CycloneDX v1.5 XML Reference

Schema Document Properties

Properties

Target Namespace	http://cyclonedx.org/schema/bom/1.6
Version	1.5.0
Element and Attribute Namespaces	Global element and attribute declarations belong to this schema's target namespace. By default, local element declarations belong to this schema's target namespace. By default, local attribute declarations have no namespace.
Schema Composition	This schema imports schema(s) from the following namespace(s): http://cyclonedx.org/schema/spdx (at http://cyclonedx.org/schema/spdx)

Declared Namespaces

Prefix	Namespace
xs	http://www.w3.org/2001/XMLSchema
vc	http://www.w3.org/2007/XMLSchema-versioning
bom	http://cyclonedx.org/schema/bom/1.6
spdx	http://cyclonedx.org/schema/spdx
xml	http://www.w3.org/XML/1998/namespace

Schema Component Representation

<xs:schema elementFormDefault="qualified" targetNamespace="http://cyclonedx.org/schema/bom/1.6" minVersion="1.0" maxVersion="1.1" version="1.5.0">
   <xs:import namespace="http://cyclonedx.org/schema/spdx" schemaLocation="http://cyclonedx.org/schema/spdx"/>
...
</xs:schema>

Global Declarations

Element: bom

Properties

Name	bom
Type	Locally-defined complex type
Nillable	no
Abstract	no

XML Instance Representation

<bom:bom
 version="xs:positiveInteger" [0..1]Attribute version
Whenever an existing BOM is modified, either manually or through automated
                        processes, the version of the BOM SHOULD be incremented by 1. When a system is presented with
                        multiple BOMs with identical serial numbers, the system SHOULD use the most recent version of the BOM.
                        The default version is '1'.
 
 
 serialNumber="bom:urnUuid" [0..1]Attribute serialNumber
Every BOM generated SHOULD have a unique serial number, even if the contents of
                        the BOM have not changed over time. If specified, the serial number MUST conform to RFC-4122.
                        Use of serial numbers are RECOMMENDED.
 
 
 Allow any attributes from any namespace (lax validation).
>
   <!--
    Uniqueness Constraint - bom-ref
    Selector - .//*
    Field(s) - @bom-ref
   -->
   <bom:metadata> bom:metadata </bom:metadata> [0..1] 
   <bom:components> bom:componentsType </bom:components> [0..1] 
   <bom:services> bom:servicesType </bom:services> [0..1] 
   <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] 
   <bom:dependencies> bom:dependenciesType </bom:dependencies> [0..1] 
   <bom:compositions> bom:compositionsType </bom:compositions> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   <bom:vulnerabilities> bom:vulnerabilitiesType </bom:vulnerabilities> [0..1] 
   <bom:annotations> bom:annotationsType </bom:annotations> [0..1] 
   <bom:formulation> bom:formulationType </bom:formulation> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</bom:bom>

Schema Component Representation

<xs:element name="bom">
   <xs:complexType>
      <xs:sequence>
         <xs:element name="metadata" type="bom:metadata" minOccurs="0" maxOccurs="1"/>
         <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/>
         <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/>
         <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/>
         <xs:element name="dependencies" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/>
         <xs:element name="compositions" type="bom:compositionsType" minOccurs="0" maxOccurs="1"/>
         <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
         <xs:element name="vulnerabilities" type="bom:vulnerabilitiesType" minOccurs="0" maxOccurs="1"/>
         <xs:element name="annotations" type="bom:annotationsType" minOccurs="0" maxOccurs="1"/>
         <xs:element name="formulation" type="bom:formulationType" minOccurs="0" maxOccurs="1"/>
         <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
      </xs:sequence>
      <xs:attribute name="version" type="xs:positiveInteger" default="1"/>
      <xs:attribute name="serialNumber" type="bom:urnUuid"/>
      <xs:anyAttribute namespace="##any" processContents="lax"/>
   </xs:complexType>
   <xs:unique name="bom-ref">
      <xs:selector xpath=".//*"/>
      <xs:field xpath="@bom-ref"/>
   </xs:unique>
</xs:element>

Global Definitions

Complex Type: advisoryType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	advisoryType
Abstract	no

XML Instance Representation

<...>
   <bom:title> xs:normalizedString </bom:title> [0..1] 
   <bom:url> xs:anyURI </bom:url> [1] 
</...>

Schema Component Representation

<xs:complexType name="advisoryType">
   <xs:sequence>
      <xs:element name="title" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="url" type="xs:anyURI" minOccurs="1" maxOccurs="1"/>
   </xs:sequence>
</xs:complexType>

Complex Type: annotationType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	annotationType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the annotation elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   <bom:subjects   > [0..1]  
      Start Sequence [0..*]
         <bom:subject> bom:bomReferenceType </bom:subject> [1]
         Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
      End Sequence
   </bom:subjects>
   <bom:annotator> bom:annotatorChoiceType </bom:annotator> [1] 
   <bom:timestamp> xs:dateTime </bom:timestamp> [1] 
   <bom:text> xs:string </bom:text> [1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="annotationType">
   <xs:sequence>
      <xs:element name="subjects" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="subject" type="bom:bomReferenceType"/>
               <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="annotator" type="bom:annotatorChoiceType" minOccurs="1" maxOccurs="1"/>
      <xs:element name="timestamp" type="xs:dateTime" minOccurs="1" maxOccurs="1"/>
      <xs:element name="text" type="xs:string" minOccurs="1" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: annotationsType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	annotationsType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:annotation> bom:annotationType </bom:annotation> [1]
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="annotationsType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="annotation" type="bom:annotationType"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: annotatorChoiceType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	annotatorChoiceType
Abstract	no

XML Instance Representation

<...>
   Start Choice [1]
      <bom:organization> bom:organizationalEntity </bom:organization> [0..1] 
      <bom:individual> bom:organizationalContact </bom:individual> [0..1] 
      <bom:component> bom:component </bom:component> [0..1] 
      <bom:service> bom:service </bom:service> [0..1] 
   End Choice
</...>

Schema Component Representation

<xs:complexType name="annotatorChoiceType">
   <xs:choice>
      <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
      <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/>
      <xs:element name="component" type="bom:component" minOccurs="0" maxOccurs="1"/>
      <xs:element name="service" type="bom:service" minOccurs="0" maxOccurs="1"/>
   </xs:choice>
</xs:complexType>

Complex Type: attachedTextType

Type hierarchy

Super-types:	xs:string < attachedTextType (by extension)
Sub-types:	None

Properties

Name	attachedTextType
Abstract	no

XML Instance Representation

<...
 content-type="xs:normalizedString" [0..1]Attribute content-type
Specifies the content type of the text. Defaults to text/plain
                            if not specified.
 
 
 encoding="bom:encoding" [0..1]Attribute encoding

                            Specifies the optional encoding the text is represented in
                        
 
 
>
    xs:string
</...>

Schema Component Representation

<xs:complexType name="attachedTextType">
   <xs:simpleContent>
      <xs:extension base="xs:string">
         <xs:attribute name="content-type" type="xs:normalizedString" default="text/plain"/>
         <xs:attribute name="encoding" type="bom:encoding"/>
      </xs:extension>
   </xs:simpleContent>
</xs:complexType>

Complex Type: bomReferenceType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	bomReferenceType
Abstract	no

XML Instance Representation

<...
 ref="union of: [ bom:refLinkType,bom:bomLinkType ]" [1]Attribute ref
References a component or service by its bom-ref attribute
 
 
 Allow any attributes from a namespace other than this schema's namespace (lax validation).
/>

Schema Component Representation

<xs:complexType name="bomReferenceType">
   <xs:attribute name="ref" use="required">
      <xs:simpleType>
         <xs:union memberTypes="bom:refLinkType bom:bomLinkType"/>
      </xs:simpleType>
   </xs:attribute>
   <xs:anyAttribute namespace="##other" processContents="lax"/>
</xs:complexType>

Complex Type: commitType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	commitType
Abstract	no

XML Instance Representation

<...>
   <bom:uid> xs:normalizedString </bom:uid> [0..1] 
   <bom:url> xs:anyURI </bom:url> [0..1] 
   <bom:author> bom:identifiableActionType </bom:author> [0..1] 
   <bom:committer> bom:identifiableActionType </bom:committer> [0..1] 
   <bom:message> xs:normalizedString </bom:message> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="commitType">
   <xs:sequence>
      <xs:element name="uid" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
      <xs:element name="author" type="bom:identifiableActionType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="committer" type="bom:identifiableActionType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="message" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
</xs:complexType>

Complex Type: commitsType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	commitsType
Abstract	no

XML Instance Representation

<...>
   Start Sequence [0..*]
      <bom:commit> bom:commitType </bom:commit> [1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="commitsType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="commit" type="bom:commitType"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
</xs:complexType>

Complex Type: component

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	component
Abstract	no

XML Instance Representation

<...
 type="bom:classification" [1]Attribute type

                    Specifies the type of component. For software components, classify as application if no more
                    specific appropriate classification is available or cannot be determined for the component.
                
 
 
 mime-type="bom:mimeType" [0..1]Attribute mime-type

                    The OPTIONAL mime-type of the component. When used on file components, the mime-type
                    can provide additional context about the kind of file being represented such as an image,
                    font, or executable. Some library or framework components may also have an associated mime-type.
                
 
 
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the component elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   <bom:supplier> bom:organizationalEntity </bom:supplier> [0..1] 
   <bom:author> xs:normalizedString </bom:author> [0..1] 
   <bom:publisher> xs:normalizedString </bom:publisher> [0..1] 
   <bom:group> xs:normalizedString </bom:group> [0..1] 
   <bom:name> xs:normalizedString </bom:name> [1] 
   <bom:version> xs:normalizedString </bom:version> [0..1] 
   <bom:description> xs:normalizedString </bom:description> [0..1] 
   <bom:scope> bom:scope </bom:scope> [0..1] 
   <bom:hashes   > [0..1] 
      Start Sequence [0..*]
         <bom:hash> bom:hashType </bom:hash> [1]
      End Sequence
   </bom:hashes>
   <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1]
   <bom:copyright> xs:normalizedString </bom:copyright> [0..1] 
   <bom:cpe> bom:cpe </bom:cpe> [0..1] 
   <bom:purl> xs:anyURI </bom:purl> [0..1] 
   <bom:swid> bom:swidType </bom:swid> [0..1] 
   <bom:modified> xs:boolean </bom:modified> [0..1] 
   <bom:pedigree> bom:pedigreeType </bom:pedigree> [0..1] 
   <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   <bom:components   > [0..1]  
      Start Sequence [0..*]
         <bom:component> bom:component </bom:component> [1]
         Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
      End Sequence
   </bom:components>
   <bom:evidence> bom:componentEvidenceType </bom:evidence> [0..1] 
   <bom:releaseNotes> bom:releaseNotesType </bom:releaseNotes> [0..1] 
   <bom:modelCard> bom:modelCardType </bom:modelCard> [0..1] 
   <bom:data> bom:componentDataType </bom:data> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="component">
   <xs:sequence>
      <xs:element name="supplier" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
      <xs:element name="author" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="publisher" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="group" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="name" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/>
      <xs:element name="version" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="scope" type="bom:scope" minOccurs="0" maxOccurs="1" default="required"/>
      <xs:element name="hashes" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="hash" type="bom:hashType"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="copyright" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="cpe" type="bom:cpe" minOccurs="0" maxOccurs="1"/>
      <xs:element name="purl" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
      <xs:element name="swid" type="bom:swidType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="modified" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
      <xs:element name="pedigree" type="bom:pedigreeType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="components" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="component" type="bom:component"/>
               <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="evidence" type="bom:componentEvidenceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="releaseNotes" type="bom:releaseNotesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="modelCard" type="bom:modelCardType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="data" type="bom:componentDataType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="type" type="bom:classification" use="required"/>
   <xs:attribute name="mime-type" type="bom:mimeType"/>
   <xs:attribute name="bom-ref" type="bom:refType"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: componentDataType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	componentDataType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the dataset elsewhere in the BOM.
                    Every bom-ref MUST be unique within the BOM.
                
