Pavel Shukhman

Having version label in Dockefiles would help to properly identify running flyway containers.

This PR: - Bumps TEA Spec to Beta 2 - Updates documentation, including sequence diagrams to reflect the current TEA flow - Fixes all instances of using "artifact" to switch...

We should publish suggestions how manufacturer may distribute TEIs with their product releases, i.e.: - QR codes on packaging - Container image metadata - Manifest files Guides should be scoped...

Define logic to find port in well-known discovery

2

Currently, the port number is not part of the TEI but it is needed to connect to the API. The current assumption is that the client connects on the default...

The distributionType field in release-distribution needs to be clarified

1

It's currently set as ``` distributionType: type: string description: Unique identifier for the distribution type. ``` Where examples include things like "zip", "tar.gz", "windows-x64.exe". The problem - if we want...

Include Pagination across the Spec

2

Currently pagination is only added to /products endpoint, needs to be added to other relevant endpoints returning lists of elements.

Bring back Artifact author to the Spec

4

Looks like the author field has been removed from the Artifact object, while it only needed to be removed from the Collection object. Ref: https://github.com/CycloneDX/transparency-exchange-api/commit/a7391972ad7c59572e1a47681aeb2ec5ebe380d1 This should be re-introduced in...

Approach to Collections' Publisher API

3

Our current understanding of a Collection is a state of Artifacts (metadata documents) belonging to a Release. A new version of Collection is automatically created once the state of Artifacts...