Skip to content

Add version field to BOM - #1427

Open
goneall wants to merge 1 commit into
developfrom
issue1288
Open

Add version field to BOM#1427
goneall wants to merge 1 commit into
developfrom
issue1288

Conversation

@goneall

@goneall goneall commented Aug 4, 2026

Copy link
Copy Markdown
Member

Fixes #1288

Fixes #1288

Signed-off-by: Gary O'Neall <gary@sourceauditor.com>
@goneall goneall added this to the 3.1 milestone Aug 4, 2026
@goneall
goneall requested review from bact, kestewart and zvr August 4, 2026 17:44
@goneall goneall added the Profile:Core Core profile and related matters label Aug 4, 2026
Comment thread model/Core/Classes/Bom.md

The `version` property is an optional human readable hint for different versions of a BOM
representing the same basic `Bundle` of elements provided by the same BOM
`creationInfo` `createdBy` `Agent` with a BOM of the same `name`.

@bact bact Aug 4, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is correct but we may need some convention to express this consistently.

I see some people use /Core/Bom.creationInfo.createdBy (Agent is a range, we may not need to put it there; same as we will not say version xsd:string).

Comment thread model/Core/Classes/Bom.md
To accurately represent changes or updates to a BOM, a `Relationship`
should be created from the updated BOM to the original BOM with the `amendedBy`
relationship type.
Since the `spdxId` must be unique for each version of a given SBOM, it can be considered

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need to be a BOM here ? Not sure

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Profile:Core Core profile and related matters

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add SBOM version

2 participants