 
 
>
   <bom:type> bom:componentDataTypeEnumeration </bom:type> [1] 
   <bom:name> xs:string </bom:name> [0..1] 
   <bom:contents   > [0..1]  
      <bom:attachment> bom:attachedTextType </bom:attachment> [0..1] 
      <bom:url> xs:anyURI </bom:url> [0..1] 
      <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   </bom:contents>
   <bom:classification> xs:string </bom:classification> [0..1] 
   <bom:sensitiveData> ... </bom:sensitiveData> [0..*] 
   <bom:graphics> bom:graphicsCollectionType </bom:graphics> [0..1] 
   <bom:description> xs:string </bom:description> [0..1] 
   <bom:governance> bom:dataGovernance </bom:governance> [0..1]
</...>

Schema Component Representation

<xs:complexType name="componentDataType">
   <xs:sequence>
      <xs:element name="type" type="bom:componentDataTypeEnumeration" minOccurs="1" maxOccurs="1"/>
      <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="contents" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="attachment" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/>
               <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
               <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="classification" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="sensitiveData" minOccurs="0" maxOccurs="unbounded"/>
      <xs:element name="graphics" type="bom:graphicsCollectionType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="governance" type="bom:dataGovernance" minOccurs="0" maxOccurs="1"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
</xs:complexType>

Complex Type: componentEvidenceType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	componentEvidenceType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   <bom:identity   > [0..1]  
      <bom:field> bom:identityFieldType </bom:field> [1] 
      <bom:confidence> bom:decimalPercentType </bom:confidence> [0..1] 
      <bom:methods      > [0..1]  
         <bom:method         > [0..*] 
            <bom:technique> bom:evidenceTechnique </bom:technique> [1] 
            <bom:confidence> bom:decimalPercentType </bom:confidence> [1] 
            <bom:value> xs:string </bom:value> [0..1] 
         </bom:method>
      </bom:methods>
      <bom:tools      > [0..1]  
         <bom:tool> bom:bomReferenceType </bom:tool> [0..*]
      </bom:tools>
   </bom:identity>
   <bom:occurrences   > [0..1]  
      <bom:occurrence
       bom-ref="bom:refType" [0..1]Attribute bom-ref

                                            An optional identifier which can be used to reference the occurrence elsewhere
                                            in the BOM. Every bom-ref MUST be unique within the BOM.
                                        
 
 
      > [0..*] 
         <bom:location> ... </bom:location> [1] 
      </bom:occurrence>
   </bom:occurrences>
   <bom:callstack   > [0..1]  
      <bom:frames      > [0..1] 
         <bom:frame         > [0..*] 
            <bom:package> xs:string </bom:package> [0..1] 
            <bom:module> xs:string </bom:module> [1] 
            <bom:function> xs:string </bom:function> [0..1] 
            <bom:parameters            > [0..1]  
               <bom:parameter> xs:string </bom:parameter> [0..*]
            </bom:parameters>
            <bom:line> xs:integer </bom:line> [0..1] 
            <bom:column> xs:integer </bom:column> [0..1] 
            <bom:fullFilename> xs:string </bom:fullFilename> [0..1] 
         </bom:frame>
      </bom:frames>
      <bom:tools      > [0..1]  
         <bom:tool> bom:bomReferenceType </bom:tool> [0..*]
      </bom:tools>
   </bom:callstack>
   <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1]
   <bom:copyright> bom:copyrightsType </bom:copyright> [0..1]
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="componentEvidenceType">
   <xs:sequence>
      <xs:element name="identity" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="field" type="bom:identityFieldType" minOccurs="1" maxOccurs="1"/>
               <xs:element name="confidence" type="bom:decimalPercentType" minOccurs="0" maxOccurs="1"/>
               <xs:element name="methods" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="method" minOccurs="0" maxOccurs="unbounded">
                           <xs:complexType>
                              <xs:sequence>
                                 <xs:element name="technique" type="bom:evidenceTechnique" minOccurs="1" maxOccurs="1"/>
                                 <xs:element name="confidence" type="bom:decimalPercentType" minOccurs="1" maxOccurs="1"/>
                                 <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="tools" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="tool" type="bom:bomReferenceType" minOccurs="0" maxOccurs="unbounded"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="occurrences" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="occurrence" minOccurs="0" maxOccurs="unbounded">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="location" minOccurs="1" maxOccurs="1"/>
                     </xs:sequence>
                     <xs:attribute name="bom-ref" type="bom:refType"/>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="callstack" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="frames" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="frame" minOccurs="0" maxOccurs="unbounded">
                           <xs:complexType>
                              <xs:sequence>
                                 <xs:element name="package" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="module" type="xs:string" minOccurs="1" maxOccurs="1"/>
                                 <xs:element name="function" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="parameters" minOccurs="0" maxOccurs="1">
                                    <xs:complexType>
                                       <xs:sequence>
                                          <xs:element name="parameter" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
                                       </xs:sequence>
                                    </xs:complexType>
                                 </xs:element>
                                 <xs:element name="line" type="xs:integer" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="column" type="xs:integer" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="fullFilename" type="xs:string" minOccurs="0" maxOccurs="1"/>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="tools" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="tool" type="bom:bomReferenceType" minOccurs="0" maxOccurs="unbounded"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="copyright" type="bom:copyrightsType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: componentsType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	componentsType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:component> bom:component </bom:component> [1]
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="componentsType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="component" type="bom:component"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: compositionType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	compositionType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the composition elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
>
   Start Sequence [0..*]
      <bom:aggregate> bom:aggregateType </bom:aggregate> [1] 
      <bom:assemblies      > [0..1]  
         Start Sequence [0..*]
            <bom:assembly> bom:bomReferenceType </bom:assembly> [1]
            Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
         End Sequence
      </bom:assemblies>
      <bom:dependencies      > [0..1]  
         Start Sequence [0..*]
            <bom:dependency> bom:bomReferenceType </bom:dependency> [1]
            Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
         End Sequence
      </bom:dependencies>
      <bom:vulnerabilities      > [0..1]  
         Start Sequence [0..*]
            <bom:vulnerability> bom:bomReferenceType </bom:vulnerability> [1]
            Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
         End Sequence
      </bom:vulnerabilities>
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="compositionType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="aggregate" type="bom:aggregateType" default="not_specified"/>
      <xs:element name="assemblies" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="assembly" type="bom:bomReferenceType"/>
               <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="dependencies" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="dependency" type="bom:bomReferenceType"/>
               <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="vulnerabilities" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="vulnerability" type="bom:bomReferenceType"/>
               <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
</xs:complexType>

Complex Type: compositionsType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	compositionsType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:composition> bom:compositionType </bom:composition> [1]
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="compositionsType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="composition" type="bom:compositionType"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: copyrightsType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	copyrightsType
Abstract	no

XML Instance Representation

<...>
   <bom:text> xs:string </bom:text> [0..*]
</...>

Schema Component Representation

<xs:complexType name="copyrightsType">
   <xs:sequence>
      <xs:element name="text" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
</xs:complexType>

Complex Type: dataClassificationType

Type hierarchy

Super-types:	xs:normalizedString < dataClassificationType (by extension)
Sub-types:	None

Properties

Name	dataClassificationType
Abstract	no

XML Instance Representation

<...
 flow="bom:dataFlowType" [1]Attribute flow
Specifies the flow direction of the data.
 
 
>
    xs:normalizedString
</...>

Schema Component Representation

<xs:complexType name="dataClassificationType">
   <xs:simpleContent>
      <xs:extension base="xs:normalizedString">
         <xs:attribute name="flow" type="bom:dataFlowType" use="required"/>
      </xs:extension>
   </xs:simpleContent>
</xs:complexType>

Complex Type: dataGovernance

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	dataGovernance
Abstract	no

XML Instance Representation

<...>
   <bom:custodians   > [0..1]  
      <bom:custodian> bom:organizationOrIndividualType </bom:custodian> [0..*]
   </bom:custodians>
   <bom:stewards   > [0..1]  
      <bom:steward> bom:organizationOrIndividualType </bom:steward> [0..*]
   </bom:stewards>
   <bom:owners   > [0..1]  
      <bom:owner> bom:organizationOrIndividualType </bom:owner> [0..*]
   </bom:owners>
</...>

Schema Component Representation

<xs:complexType name="dataGovernance">
   <xs:sequence>
      <xs:element name="custodians" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="custodian" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="stewards" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="steward" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="owners" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="owner" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
   </xs:sequence>
</xs:complexType>

Complex Type: dependenciesType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	dependenciesType
Abstract	no

XML Instance Representation

<...>
   Start Sequence [0..*]
      <bom:dependency> bom:dependencyType </bom:dependency> [1] 
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="dependenciesType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="dependency" type="bom:dependencyType"/>
   </xs:sequence>
</xs:complexType>

Complex Type: dependencyType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	dependencyType
Abstract	no

XML Instance Representation

<...
 ref="bom:refLinkType" [1]Attribute ref
References a component or service by its bom-ref attribute
 
 
 Allow any attributes from a namespace other than this schema's namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:dependency> bom:dependencyType </bom:dependency> [1]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="dependencyType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="dependency" type="bom:dependencyType"/>
   </xs:sequence>
   <xs:attribute name="ref" type="bom:refLinkType" use="required"/>
   <xs:anyAttribute namespace="##other" processContents="lax"/>
</xs:complexType>

Complex Type: diffType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	diffType
Abstract	no

XML Instance Representation

<...>
   <bom:text> bom:attachedTextType </bom:text> [0..1] 
   <bom:url> xs:anyURI </bom:url> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="diffType">
   <xs:sequence>
      <xs:element name="text" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
</xs:complexType>

Complex Type: eventType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	eventType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   <bom:uid> xs:string </bom:uid> [0..1] 
   <bom:description> xs:string </bom:description> [0..1] 
   <bom:timeReceived> xs:dateTime </bom:timeReceived> [0..1] 
   <bom:data> bom:attachedTextType </bom:data> [0..1] 
   <bom:source> bom:resourceReferenceType </bom:source> [0..1] 
   <bom:target> bom:resourceReferenceType </bom:target> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="eventType">
   <xs:sequence>
      <xs:element name="uid" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="timeReceived" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="data" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="source" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="target" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: externalReference

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	externalReference
Abstract	no

XML Instance Representation

<...
 type="bom:externalReferenceType" [1]Attribute type
Specifies the type of external reference. There are built-in types to describe common
                    references. If a type does not exist for the reference being referred to, use the "other" type.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   <bom:url> union of: [ xs:anyURI,bom:bomLinkType ] </bom:url> [1] 
   <bom:comment> xs:string </bom:comment> [0..1] 
   <bom:hashes   > [0..1] 
      Start Sequence [0..*]
         <bom:hash> bom:hashType </bom:hash> [1]
      End Sequence
   </bom:hashes>
</...>

Schema Component Representation

<xs:complexType name="externalReference">
   <xs:sequence>
      <xs:element name="url" minOccurs="1" maxOccurs="1">
         <xs:simpleType>
            <xs:union memberTypes="xs:anyURI bom:bomLinkType"/>
         </xs:simpleType>
      </xs:element>
      <xs:element name="comment" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="hashes" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="hash" type="bom:hashType"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
   </xs:sequence>
   <xs:attribute name="type" type="bom:externalReferenceType" use="required"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: externalReferences

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	externalReferences
Abstract	no

XML Instance Representation

<...>
   Start Sequence [0..*]
      <bom:reference> bom:externalReference </bom:reference> [1] 
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="externalReferences">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="reference" type="bom:externalReference"/>
   </xs:sequence>
</xs:complexType>

Complex Type: formulaType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	formulaType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the formula elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   <bom:components> bom:componentsType </bom:components> [0..1] 
   <bom:services> bom:servicesType </bom:services> [0..1] 
   <bom:workflows> bom:workflowsType </bom:workflows> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
</...>

Schema Component Representation

<xs:complexType name="formulaType">
   <xs:sequence>
      <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="workflows" type="bom:workflowsType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: formulationType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	formulationType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:formula> bom:formulaType </bom:formula> [1]
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="formulationType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="formula" type="bom:formulaType"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: graphicsCollectionType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	graphicsCollectionType
Abstract	no

XML Instance Representation

<...>
   <bom:description> ... </bom:description> [0..1] 
   <bom:collection   > [0..1]  
      <bom:graphic      > [0..*] 
         <bom:name> xs:string </bom:name> [0..1] 
         <bom:image> bom:attachedTextType </bom:image> [0..1] 
      </bom:graphic>
   </bom:collection>
</...>

Schema Component Representation

<xs:complexType name="graphicsCollectionType">
   <xs:sequence>
      <xs:element name="description" minOccurs="0" maxOccurs="1"/>
      <xs:element name="collection" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="graphic" minOccurs="0" maxOccurs="unbounded">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
                        <xs:element name="image" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
   </xs:sequence>
</xs:complexType>

Complex Type: hashType

Type hierarchy

Super-types:	xs:token < hashValue (by restriction) < hashType (by extension)
Sub-types:	None

Properties

Name	hashType
Abstract	no

XML Instance Representation

<...
 alg="bom:hashAlg" [1]Attribute alg
Specifies the algorithm used to create the hash
 
 
>
    bom:hashValue
</...>

Schema Component Representation

<xs:complexType name="hashType">
   <xs:simpleContent>
      <xs:extension base="bom:hashValue">
         <xs:attribute name="alg" type="bom:hashAlg" use="required"/>
      </xs:extension>
   </xs:simpleContent>
</xs:complexType>

Complex Type: identifiableActionType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	identifiableActionType
Abstract	no

XML Instance Representation

<...>
   <bom:timestamp> xs:dateTime </bom:timestamp> [0..1] 
   <bom:name> xs:normalizedString </bom:name> [0..1] 
   <bom:email> xs:normalizedString </bom:email> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="identifiableActionType">
   <xs:sequence>
      <xs:element name="timestamp" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="email" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
</xs:complexType>

Complex Type: inputType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	inputType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Choice [1]
      <bom:resource> bom:resourceReferenceType </bom:resource> [1] 
      <bom:parameters> bom:parametersType </bom:parameters> [1] 
      <bom:environmentVars      > [1]  
         Start Sequence [0..*]
            Start Choice [1]
               <bom:environmentVar> bom:propertyType </bom:environmentVar> [0..1]
               <bom:value> xs:string </bom:value> [0..1]
            End Choice
         End Sequence
      </bom:environmentVars>
      <bom:data> bom:attachedTextType </bom:data> [1] 
   End Choice
   <bom:source> bom:resourceReferenceType </bom:source> [0..1] 
   <bom:target> bom:resourceReferenceType </bom:target> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="inputType">
   <xs:sequence>
      <xs:choice>
         <xs:element name="resource" type="bom:resourceReferenceType" minOccurs="1" maxOccurs="1"/>
         <xs:element name="parameters" type="bom:parametersType" minOccurs="1" maxOccurs="1"/>
         <xs:element name="environmentVars" minOccurs="1" maxOccurs="1">
            <xs:complexType>
               <xs:sequence minOccurs="0" maxOccurs="unbounded">
<-- maxOccurs="unbounded" NEEDS to be set on the sequence, not the individual elements -->                  <xs:choice>
                     <xs:element name="environmentVar" type="bom:propertyType" minOccurs="0" maxOccurs="1"/>
                     <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/>
                  </xs:choice>
               </xs:sequence>
            </xs:complexType>
         </xs:element>
         <xs:element name="data" type="bom:attachedTextType" minOccurs="1" maxOccurs="1"/>
      </xs:choice>
      <xs:element name="source" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="target" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: issueType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	issueType
Abstract	no

