CycloneDX v1.5 XML Reference
Schema Document Properties
Target Namespace | http://cyclonedx.org/schema/bom/1.6 |
---|---|
Version | 1.5.0 |
Element and Attribute Namespaces |
|
Schema Composition |
|
Global Declarations
Element: bom
<bom:bom version="xs:positiveInteger" [0..1] serialNumber="bom:urnUuid" [0..1] Allow any attributes from any namespace (lax validation). > <!-- Uniqueness Constraint - bom-ref Selector - .//* Field(s) - @bom-ref --> <bom:metadata> bom:metadata </bom:metadata> [0..1] <bom:components> bom:componentsType </bom:components> [0..1] <bom:services> bom:servicesType </bom:services> [0..1] <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] <bom:dependencies> bom:dependenciesType </bom:dependencies> [0..1] <bom:compositions> bom:compositionsType </bom:compositions> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] <bom:vulnerabilities> bom:vulnerabilitiesType </bom:vulnerabilities> [0..1] <bom:annotations> bom:annotationsType </bom:annotations> [0..1] <bom:formulation> bom:formulationType </bom:formulation> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </bom:bom>
<xs:element name="bom"> <xs:complexType> <xs:sequence> <xs:element name="metadata" type="bom:metadata" minOccurs="0" maxOccurs="1"/> <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/> <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/> <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/> <xs:element name="dependencies" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/> <xs:element name="compositions" type="bom:compositionsType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:element name="vulnerabilities" type="bom:vulnerabilitiesType" minOccurs="0" maxOccurs="1"/> <xs:element name="annotations" type="bom:annotationsType" minOccurs="0" maxOccurs="1"/> <xs:element name="formulation" type="bom:formulationType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="version" type="xs:positiveInteger" default="1"/> <xs:attribute name="serialNumber" type="bom:urnUuid"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType> <xs:unique name="bom-ref"> <xs:selector xpath=".//*"/> <xs:field xpath="@bom-ref"/> </xs:unique> </xs:element>
Global Definitions
Complex Type: advisoryType
Super-types: | None |
---|---|
Sub-types: | None |
Name | advisoryType |
---|---|
Abstract | no |
Complex Type: annotationType
Super-types: | None |
---|---|
Sub-types: | None |
Name | annotationType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] Allow any attributes from any namespace (lax validation). > <bom:subjects > [0..1] Start Sequence [0..*] <bom:subject> bom:bomReferenceType </bom:subject> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:subjects> <bom:annotator> bom:annotatorChoiceType </bom:annotator> [1] <bom:timestamp> xs:dateTime </bom:timestamp> [1] <bom:text> xs:string </bom:text> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="annotationType"> <xs:sequence> <xs:element name="subjects" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="subject" type="bom:bomReferenceType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="annotator" type="bom:annotatorChoiceType" minOccurs="1" maxOccurs="1"/> <xs:element name="timestamp" type="xs:dateTime" minOccurs="1" maxOccurs="1"/> <xs:element name="text" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: annotationsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | annotationsType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:annotation> bom:annotationType </bom:annotation> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="annotationsType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="annotation" type="bom:annotationType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: annotatorChoiceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | annotatorChoiceType |
---|---|
Abstract | no |
<xs:complexType name="annotatorChoiceType"> <xs:choice> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/> <xs:element name="component" type="bom:component" minOccurs="0" maxOccurs="1"/> <xs:element name="service" type="bom:service" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:complexType>
Complex Type: attachedTextType
Super-types: | xs:string < attachedTextType (by extension) |
---|---|
Sub-types: | None |
Name | attachedTextType |
---|---|
Abstract | no |
Complex Type: bomReferenceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | bomReferenceType |
---|---|
Abstract | no |
<... ref="union of: [ bom:refLinkType,bom:bomLinkType ]" [1] Allow any attributes from a namespace other than this schema's namespace (lax validation). />
Complex Type: commitType
Super-types: | None |
---|---|
Sub-types: | None |
Name | commitType |
---|---|
Abstract | no |
<...> <bom:uid> xs:normalizedString </bom:uid> [0..1] <bom:url> xs:anyURI </bom:url> [0..1] <bom:author> bom:identifiableActionType </bom:author> [0..1] <bom:committer> bom:identifiableActionType </bom:committer> [0..1] <bom:message> xs:normalizedString </bom:message> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="commitType"> <xs:sequence> <xs:element name="uid" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="author" type="bom:identifiableActionType" minOccurs="0" maxOccurs="1"/> <xs:element name="committer" type="bom:identifiableActionType" minOccurs="0" maxOccurs="1"/> <xs:element name="message" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType>
Complex Type: commitsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | commitsType |
---|---|
Abstract | no |
<...> Start Sequence [0..*] <bom:commit> bom:commitType </bom:commit> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
Complex Type: component
Super-types: | None |
---|---|
Sub-types: | None |
Name | component |
---|---|
Abstract | no |
<... type="bom:classification" [1] mime-type="bom:mimeType" [0..1] bom-ref="bom:refType" [0..1] Allow any attributes from any namespace (lax validation). > <bom:supplier> bom:organizationalEntity </bom:supplier> [0..1] <bom:author> xs:normalizedString </bom:author> [0..1] <bom:publisher> xs:normalizedString </bom:publisher> [0..1] <bom:group> xs:normalizedString </bom:group> [0..1] <bom:name> xs:normalizedString </bom:name> [1] <bom:version> xs:normalizedString </bom:version> [0..1] <bom:description> xs:normalizedString </bom:description> [0..1] <bom:scope> bom:scope </bom:scope> [0..1] <bom:hashes > [0..1] Start Sequence [0..*] <bom:hash> bom:hashType </bom:hash> [1] End Sequence </bom:hashes> <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1] <bom:copyright> xs:normalizedString </bom:copyright> [0..1] <bom:cpe> bom:cpe </bom:cpe> [0..1] <bom:purl> xs:anyURI </bom:purl> [0..1] <bom:swid> bom:swidType </bom:swid> [0..1] <bom:modified> xs:boolean </bom:modified> [0..1] <bom:pedigree> bom:pedigreeType </bom:pedigree> [0..1] <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] <bom:components > [0..1] Start Sequence [0..*] <bom:component> bom:component </bom:component> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:components> <bom:evidence> bom:componentEvidenceType </bom:evidence> [0..1] <bom:releaseNotes> bom:releaseNotesType </bom:releaseNotes> [0..1] <bom:modelCard> bom:modelCardType </bom:modelCard> [0..1] <bom:data> bom:componentDataType </bom:data> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="component"> <xs:sequence> <xs:element name="supplier" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="author" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="publisher" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="group" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="name" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/> <xs:element name="version" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="scope" type="bom:scope" minOccurs="0" maxOccurs="1" default="required"/> <xs:element name="hashes" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="hash" type="bom:hashType"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/> <xs:element name="copyright" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="cpe" type="bom:cpe" minOccurs="0" maxOccurs="1"/> <xs:element name="purl" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="swid" type="bom:swidType" minOccurs="0" maxOccurs="1"/> <xs:element name="modified" type="xs:boolean" minOccurs="0" maxOccurs="1"/> <xs:element name="pedigree" type="bom:pedigreeType" minOccurs="0" maxOccurs="1"/> <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:element name="components" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="component" type="bom:component"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="evidence" type="bom:componentEvidenceType" minOccurs="0" maxOccurs="1"/> <xs:element name="releaseNotes" type="bom:releaseNotesType" minOccurs="0" maxOccurs="1"/> <xs:element name="modelCard" type="bom:modelCardType" minOccurs="0" maxOccurs="1"/> <xs:element name="data" type="bom:componentDataType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="type" type="bom:classification" use="required"/> <xs:attribute name="mime-type" type="bom:mimeType"/> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: componentDataType
Super-types: | None |
---|---|
Sub-types: | None |
Name | componentDataType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] > <bom:type> bom:componentDataTypeEnumeration </bom:type> [1] <bom:name> xs:string </bom:name> [0..1] <bom:contents > [0..1] <bom:attachment> bom:attachedTextType </bom:attachment> [0..1] <bom:url> xs:anyURI </bom:url> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] </bom:contents> <bom:classification> xs:string </bom:classification> [0..1] <bom:sensitiveData> ... </bom:sensitiveData> [0..*] <bom:graphics> bom:graphicsCollectionType </bom:graphics> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:governance> bom:dataGovernance </bom:governance> [0..1] </...>
<xs:complexType name="componentDataType"> <xs:sequence> <xs:element name="type" type="bom:componentDataTypeEnumeration" minOccurs="1" maxOccurs="1"/> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="contents" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="attachment" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="classification" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="sensitiveData" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="graphics" type="bom:graphicsCollectionType" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="governance" type="bom:dataGovernance" minOccurs="0" maxOccurs="1"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType>
