specification icon indicating copy to clipboard operation
specification copied to clipboard
Published 1 month ago • verified publisher icon CycloneDX

Add purchasing document line item to commercial license support

Open bhermida opened this issue 2 years ago • 5 comments

To improve supply chain compliance, we are finding the need to add properties that connect the SBOM to the procurement. Specific attributes that would support include

  • Purchasing Document Number (this could be a PO or Contract/Agreement Number)
  • Purchasing Document Line Item

bhermida avatar Aug 31 '23 16:08 bhermida

Does the commercial licensing support introduced in CycloneDX v1.5 meet your requirements?

https://cyclonedx.org/docs/1.5/json/#components_items_licenses_oneOf_i0_items_license_licensing

stevespringett avatar Sep 04 '23 20:09 stevespringett

Somewhat however purchasing documents may have various line items that standalone as legal artifacts. To that end, adding “Purchasing Document Line Item” would help ensure proper tracking and tracing

bhermida avatar Sep 05 '23 11:09 bhermida

@idunbarh any thoughts on this enhancement request?

stevespringett avatar Dec 29 '23 03:12 stevespringett

Concur with title change to "Add purchasing document line item to commercial license support". Thank you

bhermida avatar Dec 29 '23 12:12 bhermida

@idunbarh would it be possible to get your teams position on this?

stevespringett avatar Feb 17 '24 05:02 stevespringett