-
-
Notifications
You must be signed in to change notification settings - Fork 67
feat: Add support for TLP marking in metadata #604
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: 1.7-dev
Are you sure you want to change the base?
Changes from all commits
1962322
925f5f9
55425e5
d3d243f
5708d61
98d888d
dbd3c43
636eb43
3da8e47
4e918f8
ed5fa84
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -712,9 +712,34 @@ | |
"title": "Properties", | ||
"description": "Provides the ability to document properties in a name-value store. This provides flexibility to include data not officially supported in the standard without having to use additional namespaces or create extensions. Unlike key-value stores, properties support duplicate names, each potentially having different values. Property names of interest to the general public are encouraged to be registered in the [CycloneDX Property Taxonomy](https://github.com/CycloneDX/cyclonedx-property-taxonomy). Formal registration is optional.", | ||
"items": {"$ref": "#/definitions/property"} | ||
}, | ||
"distribution": { | ||
"title": "Distribution", | ||
"description": "The Traffic Light Protocol (TLP) classification that controls the sharing and distribution of the data that the BOM describes.", | ||
"$ref": "#/definitions/tlpClassification" | ||
} | ||
} | ||
}, | ||
"tlpClassification": { | ||
"title": "Traffic Light Protocol (TLP) Classification", | ||
"description": "Traffic Light Protocol (TLP) is a classification system for identifying the potential risk associated with artefact, including whether it is subject to certain types of legal, financial, or technical threats. Refer to [https://www.first.org/tlp/](https://www.first.org/tlp/) for further information.\nThe default classification is \"CLEAR\"", | ||
"type" : "string", | ||
"default": "CLEAR", | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. default could be There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. UNKNOWN is not a valid TLP value |
||
"enum": [ | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. We can retain the From the first.org website:
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. The TLP values are identical to those adopted by CSAF |
||
"CLEAR", | ||
"GREEN", | ||
"AMBER", | ||
"AMBER_AND_STRICT", | ||
"RED" | ||
], | ||
"meta:enum": { | ||
"CLEAR": "The information is not subject to any restrictions as regards the sharing.", | ||
"GREEN": "The information is subject to limited disclosure, and recipients can share it within their community but not via publicly accessible channels.", | ||
"AMBER": "The information is subject to limited disclosure, and recipients can only share it on a need-to-know basis within their organization and with clients.", | ||
"AMBER_AND_STRICT": "The information is subject to limited disclosure, and recipients can only share it on a need-to-know basis within their organization.", | ||
"RED": "The information is subject to restricted distribution to individual recipients only and must not be shared." | ||
} | ||
}, | ||
"tool": { | ||
"type": "object", | ||
"title": "Tool", | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,11 @@ | ||
{ | ||
"$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", | ||
"bomFormat": "CycloneDX", | ||
"specVersion": "1.7", | ||
"serialNumber": "urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79", | ||
"version": 1, | ||
"metadata": { | ||
"distribution": "Unrestricted" | ||
}, | ||
"components": [] | ||
} |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,7 @@ | ||
<?xml version="1.0"?> | ||
<bom serialNumber="urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79" version="1" xmlns="http://cyclonedx.org/schema/bom/1.7"> | ||
<metadata> | ||
<distribution>Unrestricted</distribution> | ||
</metadata> | ||
<components /> | ||
</bom> |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,11 @@ | ||
{ | ||
"$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", | ||
"bomFormat": "CycloneDX", | ||
"specVersion": "1.7", | ||
"serialNumber": "urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79", | ||
"version": 1, | ||
"metadata": { | ||
"distribution": "RED" | ||
}, | ||
"components": [] | ||
} |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,9 @@ | ||
# proto-file: schema/bom-1.7.proto | ||
# proto-message: Bom | ||
|
||
spec_version: "1.7" | ||
version: 1 | ||
serial_number: "urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79" | ||
metadata { | ||
distribution: TLP_CLASSIFICATION_RED | ||
} |
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,7 @@ | ||
<?xml version="1.0"?> | ||
<bom serialNumber="urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79" version="1" xmlns="http://cyclonedx.org/schema/bom/1.7"> | ||
<metadata> | ||
<distribution>RED</distribution> | ||
</metadata> | ||
<components /> | ||
</bom> |
Uh oh!
There was an error while loading. Please reload this page.