Complex Type: componentEvidenceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | componentEvidenceType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > <bom:identity > [0..1] <bom:field> bom:identityFieldType </bom:field> [1] <bom:confidence> bom:decimalPercentType </bom:confidence> [0..1] <bom:methods > [0..1] <bom:method > [0..*] <bom:technique> bom:evidenceTechnique </bom:technique> [1] <bom:confidence> bom:decimalPercentType </bom:confidence> [1] <bom:value> xs:string </bom:value> [0..1] </bom:method> </bom:methods> <bom:tools > [0..1] <bom:tool> bom:bomReferenceType </bom:tool> [0..*] </bom:tools> </bom:identity> <bom:occurrences > [0..1] <bom:occurrence bom-ref="bom:refType" [0..1] > [0..*] <bom:location> ... </bom:location> [1] </bom:occurrence> </bom:occurrences> <bom:callstack > [0..1] <bom:frames > [0..1] <bom:frame > [0..*] <bom:package> xs:string </bom:package> [0..1] <bom:module> xs:string </bom:module> [1] <bom:function> xs:string </bom:function> [0..1] <bom:parameters > [0..1] <bom:parameter> xs:string </bom:parameter> [0..*] </bom:parameters> <bom:line> xs:integer </bom:line> [0..1] <bom:column> xs:integer </bom:column> [0..1] <bom:fullFilename> xs:string </bom:fullFilename> [0..1] </bom:frame> </bom:frames> <bom:tools > [0..1] <bom:tool> bom:bomReferenceType </bom:tool> [0..*] </bom:tools> </bom:callstack> <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1] <bom:copyright> bom:copyrightsType </bom:copyright> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="componentEvidenceType"> <xs:sequence> <xs:element name="identity" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="field" type="bom:identityFieldType" minOccurs="1" maxOccurs="1"/> <xs:element name="confidence" type="bom:decimalPercentType" minOccurs="0" maxOccurs="1"/> <xs:element name="methods" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="method" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="technique" type="bom:evidenceTechnique" minOccurs="1" maxOccurs="1"/> <xs:element name="confidence" type="bom:decimalPercentType" minOccurs="1" maxOccurs="1"/> <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="tools" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="tool" type="bom:bomReferenceType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="occurrences" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="occurrence" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="location" minOccurs="1" maxOccurs="1"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="callstack" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="frames" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="frame" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="package" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="module" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="function" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="parameters" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="parameter" type="xs:string" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="line" type="xs:integer" minOccurs="0" maxOccurs="1"/> <xs:element name="column" type="xs:integer" minOccurs="0" maxOccurs="1"/> <xs:element name="fullFilename" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="tools" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="tool" type="bom:bomReferenceType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/> <xs:element name="copyright" type="bom:copyrightsType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: componentsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | componentsType |
---|---|
Abstract | no |
<xs:complexType name="componentsType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="component" type="bom:component"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: compositionType
Super-types: | None |
---|---|
Sub-types: | None |
Name | compositionType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] > Start Sequence [0..*] <bom:aggregate> bom:aggregateType </bom:aggregate> [1] <bom:assemblies > [0..1] Start Sequence [0..*] <bom:assembly> bom:bomReferenceType </bom:assembly> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:assemblies> <bom:dependencies > [0..1] Start Sequence [0..*] <bom:dependency> bom:bomReferenceType </bom:dependency> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:dependencies> <bom:vulnerabilities > [0..1] Start Sequence [0..*] <bom:vulnerability> bom:bomReferenceType </bom:vulnerability> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:vulnerabilities> End Sequence </...>
<xs:complexType name="compositionType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="aggregate" type="bom:aggregateType" default="not_specified"/> <xs:element name="assemblies" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="assembly" type="bom:bomReferenceType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="dependencies" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="dependency" type="bom:bomReferenceType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="vulnerabilities" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="vulnerability" type="bom:bomReferenceType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType>
Complex Type: compositionsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | compositionsType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:composition> bom:compositionType </bom:composition> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="compositionsType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="composition" type="bom:compositionType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: copyrightsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | copyrightsType |
---|---|
Abstract | no |
Complex Type: dataClassificationType
Super-types: | xs:normalizedString < dataClassificationType (by extension) |
---|---|
Sub-types: | None |
Name | dataClassificationType |
---|---|
Abstract | no |
<... flow="bom:dataFlowType" [1] > xs:normalizedString </...>
Complex Type: dataGovernance
Super-types: | None |
---|---|
Sub-types: | None |
Name | dataGovernance |
---|---|
Abstract | no |
<...> <bom:custodians > [0..1] <bom:custodian> bom:organizationOrIndividualType </bom:custodian> [0..*] </bom:custodians> <bom:stewards > [0..1] <bom:steward> bom:organizationOrIndividualType </bom:steward> [0..*] </bom:stewards> <bom:owners > [0..1] <bom:owner> bom:organizationOrIndividualType </bom:owner> [0..*] </bom:owners> </...>
<xs:complexType name="dataGovernance"> <xs:sequence> <xs:element name="custodians" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="custodian" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="stewards" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="steward" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="owners" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="owner" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType>
Complex Type: dependenciesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | dependenciesType |
---|---|
Abstract | no |
<...> Start Sequence [0..*] <bom:dependency> bom:dependencyType </bom:dependency> [1] End Sequence </...>
Complex Type: dependencyType
Super-types: | None |
---|---|
Sub-types: | None |
Name | dependencyType |
---|---|
Abstract | no |
<... ref="bom:refLinkType" [1] Allow any attributes from a namespace other than this schema's namespace (lax validation). > Start Sequence [0..*] <bom:dependency> bom:dependencyType </bom:dependency> [1] End Sequence </...>
<xs:complexType name="dependencyType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="dependency" type="bom:dependencyType"/> </xs:sequence> <xs:attribute name="ref" type="bom:refLinkType" use="required"/> <xs:anyAttribute namespace="##other" processContents="lax"/> </xs:complexType>
Complex Type: diffType
Super-types: | None |
---|---|
Sub-types: | None |
Name | diffType |
---|---|
Abstract | no |
<xs:complexType name="diffType"> <xs:sequence> <xs:element name="text" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType>
Complex Type: eventType
Super-types: | None |
---|---|
Sub-types: | None |
Name | eventType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > <bom:uid> xs:string </bom:uid> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:timeReceived> xs:dateTime </bom:timeReceived> [0..1] <bom:data> bom:attachedTextType </bom:data> [0..1] <bom:source> bom:resourceReferenceType </bom:source> [0..1] <bom:target> bom:resourceReferenceType </bom:target> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="eventType"> <xs:sequence> <xs:element name="uid" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="timeReceived" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="data" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> <xs:element name="source" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/> <xs:element name="target" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: externalReference
Super-types: | None |
---|---|
Sub-types: | None |
Name | externalReference |
---|---|
Abstract | no |
<... type="bom:externalReferenceType" [1] Allow any attributes from any namespace (lax validation). > <bom:url> union of: [ xs:anyURI,bom:bomLinkType ] </bom:url> [1] <bom:comment> xs:string </bom:comment> [0..1] <bom:hashes > [0..1] Start Sequence [0..*] <bom:hash> bom:hashType </bom:hash> [1] End Sequence </bom:hashes> </...>
<xs:complexType name="externalReference"> <xs:sequence> <xs:element name="url" minOccurs="1" maxOccurs="1"> <xs:simpleType> <xs:union memberTypes="xs:anyURI bom:bomLinkType"/> </xs:simpleType> </xs:element> <xs:element name="comment" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="hashes" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="hash" type="bom:hashType"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> <xs:attribute name="type" type="bom:externalReferenceType" use="required"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: externalReferences
Super-types: | None |
---|---|
Sub-types: | None |
Name | externalReferences |
---|---|
Abstract | no |
<...> Start Sequence [0..*] <bom:reference> bom:externalReference </bom:reference> [1] End Sequence </...>
Complex Type: formulaType
Super-types: | None |
---|---|
Sub-types: | None |
Name | formulaType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] Allow any attributes from any namespace (lax validation). > <bom:components> bom:componentsType </bom:components> [0..1] <bom:services> bom:servicesType </bom:services> [0..1] <bom:workflows> bom:workflowsType </bom:workflows> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] </...>
<xs:complexType name="formulaType"> <xs:sequence> <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/> <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/> <xs:element name="workflows" type="bom:workflowsType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: formulationType
Super-types: | None |
---|---|
Sub-types: | None |
Name | formulationType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:formula> bom:formulaType </bom:formula> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="formulationType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="formula" type="bom:formulaType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: graphicsCollectionType
Super-types: | None |
---|---|
Sub-types: | None |
Name | graphicsCollectionType |
---|---|
Abstract | no |
<xs:complexType name="graphicsCollectionType"> <xs:sequence> <xs:element name="description" minOccurs="0" maxOccurs="1"/> <xs:element name="collection" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="graphic" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="image" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType>
Complex Type: hashType
Name | hashType |
---|---|
Abstract | no |
Complex Type: identifiableActionType
Super-types: | None |
---|---|
Sub-types: | None |
Name | identifiableActionType |
---|---|
Abstract | no |
<xs:complexType name="identifiableActionType"> <xs:sequence> <xs:element name="timestamp" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="email" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType>
Complex Type: inputType
Super-types: | None |
---|---|
Sub-types: | None |
