Skip to content

Conversation

@stevespringett
Copy link
Member

Implements and closes #718

Signed-off-by: Steve Springett <[email protected]>
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request introduces a new entity schema to CycloneDX 2.0 that refactors role-specific properties into a unified entity structure. The change implements issue #718 by adding new entity types (entity, entityChoice, and entities) along with a comprehensive role taxonomy to the common schema model.

Changes:

  • Adds entity object definition with person/organization roles and priority handling
  • Introduces predefined and custom role taxonomies covering 27 predefined roles
  • Creates entityChoice and entities collection types for flexible entity referencing

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

},
"entity": {
"type": "object",
"title": "Entity",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"entity" for id, and "Entity" for title - a much too broad term.
please use a more narrow term.

background: every item of a collection is an entity. every banana is an entity of fruit. ...

}
]
},
"role": {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"role" for id, and "Role" for title - a much too broad term.
please use a more narrow term.

i mean, if we ever have roles for services or something, you would call them "ServiceRoles", right?
Better not use these broad and general terms for things that are pretty narrow in their scope, this prevents extensions in the future and might lead to confusion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking-changes CDX 2.0 related to release v2.0 request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[REFACTOR]: Role-based organizationalEntities (manufacturers, suppliers, etc) into extensible objects

3 participants