInfo": "_:creationinfo",
97+
"from": "http://spdx.example.com/Sbom/1",
98+
"to": [
99+
"http://spdx.example.com/Package/1"
100+
],
101+
"relationshipType": "contains"
102+
},
103+
{
104+
"type": "Relationship",
105+
"spdxId": "http://spdx.example.com/Relationship/2",
106+
"creationInfo": "_:creationinfo",
107+
"from": "http://spdx.example.com/Package/1",
108+
"to": [
109+
"http://spdx.example.com/LicenseExpression/1"
110+
],
111+
"relationshipType": "hasDeclaredLicense"
112+
},
113+
{
114+
"type": "Relationship",
115+
"spdxId": "http://spdx.example.com/Relationship/3",
116+
"creationInfo": "_:creationinfo",
117+
"from": "http://spdx.example.com/Package/1",
118+
"to": [
119+
"http://spdx.example.com/LicenseExpression/1"
120+
],
121+
"relationshipType": "hasConcludedLicense"
122+
},
123+
{
124+
"type": "Bom",
125+
"spdxId": "http://spdx.example.com/Bom/1",
126+
"creationInfo": "_:creationinfo_vex1",
127+
"extension": [{
128+
"cdxPropName": "VexDocumentVersion",
129+
"cdxPropValue": "0"
130+
}],
131+
"rootElement": [
132+
"http://spdx.example.com/Vulnerability/1"
133+
],
134+
"element": [
135+
"http://spdx.example.com/Vunlnerability/1",
136+
"http://spdx.example.com/Relationship/vul1",
137+
"http://spdx.example.com/VexUnderInvestigationVulnAssessmentRelationship/1"
138+
]
139+
},
140+
{
141+
"type": "CreationInfo",
142+
"@id": "_:creationinfo_vex1",
143+
"specVersion": "3.0.0",
144+
"comment": "if any",
145+
"created": "2024-05-06T00:00:00Z",
146+
"createdBy": "http://spdx.example.com/Agent/NorioKobota"
147+
},
148+
{
149+
"type": "Vulnerability",
150+
"spdxId": "http://spdx.example.com/Vulnerability/1",
151+
"name": "CVE-1234-1234",
152+
"comment": "if any",
153+
"creationInfo": "_:creationinfo_vex1",
154+
"externalIdetifier": {
155+
"identifier": "CVE-1234-1234",
156+
"comment": "must"
157+
},
158+
"publishedTime": "2024-05-06T00:00:00Z",
159+
"modifiedTime": "2024-05-06T00:00:00Z"
160+
},
161+
{
162+
"type": "Relationship",
163+
"spdxId": "http://spdx.example.com/Relationship/vul1",
164+
"creationInfo": "_:creationinfo_vex1",
165+
"from": "http://spdx.example.com/Package/1",
166+
"to": [
167+
"http://spdx.example.com/Vulnerability/1"
168+
],
169+
"relationshipType": "hasAssociatedVulnerability"
170+
},
171+
{
172+
"type": "VexUnderInvestigationVulnAssessmentRelationship",
173+
"spdxId": "http://spdx.example.com/VexUnderInvestigationVulnAssessmentRelationship/1",
174+
"name": "if any",
175+
"comment": "if any",
176+
"creationInfo": "_:creationinfo_vex1",
177+
"from": "http://spdx.example.com/Vulnerability/1",
178+
"to": [
179+
"http://spdx.example.com/Package/1"
180+
],
181+
"relationshipType": "underInvestigationFor",
182+
"/Core/suppliedBy": [
183+
"http://spdx.example.com/Agent/NorioKobota"
184+
],
185+
"vexVersion": "0",
186+
"statusNotes": "if any"
187+
}
188+
]
189+
}

0 commit comments

Comments
 (0)