Name | inputType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Choice [1] <bom:resource> bom:resourceReferenceType </bom:resource> [1] <bom:parameters> bom:parametersType </bom:parameters> [1] <bom:environmentVars > [1] Start Sequence [0..*] Start Choice [1] <bom:environmentVar> bom:propertyType </bom:environmentVar> [0..1] <bom:value> xs:string </bom:value> [0..1] End Choice End Sequence </bom:environmentVars> <bom:data> bom:attachedTextType </bom:data> [1] End Choice <bom:source> bom:resourceReferenceType </bom:source> [0..1] <bom:target> bom:resourceReferenceType </bom:target> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="inputType"> <xs:sequence> <xs:choice> <xs:element name="resource" type="bom:resourceReferenceType" minOccurs="1" maxOccurs="1"/> <xs:element name="parameters" type="bom:parametersType" minOccurs="1" maxOccurs="1"/> <xs:element name="environmentVars" minOccurs="1" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <-- maxOccurs="unbounded" NEEDS to be set on the sequence, not the individual elements --> <xs:choice> <xs:element name="environmentVar" type="bom:propertyType" minOccurs="0" maxOccurs="1"/> <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="data" type="bom:attachedTextType" minOccurs="1" maxOccurs="1"/> </xs:choice> <xs:element name="source" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/> <xs:element name="target" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: issueType
Super-types: | None |
---|---|
Sub-types: | None |
Name | issueType |
---|---|
Abstract | no |
<... type="bom:issueClassification" [1] > <bom:id> xs:normalizedString </bom:id> [0..1] <bom:name> xs:normalizedString </bom:name> [0..1] <bom:description> xs:normalizedString </bom:description> [0..1] <bom:source > [0..1] <bom:name> xs:normalizedString </bom:name> [0..1] <bom:url> xs:anyURI </bom:url> [0..1] </bom:source> <bom:references > [0..1] Start Sequence [0..*] <bom:url> xs:anyURI </bom:url> [1] End Sequence </bom:references> Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="issueType"> <xs:sequence> <xs:element name="id" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="source" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="references" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="url" type="xs:anyURI"/> </xs:sequence> </xs:complexType> </xs:element> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="type" type="bom:issueClassification" use="required"/> </xs:complexType>
Complex Type: licenseChoiceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | licenseChoiceType |
---|---|
Abstract | no |
<xs:complexType name="licenseChoiceType"> <xs:choice> <xs:element name="license" type="bom:licenseType" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="expression" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:simpleContent> <xs:extension base="xs:normalizedString"> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:extension> </xs:simpleContent> </xs:complexType> </xs:element> </xs:choice> </xs:complexType>
Complex Type: licenseType
Super-types: | None |
---|---|
Sub-types: | None |
Name | licenseType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] > Start Choice [1] <bom:id> spdx:licenseId </bom:id> [0..1] <bom:name> xs:normalizedString </bom:name> [0..1] End Choice <bom:text> bom:attachedTextType </bom:text> [0..1] <bom:url> xs:anyURI </bom:url> [0..1] <bom:licensing > [0..1] <bom:altIds > [0..1] <bom:altId> xs:normalizedString </bom:altId> [0..*] </bom:altIds> <bom:licensor > [0..1] Start Choice [1] <bom:organization> bom:organizationalEntity </bom:organization> [0..1] <bom:individual> bom:organizationalContact </bom:individual> [0..1] End Choice </bom:licensor> <bom:licensee > [0..1] Start Choice [1] <bom:organization> bom:organizationalEntity </bom:organization> [0..1] <bom:individual> bom:organizationalContact </bom:individual> [0..1] End Choice </bom:licensee> <bom:purchaser > [0..1] Start Choice [1] <bom:organization> bom:organizationalEntity </bom:organization> [0..1] <bom:individual> bom:organizationalContact </bom:individual> [0..1] End Choice </bom:purchaser> <bom:purchaseOrder> xs:string </bom:purchaseOrder> [0..1] <bom:licenseTypes > [0..1] <bom:licenseType> bom:licenseTypeEnum </bom:licenseType> [0..*] </bom:licenseTypes> <bom:lastRenewal> xs:dateTime </bom:lastRenewal> [0..1] <bom:expiration> xs:dateTime </bom:expiration> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </bom:licensing> <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="licenseType"> <xs:sequence> <xs:choice> <xs:element name="id" type="spdx:licenseId" minOccurs="0" maxOccurs="1"/> <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> </xs:choice> <xs:element name="text" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="licensing" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="altIds" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="altId" type="xs:normalizedString" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="licensor" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:choice> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="licensee" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:choice> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="purchaser" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:choice> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="purchaseOrder" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="licenseTypes" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="licenseType" type="bom:licenseTypeEnum" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="lastRenewal" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="expiration" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType>
Complex Type: metadata
Super-types: | None |
---|---|
Sub-types: | None |
Name | metadata |
---|---|
Abstract | no |
<... Allow any attributes from a namespace other than this schema's namespace (lax validation). > Start Sequence [0..1] <bom:timestamp> xs:dateTime </bom:timestamp> [0..1] <bom:lifecycles > [0..1] <bom:lifecycle > [0..*] Start Choice [1] <bom:phase> bom:lifecyclePhaseType </bom:phase> [1] <bom:name> xs:normalizedString </bom:name> [1] <bom:description> xs:string </bom:description> [0..1] End Choice </bom:lifecycle> </bom:lifecycles> <bom:tools > [0..1] Start Choice [1] Start Sequence [0..*] <bom:tool> bom:toolType </bom:tool> [0..1] End Sequence Start Sequence [0..1] <bom:components> bom:componentsType </bom:components> [0..1] <bom:services> bom:servicesType </bom:services> [0..1] End Sequence End Choice </bom:tools> <bom:authors > [0..1] Start Sequence [0..*] <bom:author> bom:organizationalContact </bom:author> [1] End Sequence </bom:authors> <bom:component> bom:component </bom:component> [0..1] <bom:manufacture> bom:organizationalEntity </bom:manufacture> [0..1] <bom:supplier> bom:organizationalEntity </bom:supplier> [0..1] <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="metadata"> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="timestamp" type="xs:dateTime" minOccurs="0"/> <xs:element name="lifecycles" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="lifecycle" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:choice> <xs:sequence> <xs:element name="phase" type="bom:lifecyclePhaseType" minOccurs="1" maxOccurs="1"/> </xs:sequence> <xs:sequence> <xs:element name="name" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:choice> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="tools" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:choice> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="tool" type="bom:toolType" minOccurs="0"/> </xs:sequence> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/> <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:choice> </xs:complexType> </xs:element> <xs:element name="authors" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="author" type="bom:organizationalContact"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="component" type="bom:component" minOccurs="0"/> <xs:element name="manufacture" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="supplier" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="lax"/> </xs:complexType>
Complex Type: modelCardType
Super-types: | None |
---|---|
Sub-types: | None |
Name | modelCardType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] > <bom:modelParameters > [0..1] <bom:approach > [0..1] <bom:type> bom:machineLearningApproachType </bom:type> [0..1] </bom:approach> <bom:task> xs:string </bom:task> [0..1] <bom:architectureFamily> xs:string </bom:architectureFamily> [0..1] <bom:modelArchitecture> xs:string </bom:modelArchitecture> [0..1] <bom:datasets > [0..1] Start Choice [0..*] <bom:ref> union of: [ bom:refLinkType,bom:bomLinkElementType ] </bom:ref> [0..1] <bom:dataset> bom:componentDataType </bom:dataset> [0..1] End Choice </bom:datasets> <bom:inputs > [0..1] <bom:input > [0..*] <bom:format> xs:string </bom:format> [1] </bom:input> </bom:inputs> <bom:outputs > [0..1] <bom:output > [0..*] <bom:format> xs:string </bom:format> [1] </bom:output> </bom:outputs> </bom:modelParameters> <bom:quantitativeAnalysis > [0..1] <bom:performanceMetrics > [0..1] <bom:performanceMetric > [0..*] <bom:type> xs:string </bom:type> [0..1] <bom:value> xs:string </bom:value> [0..1] <bom:slice> xs:string </bom:slice> [0..1] <bom:confidenceInterval > [0..1] <bom:lowerBound> xs:string </bom:lowerBound> [0..1] <bom:upperBound> xs:string </bom:upperBound> [0..1] </bom:confidenceInterval> </bom:performanceMetric> </bom:performanceMetrics> <bom:graphics > [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:collection > [0..1] <bom:graphic > [0..*] <bom:name> xs:string </bom:name> [0..1] <bom:image> bom:attachedTextType </bom:image> [0..1] </bom:graphic> </bom:collection> </bom:graphics> </bom:quantitativeAnalysis> <bom:considerations > [0..1] <bom:users > [0..1] <bom:user> xs:string </bom:user> [0..1] </bom:users> <bom:useCases > [0..1] <bom:useCase> xs:string </bom:useCase> [0..1] </bom:useCases> <bom:technicalLimitations > [0..1] <bom:technicalLimitation> xs:string </bom:technicalLimitation> [0..1] </bom:technicalLimitations> <bom:performanceTradeoffs > [0..1] <bom:performanceTradeoff> xs:string </bom:performanceTradeoff> [0..1] </bom:performanceTradeoffs> <bom:ethicalConsiderations > [0..1] <bom:ethicalConsideration > [0..*] <bom:name> xs:string </bom:name> [0..1] <bom:mitigationStrategy> xs:string </bom:mitigationStrategy> [0..1] </bom:ethicalConsideration> </bom:ethicalConsiderations> <bom:fairnessAssessments > [0..1] <bom:fairnessAssessment > [0..*] <bom:groupAtRisk> xs:string </bom:groupAtRisk> [0..1] <bom:benefits> xs:string </bom:benefits> [0..1] <bom:harms> xs:string </bom:harms> [0..1] <bom:mitigationStrategy> xs:string </bom:mitigationStrategy> [0..1] </bom:fairnessAssessment> </bom:fairnessAssessments> </bom:considerations> </...>
