William can confirm, but I believe his rationale was that subelements of Identity (Person, Organization, Tool) would be used in conjunction with relationships to capture complex concepts (such as giving names to a group of identifiers, mapping identifiers to identities over specified time periods, etc.) for use cases needing that information to be captured in BOMs.
For simple v2 use cases and backwards compatibility, the actor identifiers are sufficient. Identity elements can optionally enrich each identifier either within BOMs where they appear or be created at a later date. David On Tue, Nov 8, 2022 at 12:05 PM Robert A Martin <[email protected]> wrote: > David, > > That isn’t my recollection of the conversation. Making it a data type > breaks huge functionality that is key to linking SBOMs to other enterprise > activities. > > Bob > > Get Outlook for iOS <https://aka.ms/o0ukef> > ------------------------------ > *From:* [email protected] <[email protected]> on behalf of > David Kemp <[email protected]> > *Sent:* Tuesday, November 8, 2022 10:31:42 AM > *To:* SPDX-list <[email protected]> > *Subject:* [EXT] [spdx-tech] Actor datatype > > > Punchlist item: Last week we decided that Actor should have always been a > datatype rather than an Element as previously shown on the model > diagram. The Actor datatype should label its identifiers without requiring > any association with Identity elements. > > This example File element shows how "creator" looks with "Identifier" > having a specified syntax (name, email, uri, ...) and Actor being an > Identifier having a specified subject type (person, organization, tool, > any): > > { > "id": "urn:acme.dev:artifacts:gnu-coreutils/v9.1/src/du.c", > "type": { > "file": { > "filePurpose": ["APPLICATION", "SOURCE"] > } > }, > "creator": [ > {"person": {"email": "[email protected]"}} > ], > "created": "2022-04-05T22:00:00Z", > "specVersion": "3.0", > "profiles": ["Core", "Software"], > "dataLicense": "CC0-1.0" > } > > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4837): https://lists.spdx.org/g/Spdx-tech/message/4837 Mute This Topic: https://lists.spdx.org/mt/94892579/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
