-
-
Notifications
You must be signed in to change notification settings - Fork 93
Bom-ref vs. bom-id? #671
I'm wondering about the identifier "bom-ref": shouldn't this rather be called "bom-id"?
If you look at the description https://cyclonedx.org/docs/1.6/json/#components_items_bom-ref
An optional identifier which can be used to reference the component elsewhere in the BOM.
For me, the component has an identifier (which I'd rather call "bom-id"), and this bom-id is then referenced in other places, e.g. in dependencies https://cyclonedx.org/docs/1.6/json/#dependencies_items_ref
References a component or service by its bom-ref attribute
which should rather be:
References a component or service by its bom identifier attribute (bom-id)
Only where it is used/referenced, this is actually a reference.
Could this be considered for CycloneDX 2.0?
For me, the main benefit would be clarity and alignment with standard usage of the term "reference".
All reactions
Replies: 1 comment 2 replies
@stevespringett FYI
All reactions
I wouldn't mind having the additional clarity. Thanks for the suggestion. Will consider for 2.0.
All reactions
-
👍 2
All reactions
-
🎉 1