<xs:complexType name="modelCardType"> <xs:sequence> <xs:element name="modelParameters" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="approach" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="type" type="bom:machineLearningApproachType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="task" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="architectureFamily" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="modelArchitecture" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="datasets" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:choice minOccurs="0" maxOccurs="unbounded"> <xs:element name="ref" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:union memberTypes="bom:refLinkType bom:bomLinkElementType"/> </xs:simpleType> </xs:element> <xs:element name="dataset" type="bom:componentDataType" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:complexType> </xs:element> <xs:element name="inputs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="input" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="format" type="xs:string" minOccurs="1" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="outputs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="output" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="format" type="xs:string" minOccurs="1" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="quantitativeAnalysis" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="performanceMetrics" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="performanceMetric" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="type" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="slice" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="confidenceInterval" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="lowerBound" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="upperBound" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="graphics" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="collection" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="graphic" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="image" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="considerations" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="users" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="user" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="useCases" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="useCase" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="technicalLimitations" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="technicalLimitation" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="performanceTradeoffs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="performanceTradeoff" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="ethicalConsiderations" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="ethicalConsideration" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="mitigationStrategy" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="fairnessAssessments" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="fairnessAssessment" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="groupAtRisk" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="benefits" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="harms" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="mitigationStrategy" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType>
Complex Type: organizationOrIndividualType
Super-types: | None |
---|---|
Sub-types: | None |
Name | organizationOrIndividualType |
---|---|
Abstract | no |
<...> Start Choice [1] <bom:organization> bom:organizationalEntity </bom:organization> [0..1] <bom:individual> bom:organizationalContact </bom:individual> [0..1] End Choice </...>
<xs:complexType name="organizationOrIndividualType"> <xs:choice> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:complexType>
Complex Type: organizationalContact
Super-types: | None |
---|---|
Sub-types: | None |
Name | organizationalContact |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] Allow any attributes from a namespace other than this schema's namespace (lax validation). > Start Sequence [0..1] <bom:name> xs:normalizedString </bom:name> [0..1] <bom:email> xs:normalizedString </bom:email> [0..1] <bom:phone> xs:normalizedString </bom:phone> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="organizationalContact"> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="email" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="phone" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##other" processContents="lax"/> </xs:complexType>
Complex Type: organizationalEntity
Super-types: | None |
---|---|
Sub-types: | None |
Name | organizationalEntity |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] Allow any attributes from a namespace other than this schema's namespace (lax validation). > Start Sequence [0..1] <bom:name> xs:normalizedString </bom:name> [0..1] <bom:url> xs:anyURI </bom:url> [0..*] <bom:contact> bom:organizationalContact </bom:contact> [0..*] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="organizationalEntity"> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="contact" type="bom:organizationalContact" minOccurs="0" maxOccurs="unbounded"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##other" processContents="lax"/> </xs:complexType>
Complex Type: outputType
Super-types: | None |
---|---|
Sub-types: | None |
Name | outputType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Choice [1] <bom:resource> bom:resourceReferenceType </bom:resource> [1] <bom:environmentVars > [1] Start Sequence [0..*] Start Choice [1] <bom:environmentVar> bom:propertyType </bom:environmentVar> [0..1] <bom:value> xs:string </bom:value> [0..1] End Choice End Sequence </bom:environmentVars> <bom:data> bom:attachedTextType </bom:data> [1] End Choice <bom:type> bom:outputTypeEnum </bom:type> [0..1] <bom:source> bom:resourceReferenceType </bom:source> [0..1] <bom:target> bom:resourceReferenceType </bom:target> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="outputType"> <xs:sequence> <xs:choice> <xs:element name="resource" type="bom:resourceReferenceType" minOccurs="1" maxOccurs="1"/> <xs:element name="environmentVars" minOccurs="1" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <-- maxOccurs="unbounded" NEEDS to be set on the sequence, not the individual elements --> <xs:choice> <xs:element name="environmentVar" type="bom:propertyType" minOccurs="0" maxOccurs="1"/> <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="data" type="bom:attachedTextType" minOccurs="1" maxOccurs="1"/> </xs:choice> <xs:element name="type" type="bom:outputTypeEnum" minOccurs="0" maxOccurs="1"/> <xs:element name="source" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/> <xs:element name="target" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: parameterType
Super-types: | None |
---|---|
Sub-types: | None |
Name | parameterType |
---|---|
Abstract | no |
<xs:complexType name="parameterType"> <xs:sequence> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="dataType" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: parametersType
Super-types: | None |
---|---|
Sub-types: | None |
Name | parametersType |
---|---|
Abstract | no |
<...> <bom:parameter> bom:parameterType </bom:parameter> [0..*] </...>
Complex Type: patchType
Super-types: | None |
---|---|
Sub-types: | None |
Name | patchType |
---|---|
Abstract | no |
<... type="bom:patchClassification" [1] > <bom:diff> bom:diffType </bom:diff> [0..1] <bom:resolves > [0..1] Start Sequence [0..*] <bom:issue> bom:issueType </bom:issue> [1] End Sequence </bom:resolves> Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="patchType"> <xs:sequence> <xs:element name="diff" type="bom:diffType" minOccurs="0" maxOccurs="1"/> <xs:element name="resolves" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="issue" type="bom:issueType"/> </xs:sequence> </xs:complexType> </xs:element> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="type" type="bom:patchClassification" use="required"/> </xs:complexType>
Complex Type: patchesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | patchesType |
---|---|
Abstract | no |
Complex Type: pedigreeType
Super-types: | None |
---|---|
Sub-types: | None |
Name | pedigreeType |
---|---|
Abstract | no |
<...> <bom:ancestors> bom:componentsType </bom:ancestors> [0..1] <bom:descendants> bom:componentsType </bom:descendants> [0..1] <bom:variants> bom:componentsType </bom:variants> [0..1] <bom:commits> bom:commitsType </bom:commits> [0..1] <bom:patches> bom:patchesType </bom:patches> [0..1] <bom:notes> xs:string </bom:notes> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="pedigreeType"> <xs:sequence> <xs:element name="ancestors" type="bom:componentsType" minOccurs="0" maxOccurs="1"/> <xs:element name="descendants" type="bom:componentsType" minOccurs="0" maxOccurs="1"/> <xs:element name="variants" type="bom:componentsType" minOccurs="0" maxOccurs="1"/> <xs:element name="commits" type="bom:commitsType" minOccurs="0" maxOccurs="1"/> <xs:element name="patches" type="bom:patchesType" minOccurs="0" maxOccurs="1"/> <xs:element name="notes" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType>
Complex Type: propertiesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | propertiesType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:property> bom:propertyType </bom:property> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="propertiesType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="property" type="bom:propertyType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: propertyType
Super-types: | xs:normalizedString < propertyType (by extension) |
---|---|
Sub-types: | None |
Name | propertyType |
---|---|
Abstract | no |
Complex Type: ratingType
Super-types: | None |
---|---|
Sub-types: | None |
Name | ratingType |
---|---|
Abstract | no |
<...> <bom:source> bom:vulnerabilitySourceType </bom:source> [0..1] <bom:score> xs:decimal </bom:score> [0..1] <bom:severity> bom:severityType </bom:severity> [0..1] <bom:method> bom:scoreSourceType </bom:method> [0..1] <bom:vector> xs:normalizedString </bom:vector> [0..1] <bom:justification> xs:string </bom:justification> [0..1] </...>
<xs:complexType name="ratingType"> <xs:sequence> <xs:element name="source" type="bom:vulnerabilitySourceType" minOccurs="0" maxOccurs="1"/> <xs:element name="score" type="xs:decimal" minOccurs="0" maxOccurs="1"/> <xs:element name="severity" type="bom:severityType" minOccurs="0" maxOccurs="1"/> <xs:element name="method" type="bom:scoreSourceType" minOccurs="0" maxOccurs="1"/> <xs:element name="vector" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="justification" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType>
Complex Type: releaseNotesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | releaseNotesType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:type> xs:normalizedString </bom:type> [1] <bom:title> xs:string </bom:title> [0..1] <bom:featuredImage> xs:anyURI </bom:featuredImage> [0..1] <bom:socialImage> xs:anyURI </bom:socialImage> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:timestamp> xs:dateTime </bom:timestamp> [0..1] <bom:aliases > [0..1] Start Sequence [0..*] <bom:alias> xs:normalizedString </bom:alias> [1] End Sequence </bom:aliases> <bom:tags > [0..1] Start Sequence [0..*] <bom:tag> xs:normalizedString </bom:tag> [1] End Sequence </bom:tags> <bom:resolves > [0..1] Start Sequence [0..*] <bom:issue> bom:issueType </bom:issue> [1] End Sequence </bom:resolves> <bom:notes > [0..1] Start Sequence [0..*] <bom:note > [1] Start Sequence [0..*] <bom:locale> bom:localeType </bom:locale> [0..1] <bom:text> bom:attachedTextType </bom:text> [1] End Sequence </bom:note> End Sequence </bom:notes> <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="releaseNotesType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="type" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/> <xs:element name="title" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="featuredImage" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="socialImage" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="timestamp" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="aliases" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="alias" type="xs:normalizedString"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="tags" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="tag" type="xs:normalizedString"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="resolves" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="issue" type="bom:issueType"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="notes" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="note"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="locale" type="bom:localeType" minOccurs="0" maxOccurs="1"/> <xs:element name="text" type="bom:attachedTextType" minOccurs="1" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: resourceReferenceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | resourceReferenceType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Choice [1] <bom:ref> union of: [ bom:refLinkType,bom:bomLinkElementType ] </bom:ref> [1] <bom:externalReference> bom:externalReference </bom:externalReference> [1] End Choice Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="resourceReferenceType"> <xs:sequence> <xs:choice> <xs:element name="ref" minOccurs="1" maxOccurs="1"> <xs:simpleType> <xs:union memberTypes="bom:refLinkType bom:bomLinkElementType"/> </xs:simpleType> </xs:element> <xs:element name="externalReference" type="bom:externalReference" minOccurs="1" maxOccurs="1"/> </xs:choice> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: resourceReferencesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | resourceReferencesType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > <bom:resourceReference> bom:resourceReferenceType </bom:resourceReference> [0..*] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="resourceReferencesType"> <xs:sequence> <xs:element name="resourceReference" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="unbounded"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: service