XML Instance Representation

<...
 type="bom:issueClassification" [1]Attribute type
Specifies the type of issue
 
 
>
   <bom:id> xs:normalizedString </bom:id> [0..1] 
   <bom:name> xs:normalizedString </bom:name> [0..1] 
   <bom:description> xs:normalizedString </bom:description> [0..1] 
   <bom:source   > [0..1] 
      <bom:name> xs:normalizedString </bom:name> [0..1] 
      <bom:url> xs:anyURI </bom:url> [0..1] 
   </bom:source>
   <bom:references   > [0..1] 
      Start Sequence [0..*]
         <bom:url> xs:anyURI </bom:url> [1]
      End Sequence
   </bom:references>
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="issueType">
   <xs:sequence>
      <xs:element name="id" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="source" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
               <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="references" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="url" type="xs:anyURI"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="type" type="bom:issueClassification" use="required"/>
</xs:complexType>

Complex Type: licenseChoiceType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	licenseChoiceType
Abstract	no

XML Instance Representation

<...>
   Start Choice [1]
      <bom:license> bom:licenseType </bom:license> [0..*]
      <bom:expression
       bom-ref="bom:refType" [0..1]Attribute bom-ref

                                        An optional identifier which can be used to reference the license elsewhere in the BOM.
                                        Uniqueness is enforced within all elements and children of the root-level bom element.
                                    
 
 
      > [0..1]  
          xs:normalizedString
      </bom:expression>
   End Choice
</...>

Schema Component Representation

<xs:complexType name="licenseChoiceType">
   <xs:choice>
      <xs:element name="license" type="bom:licenseType" minOccurs="0" maxOccurs="unbounded"/>
      <xs:element name="expression" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:simpleContent>
               <xs:extension base="xs:normalizedString">
                  <xs:attribute name="bom-ref" type="bom:refType"/>
               </xs:extension>
            </xs:simpleContent>
         </xs:complexType>
      </xs:element>
   </xs:choice>
</xs:complexType>

Complex Type: licenseType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	licenseType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the license elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
>
   Start Choice [1]
      <bom:id> spdx:licenseId </bom:id> [0..1] 
      <bom:name> xs:normalizedString </bom:name> [0..1] 
   End Choice
   <bom:text> bom:attachedTextType </bom:text> [0..1] 
   <bom:url> xs:anyURI </bom:url> [0..1] 
   <bom:licensing   > [0..1]  
      <bom:altIds      > [0..1]  
         <bom:altId> xs:normalizedString </bom:altId> [0..*]
      </bom:altIds>
      <bom:licensor      > [0..1]  
         Start Choice [1]
            <bom:organization> bom:organizationalEntity </bom:organization> [0..1] 
            <bom:individual> bom:organizationalContact </bom:individual> [0..1] 
         End Choice
      </bom:licensor>
      <bom:licensee      > [0..1]  
         Start Choice [1]
            <bom:organization> bom:organizationalEntity </bom:organization> [0..1] 
            <bom:individual> bom:organizationalContact </bom:individual> [0..1] 
         End Choice
      </bom:licensee>
      <bom:purchaser      > [0..1]  
         Start Choice [1]
            <bom:organization> bom:organizationalEntity </bom:organization> [0..1] 
            <bom:individual> bom:organizationalContact </bom:individual> [0..1] 
         End Choice
      </bom:purchaser>
      <bom:purchaseOrder> xs:string </bom:purchaseOrder> [0..1] 
      <bom:licenseTypes      > [0..1]  
         <bom:licenseType> bom:licenseTypeEnum </bom:licenseType> [0..*]
      </bom:licenseTypes>
      <bom:lastRenewal> xs:dateTime </bom:lastRenewal> [0..1] 
      <bom:expiration> xs:dateTime </bom:expiration> [0..1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   </bom:licensing>
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="licenseType">
   <xs:sequence>
      <xs:choice>
         <xs:element name="id" type="spdx:licenseId" minOccurs="0" maxOccurs="1"/>
         <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      </xs:choice>
      <xs:element name="text" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
      <xs:element name="licensing" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="altIds" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="altId" type="xs:normalizedString" minOccurs="0" maxOccurs="unbounded"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="licensor" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:choice>
                           <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
                           <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/>
                        </xs:choice>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="licensee" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:choice>
                           <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
                           <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/>
                        </xs:choice>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="purchaser" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:choice>
                           <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
                           <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/>
                        </xs:choice>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="purchaseOrder" type="xs:string" minOccurs="0" maxOccurs="1"/>
               <xs:element name="licenseTypes" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="licenseType" type="bom:licenseTypeEnum" minOccurs="0" maxOccurs="unbounded"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="lastRenewal" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
               <xs:element name="expiration" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
               <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
</xs:complexType>

Complex Type: metadata

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	metadata
Abstract	no

XML Instance Representation

<...
 Allow any attributes from a namespace other than this schema's namespace (lax validation).
>
   Start Sequence [0..1]
      <bom:timestamp> xs:dateTime </bom:timestamp> [0..1] 
      <bom:lifecycles      > [0..1]  
         <bom:lifecycle         > [0..*] 
            Start Choice [1]
               <bom:phase> bom:lifecyclePhaseType </bom:phase> [1] 
               <bom:name> xs:normalizedString </bom:name> [1] 
               <bom:description> xs:string </bom:description> [0..1] 
            End Choice
         </bom:lifecycle>
      </bom:lifecycles>
      <bom:tools      > [0..1]  
         Start Choice [1]
            Start Sequence [0..*]
               <bom:tool> bom:toolType </bom:tool> [0..1] 
            End Sequence
            Start Sequence [0..1]
               <bom:components> bom:componentsType </bom:components> [0..1] 
               <bom:services> bom:servicesType </bom:services> [0..1] 
            End Sequence
         End Choice
      </bom:tools>
      <bom:authors      > [0..1]  
         Start Sequence [0..*]
            <bom:author> bom:organizationalContact </bom:author> [1]
         End Sequence
      </bom:authors>
      <bom:component> bom:component </bom:component> [0..1] 
      <bom:manufacture> bom:organizationalEntity </bom:manufacture> [0..1] 
      <bom:supplier> bom:organizationalEntity </bom:supplier> [0..1] 
      <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1]
      <bom:properties> bom:propertiesType </bom:properties> [0..1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="metadata">
   <xs:sequence minOccurs="0" maxOccurs="1">
      <xs:element name="timestamp" type="xs:dateTime" minOccurs="0"/>
      <xs:element name="lifecycles" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="lifecycle" minOccurs="0" maxOccurs="unbounded">
                  <xs:complexType>
                     <xs:choice>
                        <xs:sequence>
                           <xs:element name="phase" type="bom:lifecyclePhaseType" minOccurs="1" maxOccurs="1"/>
                        </xs:sequence>
                        <xs:sequence>
                           <xs:element name="name" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/>
                           <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
                        </xs:sequence>
                     </xs:choice>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="tools" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:choice>
               <xs:sequence minOccurs="0" maxOccurs="unbounded">
                  <xs:element name="tool" type="bom:toolType" minOccurs="0"/>
               </xs:sequence>
               <xs:sequence minOccurs="0" maxOccurs="1">
                  <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/>
                  <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/>
               </xs:sequence>
            </xs:choice>
         </xs:complexType>
      </xs:element>
      <xs:element name="authors" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="author" type="bom:organizationalContact"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="component" type="bom:component" minOccurs="0"/>
      <xs:element name="manufacture" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
      <xs:element name="supplier" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
      <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##other" processContents="lax"/>
</xs:complexType>

Complex Type: modelCardType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	modelCardType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the model card elsewhere in the BOM.
                    Every bom-ref MUST be unique within the BOM.
                
 
 
>
   <bom:modelParameters   > [0..1]  
      <bom:approach      > [0..1]  
         <bom:type> bom:machineLearningApproachType </bom:type> [0..1] 
      </bom:approach>
      <bom:task> xs:string </bom:task> [0..1] 
      <bom:architectureFamily> xs:string </bom:architectureFamily> [0..1] 
      <bom:modelArchitecture> xs:string </bom:modelArchitecture> [0..1] 
      <bom:datasets      > [0..1]  
         Start Choice [0..*]
            <bom:ref> union of: [ bom:refLinkType,bom:bomLinkElementType ] </bom:ref> [0..1] 
            <bom:dataset> bom:componentDataType </bom:dataset> [0..1]
         End Choice
      </bom:datasets>
      <bom:inputs      > [0..1]  
         <bom:input         > [0..*] 
            <bom:format> xs:string </bom:format> [1] 
         </bom:input>
      </bom:inputs>
      <bom:outputs      > [0..1]  
         <bom:output         > [0..*] 
            <bom:format> xs:string </bom:format> [1] 
         </bom:output>
      </bom:outputs>
   </bom:modelParameters>
   <bom:quantitativeAnalysis   > [0..1]  
      <bom:performanceMetrics      > [0..1] 
         <bom:performanceMetric         > [0..*] 
            <bom:type> xs:string </bom:type> [0..1] 
            <bom:value> xs:string </bom:value> [0..1] 
            <bom:slice> xs:string </bom:slice> [0..1] 
            <bom:confidenceInterval            > [0..1]  
               <bom:lowerBound> xs:string </bom:lowerBound> [0..1] 
               <bom:upperBound> xs:string </bom:upperBound> [0..1] 
            </bom:confidenceInterval>
         </bom:performanceMetric>
      </bom:performanceMetrics>
      <bom:graphics      > [0..1]  
         <bom:description> xs:string </bom:description> [0..1] 
         <bom:collection         > [0..1]  
            <bom:graphic            > [0..*] 
               <bom:name> xs:string </bom:name> [0..1] 
               <bom:image> bom:attachedTextType </bom:image> [0..1] 
            </bom:graphic>
         </bom:collection>
      </bom:graphics>
   </bom:quantitativeAnalysis>
   <bom:considerations   > [0..1]  
      <bom:users      > [0..1]  
         <bom:user> xs:string </bom:user> [0..1]
      </bom:users>
      <bom:useCases      > [0..1]  
         <bom:useCase> xs:string </bom:useCase> [0..1]
      </bom:useCases>
      <bom:technicalLimitations      > [0..1]  
         <bom:technicalLimitation> xs:string </bom:technicalLimitation> [0..1]
      </bom:technicalLimitations>
      <bom:performanceTradeoffs      > [0..1]  
         <bom:performanceTradeoff> xs:string </bom:performanceTradeoff> [0..1]
      </bom:performanceTradeoffs>
      <bom:ethicalConsiderations      > [0..1]  
         <bom:ethicalConsideration         > [0..*] 
            <bom:name> xs:string </bom:name> [0..1] 
            <bom:mitigationStrategy> xs:string </bom:mitigationStrategy> [0..1] 
         </bom:ethicalConsideration>
      </bom:ethicalConsiderations>
      <bom:fairnessAssessments      > [0..1]  
         <bom:fairnessAssessment         > [0..*] 
            <bom:groupAtRisk> xs:string </bom:groupAtRisk> [0..1] 
            <bom:benefits> xs:string </bom:benefits> [0..1] 
            <bom:harms> xs:string </bom:harms> [0..1] 
            <bom:mitigationStrategy> xs:string </bom:mitigationStrategy> [0..1] 
         </bom:fairnessAssessment>
      </bom:fairnessAssessments>
   </bom:considerations>
</...>

