the CDX 2.0 formulation docsmake nosens
for example:
|
"description": "A reference to the component or service that provided the input to the task (e.g., reference to a service with data flow value of `inbound`)", |
A reference to the component or service [...]
service is done with CDX 2.0 - we only have components.
[...] (e.g., reference to a service with data flow value of inbound)
where does this inbound come from? is this expected to be an enum value? if so, it is not defined nowhere.
same for this
|
"description": "A reference to the component or service that received or stored the input if not the task itself (e.g., a local, named storage workspace)", |
.. where comes this "outbound" from?
the CDX 2.0 formulation docsmake nosens
for example:
specification/schema/2.0/model/cyclonedx-formulation-2.0.schema.json
Line 653 in a1c8aeb
serviceis done with CDX 2.0 - we only have components.where does this
inboundcome from? is this expected to be an enum value? if so, it is not defined nowhere.same for this
specification/schema/2.0/model/cyclonedx-formulation-2.0.schema.json
Line 662 in a1c8aeb
.. where comes this "outbound" from?