Super-types: | None |
---|---|
Sub-types: | None |
Name | service |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] Allow any attributes from any namespace (lax validation). > <bom:provider> bom:organizationalEntity </bom:provider> [0..1] <bom:group> xs:normalizedString </bom:group> [0..1] <bom:name> xs:normalizedString </bom:name> [1] <bom:version> xs:normalizedString </bom:version> [0..1] <bom:description> xs:normalizedString </bom:description> [0..1] <bom:endpoints > [0..1] Start Sequence [0..*] <bom:endpoint> xs:anyURI </bom:endpoint> [1] End Sequence </bom:endpoints> <bom:authenticated> xs:boolean </bom:authenticated> [0..1] <bom:x-trust-boundary> xs:boolean </bom:x-trust-boundary> [0..1] <bom:trustZone> xs:string </bom:trustZone> [0..1] <bom:data > [0..1] Start Choice [1] Start Sequence [0..*] <bom:classification> bom:dataClassificationType </bom:classification> [1] End Sequence <bom:dataflow name="xs:string" [0..1] description="xs:string" [0..1] Allow any attributes from any namespace (lax validation). > [0..*] <bom:classification> bom:dataClassificationType </bom:classification> [0..1] <bom:governance> bom:dataGovernance </bom:governance> [0..1] <bom:source > [0..1] Start Sequence [0..*] <bom:url> union of: [ xs:anyURI,bom:bomLinkElementType ] </bom:url> [1] End Sequence </bom:source> <bom:destination > [0..1] Start Sequence [0..*] <bom:url> union of: [ xs:anyURI,bom:bomLinkElementType ] </bom:url> [1] End Sequence </bom:destination> </bom:dataflow> End Choice </bom:data> <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1] <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] <bom:services > [0..1] Start Sequence [0..*] <bom:service> bom:service </bom:service> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:services> <bom:releaseNotes> bom:releaseNotesType </bom:releaseNotes> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="service"> <xs:sequence> <xs:element name="provider" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="group" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="name" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/> <xs:element name="version" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="endpoints" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="endpoint" type="xs:anyURI" minOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="authenticated" type="xs:boolean" minOccurs="0" maxOccurs="1"/> <xs:element name="x-trust-boundary" type="xs:boolean" minOccurs="0" maxOccurs="1"/> <xs:element name="trustZone" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="data" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:choice> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="classification" type="bom:dataClassificationType"/> </xs:sequence> <xs:element name="dataflow" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="classification" type="bom:dataClassificationType" minOccurs="0" maxOccurs="1"/> <xs:element name="governance" type="bom:dataGovernance" minOccurs="0" maxOccurs="1"/> <xs:element name="source" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="url"> <xs:simpleType> <xs:union memberTypes="xs:anyURI bom:bomLinkElementType"/> </xs:simpleType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="destination" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="url"> <xs:simpleType> <xs:union memberTypes="xs:anyURI bom:bomLinkElementType"/> </xs:simpleType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> <xs:attribute name="name" type="xs:string" use="optional"/> <xs:attribute name="description" type="xs:string" use="optional"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType> </xs:element> </xs:choice> </xs:complexType> </xs:element> <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/> <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:element name="services" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="service" type="bom:service"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="releaseNotes" type="bom:releaseNotesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: servicesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | servicesType |
---|---|
Abstract | no |
<xs:complexType name="servicesType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="service" type="bom:service"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: stepType
Super-types: | None |
---|---|
Sub-types: | None |
Name | stepType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > <bom:name> xs:string </bom:name> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:commands > [0..1] <bom:command > [0..*] <bom:executed> xs:string </bom:executed> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] </bom:command> </bom:commands> <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="stepType"> <xs:sequence> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="commands" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="command" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="executed" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: swidType
Super-types: | None |
---|---|
Sub-types: | None |
Name | swidType |
---|---|
Abstract | no |
<... tagId="xs:string" [1] name="xs:string" [1] version="xs:string" [0..1] tagVersion="xs:integer" [0..1] patch="xs:boolean" [0..1] > <bom:text> bom:attachedTextType </bom:text> [0..1] <bom:url> xs:anyURI </bom:url> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="swidType"> <xs:sequence> <xs:element name="text" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="tagId" type="xs:string" use="required"/> <xs:attribute name="name" type="xs:string" use="required"/> <xs:attribute name="version" type="xs:string" use="optional" default="0.0"/> <xs:attribute name="tagVersion" type="xs:integer" use="optional" default="0"/> <xs:attribute name="patch" type="xs:boolean" use="optional" default="false"/> </xs:complexType>
Complex Type: taskType
Super-types: | None |
---|---|
Sub-types: | None |
Name | taskType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [1] Allow any attributes from any namespace (lax validation). > <bom:uid> xs:string </bom:uid> [1] <bom:name> xs:string </bom:name> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:resourceReferences> bom:resourceReferencesType </bom:resourceReferences> [0..1] <bom:taskTypes > [1] <bom:taskType> bom:taskTypeEnum </bom:taskType> [0..*] </bom:taskTypes> <bom:trigger> bom:triggerType </bom:trigger> [0..1] <bom:steps > [0..1] <bom:step> bom:stepType </bom:step> [0..*] </bom:steps> <bom:inputs > [0..1] <bom:input> bom:inputType </bom:input> [0..*] </bom:inputs> <bom:outputs > [0..1] <bom:output> bom:outputType </bom:output> [0..*] </bom:outputs> <bom:timeStart> xs:dateTime </bom:timeStart> [0..1] <bom:timeEnd> xs:dateTime </bom:timeEnd> [0..1] <bom:workspaces> bom:workspacesType </bom:workspaces> [0..1] <bom:runtimeTopology> bom:dependenciesType </bom:runtimeTopology> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="taskType"> <xs:sequence> <xs:element name="uid" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="resourceReferences" type="bom:resourceReferencesType" minOccurs="0" maxOccurs="1"/> <xs:element name="taskTypes" minOccurs="1" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="taskType" type="bom:taskTypeEnum" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="trigger" type="bom:triggerType" minOccurs="0" maxOccurs="1"/> <xs:element name="steps" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="step" type="bom:stepType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="inputs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="input" type="bom:inputType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="outputs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="output" type="bom:outputType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="timeStart" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="timeEnd" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="workspaces" type="bom:workspacesType" minOccurs="0" maxOccurs="1"/> <xs:element name="runtimeTopology" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType" use="required"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: tasksType
Super-types: | None |
---|---|
Sub-types: | None |
Name | tasksType |
---|---|
Abstract | no |
<xs:complexType name="tasksType"> <xs:sequence> <xs:element name="task" type="bom:taskType" minOccurs="0" maxOccurs="unbounded"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: toolType
Super-types: | None |
---|---|
Sub-types: | None |
Name | toolType |
---|---|
Abstract | no |
<... Allow any attributes from a namespace other than this schema's namespace (lax validation). > Start Sequence [0..1] <bom:vendor> xs:normalizedString </bom:vendor> [0..1] <bom:name> xs:normalizedString </bom:name> [0..1] <bom:version> xs:normalizedString </bom:version> [0..1] <bom:hashes > [0..1] Start Sequence [0..*] <bom:hash> bom:hashType </bom:hash> [1] End Sequence </bom:hashes> <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="toolType"> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="vendor" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="version" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="hashes" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="hash" type="bom:hashType"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="lax"/> </xs:complexType>
Complex Type: triggerType
Super-types: | None |
---|---|
Sub-types: | None |