Schema Component Representation

<xs:complexType name="modelCardType">
   <xs:sequence>
      <xs:element name="modelParameters" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="approach" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="type" type="bom:machineLearningApproachType" minOccurs="0" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="task" type="xs:string" minOccurs="0" maxOccurs="1"/>
               <xs:element name="architectureFamily" type="xs:string" minOccurs="0" maxOccurs="1"/>
               <xs:element name="modelArchitecture" type="xs:string" minOccurs="0" maxOccurs="1"/>
               <xs:element name="datasets" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:choice minOccurs="0" maxOccurs="unbounded">
                        <xs:element name="ref" minOccurs="0" maxOccurs="1">
                           <xs:simpleType>
                              <xs:union memberTypes="bom:refLinkType bom:bomLinkElementType"/>
                           </xs:simpleType>
                        </xs:element>
                        <xs:element name="dataset" type="bom:componentDataType" minOccurs="0" maxOccurs="1"/>
                     </xs:choice>
                  </xs:complexType>
               </xs:element>
               <xs:element name="inputs" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="input" minOccurs="0" maxOccurs="unbounded">
                           <xs:complexType>
                              <xs:sequence>
                                 <xs:element name="format" type="xs:string" minOccurs="1" maxOccurs="1"/>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="outputs" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="output" minOccurs="0" maxOccurs="unbounded">
                           <xs:complexType>
                              <xs:sequence>
                                 <xs:element name="format" type="xs:string" minOccurs="1" maxOccurs="1"/>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="quantitativeAnalysis" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="performanceMetrics" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="performanceMetric" minOccurs="0" maxOccurs="unbounded">
                           <xs:complexType>
                              <xs:sequence>
                                 <xs:element name="type" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="slice" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="confidenceInterval" minOccurs="0" maxOccurs="1">
                                    <xs:complexType>
                                       <xs:sequence>
                                          <xs:element name="lowerBound" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                          <xs:element name="upperBound" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                       </xs:sequence>
                                    </xs:complexType>
                                 </xs:element>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="graphics" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
                        <xs:element name="collection" minOccurs="0" maxOccurs="1">
                           <xs:complexType>
                              <xs:sequence>
                                 <xs:element name="graphic" minOccurs="0" maxOccurs="unbounded">
                                    <xs:complexType>
                                       <xs:sequence>
                                          <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                          <xs:element name="image" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/>
                                       </xs:sequence>
                                    </xs:complexType>
                                 </xs:element>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="considerations" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="users" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="user" type="xs:string" minOccurs="0" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="useCases" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="useCase" type="xs:string" minOccurs="0" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="technicalLimitations" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="technicalLimitation" type="xs:string" minOccurs="0" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="performanceTradeoffs" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="performanceTradeoff" type="xs:string" minOccurs="0" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="ethicalConsiderations" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="ethicalConsideration" minOccurs="0" maxOccurs="unbounded">
                           <xs:complexType>
                              <xs:sequence>
                                 <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="mitigationStrategy" type="xs:string" minOccurs="0" maxOccurs="1"/>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="fairnessAssessments" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="fairnessAssessment" minOccurs="0" maxOccurs="unbounded">
                           <xs:complexType>
                              <xs:sequence>
                                 <xs:element name="groupAtRisk" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="benefits" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="harms" type="xs:string" minOccurs="0" maxOccurs="1"/>
                                 <xs:element name="mitigationStrategy" type="xs:string" minOccurs="0" maxOccurs="1"/>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
</xs:complexType>

Complex Type: organizationOrIndividualType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	organizationOrIndividualType
Abstract	no

XML Instance Representation

<...>
   Start Choice [1]
      <bom:organization> bom:organizationalEntity </bom:organization> [0..1]
      <bom:individual> bom:organizationalContact </bom:individual> [0..1]
   End Choice
</...>

Schema Component Representation

<xs:complexType name="organizationOrIndividualType">
   <xs:choice>
      <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
      <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/>
   </xs:choice>
</xs:complexType>

Complex Type: organizationalContact

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	organizationalContact
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the object elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from a namespace other than this schema's namespace (lax validation).
>
   Start Sequence [0..1]
      <bom:name> xs:normalizedString </bom:name> [0..1] 
      <bom:email> xs:normalizedString </bom:email> [0..1] 
      <bom:phone> xs:normalizedString </bom:phone> [0..1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="organizationalContact">
   <xs:sequence minOccurs="0" maxOccurs="1">
      <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="email" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="phone" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
   <xs:anyAttribute namespace="##other" processContents="lax"/>
</xs:complexType>

Complex Type: organizationalEntity

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	organizationalEntity
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the object elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from a namespace other than this schema's namespace (lax validation).
>
   Start Sequence [0..1]
      <bom:name> xs:normalizedString </bom:name> [0..1] 
      <bom:url> xs:anyURI </bom:url> [0..*] 
      <bom:contact> bom:organizationalContact </bom:contact> [0..*] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="organizationalEntity">
   <xs:sequence minOccurs="0" maxOccurs="1">
      <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="unbounded"/>
      <xs:element name="contact" type="bom:organizationalContact" minOccurs="0" maxOccurs="unbounded"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
   <xs:anyAttribute namespace="##other" processContents="lax"/>
</xs:complexType>

Complex Type: outputType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	outputType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Choice [1]
      <bom:resource> bom:resourceReferenceType </bom:resource> [1] 
      <bom:environmentVars      > [1]  
         Start Sequence [0..*]
            Start Choice [1]
               <bom:environmentVar> bom:propertyType </bom:environmentVar> [0..1]
               <bom:value> xs:string </bom:value> [0..1]
            End Choice
         End Sequence
      </bom:environmentVars>
      <bom:data> bom:attachedTextType </bom:data> [1] 
   End Choice
   <bom:type> bom:outputTypeEnum </bom:type> [0..1] 
   <bom:source> bom:resourceReferenceType </bom:source> [0..1] 
   <bom:target> bom:resourceReferenceType </bom:target> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="outputType">
   <xs:sequence>
      <xs:choice>
         <xs:element name="resource" type="bom:resourceReferenceType" minOccurs="1" maxOccurs="1"/>
         <xs:element name="environmentVars" minOccurs="1" maxOccurs="1">
            <xs:complexType>
               <xs:sequence minOccurs="0" maxOccurs="unbounded">
<-- maxOccurs="unbounded" NEEDS to be set on the sequence, not the individual elements -->                  <xs:choice>
                     <xs:element name="environmentVar" type="bom:propertyType" minOccurs="0" maxOccurs="1"/>
                     <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/>
                  </xs:choice>
               </xs:sequence>
            </xs:complexType>
         </xs:element>
         <xs:element name="data" type="bom:attachedTextType" minOccurs="1" maxOccurs="1"/>
      </xs:choice>
      <xs:element name="type" type="bom:outputTypeEnum" minOccurs="0" maxOccurs="1"/>
      <xs:element name="source" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="target" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: parameterType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	parameterType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   <bom:name> xs:string </bom:name> [0..1] 
   <bom:value> xs:string </bom:value> [0..1] 
   <bom:dataType> xs:string </bom:dataType> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="parameterType">
   <xs:sequence>
      <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="dataType" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: parametersType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	parametersType
Abstract	no

XML Instance Representation

<...>
   <bom:parameter> bom:parameterType </bom:parameter> [0..*]
</...>

Schema Component Representation

<xs:complexType name="parametersType">
   <xs:sequence>
      <xs:element name="parameter" type="bom:parameterType" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
</xs:complexType>

Complex Type: patchType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	patchType
Abstract	no

XML Instance Representation

<...
 type="bom:patchClassification" [1]Attribute type
Specifies the purpose for the patch including the resolution of defects,
                    security issues, or new behavior or functionality
 
 
>
   <bom:diff> bom:diffType </bom:diff> [0..1] 
   <bom:resolves   > [0..1] 
      Start Sequence [0..*]
         <bom:issue> bom:issueType </bom:issue> [1]
      End Sequence
   </bom:resolves>
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="patchType">
   <xs:sequence>
      <xs:element name="diff" type="bom:diffType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="resolves" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="issue" type="bom:issueType"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="type" type="bom:patchClassification" use="required"/>
</xs:complexType>

Complex Type: patchesType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	patchesType
Abstract	no

XML Instance Representation

<...>
   Start Sequence [0..*]
      <bom:patch> bom:patchType </bom:patch> [1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="patchesType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="patch" type="bom:patchType"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
</xs:complexType>

Complex Type: pedigreeType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	pedigreeType
Abstract	no

XML Instance Representation

<...>
   <bom:ancestors> bom:componentsType </bom:ancestors> [0..1] 
   <bom:descendants> bom:componentsType </bom:descendants> [0..1] 
   <bom:variants> bom:componentsType </bom:variants> [0..1] 
   <bom:commits> bom:commitsType </bom:commits> [0..1] 
   <bom:patches> bom:patchesType </bom:patches> [0..1] 
   <bom:notes> xs:string </bom:notes> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="pedigreeType">
   <xs:sequence>
      <xs:element name="ancestors" type="bom:componentsType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="descendants" type="bom:componentsType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="variants" type="bom:componentsType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="commits" type="bom:commitsType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="patches" type="bom:patchesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="notes" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
</xs:complexType>

Complex Type: propertiesType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	propertiesType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:property> bom:propertyType </bom:property> [1]
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="propertiesType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="property" type="bom:propertyType"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: propertyType

Type hierarchy

Super-types:	xs:normalizedString < propertyType (by extension)
Sub-types:	None

Properties

Name	propertyType
Abstract	no

XML Instance Representation

<...
 name="xs:string" [1]Attribute name
The name of the property. Duplicate names are allowed, each potentially having a different value.
 
 
>
    xs:normalizedString
</...>

Schema Component Representation

<xs:complexType name="propertyType">
   <xs:simpleContent>
      <xs:extension base="xs:normalizedString">
         <xs:attribute name="name" type="xs:string" use="required"/>
      </xs:extension>
   </xs:simpleContent>
</xs:complexType>

Complex Type: ratingType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	ratingType
Abstract	no

XML Instance Representation

<...>
   <bom:source> bom:vulnerabilitySourceType </bom:source> [0..1] 
   <bom:score> xs:decimal </bom:score> [0..1] 
   <bom:severity> bom:severityType </bom:severity> [0..1] 
   <bom:method> bom:scoreSourceType </bom:method> [0..1] 
   <bom:vector> xs:normalizedString </bom:vector> [0..1] 
   <bom:justification> xs:string </bom:justification> [0..1] 
</...>

Schema Component Representation

<xs:complexType name="ratingType">
   <xs:sequence>
      <xs:element name="source" type="bom:vulnerabilitySourceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="score" type="xs:decimal" minOccurs="0" maxOccurs="1"/>
      <xs:element name="severity" type="bom:severityType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="method" type="bom:scoreSourceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="vector" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="justification" type="xs:string" minOccurs="0" maxOccurs="1"/>
   </xs:sequence>
</xs:complexType>

Complex Type: releaseNotesType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	releaseNotesType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:type> xs:normalizedString </bom:type> [1] 
      <bom:title> xs:string </bom:title> [0..1] 
      <bom:featuredImage> xs:anyURI </bom:featuredImage> [0..1] 
      <bom:socialImage> xs:anyURI </bom:socialImage> [0..1] 
      <bom:description> xs:string </bom:description> [0..1] 
      <bom:timestamp> xs:dateTime </bom:timestamp> [0..1] 
      <bom:aliases      > [0..1] 
         Start Sequence [0..*]
            <bom:alias> xs:normalizedString </bom:alias> [1] 
         End Sequence
      </bom:aliases>
      <bom:tags      > [0..1] 
         Start Sequence [0..*]
            <bom:tag> xs:normalizedString </bom:tag> [1] 
         End Sequence
      </bom:tags>
      <bom:resolves      > [0..1]  
         Start Sequence [0..*]
            <bom:issue> bom:issueType </bom:issue> [1]
         End Sequence
      </bom:resolves>
      <bom:notes      > [0..1] 
         Start Sequence [0..*]
            <bom:note            > [1]  
               Start Sequence [0..*]
                  <bom:locale> bom:localeType </bom:locale> [0..1] 
                  <bom:text> bom:attachedTextType </bom:text> [1] 
               End Sequence
            </bom:note>
         End Sequence
      </bom:notes>
      <bom:properties> bom:propertiesType </bom:properties> [0..1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="releaseNotesType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="type" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/>
      <xs:element name="title" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="featuredImage" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
      <xs:element name="socialImage" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="timestamp" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="aliases" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="alias" type="xs:normalizedString"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="tags" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="tag" type="xs:normalizedString"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="resolves" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="issue" type="bom:issueType"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="notes" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="note">
                  <xs:complexType>
                     <xs:sequence minOccurs="0" maxOccurs="unbounded">
                        <xs:element name="locale" type="bom:localeType" minOccurs="0" maxOccurs="1"/>
                        <xs:element name="text" type="bom:attachedTextType" minOccurs="1" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: resourceReferenceType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	resourceReferenceType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Choice [1]
      <bom:ref> union of: [ bom:refLinkType,bom:bomLinkElementType ] </bom:ref> [1] 
      <bom:externalReference> bom:externalReference </bom:externalReference> [1] 
   End Choice
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="resourceReferenceType">
   <xs:sequence>
      <xs:choice>
         <xs:element name="ref" minOccurs="1" maxOccurs="1">
            <xs:simpleType>
               <xs:union memberTypes="bom:refLinkType bom:bomLinkElementType"/>
            </xs:simpleType>
         </xs:element>
         <xs:element name="externalReference" type="bom:externalReference" minOccurs="1" maxOccurs="1"/>
      </xs:choice>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: resourceReferencesType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	resourceReferencesType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   <bom:resourceReference> bom:resourceReferenceType </bom:resourceReference> [0..*]
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="resourceReferencesType">
   <xs:sequence>
      <xs:element name="resourceReference" type="bom:resourceReferenceType" minOccurs="0" maxOccurs="unbounded"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: service

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	service
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the service elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   <bom:provider> bom:organizationalEntity </bom:provider> [0..1] 
   <bom:group> xs:normalizedString </bom:group> [0..1] 
   <bom:name> xs:normalizedString </bom:name> [1] 
   <bom:version> xs:normalizedString </bom:version> [0..1] 
   <bom:description> xs:normalizedString </bom:description> [0..1] 
   <bom:endpoints   > [0..1] 
      Start Sequence [0..*]
         <bom:endpoint> xs:anyURI </bom:endpoint> [1] 
      End Sequence
   </bom:endpoints>
   <bom:authenticated> xs:boolean </bom:authenticated> [0..1] 
   <bom:x-trust-boundary> xs:boolean </bom:x-trust-boundary> [0..1] 
   <bom:trustZone> xs:string </bom:trustZone> [0..1] 
   <bom:data   > [0..1] 
      Start Choice [1]
         Start Sequence [0..*]
            <bom:classification> bom:dataClassificationType </bom:classification> [1] 
         End Sequence
         <bom:dataflow
          name="xs:string" [0..1]Attribute name

