Details
-
Task
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
None
-
None
Description
We added two additional fields to the Enterprise SBOM and would like to ensure that these fields are also included in the MaxScale SBOM for consistency as this customer uses both Enterprise and MaxScale.
We added 2 additional fields for each dependency/package for Enterprise:
- License/license text: license of the 3rd party component
- Copyright statement: copyright information of the 3rd party component
We have created a Wiki page that provides information on these fields, and how they can be added to an SBOM document. This page also contains a full example.
The relevant fields are:
- Package level: license > licenseConcluded
- Package level: copyright statement > copyrightText
Please note that NOASSERTION is also a possible value for these fields.
Enterprise Ticket Reference: https://mariadbcorp.atlassian.net/browse/PT-438
Attachments
Issue Links
- relates to
-
MDEV-36398 Extend SBOM with 'license' and 'copyright'
-
- Closed
-