Name | triggerType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [1] Allow any attributes from any namespace (lax validation). > <bom:uid> xs:string </bom:uid> [1] <bom:name> xs:string </bom:name> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:resourceReferences> bom:resourceReferencesType </bom:resourceReferences> [0..1] <bom:type> bom:triggerTypeType </bom:type> [1] <bom:event> bom:eventType </bom:event> [0..1] <bom:conditions > [0..1] <bom:condition > [0..*] <bom:description> xs:string </bom:description> [0..1] <bom:expression> xs:string </bom:expression> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] </bom:condition> </bom:conditions> <bom:timeActivated> xs:dateTime </bom:timeActivated> [0..1] <bom:inputs > [0..1] <bom:input> bom:inputType </bom:input> [0..*] </bom:inputs> <bom:outputs > [0..1] <bom:output> bom:outputType </bom:output> [0..*] </bom:outputs> <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="triggerType"> <xs:sequence> <xs:element name="uid" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="resourceReferences" type="bom:resourceReferencesType" minOccurs="0" maxOccurs="1"/> <xs:element name="type" type="bom:triggerTypeType" minOccurs="1" maxOccurs="1"/> <xs:element name="event" type="bom:eventType" minOccurs="0" maxOccurs="1"/> <xs:element name="conditions" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="condition" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="expression" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="timeActivated" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="inputs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="input" type="bom:inputType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="outputs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="output" type="bom:outputType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType" use="required"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: volumeType
Super-types: | None |
---|---|
Sub-types: | None |
Name | volumeType |
---|---|
Abstract | no |
<...> <bom:uid> xs:string </bom:uid> [0..1] <bom:name> xs:string </bom:name> [0..1] <bom:mode> bom:volumeModeEnum </bom:mode> [0..1] <bom:path> xs:string </bom:path> [0..1] <bom:sizeAllocated> xs:string </bom:sizeAllocated> [0..1] <bom:persistent> xs:boolean </bom:persistent> [0..1] <bom:remote> xs:boolean </bom:remote> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] </...>
<xs:complexType name="volumeType"> <xs:sequence> <xs:element name="uid" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="mode" type="bom:volumeModeEnum" minOccurs="0" maxOccurs="1" default="filesystem"/> <xs:element name="path" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="sizeAllocated" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="persistent" type="xs:boolean" minOccurs="0" maxOccurs="1"/> <xs:element name="remote" type="xs:boolean" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType>
Complex Type: vulnerabilitiesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | vulnerabilitiesType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:vulnerability> bom:vulnerabilityType </bom:vulnerability> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="vulnerabilitiesType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="vulnerability" type="bom:vulnerabilityType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: vulnerabilitySourceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | vulnerabilitySourceType |
---|---|
Abstract | no |
Complex Type: vulnerabilityType
Super-types: | None |
---|---|
Sub-types: | None |
Name | vulnerabilityType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [0..1] > Start Sequence [0..1] <bom:id> xs:normalizedString </bom:id> [0..1] <bom:source> bom:vulnerabilitySourceType </bom:source> [0..1] <bom:references > [0..1] Start Sequence [0..*] <bom:reference > [1] <bom:id> xs:normalizedString </bom:id> [1] <bom:source> bom:vulnerabilitySourceType </bom:source> [1] </bom:reference> Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:references> <bom:ratings > [0..1] <bom:rating> bom:ratingType </bom:rating> [0..*] </bom:ratings> <bom:cwes > [0..1] <bom:cwe> xs:integer </bom:cwe> [0..*] </bom:cwes> <bom:description> xs:string </bom:description> [0..1] <bom:detail> xs:string </bom:detail> [0..1] <bom:recommendation> xs:string </bom:recommendation> [0..1] <bom:workaround> xs:string </bom:workaround> [0..1] <bom:proofOfConcept > [0..1] <bom:reproductionSteps> xs:string </bom:reproductionSteps> [0..1] <bom:environment> xs:string </bom:environment> [0..1] <bom:supportingMaterial > [0..1] <bom:attachment> bom:attachedTextType </bom:attachment> [0..*] </bom:supportingMaterial> </bom:proofOfConcept> <bom:advisories > [0..1] <bom:advisory> bom:advisoryType </bom:advisory> [0..*] </bom:advisories> <bom:created> xs:dateTime </bom:created> [0..1] <bom:published> xs:dateTime </bom:published> [0..1] <bom:updated> xs:dateTime </bom:updated> [0..1] <bom:rejected> xs:dateTime </bom:rejected> [0..1] <bom:credits > [0..1] <bom:organizations > [0..1] Start Sequence [0..*] <bom:organization> bom:organizationalEntity </bom:organization> [1] End Sequence </bom:organizations> <bom:individuals > [0..1] Start Sequence [0..*] <bom:individual> bom:organizationalContact </bom:individual> [1] End Sequence </bom:individuals> </bom:credits> <bom:tools > [0..1] Start Choice [1] Start Sequence [0..*] <bom:tool> bom:toolType </bom:tool> [0..1] End Sequence Start Sequence [0..1] <bom:components> bom:componentsType </bom:components> [0..1] <bom:services> bom:servicesType </bom:services> [0..1] End Sequence End Choice </bom:tools> <bom:analysis > [0..1] Start Sequence [0..1] <bom:state> bom:impactAnalysisStateType </bom:state> [0..1] <bom:justification> bom:impactAnalysisJustificationType </bom:justification> [0..1] <bom:responses > [0..1] Start Sequence [0..*] <bom:response> bom:impactAnalysisResponsesType </bom:response> [1] End Sequence </bom:responses> <bom:detail> xs:string </bom:detail> [0..1] <bom:firstIssued> xs:dateTime </bom:firstIssued> [0..1] <bom:lastUpdated> xs:dateTime </bom:lastUpdated> [0..1] End Sequence </bom:analysis> <bom:affects > [0..1] Start Sequence [0..*] <bom:target > [1] Start Sequence [0..1] <bom:ref> union of: [ bom:refLinkType,bom:bomLinkElementType ] </bom:ref> [1] <bom:versions > [0..1] Start Sequence [0..*] <bom:version > [1] Start Sequence [0..1] Start Choice [1] <bom:version> xs:normalizedString </bom:version> [1] <bom:range> xs:normalizedString </bom:range> [1] End Choice <bom:status> bom:impactAnalysisAffectedStatusType </bom:status> [0..1] End Sequence </bom:version> End Sequence </bom:versions> End Sequence </bom:target> End Sequence </bom:affects> <bom:properties> bom:propertiesType </bom:properties> [0..1] End Sequence </...>
<xs:complexType name="vulnerabilityType"> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="id" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="source" type="bom:vulnerabilitySourceType" minOccurs="0" maxOccurs="1"/> <xs:element name="references" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="reference"> <xs:complexType> <xs:sequence minOccurs="1" maxOccurs="1"> <xs:element name="id" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/> <xs:element name="source" type="bom:vulnerabilitySourceType" minOccurs="1" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="ratings" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="rating" type="bom:ratingType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="cwes" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="cwe" type="xs:integer" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="detail" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="recommendation" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="workaround" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="proofOfConcept" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="reproductionSteps" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="environment" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="supportingMaterial" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="attachment" type="bom:attachedTextType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="advisories" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="advisory" type="bom:advisoryType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="created" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="published" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="updated" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="rejected" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="credits" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="organizations" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="organization" type="bom:organizationalEntity"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="individuals" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="individual" type="bom:organizationalContact"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="tools" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:choice> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="tool" type="bom:toolType" minOccurs="0"/> </xs:sequence> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/> <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:choice> </xs:complexType> </xs:element> <xs:element name="analysis" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="state" type="bom:impactAnalysisStateType" minOccurs="0" maxOccurs="1"/> <xs:element name="justification" type="bom:impactAnalysisJustificationType" minOccurs="0" maxOccurs="1"/> <xs:element name="responses" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="response" type="bom:impactAnalysisResponsesType"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="detail" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="firstIssued" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="lastUpdated" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="affects" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="target"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:element name="ref" minOccurs="1" maxOccurs="1"> <xs:simpleType> <xs:union memberTypes="bom:refLinkType bom:bomLinkElementType"/> </xs:simpleType> </xs:element> <xs:element name="versions" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="version"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="1"> <xs:choice> <xs:element name="version" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/> <xs:element name="range" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/> </xs:choice> <xs:element name="status" type="bom:impactAnalysisAffectedStatusType" minOccurs="0" maxOccurs="1" default="affected"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType>
Complex Type: workflowType
Super-types: | None |
---|---|
Sub-types: | None |
Name | workflowType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [1] Allow any attributes from any namespace (lax validation). > <bom:uid> xs:string </bom:uid> [1] <bom:name> xs:string </bom:name> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:resourceReferences> bom:resourceReferencesType </bom:resourceReferences> [0..1] <bom:tasks> bom:tasksType </bom:tasks> [0..1] <bom:taskDependencies> bom:dependenciesType </bom:taskDependencies> [0..1] <bom:taskTypes > [1] <bom:taskType> bom:taskTypeEnum </bom:taskType> [0..*] </bom:taskTypes> <bom:trigger> bom:triggerType </bom:trigger> [0..1] <bom:steps > [0..1] <bom:step> bom:stepType </bom:step> [0..*] </bom:steps> <bom:inputs > [0..1] <bom:input> bom:inputType </bom:input> [0..*] </bom:inputs> <bom:outputs > [0..1] <bom:output> bom:outputType </bom:output> [0..*] </bom:outputs> <bom:timeStart> xs:dateTime </bom:timeStart> [0..1] <bom:timeEnd> xs:dateTime </bom:timeEnd> [0..1] <bom:workspaces> bom:workspacesType </bom:workspaces> [0..1] <bom:runtimeTopology> bom:dependenciesType </bom:runtimeTopology> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="workflowType"> <xs:sequence> <xs:element name="uid" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="resourceReferences" type="bom:resourceReferencesType" minOccurs="0" maxOccurs="1"/> <xs:element name="tasks" type="bom:tasksType" minOccurs="0" maxOccurs="1"/> <xs:element name="taskDependencies" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/> <xs:element name="taskTypes" minOccurs="1" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="taskType" type="bom:taskTypeEnum" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="trigger" type="bom:triggerType" minOccurs="0" maxOccurs="1"/> <xs:element name="steps" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="step" type="bom:stepType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="inputs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="input" type="bom:inputType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="outputs" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="output" type="bom:outputType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="timeStart" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="timeEnd" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="workspaces" type="bom:workspacesType" minOccurs="0" maxOccurs="1"/> <xs:element name="runtimeTopology" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType" use="required"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: workflowsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | workflowsType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > <bom:workflow> bom:workflowType </bom:workflow> [0..*] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="workflowsType"> <xs:sequence> <xs:element name="workflow" type="bom:workflowType" minOccurs="0" maxOccurs="unbounded"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: workspaceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | workspaceType |