                                            Name for the defined data.
                                        
 
 
          description="xs:string" [0..1]Attribute description

                                            Short description of the data content and usage.
                                        
 
 
          Allow any attributes from any namespace (lax validation).
         > [0..*]  
            <bom:classification> bom:dataClassificationType </bom:classification> [0..1] 
            <bom:governance> bom:dataGovernance </bom:governance> [0..1]
            <bom:source            > [0..1]  
               Start Sequence [0..*]
                  <bom:url> union of: [ xs:anyURI,bom:bomLinkElementType ] </bom:url> [1]
               End Sequence
            </bom:source>
            <bom:destination            > [0..1]  
               Start Sequence [0..*]
                  <bom:url> union of: [ xs:anyURI,bom:bomLinkElementType ] </bom:url> [1]
               End Sequence
            </bom:destination>
         </bom:dataflow>
      End Choice
   </bom:data>
   <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1]
   <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   <bom:services   > [0..1]  
      Start Sequence [0..*]
         <bom:service> bom:service </bom:service> [1]
         Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
      End Sequence
   </bom:services>
   <bom:releaseNotes> bom:releaseNotesType </bom:releaseNotes> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="service">
   <xs:sequence>
      <xs:element name="provider" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/>
      <xs:element name="group" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="name" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/>
      <xs:element name="version" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="endpoints" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="endpoint" type="xs:anyURI" minOccurs="1"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="authenticated" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
      <xs:element name="x-trust-boundary" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
      <xs:element name="trustZone" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="data" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:choice>
               <xs:sequence minOccurs="0" maxOccurs="unbounded">
                  <xs:element name="classification" type="bom:dataClassificationType"/>
               </xs:sequence>
               <xs:element name="dataflow" minOccurs="0" maxOccurs="unbounded">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="classification" type="bom:dataClassificationType" minOccurs="0" maxOccurs="1"/>
                        <xs:element name="governance" type="bom:dataGovernance" minOccurs="0" maxOccurs="1"/>
                        <xs:element name="source" minOccurs="0" maxOccurs="1">
                           <xs:complexType>
                              <xs:sequence minOccurs="0" maxOccurs="unbounded">
                                 <xs:element name="url">
                                    <xs:simpleType>
                                       <xs:union memberTypes="xs:anyURI bom:bomLinkElementType"/>
                                    </xs:simpleType>
                                 </xs:element>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                        <xs:element name="destination" minOccurs="0" maxOccurs="1">
                           <xs:complexType>
                              <xs:sequence minOccurs="0" maxOccurs="unbounded">
                                 <xs:element name="url">
                                    <xs:simpleType>
                                       <xs:union memberTypes="xs:anyURI bom:bomLinkElementType"/>
                                    </xs:simpleType>
                                 </xs:element>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                     <xs:attribute name="name" type="xs:string" use="optional"/>
                     <xs:attribute name="description" type="xs:string" use="optional"/>
                     <xs:anyAttribute namespace="##any" processContents="lax"/>
                  </xs:complexType>
               </xs:element>
            </xs:choice>
         </xs:complexType>
      </xs:element>
      <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="services" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="service" type="bom:service"/>
               <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="releaseNotes" type="bom:releaseNotesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: servicesType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	servicesType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:service> bom:service </bom:service> [1]
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="servicesType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="service" type="bom:service"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: stepType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	stepType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   <bom:name> xs:string </bom:name> [0..1] 
   <bom:description> xs:string </bom:description> [0..1] 
   <bom:commands   > [0..1]  
      <bom:command      > [0..*] 
         <bom:executed> xs:string </bom:executed> [0..1] 
         <bom:properties> bom:propertiesType </bom:properties> [0..1] 
      </bom:command>
   </bom:commands>
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="stepType">
   <xs:sequence>
      <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="commands" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="command" minOccurs="0" maxOccurs="unbounded">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="executed" type="xs:string" minOccurs="0" maxOccurs="1"/>
                        <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: swidType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	swidType
Abstract	no

XML Instance Representation

<...
 tagId="xs:string" [1]Attribute tagId
Maps to the tagId of a SoftwareIdentity.
 
 
 name="xs:string" [1]Attribute name
Maps to the name of a SoftwareIdentity.
 
 
 version="xs:string" [0..1]Attribute version
Maps to the version of a SoftwareIdentity.
 
 
 tagVersion="xs:integer" [0..1]Attribute tagVersion
Maps to the tagVersion of a SoftwareIdentity.
 
 
 patch="xs:boolean" [0..1]Attribute patch
Maps to the patch of a SoftwareIdentity.
 
 
>
   <bom:text> bom:attachedTextType </bom:text> [0..1] 
   <bom:url> xs:anyURI </bom:url> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="swidType">
   <xs:sequence>
      <xs:element name="text" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="tagId" type="xs:string" use="required"/>
   <xs:attribute name="name" type="xs:string" use="required"/>
   <xs:attribute name="version" type="xs:string" use="optional" default="0.0"/>
   <xs:attribute name="tagVersion" type="xs:integer" use="optional" default="0"/>
   <xs:attribute name="patch" type="xs:boolean" use="optional" default="false"/>
</xs:complexType>

Complex Type: taskType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	taskType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [1]Attribute bom-ref

                    An optional identifier which can be used to reference the task elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   <bom:uid> xs:string </bom:uid> [1] 
   <bom:name> xs:string </bom:name> [0..1] 
   <bom:description> xs:string </bom:description> [0..1] 
   <bom:resourceReferences> bom:resourceReferencesType </bom:resourceReferences> [0..1] 
   <bom:taskTypes   > [1]  
      <bom:taskType> bom:taskTypeEnum </bom:taskType> [0..*]
   </bom:taskTypes>
   <bom:trigger> bom:triggerType </bom:trigger> [0..1] 
   <bom:steps   > [0..1]  
      <bom:step> bom:stepType </bom:step> [0..*]
   </bom:steps>
   <bom:inputs   > [0..1]  
      <bom:input> bom:inputType </bom:input> [0..*]
   </bom:inputs>
   <bom:outputs   > [0..1]  
      <bom:output> bom:outputType </bom:output> [0..*]
   </bom:outputs>
   <bom:timeStart> xs:dateTime </bom:timeStart> [0..1] 
   <bom:timeEnd> xs:dateTime </bom:timeEnd> [0..1] 
   <bom:workspaces> bom:workspacesType </bom:workspaces> [0..1] 
   <bom:runtimeTopology> bom:dependenciesType </bom:runtimeTopology> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="taskType">
   <xs:sequence>
      <xs:element name="uid" type="xs:string" minOccurs="1" maxOccurs="1"/>
      <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="resourceReferences" type="bom:resourceReferencesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="taskTypes" minOccurs="1" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="taskType" type="bom:taskTypeEnum" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="trigger" type="bom:triggerType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="steps" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="step" type="bom:stepType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="inputs" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="input" type="bom:inputType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="outputs" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="output" type="bom:outputType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="timeStart" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="timeEnd" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="workspaces" type="bom:workspacesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="runtimeTopology" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType" use="required"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: tasksType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	tasksType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   <bom:task> bom:taskType </bom:task> [0..*]
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="tasksType">
   <xs:sequence>
      <xs:element name="task" type="bom:taskType" minOccurs="0" maxOccurs="unbounded"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: toolType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	toolType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from a namespace other than this schema's namespace (lax validation).
>
   Start Sequence [0..1]
      <bom:vendor> xs:normalizedString </bom:vendor> [0..1] 
      <bom:name> xs:normalizedString </bom:name> [0..1] 
      <bom:version> xs:normalizedString </bom:version> [0..1] 
      <bom:hashes      > [0..1] 
         Start Sequence [0..*]
            <bom:hash> bom:hashType </bom:hash> [1]
         End Sequence
      </bom:hashes>
      <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="toolType">
   <xs:sequence minOccurs="0" maxOccurs="1">
      <xs:element name="vendor" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="version" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="hashes" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="hash" type="bom:hashType"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##other" processContents="lax"/>
</xs:complexType>

Complex Type: triggerType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	triggerType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [1]Attribute bom-ref

                    An optional identifier which can be used to reference the trigger elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   <bom:uid> xs:string </bom:uid> [1] 
   <bom:name> xs:string </bom:name> [0..1] 
   <bom:description> xs:string </bom:description> [0..1] 
   <bom:resourceReferences> bom:resourceReferencesType </bom:resourceReferences> [0..1] 
   <bom:type> bom:triggerTypeType </bom:type> [1] 
   <bom:event> bom:eventType </bom:event> [0..1] 
   <bom:conditions   > [0..1] 
      <bom:condition      > [0..*]  
         <bom:description> xs:string </bom:description> [0..1] 
         <bom:expression> xs:string </bom:expression> [0..1] 
         <bom:properties> bom:propertiesType </bom:properties> [0..1] 
      </bom:condition>
   </bom:conditions>
   <bom:timeActivated> xs:dateTime </bom:timeActivated> [0..1] 
   <bom:inputs   > [0..1]  
      <bom:input> bom:inputType </bom:input> [0..*]
   </bom:inputs>
   <bom:outputs   > [0..1]  
      <bom:output> bom:outputType </bom:output> [0..*]
   </bom:outputs>
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="triggerType">
   <xs:sequence>
      <xs:element name="uid" type="xs:string" minOccurs="1" maxOccurs="1"/>
      <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="resourceReferences" type="bom:resourceReferencesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="type" type="bom:triggerTypeType" minOccurs="1" maxOccurs="1"/>
      <xs:element name="event" type="bom:eventType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="conditions" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="condition" minOccurs="0" maxOccurs="unbounded">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
                        <xs:element name="expression" type="xs:string" minOccurs="0" maxOccurs="1"/>
                        <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="timeActivated" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="inputs" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="input" type="bom:inputType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="outputs" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="output" type="bom:outputType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType" use="required"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: volumeType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	volumeType
Abstract	no

XML Instance Representation

<...>
   <bom:uid> xs:string </bom:uid> [0..1] 
   <bom:name> xs:string </bom:name> [0..1] 
   <bom:mode> bom:volumeModeEnum </bom:mode> [0..1] 
   <bom:path> xs:string </bom:path> [0..1] 
   <bom:sizeAllocated> xs:string </bom:sizeAllocated> [0..1] 
   <bom:persistent> xs:boolean </bom:persistent> [0..1] 
   <bom:remote> xs:boolean </bom:remote> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
</...>

Schema Component Representation

<xs:complexType name="volumeType">
   <xs:sequence>
      <xs:element name="uid" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="mode" type="bom:volumeModeEnum" minOccurs="0" maxOccurs="1" default="filesystem"/>
      <xs:element name="path" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="sizeAllocated" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="persistent" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
      <xs:element name="remote" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
   </xs:sequence>
</xs:complexType>

Complex Type: vulnerabilitiesType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	vulnerabilitiesType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:vulnerability> bom:vulnerabilityType </bom:vulnerability> [1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="vulnerabilitiesType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="vulnerability" type="bom:vulnerabilityType"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: vulnerabilitySourceType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	vulnerabilitySourceType
Abstract	no

XML Instance Representation

<...>
   Start Sequence [0..*]
      <bom:name> xs:normalizedString </bom:name> [0..1] 
      <bom:url> xs:anyURI </bom:url> [0..1] 
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="vulnerabilitySourceType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="name" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/>
   </xs:sequence>
</xs:complexType>

Complex Type: vulnerabilityType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	vulnerabilityType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [0..1]Attribute bom-ref

