Support for SPDX 3.x

[thomasponsmicroej]

It's an open question, because SPDX 2.x is getting a bit old, are there any plans to upgrade the plugin to produce SPDX 3.x SBOMs?
Thank you

[loosebazooka]

Yeah it'd be nice. I'm hearing some orgs still need support for 2.x so maybe two pathways, one for 3.x and 2.x could work. Just creating a new 3.x task perhaps?

[thomasponsmicroej]

Yes, that or an option in the sbom extension to select the version? I guess 3.x could be the default if we go that path?

[loosebazooka]

Right sorry, I mean the underlying code would be different for 3.x. To the user I think it would just be selecting a version number.