---|---|
Abstract | no |
<... bom-ref="bom:refType" [1] Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:uid> xs:string </bom:uid> [1] <bom:name> xs:string </bom:name> [0..1] <bom:aliases > [0..1] <bom:alias> xs:string </bom:alias> [0..*] </bom:aliases> <bom:description> xs:string </bom:description> [0..1] <bom:resourceReferences> bom:resourceReferencesType </bom:resourceReferences> [0..1] <bom:accessMode> bom:accessModeEnum </bom:accessMode> [0..1] <bom:mountPath> xs:string </bom:mountPath> [0..1] <bom:managedDataType> xs:string </bom:managedDataType> [0..1] <bom:volumeRequest> xs:string </bom:volumeRequest> [0..1] <bom:volume> bom:volumeType </bom:volume> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="workspaceType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="uid" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="aliases" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="alias" type="xs:string" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="resourceReferences" type="bom:resourceReferencesType" minOccurs="0" maxOccurs="1"/> <xs:element name="accessMode" type="bom:accessModeEnum" minOccurs="0" maxOccurs="1"/> <xs:element name="mountPath" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="managedDataType" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="volumeRequest" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="volume" type="bom:volumeType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType" use="required"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: workspacesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | workspacesType |
---|---|
Abstract | no |
<... Allow any attributes from any namespace (lax validation). > <bom:workspace> bom:workspaceType </bom:workspace> [0..*] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="workspacesType"> <xs:sequence> <xs:element name="workspace" type="bom:workspaceType" minOccurs="0" maxOccurs="unbounded"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Simple Type: accessModeEnum
Super-types: | xs:string < accessModeEnum (by restriction) |
---|---|
Sub-types: | None |
Name | accessModeEnum |
---|---|
Content |
|
Simple Type: aggregateType
Super-types: | xs:string < aggregateType (by restriction) |
---|---|
Sub-types: | None |
Name | aggregateType |
---|---|
Content |
|
<xs:simpleType name="aggregateType"> <xs:restriction base="xs:string"> <xs:enumeration value="complete"/> <xs:enumeration value="incomplete"/> <xs:enumeration value="incomplete_first_party_only"/> <xs:enumeration value="incomplete_first_party_proprietary_only"/> <xs:enumeration value="incomplete_first_party_opensource_only"/> <xs:enumeration value="incomplete_third_party_only"/> <xs:enumeration value="incomplete_third_party_proprietary_only"/> <xs:enumeration value="incomplete_third_party_opensource_only"/> <xs:enumeration value="unknown"/> <xs:enumeration value="not_specified"/> </xs:restriction> </xs:simpleType>
Simple Type: bomLinkDocumentType
Super-types: | xs:anyURI < bomLinkDocumentType (by restriction) |
---|---|
Sub-types: | None |
Name | bomLinkDocumentType |
---|---|
Content |
|
Simple Type: bomLinkElementType
Super-types: | xs:anyURI < bomLinkElementType (by restriction) |
---|---|
Sub-types: | None |
Name | bomLinkElementType |
---|---|
Content |
|
Simple Type: bomLinkType
Super-types: | None |
---|---|
Sub-types: | None |
Name | bomLinkType |
---|---|
Content |
|
<xs:simpleType name="bomLinkType"> <xs:union memberTypes="bom:bomLinkDocumentType bom:bomLinkElementType"/> </xs:simpleType>
Simple Type: classification
Super-types: | xs:string < classification (by restriction) |
---|---|
Sub-types: | None |
Name | classification |
---|---|
Content |
|
<xs:simpleType name="classification"> <xs:restriction base="xs:string"> <xs:enumeration value="application"/> <xs:enumeration value="framework"/> <xs:enumeration value="library"/> <xs:enumeration value="container"/> <xs:enumeration value="platform"/> <xs:enumeration value="operating-system"/> <xs:enumeration value="device"/> <xs:enumeration value="device-driver"/> <xs:enumeration value="firmware"/> <xs:enumeration value="file"/> <xs:enumeration value="machine-learning-model"/> <xs:enumeration value="data"/> </xs:restriction> </xs:simpleType>
Simple Type: componentDataTypeEnumeration
Super-types: | xs:string < componentDataTypeEnumeration (by restriction) |
---|---|
Sub-types: | None |
Name | componentDataTypeEnumeration |
---|---|
Content |
|
<xs:simpleType name="componentDataTypeEnumeration"> <xs:restriction base="xs:string"> <xs:enumeration value="source-code"/> <xs:enumeration value="configuration"/> <xs:enumeration value="dataset"/> <xs:enumeration value="definition"/> <xs:enumeration value="other"/> </xs:restriction> </xs:simpleType>
Simple Type: cpe
Super-types: | xs:string < cpe (by restriction) |
---|---|
Sub-types: | None |
Name | cpe |
---|---|
Content |
|
<xs:simpleType name="cpe"> <xs:restriction base="xs:string"> <xs:pattern value="([c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\._\-~%]*){0,6})|(cpe:2\.3:[aho\*\-](:(((\?*|\*?)([a-zA-Z0-9\-\._]|(\\[\\\*\?!"#$$%&'\(\)\+,/:;<=>@\[\]\^`\{\|}~]))+(\?*|\*?))|[\*\-])){5}(:(([a-zA-Z]{2,3}(-([a-zA-Z]{2}|[0-9]{3}))?)|[\*\-]))(:(((\?*|\*?)([a-zA-Z0-9\-\._]|(\\[\\\*\?!"#$$%&'\(\)\+,/:;<=>@\[\]\^`\{\|}~]))+(\?*|\*?))|[\*\-])){4})"/> </xs:restriction> </xs:simpleType>
Simple Type: dataFlowType
Super-types: | xs:string < dataFlowType (by restriction) |
---|---|
Sub-types: | None |
Name | dataFlowType |
---|---|
Content |
|
Simple Type: decimalPercentType
Super-types: | xs:decimal < decimalPercentType (by restriction) |
---|---|
Sub-types: | None |
Name | decimalPercentType |
---|---|
Content |
|
Simple Type: encoding
Super-types: | xs:string < encoding (by restriction) |
---|---|
Sub-types: | None |
Name | encoding |
---|---|
Content |
|
Simple Type: evidenceTechnique
Super-types: | xs:string < evidenceTechnique (by restriction) |
---|---|
Sub-types: | None |
Name | evidenceTechnique |
---|---|
Content |
|
<xs:simpleType name="evidenceTechnique"> <xs:restriction base="xs:string"> <xs:enumeration value="source-code-analysis"/> <xs:enumeration value="binary-analysis"/> <xs:enumeration value="manifest-analysis"/> <xs:enumeration value="ast-fingerprint"/> <xs:enumeration value="hash-comparison"/> <xs:enumeration value="instrumentation"/> <xs:enumeration value="dynamic-analysis"/> <xs:enumeration value="filename"/> <xs:enumeration value="attestation"/> <xs:enumeration value="other"/> </xs:restriction> </xs:simpleType>
Simple Type: externalReferenceType
Super-types: | xs:string < externalReferenceType (by restriction) |
---|---|
Sub-types: | None |
Name | externalReferenceType |
---|---|
Content |
|
<xs:simpleType name="externalReferenceType"> <xs:restriction base="xs:string"> <xs:enumeration value="vcs"/> <xs:enumeration value="issue-tracker"/> <xs:enumeration value="website"/> <xs:enumeration value="advisories"/> <xs:enumeration value="bom"/> <xs:enumeration value="mailing-list"/> <xs:enumeration value="social"/> <xs:enumeration value="chat"/> <xs:enumeration value="documentation"/> <xs:enumeration value="support"/> <xs:enumeration value="distribution"/> <xs:enumeration value="distribution-intake"/> <xs:enumeration value="license"/> <xs:enumeration value="build-meta"/> <xs:enumeration value="build-system"/> <xs:enumeration value="release-notes"/> <xs:enumeration value="security-contact"/> <xs:enumeration value="model-card"/> <xs:enumeration value="log"/> <xs:enumeration value="configuration"/> <xs:enumeration value="evidence"/> <xs:enumeration value="formulation"/> <xs:enumeration value="attestation"/> <xs:enumeration value="threat-model"/> <xs:enumeration value="adversary-model"/> <xs:enumeration value="risk-assessment"/> <xs:enumeration value="vulnerability-assertion"/> <xs:enumeration value="exploitability-statement"/> <xs:enumeration value="pentest-report"/> <xs:enumeration value="static-analysis-report"/> <xs:enumeration value="dynamic-analysis-report"/> <xs:enumeration value="runtime-analysis-report"/> <xs:enumeration value="component-analysis-report"/> <xs:enumeration value="maturity-report"/> <xs:enumeration value="certification-report"/> <xs:enumeration value="quality-metrics"/> <xs:enumeration value="codified-infrastructure"/> <xs:enumeration value="poam"/> <xs:enumeration value="other"/> </xs:restriction> </xs:simpleType>
Simple Type: hashAlg
Super-types: | xs:string < hashAlg (by restriction) |
---|---|
Sub-types: | None |
Name | hashAlg |
---|---|
Content |
|
<xs:simpleType name="hashAlg"> <xs:restriction base="xs:string"> <xs:enumeration value="MD5"/> <xs:enumeration value="SHA-1"/> <xs:enumeration value="SHA-256"/> <xs:enumeration value="SHA-384"/> <xs:enumeration value="SHA-512"/> <xs:enumeration value="SHA3-256"/> <xs:enumeration value="SHA3-384"/> <xs:enumeration value="SHA3-512"/> <xs:enumeration value="BLAKE2b-256"/> <xs:enumeration value="BLAKE2b-384"/> <xs:enumeration value="BLAKE2b-512"/> <xs:enumeration value="BLAKE3"/> </xs:restriction> </xs:simpleType>
Simple Type: hashValue
Name | hashValue |
---|---|
Content |
|
Simple Type: identityFieldType
Super-types: | xs:string < identityFieldType (by restriction) |
---|---|
Sub-types: | None |
Name | identityFieldType |
---|---|
Content |
|
<xs:simpleType name="identityFieldType"> <xs:restriction base="xs:string"> <xs:enumeration value="group"/> <xs:enumeration value="name"/> <xs:enumeration value="version"/> <xs:enumeration value="purl"/> <xs:enumeration value="cpe"/> <xs:enumeration value="swid"/> <xs:enumeration value="hash"/> </xs:restriction> </xs:simpleType>
Simple Type: impactAnalysisAffectedStatusType
Super-types: | xs:string < impactAnalysisAffectedStatusType (by restriction) |
---|---|
Sub-types: | None |
Name | impactAnalysisAffectedStatusType |
---|---|
Content |
|
Prohibited Derivations | restriction |
Simple Type: impactAnalysisJustificationType
Super-types: | xs:string < impactAnalysisJustificationType (by restriction) |
---|---|
Sub-types: | None |
Name | impactAnalysisJustificationType |
---|---|
Content |
|
Prohibited Derivations | restriction |
