Skip to content

Consider extensible signature standards support #943

@stevespringett

Description

@stevespringett

i am a bit concerned about possible changes in the future.
What if might transition from JSS to something else some day?
the way it is currently structured will block any path for this.

i'd rather go with something like

{
   // ...

    "signatures": {
      "type": "array",
      "minItems": 1,
      "items": {
        "oneOf": [
          {
            "type": "object",
            "description": "description from cyclonedx-jss_X590_2023_10-2.0.schema.json#/$defs/signatureObject",
            "properties": {
              "type": { "const": "JSS_X590" },
              "data": { "$ref": "cyclonedx-jss_X590_2023_10-2.0.schema.json#/$defs/signatureObject" }
            },
            "required": ["type", "data"],
            "unevaluatedProperties": false
          },
          // any later type of signature we might add in the future 
        ]
      }
    }

}

Originally posted by @jkowalleck in #858 (comment)


While the recommended approach will not "technically" work, the desire to support multiple signature standards remains. Attempt to devise a way this can be supported in the future.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions