I include multiple file types where possible. The main cases are where the SPDX file type does not directly map to a primary MIME type (e.g.TEXT, APPLICATION). This includes e.g. SOURCE or SPDX which are not MIME types.. It would be very useful if there was a mapping of the full MIME type value to the SPDX file type as there is not a 1-1 mapping of the primary MIME type to an SPDX file type e.g. text/x-python to SOURCE and test/x-sgml to DOCUMENTATION. Has anyone produced such a mapping?
I do wonder if the SPDX file type should be renamed SBOM (to show some love for other SBOM formats :-)) Anthony On Wed, 22 Feb 2023 at 16:40, Alexios Zavras <[email protected]> wrote: > For people who did not follow the link, copy-pasting from that SPDX > document: > > … > > "fileName": "internal/helm/testdata/charts/helmchart-0.1.0.tgz", > > "fileTypes": [ > > "APPLICATION", > > "ARCHIVE" > > ] > > … > > > > The correct contentType for this one is > application/vnd.cncf.helm.chart.content.v1.tar+gzip 😉 > > Both “application” and “archive” are valid filePurpose values and can both > be present. > > > > -- zvr > > > > *From:* [email protected] <[email protected]> *On Behalf Of > *armin.taenzer via lists.spdx.org > *Sent:* Wednesday, 22 February, 2023 15:35 > *To:* [email protected] > *Subject:* [spdx-tech] Conversion of (multiple) SPDX 2 fileTypes into > SPDX 3 contentType > > > > Hi all, > > in the tech team call yesterday we discussed the plausibility of multiple > file types and if any SBOMs exist "in the wild" that actually include files > with more than one file type. > So, here is an example from the bom-shelter (indeed from the folder > "in-the-wild"! :D ), generated by syft: > > https://github.com/chainguard-dev/bom-shelter/blob/cfa2d04268d5c28c601e5386ee723d38914c37dd/in-the-wild/spdx/source-controller_0.21.2_sbom.spdx.json#L7695-L7698 > > Thus, my question remains: How would I convert multiple SPDX 2 fileTypes > into a single SPDX 3 contentType (generically, not just in the example > above)? > > Possible options: > - only convert the first fileType and drop the rest > - make cardinality of contentType arbitrary (if that is possible) > - ...? > > Best regards! :) > Armin > > Intel Deutschland GmbH > Registered Address: Am Campeon 10, 85579 Neubiberg, Germany > Tel: +49 89 99 8853-0, www.intel.de > Managing Directors: Christin Eisenschmid, Sharon Heck, Tiffany Doon > Silva > Chairperson of the Supervisory Board: Nicole Lau > Registered Office: Munich > Commercial Register: Amtsgericht Muenchen HRB 186928 > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4995): https://lists.spdx.org/g/Spdx-tech/message/4995 Mute This Topic: https://lists.spdx.org/mt/97160537/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
