For people who did not follow the link, copy-pasting from that SPDX document:
…
"fileName": "internal/helm/testdata/charts/helmchart-0.1.0.tgz",
"fileTypes": [
"APPLICATION",
"ARCHIVE"
]
…
The correct contentType for this one is
application/vnd.cncf.helm.chart.content.v1.tar+gzip 😉
Both “application” and “archive” are valid filePurpose values and can both be
present.
-- zvr
From: [email protected] <[email protected]> On Behalf Of
armin.taenzer via lists.spdx.org
Sent: Wednesday, 22 February, 2023 15:35
To: [email protected]
Subject: [spdx-tech] Conversion of (multiple) SPDX 2 fileTypes into SPDX 3
contentType
Hi all,
in the tech team call yesterday we discussed the plausibility of multiple file
types and if any SBOMs exist "in the wild" that actually include files with
more than one file type.
So, here is an example from the bom-shelter (indeed from the folder
"in-the-wild"! :D ), generated by syft:
https://github.com/chainguard-dev/bom-shelter/blob/cfa2d04268d5c28c601e5386ee723d38914c37dd/in-the-wild/spdx/source-controller_0.21.2_sbom.spdx.json#L7695-L7698
Thus, my question remains: How would I convert multiple SPDX 2 fileTypes into a
single SPDX 3 contentType (generically, not just in the example above)?
Possible options:
- only convert the first fileType and drop the rest
- make cardinality of contentType arbitrary (if that is possible)
- ...?
Best regards! :)
Armin
Intel Deutschland GmbH
Registered Address: Am Campeon 10, 85579 Neubiberg, Germany
Tel: +49 89 99 8853-0, www.intel.de <http://www.intel.de>
Managing Directors: Christin Eisenschmid, Sharon Heck, Tiffany Doon Silva
Chairperson of the Supervisory Board: Nicole Lau
Registered Office: Munich
Commercial Register: Amtsgericht Muenchen HRB 186928
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#4989): https://lists.spdx.org/g/Spdx-tech/message/4989
Mute This Topic: https://lists.spdx.org/mt/97160537/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