                    An optional identifier which can be used to reference the vulnerability elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
>
   Start Sequence [0..1]
      <bom:id> xs:normalizedString </bom:id> [0..1] 
      <bom:source> bom:vulnerabilitySourceType </bom:source> [0..1] 
      <bom:references      > [0..1]  
         Start Sequence [0..*]
            <bom:reference            > [1]  
               <bom:id> xs:normalizedString </bom:id> [1] 
               <bom:source> bom:vulnerabilitySourceType </bom:source> [1] 
            </bom:reference>
            Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
         End Sequence
      </bom:references>
      <bom:ratings      > [0..1]  
         <bom:rating> bom:ratingType </bom:rating> [0..*]
      </bom:ratings>
      <bom:cwes      > [0..1] 
         <bom:cwe> xs:integer </bom:cwe> [0..*]
      </bom:cwes>
      <bom:description> xs:string </bom:description> [0..1] 
      <bom:detail> xs:string </bom:detail> [0..1] 
      <bom:recommendation> xs:string </bom:recommendation> [0..1] 
      <bom:workaround> xs:string </bom:workaround> [0..1] 
      <bom:proofOfConcept      > [0..1] 
         <bom:reproductionSteps> xs:string </bom:reproductionSteps> [0..1] 
         <bom:environment> xs:string </bom:environment> [0..1] 
         <bom:supportingMaterial         > [0..1]  
            <bom:attachment> bom:attachedTextType </bom:attachment> [0..*]
         </bom:supportingMaterial>
      </bom:proofOfConcept>
      <bom:advisories      > [0..1] 
         <bom:advisory> bom:advisoryType </bom:advisory> [0..*]
      </bom:advisories>
      <bom:created> xs:dateTime </bom:created> [0..1] 
      <bom:published> xs:dateTime </bom:published> [0..1] 
      <bom:updated> xs:dateTime </bom:updated> [0..1] 
      <bom:rejected> xs:dateTime </bom:rejected> [0..1] 
      <bom:credits      > [0..1]  
         <bom:organizations         > [0..1]  
            Start Sequence [0..*]
               <bom:organization> bom:organizationalEntity </bom:organization> [1]
            End Sequence
         </bom:organizations>
         <bom:individuals         > [0..1]  
            Start Sequence [0..*]
               <bom:individual> bom:organizationalContact </bom:individual> [1]
            End Sequence
         </bom:individuals>
      </bom:credits>
      <bom:tools      > [0..1]  
         Start Choice [1]
            Start Sequence [0..*]
               <bom:tool> bom:toolType </bom:tool> [0..1] 
            End Sequence
            Start Sequence [0..1]
               <bom:components> bom:componentsType </bom:components> [0..1] 
               <bom:services> bom:servicesType </bom:services> [0..1] 
            End Sequence
         End Choice
      </bom:tools>
      <bom:analysis      > [0..1] 
         Start Sequence [0..1]
            <bom:state> bom:impactAnalysisStateType </bom:state> [0..1] 
            <bom:justification> bom:impactAnalysisJustificationType </bom:justification> [0..1] 
            <bom:responses            > [0..1]  
               Start Sequence [0..*]
                  <bom:response> bom:impactAnalysisResponsesType </bom:response> [1]
               End Sequence
            </bom:responses>
            <bom:detail> xs:string </bom:detail> [0..1] 
            <bom:firstIssued> xs:dateTime </bom:firstIssued> [0..1] 
            <bom:lastUpdated> xs:dateTime </bom:lastUpdated> [0..1] 
         End Sequence
      </bom:analysis>
      <bom:affects      > [0..1]  
         Start Sequence [0..*]
            <bom:target            > [1] 
               Start Sequence [0..1]
                  <bom:ref> union of: [ bom:refLinkType,bom:bomLinkElementType ] </bom:ref> [1] 
                  <bom:versions                  > [0..1]  
                     Start Sequence [0..*]
                        <bom:version                        > [1] 
                           Start Sequence [0..1]
                              Start Choice [1]
                                 <bom:version> xs:normalizedString </bom:version> [1] 
                                 <bom:range> xs:normalizedString </bom:range> [1] 
                              End Choice
                              <bom:status> bom:impactAnalysisAffectedStatusType </bom:status> [0..1] 
                           End Sequence
                        </bom:version>
                     End Sequence
                  </bom:versions>
               End Sequence
            </bom:target>
         End Sequence
      </bom:affects>
      <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="vulnerabilityType">
   <xs:sequence minOccurs="0" maxOccurs="1">
      <xs:element name="id" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/>
      <xs:element name="source" type="bom:vulnerabilitySourceType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="references" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="reference">
                  <xs:complexType>
                     <xs:sequence minOccurs="1" maxOccurs="1">
                        <xs:element name="id" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/>
                        <xs:element name="source" type="bom:vulnerabilitySourceType" minOccurs="1" maxOccurs="1"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="ratings" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="rating" type="bom:ratingType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="cwes" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="cwe" type="xs:integer" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="detail" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="recommendation" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="workaround" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="proofOfConcept" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="reproductionSteps" type="xs:string" minOccurs="0" maxOccurs="1"/>
               <xs:element name="environment" type="xs:string" minOccurs="0" maxOccurs="1"/>
               <xs:element name="supportingMaterial" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence>
                        <xs:element name="attachment" type="bom:attachedTextType" minOccurs="0" maxOccurs="unbounded"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="advisories" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="advisory" type="bom:advisoryType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="created" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="published" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="updated" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="rejected" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="credits" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="organizations" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence minOccurs="0" maxOccurs="unbounded">
                        <xs:element name="organization" type="bom:organizationalEntity"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="individuals" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence minOccurs="0" maxOccurs="unbounded">
                        <xs:element name="individual" type="bom:organizationalContact"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="tools" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:choice>
               <xs:sequence minOccurs="0" maxOccurs="unbounded">
                  <xs:element name="tool" type="bom:toolType" minOccurs="0"/>
               </xs:sequence>
               <xs:sequence minOccurs="0" maxOccurs="1">
                  <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/>
                  <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/>
               </xs:sequence>
            </xs:choice>
         </xs:complexType>
      </xs:element>
      <xs:element name="analysis" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="1">
               <xs:element name="state" type="bom:impactAnalysisStateType" minOccurs="0" maxOccurs="1"/>
               <xs:element name="justification" type="bom:impactAnalysisJustificationType" minOccurs="0" maxOccurs="1"/>
               <xs:element name="responses" minOccurs="0" maxOccurs="1">
                  <xs:complexType>
                     <xs:sequence minOccurs="0" maxOccurs="unbounded">
                        <xs:element name="response" type="bom:impactAnalysisResponsesType"/>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
               <xs:element name="detail" type="xs:string" minOccurs="0" maxOccurs="1"/>
               <xs:element name="firstIssued" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
               <xs:element name="lastUpdated" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="affects" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence minOccurs="0" maxOccurs="unbounded">
               <xs:element name="target">
                  <xs:complexType>
                     <xs:sequence minOccurs="0" maxOccurs="1">
                        <xs:element name="ref" minOccurs="1" maxOccurs="1">
                           <xs:simpleType>
                              <xs:union memberTypes="bom:refLinkType bom:bomLinkElementType"/>
                           </xs:simpleType>
                        </xs:element>
                        <xs:element name="versions" minOccurs="0" maxOccurs="1">
                           <xs:complexType>
                              <xs:sequence minOccurs="0" maxOccurs="unbounded">
                                 <xs:element name="version">
                                    <xs:complexType>
                                       <xs:sequence minOccurs="0" maxOccurs="1">
                                          <xs:choice>
                                             <xs:element name="version" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/>
                                             <xs:element name="range" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/>
                                          </xs:choice>
                                          <xs:element name="status" type="bom:impactAnalysisAffectedStatusType" minOccurs="0" maxOccurs="1" default="affected"/>
                                       </xs:sequence>
                                    </xs:complexType>
                                 </xs:element>
                              </xs:sequence>
                           </xs:complexType>
                        </xs:element>
                     </xs:sequence>
                  </xs:complexType>
               </xs:element>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType"/>
</xs:complexType>

Complex Type: workflowType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	workflowType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [1]Attribute bom-ref

                    An optional identifier which can be used to reference the workflow elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   <bom:uid> xs:string </bom:uid> [1] 
   <bom:name> xs:string </bom:name> [0..1] 
   <bom:description> xs:string </bom:description> [0..1] 
   <bom:resourceReferences> bom:resourceReferencesType </bom:resourceReferences> [0..1] 
   <bom:tasks> bom:tasksType </bom:tasks> [0..1] 
   <bom:taskDependencies> bom:dependenciesType </bom:taskDependencies> [0..1] 
   <bom:taskTypes   > [1]  
      <bom:taskType> bom:taskTypeEnum </bom:taskType> [0..*]
   </bom:taskTypes>
   <bom:trigger> bom:triggerType </bom:trigger> [0..1] 
   <bom:steps   > [0..1]  
      <bom:step> bom:stepType </bom:step> [0..*]
   </bom:steps>
   <bom:inputs   > [0..1]  
      <bom:input> bom:inputType </bom:input> [0..*]
   </bom:inputs>
   <bom:outputs   > [0..1]  
      <bom:output> bom:outputType </bom:output> [0..*]
   </bom:outputs>
   <bom:timeStart> xs:dateTime </bom:timeStart> [0..1] 
   <bom:timeEnd> xs:dateTime </bom:timeEnd> [0..1] 
   <bom:workspaces> bom:workspacesType </bom:workspaces> [0..1] 
   <bom:runtimeTopology> bom:dependenciesType </bom:runtimeTopology> [0..1] 
   <bom:properties> bom:propertiesType </bom:properties> [0..1] 
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="workflowType">
   <xs:sequence>
      <xs:element name="uid" type="xs:string" minOccurs="1" maxOccurs="1"/>
      <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="resourceReferences" type="bom:resourceReferencesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="tasks" type="bom:tasksType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="taskDependencies" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="taskTypes" minOccurs="1" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="taskType" type="bom:taskTypeEnum" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="trigger" type="bom:triggerType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="steps" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="step" type="bom:stepType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="inputs" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="input" type="bom:inputType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="outputs" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="output" type="bom:outputType" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="timeStart" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="timeEnd" type="xs:dateTime" minOccurs="0" maxOccurs="1"/>
      <xs:element name="workspaces" type="bom:workspacesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="runtimeTopology" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType" use="required"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: workflowsType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	workflowsType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   <bom:workflow> bom:workflowType </bom:workflow> [0..*]
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="workflowsType">
   <xs:sequence>
      <xs:element name="workflow" type="bom:workflowType" minOccurs="0" maxOccurs="unbounded"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: workspaceType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	workspaceType
Abstract	no

XML Instance Representation

<...
 bom-ref="bom:refType" [1]Attribute bom-ref

                    An optional identifier which can be used to reference the workflow elsewhere in the BOM.
                    Uniqueness is enforced within all elements and children of the root-level bom element.
                
 
 
 Allow any attributes from any namespace (lax validation).
>
   Start Sequence [0..*]
      <bom:uid> xs:string </bom:uid> [1] 
      <bom:name> xs:string </bom:name> [0..1] 
      <bom:aliases      > [0..1]  
         <bom:alias> xs:string </bom:alias> [0..*]
      </bom:aliases>
      <bom:description> xs:string </bom:description> [0..1] 
      <bom:resourceReferences> bom:resourceReferencesType </bom:resourceReferences> [0..1] 
      <bom:accessMode> bom:accessModeEnum </bom:accessMode> [0..1] 
      <bom:mountPath> xs:string </bom:mountPath> [0..1] 
      <bom:managedDataType> xs:string </bom:managedDataType> [0..1] 
      <bom:volumeRequest> xs:string </bom:volumeRequest> [0..1] 
      <bom:volume> bom:volumeType </bom:volume> [0..1] 
      <bom:properties> bom:propertiesType </bom:properties> [0..1] 
      Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
   End Sequence
</...>

Schema Component Representation

<xs:complexType name="workspaceType">
   <xs:sequence minOccurs="0" maxOccurs="unbounded">
      <xs:element name="uid" type="xs:string" minOccurs="1" maxOccurs="1"/>
      <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="aliases" minOccurs="0" maxOccurs="1">
         <xs:complexType>
            <xs:sequence>
               <xs:element name="alias" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
            </xs:sequence>
         </xs:complexType>
      </xs:element>
      <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="resourceReferences" type="bom:resourceReferencesType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="accessMode" type="bom:accessModeEnum" minOccurs="0" maxOccurs="1"/>
      <xs:element name="mountPath" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="managedDataType" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="volumeRequest" type="xs:string" minOccurs="0" maxOccurs="1"/>
      <xs:element name="volume" type="bom:volumeType" minOccurs="0" maxOccurs="1"/>
      <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:attribute name="bom-ref" type="bom:refType" use="required"/>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Complex Type: workspacesType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	workspacesType
Abstract	no

XML Instance Representation

<...
 Allow any attributes from any namespace (lax validation).
>
   <bom:workspace> bom:workspaceType </bom:workspace> [0..*]
   Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*]
</...>

Schema Component Representation

<xs:complexType name="workspacesType">
   <xs:sequence>
      <xs:element name="workspace" type="bom:workspaceType" minOccurs="0" maxOccurs="unbounded"/>
      <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
   </xs:sequence>
   <xs:anyAttribute namespace="##any" processContents="lax"/>
</xs:complexType>

Simple Type: accessModeEnum

Type hierarchy

Super-types:	xs:string < accessModeEnum (by restriction)
Sub-types:	None

Properties

Name	accessModeEnum
Content	Base XSD Type: string value comes from list: {'read-only'\|'read-write'\|'read-write-once'\|'write-once'\|'write-only'}

Schema Component Representation

<xs:simpleType name="accessModeEnum">
   <xs:restriction base="xs:string">
      <xs:enumeration value="read-only"/>
      <xs:enumeration value="read-write"/>
      <xs:enumeration value="read-write-once"/>
      <xs:enumeration value="write-once"/>
      <xs:enumeration value="write-only"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: aggregateType

Type hierarchy

Super-types:	xs:string < aggregateType (by restriction)
Sub-types:	None

Properties

Name	aggregateType
Content	Base XSD Type: string value comes from list: { 'complete'\| 'incomplete'\| 'incomplete_first_party_only'\| 'incomplete_first_party_proprietary_only'\| 'incomplete_first_party_opensource_only'\| 'incomplete_third_party_only'\| 'incomplete_third_party_proprietary_only'\| 'incomplete_third_party_opensource_only'\| 'unknown'\| 'not_specified'}

Schema Component Representation

<xs:simpleType name="aggregateType">
   <xs:restriction base="xs:string">
      <xs:enumeration value="complete"/>
      <xs:enumeration value="incomplete"/>
      <xs:enumeration value="incomplete_first_party_only"/>
      <xs:enumeration value="incomplete_first_party_proprietary_only"/>
      <xs:enumeration value="incomplete_first_party_opensource_only"/>
      <xs:enumeration value="incomplete_third_party_only"/>
      <xs:enumeration value="incomplete_third_party_proprietary_only"/>
      <xs:enumeration value="incomplete_third_party_opensource_only"/>
      <xs:enumeration value="unknown"/>
      <xs:enumeration value="not_specified"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: bomLinkDocumentType