<xs:simpleType name="impactAnalysisJustificationType" final="restriction"> <xs:restriction base="xs:string"> <xs:enumeration value="code_not_present"/> <xs:enumeration value="code_not_reachable"/> <xs:enumeration value="requires_configuration"/> <xs:enumeration value="requires_dependency"/> <xs:enumeration value="requires_environment"/> <xs:enumeration value="protected_by_compiler"/> <xs:enumeration value="protected_at_runtime"/> <xs:enumeration value="protected_at_perimeter"/> <xs:enumeration value="protected_by_mitigating_control"/> </xs:restriction> </xs:simpleType>
Simple Type: impactAnalysisResponsesType
Super-types: | xs:string < impactAnalysisResponsesType (by restriction) |
---|---|
Sub-types: | None |
Name | impactAnalysisResponsesType |
---|---|
Content |
|
Prohibited Derivations | restriction |
<xs:simpleType name="impactAnalysisResponsesType" final="restriction"> <xs:restriction base="xs:string"> <xs:enumeration value="can_not_fix"/> <xs:enumeration value="will_not_fix"/> <xs:enumeration value="update"/> <xs:enumeration value="rollback"/> <xs:enumeration value="workaround_available"/> </xs:restriction> </xs:simpleType>
Simple Type: impactAnalysisStateType
Super-types: | xs:string < impactAnalysisStateType (by restriction) |
---|---|
Sub-types: | None |
Name | impactAnalysisStateType |
---|---|
Content |
|
Prohibited Derivations | restriction |
<xs:simpleType name="impactAnalysisStateType" final="restriction"> <xs:restriction base="xs:string"> <xs:enumeration value="resolved"/> <xs:enumeration value="resolved_with_pedigree"/> <xs:enumeration value="exploitable"/> <xs:enumeration value="in_triage"/> <xs:enumeration value="false_positive"/> <xs:enumeration value="not_affected"/> </xs:restriction> </xs:simpleType>
Simple Type: issueClassification
Super-types: | xs:string < issueClassification (by restriction) |
---|---|
Sub-types: | None |
Name | issueClassification |
---|---|
Content |
|
Simple Type: licenseTypeEnum
Super-types: | xs:string < licenseTypeEnum (by restriction) |
---|---|
Sub-types: | None |
Name | licenseTypeEnum |
---|---|
Content |
|
<xs:simpleType name="licenseTypeEnum"> <xs:restriction base="xs:string"> <xs:enumeration value="academic"/> <xs:enumeration value="appliance"/> <xs:enumeration value="client-access"/> <xs:enumeration value="concurrent-user"/> <xs:enumeration value="core-points"/> <xs:enumeration value="custom-metric"/> <xs:enumeration value="device"/> <xs:enumeration value="evaluation"/> <xs:enumeration value="named-user"/> <xs:enumeration value="node-locked"/> <xs:enumeration value="oem"/> <xs:enumeration value="perpetual"/> <xs:enumeration value="processor-points"/> <xs:enumeration value="subscription"/> <xs:enumeration value="user"/> <xs:enumeration value="other"/> </xs:restriction> </xs:simpleType>
Simple Type: lifecyclePhaseType
Super-types: | xs:string < lifecyclePhaseType (by restriction) |
---|---|
Sub-types: | None |
Name | lifecyclePhaseType |
---|---|
Content |
|
<xs:simpleType name="lifecyclePhaseType"> <xs:restriction base="xs:string"> <xs:enumeration value="design"/> <xs:enumeration value="pre-build"/> <xs:enumeration value="build"/> <xs:enumeration value="post-build"/> <xs:enumeration value="operations"/> <xs:enumeration value="discovery"/> <xs:enumeration value="decommission"/> </xs:restriction> </xs:simpleType>
Simple Type: localeType
Super-types: | xs:string < localeType (by restriction) |
---|---|
Sub-types: | None |
Name | localeType |
---|---|
Content |
|
Simple Type: machineLearningApproachType
Super-types: | xs:string < machineLearningApproachType (by restriction) |
---|---|
Sub-types: | None |
Name | machineLearningApproachType |
---|---|
Content |
|
<xs:simpleType name="machineLearningApproachType"> <xs:restriction base="xs:string"> <xs:enumeration value="supervised"/> <xs:enumeration value="unsupervised"/> <xs:enumeration value="reinforcement-learning"/> <xs:enumeration value="semi-supervised"/> <xs:enumeration value="self-supervised"/> </xs:restriction> </xs:simpleType>
Simple Type: mimeType
Super-types: | xs:token < mimeType (by restriction) |
---|---|
Sub-types: | None |
Name | mimeType |
---|---|
Content |
|
Simple Type: outputTypeEnum
Super-types: | xs:string < outputTypeEnum (by restriction) |
---|---|
Sub-types: | None |
Name | outputTypeEnum |
---|---|
Content |
|
<xs:simpleType name="outputTypeEnum"> <xs:restriction base="xs:string"> <xs:enumeration value="artifact"/> <xs:enumeration value="attestation"/> <xs:enumeration value="log"/> <xs:enumeration value="evidence"/> <xs:enumeration value="metrics"/> <xs:enumeration value="other"/> </xs:restriction> </xs:simpleType>
Simple Type: patchClassification
Super-types: | xs:string < patchClassification (by restriction) |
---|---|
Sub-types: | None |
Name | patchClassification |
---|---|
Content |
|
Simple Type: refLinkType
Name | refLinkType |
---|---|
Content |
|
Simple Type: refType
Super-types: | xs:string < refType (by restriction) |
---|---|
Sub-types: |
|
Name | refType |
---|---|
Content |
|
Simple Type: scope
Super-types: | xs:string < scope (by restriction) |
---|---|
Sub-types: | None |
Name | scope |
---|---|
Content |
|
Simple Type: scoreSourceType
Super-types: | xs:string < scoreSourceType (by restriction) |
---|---|
Sub-types: | None |
Name | scoreSourceType |
---|---|
Content |
|
Prohibited Derivations | restriction |
<xs:simpleType name="scoreSourceType" final="restriction"> <xs:restriction base="xs:string"> <xs:enumeration value="CVSSv2"/> <xs:enumeration value="CVSSv3"/> <xs:enumeration value="CVSSv31"/> <xs:enumeration value="CVSSv4"/> <xs:enumeration value="OWASP"/> <xs:enumeration value="SSVC"/> <xs:enumeration value="other"/> </xs:restriction> </xs:simpleType>
Simple Type: severityType
Super-types: | xs:string < severityType (by restriction) |
---|---|
Sub-types: | None |
Name | severityType |
---|---|
Content |
|
Prohibited Derivations | restriction |
<xs:simpleType name="severityType" final="restriction"> <xs:restriction base="xs:string"> <xs:enumeration value="critical"/> <xs:enumeration value="high"/> <xs:enumeration value="medium"/> <xs:enumeration value="low"/> <xs:enumeration value="info"/> <xs:enumeration value="none"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType>
Simple Type: taskTypeEnum
Super-types: | xs:string < taskTypeEnum (by restriction) |
---|---|
Sub-types: | None |
Name | taskTypeEnum |
---|---|
Content |
|
<xs:simpleType name="taskTypeEnum"> <xs:restriction base="xs:string"> <xs:enumeration value="copy"/> <xs:enumeration value="clone"/> <xs:enumeration value="lint"/> <xs:enumeration value="scan"/> <xs:enumeration value="merge"/> <xs:enumeration value="build"/> <xs:enumeration value="test"/> <xs:enumeration value="deliver"/> <xs:enumeration value="deploy"/> <xs:enumeration value="release"/> <xs:enumeration value="clean"/> <xs:enumeration value="other"/> </xs:restriction> </xs:simpleType>
Simple Type: triggerTypeType
Super-types: | xs:string < triggerTypeType (by restriction) |
---|---|
Sub-types: | None |
Name | triggerTypeType |
---|---|
Content |
|
Simple Type: urnUuid
Super-types: | xs:string < urnUuid (by restriction) |
---|---|
Sub-types: | None |
Name | urnUuid |
---|---|
Content |
|
Simple Type: volumeModeEnum
Super-types: | xs:string < volumeModeEnum (by restriction) |
---|---|
Sub-types: | None |
Name | volumeModeEnum |
---|---|
Content |
|
Glossary
Abstract (Applies to complex type definitions and element declarations). An abstract element or complex type cannot used to validate an element instance. If there is a reference to an abstract element, only element declarations that can substitute the abstract element can be used to validate the instance. For references to abstract type definitions, only derived types can be used.
All Model Group Child elements can be provided in any order in instances. See: http://www.w3.org/TR/xmlschema-1/#element-all.
Choice Model Group Only one from the list of child elements and model groups can be provided in instances. See: http://www.w3.org/TR/xmlschema-1/#element-choice.
Collapse Whitespace Policy Replace tab, line feed, and carriage return characters with space character (Unicode character 32). Then, collapse contiguous sequences of space characters into single space character, and remove leading and trailing space characters.
Disallowed Substitutions (Applies to element declarations). If substitution is specified, then substitution group members cannot be used in place of the given element declaration to validate element
instances. If derivation methods, e.g. extension, restriction, are specified, then the given element declaration will
not validate element instances that have types derived from the element declaration's
type using the specified derivation methods. Normally, element instances can override
their declaration's type by specifying an xsi:type
attribute.
Key Constraint Like Uniqueness Constraint, but additionally requires that the specified value(s) must be provided. See: http://www.w3.org/TR/xmlschema-1/#cIdentity-constraint_Definitions.
Key Reference Constraint Ensures that the specified value(s) must match value(s) from a Key Constraint or Uniqueness Constraint. See: http://www.w3.org/TR/xmlschema-1/#cIdentity-constraint_Definitions.
Model Group Groups together element content, specifying the order in which the element content can occur and the number of times the group of element content may be repeated. See: http://www.w3.org/TR/xmlschema-1/#Model_Groups.
Nillable (Applies to element declarations). If an element declaration is nillable, instances
can use the xsi:nil
attribute. The xsi:nil
attribute is the boolean attribute, nil, from the http://www.w3.org/2001/XMLSchema-instance namespace. If an element instance has an xsi:nil
attribute set to true, it can be left empty, even though its element declaration
may have required content.
Notation A notation is used to identify the format of a piece of data. Values of elements and attributes that are of type, NOTATION, must come from the names of declared notations. See: http://www.w3.org/TR/xmlschema-1/#cNotation_Declarations.
Preserve Whitespace Policy Preserve whitespaces exactly as they appear in instances.
Prohibited Derivations (Applies to type definitions). Derivation methods that cannot be used to create sub-types from a given type definition.
Prohibited Substitutions (Applies to complex type definitions). Prevents sub-types that have been derived using the specified derivation methods from validating element instances in place of the given type definition.
Replace Whitespace Policy Replace tab, line feed, and carriage return characters with space character (Unicode character 32).
Sequence Model Group Child elements and model groups must be provided in the specified order in instances. See: http://www.w3.org/TR/xmlschema-1/#element-sequence.
Substitution Group Elements that are members of a substitution group can be used wherever the head element of the substitution group is referenced.
Substitution Group Exclusions (Applies to element declarations). Prohibits element declarations from nominating themselves as being able to substitute a given element declaration, if they have types that are derived from the original element's type using the specified derivation methods.
Target Namespace The target namespace identifies the namespace that components in this schema belongs to. If no target namespace is provided, then the schema components do not belong to any namespace.
Uniqueness Constraint Ensures uniqueness of an element/attribute value, or a combination of values, within a specified scope. See: http://www.w3.org/TR/xmlschema-1/#cIdentity-constraint_Definitions.
Element comment