Type hierarchy

Super-types:	xs:anyURI < bomLinkDocumentType (by restriction)
Sub-types:	None

Properties

Name	bomLinkDocumentType
Content	Base XSD Type: anyURI pattern = urn:cdx:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/[1-9][0-9]*

Schema Component Representation

<xs:simpleType name="bomLinkDocumentType">
   <xs:restriction base="xs:anyURI">
<-- part of the pattern is based on `bom.serialNumber`'s pattern -->      <xs:pattern value="urn:cdx:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/[1-9][0-9]*"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: bomLinkElementType

Type hierarchy

Super-types:	xs:anyURI < bomLinkElementType (by restriction)
Sub-types:	None

Properties

Name	bomLinkElementType
Content	Base XSD Type: anyURI pattern = urn:cdx:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/[1-9][0-9]*#.+

Schema Component Representation

<xs:simpleType name="bomLinkElementType">
   <xs:restriction base="xs:anyURI">
<-- part of the pattern is based on `bom.serialNumber`'s pattern -->      <xs:pattern value="urn:cdx:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/[1-9][0-9]*#.+"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: bomLinkType

Type hierarchy

Super-types:	None
Sub-types:	None

Properties

Name	bomLinkType
Content	Union of following types: bom:bomLinkDocumentType bom:bomLinkElementType

Schema Component Representation

<xs:simpleType name="bomLinkType">
   <xs:union memberTypes="bom:bomLinkDocumentType bom:bomLinkElementType"/>
</xs:simpleType>

Simple Type: classification

Type hierarchy

Super-types:	xs:string < classification (by restriction)
Sub-types:	None

Properties

Name	classification
Content	Base XSD Type: string value comes from list: { 'application'\| 'framework'\| 'library'\| 'container'\| 'platform'\| 'operating-system'\| 'device'\| 'device-driver'\| 'firmware'\| 'file'\| 'machine-learning-model'\| 'data'}

Schema Component Representation

<xs:simpleType name="classification">
   <xs:restriction base="xs:string">
      <xs:enumeration value="application"/>
      <xs:enumeration value="framework"/>
      <xs:enumeration value="library"/>
      <xs:enumeration value="container"/>
      <xs:enumeration value="platform"/>
      <xs:enumeration value="operating-system"/>
      <xs:enumeration value="device"/>
      <xs:enumeration value="device-driver"/>
      <xs:enumeration value="firmware"/>
      <xs:enumeration value="file"/>
      <xs:enumeration value="machine-learning-model"/>
      <xs:enumeration value="data"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: componentDataTypeEnumeration

Type hierarchy

Super-types:	xs:string < componentDataTypeEnumeration (by restriction)
Sub-types:	None

Properties

Name	componentDataTypeEnumeration
Content	Base XSD Type: string value comes from list: {'source-code'\|'configuration'\|'dataset'\|'definition'\|'other'}

Schema Component Representation

<xs:simpleType name="componentDataTypeEnumeration">
   <xs:restriction base="xs:string">
      <xs:enumeration value="source-code"/>
      <xs:enumeration value="configuration"/>
      <xs:enumeration value="dataset"/>
      <xs:enumeration value="definition"/>
      <xs:enumeration value="other"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: cpe

Type hierarchy

Super-types:	xs:string < cpe (by restriction)
Sub-types:	None

Properties

Name	cpe
Content	Base XSD Type: string pattern = ([c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\._\-~%]){0,6})\|(cpe:2\.3:[aho\\-](:(((\?\|\?)([a-zA-Z0-9\-\._]\|(\\[\\\\?!"#$$%&'\+,/:;<=>@\[\]\^`\{\\|}~]))+(\?\|\?))\|[\\-])){5}(:(([a-zA-Z]{2,3}(-([a-zA-Z]{2}\|[0-9]{3}))?)\|[\\-]))(:(((\?\|\?)([a-zA-Z0-9\-\._]\|(\\[\\\\?!"#$$%&'\+,/:;<=>@\[\]\^`\{\\|}~]))+(\?\|\?))\|[\*\-])){4})

Schema Component Representation

<xs:simpleType name="cpe">
   <xs:restriction base="xs:string">
      <xs:pattern value="([c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\._\-~%]*){0,6})|(cpe:2\.3:[aho\*\-](:(((\?*|\*?)([a-zA-Z0-9\-\._]|(\\[\\\*\?!"#$$%&'\(\)\+,/:;<=>@\[\]\^`\{\|}~]))+(\?*|\*?))|[\*\-])){5}(:(([a-zA-Z]{2,3}(-([a-zA-Z]{2}|[0-9]{3}))?)|[\*\-]))(:(((\?*|\*?)([a-zA-Z0-9\-\._]|(\\[\\\*\?!"#$$%&'\(\)\+,/:;<=>@\[\]\^`\{\|}~]))+(\?*|\*?))|[\*\-])){4})"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: dataFlowType

Type hierarchy

Super-types:	xs:string < dataFlowType (by restriction)
Sub-types:	None

Properties

Name	dataFlowType
Content	Base XSD Type: string value comes from list: {'inbound'\|'outbound'\|'bi-directional'\|'unknown'}

Schema Component Representation

<xs:simpleType name="dataFlowType">
   <xs:restriction base="xs:string">
      <xs:enumeration value="inbound"/>
      <xs:enumeration value="outbound"/>
      <xs:enumeration value="bi-directional"/>
      <xs:enumeration value="unknown"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: decimalPercentType

Type hierarchy

Super-types:	xs:decimal < decimalPercentType (by restriction)
Sub-types:	None

Properties

Name	decimalPercentType
Content	Base XSD Type: decimal 0 <= value <= 1

Schema Component Representation

<xs:simpleType name="decimalPercentType">
   <xs:restriction base="xs:decimal">
      <xs:minInclusive value="0"/>
      <xs:maxInclusive value="1"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: encoding

Type hierarchy

Super-types:	xs:string < encoding (by restriction)
Sub-types:	None

Properties

Name	encoding
Content	Base XSD Type: string value comes from list: {'base64'}

Schema Component Representation

<xs:simpleType name="encoding">
   <xs:restriction base="xs:string">
      <xs:enumeration value="base64"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: evidenceTechnique

Type hierarchy

Super-types:	xs:string < evidenceTechnique (by restriction)
Sub-types:	None

Properties

Name	evidenceTechnique
Content	Base XSD Type: string value comes from list: { 'source-code-analysis'\| 'binary-analysis'\| 'manifest-analysis'\| 'ast-fingerprint'\| 'hash-comparison'\| 'instrumentation'\| 'dynamic-analysis'\| 'filename'\| 'attestation'\| 'other'}

Schema Component Representation

<xs:simpleType name="evidenceTechnique">
   <xs:restriction base="xs:string">
      <xs:enumeration value="source-code-analysis"/>
      <xs:enumeration value="binary-analysis"/>
      <xs:enumeration value="manifest-analysis"/>
      <xs:enumeration value="ast-fingerprint"/>
      <xs:enumeration value="hash-comparison"/>
      <xs:enumeration value="instrumentation"/>
      <xs:enumeration value="dynamic-analysis"/>
      <xs:enumeration value="filename"/>
      <xs:enumeration value="attestation"/>
      <xs:enumeration value="other"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: externalReferenceType

Type hierarchy

Super-types:	xs:string < externalReferenceType (by restriction)
Sub-types:	None

Properties

Name	externalReferenceType
Content	Base XSD Type: string value comes from list: { 'vcs'\| 'issue-tracker'\| 'website'\| 'advisories'\| 'bom'\| 'mailing-list'\| 'social'\| 'chat'\| 'documentation'\| 'support'\| 'distribution'\| 'distribution-intake'\| 'license'\| 'build-meta'\| 'build-system'\| 'release-notes'\| 'security-contact'\| 'model-card'\| 'log'\| 'configuration'\| 'evidence'\| 'formulation'\| 'attestation'\| 'threat-model'\| 'adversary-model'\| 'risk-assessment'\| 'vulnerability-assertion'\| 'exploitability-statement'\| 'pentest-report'\| 'static-analysis-report'\| 'dynamic-analysis-report'\| 'runtime-analysis-report'\| 'component-analysis-report'\| 'maturity-report'\| 'certification-report'\| 'quality-metrics'\| 'codified-infrastructure'\| 'poam'\| 'other'}

Schema Component Representation

<xs:simpleType name="externalReferenceType">
   <xs:restriction base="xs:string">
      <xs:enumeration value="vcs"/>
      <xs:enumeration value="issue-tracker"/>
      <xs:enumeration value="website"/>
      <xs:enumeration value="advisories"/>
      <xs:enumeration value="bom"/>
      <xs:enumeration value="mailing-list"/>
      <xs:enumeration value="social"/>
      <xs:enumeration value="chat"/>
      <xs:enumeration value="documentation"/>
      <xs:enumeration value="support"/>
      <xs:enumeration value="distribution"/>
      <xs:enumeration value="distribution-intake"/>
      <xs:enumeration value="license"/>
      <xs:enumeration value="build-meta"/>
      <xs:enumeration value="build-system"/>
      <xs:enumeration value="release-notes"/>
      <xs:enumeration value="security-contact"/>
      <xs:enumeration value="model-card"/>
      <xs:enumeration value="log"/>
      <xs:enumeration value="configuration"/>
      <xs:enumeration value="evidence"/>
      <xs:enumeration value="formulation"/>
      <xs:enumeration value="attestation"/>
      <xs:enumeration value="threat-model"/>
      <xs:enumeration value="adversary-model"/>
      <xs:enumeration value="risk-assessment"/>
      <xs:enumeration value="vulnerability-assertion"/>
      <xs:enumeration value="exploitability-statement"/>
      <xs:enumeration value="pentest-report"/>
      <xs:enumeration value="static-analysis-report"/>
      <xs:enumeration value="dynamic-analysis-report"/>
      <xs:enumeration value="runtime-analysis-report"/>
      <xs:enumeration value="component-analysis-report"/>
      <xs:enumeration value="maturity-report"/>
      <xs:enumeration value="certification-report"/>
      <xs:enumeration value="quality-metrics"/>
      <xs:enumeration value="codified-infrastructure"/>
      <xs:enumeration value="poam"/>
      <xs:enumeration value="other"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: hashAlg

Type hierarchy

Super-types:	xs:string < hashAlg (by restriction)
Sub-types:	None

Properties

Name	hashAlg
Content	Base XSD Type: string value comes from list: { 'MD5'\| 'SHA-1'\| 'SHA-256'\| 'SHA-384'\| 'SHA-512'\| 'SHA3-256'\| 'SHA3-384'\| 'SHA3-512'\| 'BLAKE2b-256'\| 'BLAKE2b-384'\| 'BLAKE2b-512'\| 'BLAKE3'}

Schema Component Representation

<xs:simpleType name="hashAlg">
   <xs:restriction base="xs:string">
      <xs:enumeration value="MD5"/>
      <xs:enumeration value="SHA-1"/>
      <xs:enumeration value="SHA-256"/>
      <xs:enumeration value="SHA-384"/>
      <xs:enumeration value="SHA-512"/>
      <xs:enumeration value="SHA3-256"/>
      <xs:enumeration value="SHA3-384"/>
      <xs:enumeration value="SHA3-512"/>
      <xs:enumeration value="BLAKE2b-256"/>
      <xs:enumeration value="BLAKE2b-384"/>
      <xs:enumeration value="BLAKE2b-512"/>
      <xs:enumeration value="BLAKE3"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: hashValue

Type hierarchy

Super-types:	xs:token < hashValue (by restriction)
Sub-types:	hashType (by extension)

Properties

Name	hashValue
Content	Base XSD Type: token pattern = ([a-fA-F0-9]{32})\|([a-fA-F0-9]{40})\|([a-fA-F0-9]{64})\|([a-fA-F0-9]{96})\|([a-fA-F0-9]{128})

Schema Component Representation

<xs:simpleType name="hashValue">
   <xs:restriction base="xs:token">
      <xs:pattern value="([a-fA-F0-9]{32})|([a-fA-F0-9]{40})|([a-fA-F0-9]{64})|([a-fA-F0-9]{96})|([a-fA-F0-9]{128})"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: identityFieldType

Type hierarchy

Super-types:	xs:string < identityFieldType (by restriction)
Sub-types:	None

Properties

Name	identityFieldType
Content	Base XSD Type: string value comes from list: { 'group'\| 'name'\| 'version'\| 'purl'\| 'cpe'\| 'swid'\| 'hash'}

Schema Component Representation

<xs:simpleType name="identityFieldType">
   <xs:restriction base="xs:string">
      <xs:enumeration value="group"/>
      <xs:enumeration value="name"/>
      <xs:enumeration value="version"/>
      <xs:enumeration value="purl"/>
      <xs:enumeration value="cpe"/>
      <xs:enumeration value="swid"/>
      <xs:enumeration value="hash"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: impactAnalysisAffectedStatusType

Type hierarchy

Super-types:	xs:string < impactAnalysisAffectedStatusType (by restriction)
Sub-types:	None

Properties

Name	impactAnalysisAffectedStatusType
Content	Base XSD Type: string value comes from list: {'affected'\|'unaffected'\|'unknown'}
Prohibited Derivations	restriction

Schema Component Representation

<xs:simpleType name="impactAnalysisAffectedStatusType" final="restriction">
   <xs:restriction base="xs:string">
      <xs:enumeration value="affected"/>
      <xs:enumeration value="unaffected"/>
      <xs:enumeration value="unknown"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: impactAnalysisJustificationType

Type hierarchy

Super-types:	xs:string < impactAnalysisJustificationType (by restriction)
Sub-types:	None

Properties

Name	impactAnalysisJustificationType
Content	Base XSD Type: string value comes from list: { 'code_not_present'\| 'code_not_reachable'\| 'requires_configuration'\| 'requires_dependency'\| 'requires_environment'\| 'protected_by_compiler'\| 'protected_at_runtime'\| 'protected_at_perimeter'\| 'protected_by_mitigating_control'}
Prohibited Derivations	restriction

Schema Component Representation

<xs:simpleType name="impactAnalysisJustificationType" final="restriction">
   <xs:restriction base="xs:string">
      <xs:enumeration value="code_not_present"/>
      <xs:enumeration value="code_not_reachable"/>
      <xs:enumeration value="requires_configuration"/>
      <xs:enumeration value="requires_dependency"/>
      <xs:enumeration value="requires_environment"/>
      <xs:enumeration value="protected_by_compiler"/>
      <xs:enumeration value="protected_at_runtime"/>
      <xs:enumeration value="protected_at_perimeter"/>
      <xs:enumeration value="protected_by_mitigating_control"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: impactAnalysisResponsesType

Type hierarchy

Super-types:	xs:string < impactAnalysisResponsesType (by restriction)
Sub-types:	None

Properties

Name	impactAnalysisResponsesType
Content	Base XSD Type: string value comes from list: {'can_not_fix'\|'will_not_fix'\|'update'\|'rollback'\|'workaround_available'}
Prohibited Derivations	restriction

Schema Component Representation

<xs:simpleType name="impactAnalysisResponsesType" final="restriction">
   <xs:restriction base="xs:string">
      <xs:enumeration value="can_not_fix"/>
      <xs:enumeration value="will_not_fix"/>
      <xs:enumeration value="update"/>
      <xs:enumeration value="rollback"/>
      <xs:enumeration value="workaround_available"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: impactAnalysisStateType

Type hierarchy

Super-types:	xs:string < impactAnalysisStateType (by restriction)
Sub-types:	None

Properties

Name	impactAnalysisStateType
Content	Base XSD Type: string value comes from list: { 'resolved'\| 'resolved_with_pedigree'\| 'exploitable'\| 'in_triage'\| 'false_positive'\| 'not_affected'}
Prohibited Derivations	restriction

Schema Component Representation

<xs:simpleType name="impactAnalysisStateType" final="restriction">
   <xs:restriction base="xs:string">
      <xs:enumeration value="resolved"/>
      <xs:enumeration value="resolved_with_pedigree"/>
      <xs:enumeration value="exploitable"/>
      <xs:enumeration value="in_triage"/>
      <xs:enumeration value="false_positive"/>
      <xs:enumeration value="not_affected"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: issueClassification

Type hierarchy

Super-types:	xs:string < issueClassification (by restriction)
Sub-types:	None

Properties

Name	issueClassification
Content	Base XSD Type: string value comes from list: {'defect'\|'enhancement'\|'security'}

Schema Component Representation

<xs:simpleType name="issueClassification">
   <xs:restriction base="xs:string">
      <xs:enumeration value="defect"/>
      <xs:enumeration value="enhancement"/>
      <xs:enumeration value="security"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: licenseTypeEnum

Type hierarchy

Super-types:	xs:string < licenseTypeEnum (by restriction)
Sub-types:	None

Properties

Name	licenseTypeEnum
Content	Base XSD Type: string value comes from list: { 'academic'\| 'appliance'\| 'client-access'\| 'concurrent-user'\| 'core-points'\| 'custom-metric'\| 'device'\| 'evaluation'\| 'named-user'\| 'node-locked'\| 'oem'\| 'perpetual'\| 'processor-points'\| 'subscription'\| 'user'\| 'other'}

Schema Component Representation

<xs:simpleType name="licenseTypeEnum">
   <xs:restriction base="xs:string">
      <xs:enumeration value="academic"/>
      <xs:enumeration value="appliance"/>
      <xs:enumeration value="client-access"/>
      <xs:enumeration value="concurrent-user"/>
      <xs:enumeration value="core-points"/>
      <xs:enumeration value="custom-metric"/>
      <xs:enumeration value="device"/>
      <xs:enumeration value="evaluation"/>
      <xs:enumeration value="named-user"/>
      <xs:enumeration value="node-locked"/>
      <xs:enumeration value="oem"/>
      <xs:enumeration value="perpetual"/>
      <xs:enumeration value="processor-points"/>
      <xs:enumeration value="subscription"/>
      <xs:enumeration value="user"/>
      <xs:enumeration value="other"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: lifecyclePhaseType

Type hierarchy

Super-types:	xs:string < lifecyclePhaseType (by restriction)
Sub-types:	None

Properties

Name	lifecyclePhaseType
Content	Base XSD Type: string value comes from list: { 'design'\| 'pre-build'\| 'build'\| 'post-build'\| 'operations'\| 'discovery'\| 'decommission'}

Schema Component Representation

<xs:simpleType name="lifecyclePhaseType">
   <xs:restriction base="xs:string">
      <xs:enumeration value="design"/>
      <xs:enumeration value="pre-build"/>
      <xs:enumeration value="build"/>
      <xs:enumeration value="post-build"/>
      <xs:enumeration value="operations"/>
      <xs:enumeration value="discovery"/>
      <xs:enumeration value="decommission"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: localeType

Type hierarchy

Super-types:	xs:string < localeType (by restriction)
Sub-types:	None

Properties

Name	localeType
Content	Base XSD Type: string pattern = ([a-z]{2})(-[A-Z]{2})?

Schema Component Representation

<xs:simpleType name="localeType">
   <xs:restriction base="xs:string">
      <xs:pattern value="([a-z]{2})(-[A-Z]{2})?"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: machineLearningApproachType

Type hierarchy

Super-types:	xs:string < machineLearningApproachType (by restriction)
Sub-types:	None

Properties

Name	machineLearningApproachType
Content	Base XSD Type: string value comes from list: {'supervised'\|'unsupervised'\|'reinforcement-learning'\|'semi-supervised'\|'self-supervised'}

Schema Component Representation

<xs:simpleType name="machineLearningApproachType">
   <xs:restriction base="xs:string">
      <xs:enumeration value="supervised"/>
      <xs:enumeration value="unsupervised"/>
      <xs:enumeration value="reinforcement-learning"/>
      <xs:enumeration value="semi-supervised"/>
      <xs:enumeration value="self-supervised"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: mimeType

Type hierarchy

Super-types:	xs:token < mimeType (by restriction)
Sub-types:	None

Properties

Name	mimeType
Content	Base XSD Type: token pattern = [-+a-z0-9.]+/[-+a-z0-9.]+

Schema Component Representation

<xs:simpleType name="mimeType">
   <xs:restriction base="xs:token">
      <xs:pattern value="[-+a-z0-9.]+/[-+a-z0-9.]+"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: outputTypeEnum

Type hierarchy

Super-types:	xs:string < outputTypeEnum (by restriction)
Sub-types:	None

Properties

Name	outputTypeEnum
Content	Base XSD Type: string value comes from list: { 'artifact'\| 'attestation'\| 'log'\| 'evidence'\| 'metrics'\| 'other'}

Schema Component Representation

<xs:simpleType name="outputTypeEnum">
   <xs:restriction base="xs:string">
      <xs:enumeration value="artifact"/>
      <xs:enumeration value="attestation"/>
      <xs:enumeration value="log"/>
      <xs:enumeration value="evidence"/>
      <xs:enumeration value="metrics"/>
      <xs:enumeration value="other"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: patchClassification

Type hierarchy

Super-types:	xs:string < patchClassification (by restriction)
Sub-types:	None

Properties

Name	patchClassification
Content	Base XSD Type: string value comes from list: {'unofficial'\|'monkey'\|'backport'\|'cherry-pick'}

Schema Component Representation

<xs:simpleType name="patchClassification">
   <xs:restriction base="xs:string">
      <xs:enumeration value="unofficial"/>
      <xs:enumeration value="monkey"/>
      <xs:enumeration value="backport"/>
      <xs:enumeration value="cherry-pick"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: refLinkType

Type hierarchy

Super-types:	xs:string < refType (by restriction) < refLinkType (by restriction)
Sub-types:	None

Properties

Name	refLinkType
Content	Base XSD Type: string length >= 1

Schema Component Representation

<xs:simpleType name="refLinkType">
   <xs:restriction base="bom:refType"/>
</xs:simpleType>

Simple Type: refType

Type hierarchy

Super-types:	xs:string < refType (by restriction)
Sub-types:	refLinkType (by restriction)

Properties

Name	refType
Content	Base XSD Type: string length >= 1

Schema Component Representation

<xs:simpleType name="refType">
   <xs:restriction base="xs:string">
      <xs:minLength value="1"/>
<-- value SHOULD not start with the BOM-Link intro "urn:cdx:" -->   </xs:restriction>
</xs:simpleType>

Simple Type: scope

Type hierarchy

Super-types:	xs:string < scope (by restriction)
Sub-types:	None

Properties

Name	scope
Content	Base XSD Type: string value comes from list: {'required'\|'optional'\|'excluded'}

Schema Component Representation

<xs:simpleType name="scope">
   <xs:restriction base="xs:string">
      <xs:enumeration value="required"/>
      <xs:enumeration value="optional"/>
      <xs:enumeration value="excluded"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: scoreSourceType

Type hierarchy

Super-types:	xs:string < scoreSourceType (by restriction)
Sub-types:	None

Properties

Name	scoreSourceType
Content	Base XSD Type: string value comes from list: { 'CVSSv2'\| 'CVSSv3'\| 'CVSSv31'\| 'CVSSv4'\| 'OWASP'\| 'SSVC'\| 'other'}
Prohibited Derivations	restriction

Schema Component Representation

<xs:simpleType name="scoreSourceType" final="restriction">
   <xs:restriction base="xs:string">
      <xs:enumeration value="CVSSv2"/>
      <xs:enumeration value="CVSSv3"/>
      <xs:enumeration value="CVSSv31"/>
      <xs:enumeration value="CVSSv4"/>
      <xs:enumeration value="OWASP"/>
      <xs:enumeration value="SSVC"/>
      <xs:enumeration value="other"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: severityType

Type hierarchy

Super-types:	xs:string < severityType (by restriction)
Sub-types:	None

Properties

Name	severityType
Content	Base XSD Type: string value comes from list: { 'critical'\| 'high'\| 'medium'\| 'low'\| 'info'\| 'none'\| 'unknown'}
Prohibited Derivations	restriction

Schema Component Representation

<xs:simpleType name="severityType" final="restriction">
   <xs:restriction base="xs:string">
      <xs:enumeration value="critical"/>
      <xs:enumeration value="high"/>
      <xs:enumeration value="medium"/>
      <xs:enumeration value="low"/>
      <xs:enumeration value="info"/>
      <xs:enumeration value="none"/>
      <xs:enumeration value="unknown"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: taskTypeEnum

Type hierarchy

Super-types:	xs:string < taskTypeEnum (by restriction)
Sub-types:	None

Properties

Name	taskTypeEnum
Content	Base XSD Type: string value comes from list: { 'copy'\| 'clone'\| 'lint'\| 'scan'\| 'merge'\| 'build'\| 'test'\| 'deliver'\| 'deploy'\| 'release'\| 'clean'\| 'other'}

Schema Component Representation

<xs:simpleType name="taskTypeEnum">
   <xs:restriction base="xs:string">
      <xs:enumeration value="copy"/>
      <xs:enumeration value="clone"/>
      <xs:enumeration value="lint"/>
      <xs:enumeration value="scan"/>
      <xs:enumeration value="merge"/>
      <xs:enumeration value="build"/>
      <xs:enumeration value="test"/>
      <xs:enumeration value="deliver"/>
      <xs:enumeration value="deploy"/>
      <xs:enumeration value="release"/>
      <xs:enumeration value="clean"/>
      <xs:enumeration value="other"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: triggerTypeType

Type hierarchy

Super-types:	xs:string < triggerTypeType (by restriction)
Sub-types:	None

Properties

Name	triggerTypeType
Content	Base XSD Type: string value comes from list: {'manual'\|'api'\|'webhook'\|'scheduled'}

Schema Component Representation

<xs:simpleType name="triggerTypeType">
   <xs:restriction base="xs:string">
      <xs:enumeration value="manual"/>
      <xs:enumeration value="api"/>
      <xs:enumeration value="webhook"/>
      <xs:enumeration value="scheduled"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: urnUuid

Type hierarchy

Super-types:	xs:string < urnUuid (by restriction)
Sub-types:	None

Properties

Name	urnUuid
Content	Base XSD Type: string pattern = urn:uuid:([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\|(\{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\})

Schema Component Representation

<xs:simpleType name="urnUuid">
   <xs:restriction base="xs:string">
      <xs:pattern value="urn:uuid:([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})|(\{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\})"/>
   </xs:restriction>
</xs:simpleType>

Simple Type: volumeModeEnum

Type hierarchy

Super-types:	xs:string < volumeModeEnum (by restriction)
Sub-types:	None

Properties

Name	volumeModeEnum
Content	Base XSD Type: string value comes from list: {'filesystem'\|'block'}

Schema Component Representation

<xs:simpleType name="volumeModeEnum">
   <xs:restriction base="xs:string">
      <xs:enumeration value="filesystem"/>
      <xs:enumeration value="block"/>
   </xs:restriction>
</xs:simpleType>

Abstract (Applies to complex type definitions and element declarations). An abstract element or complex type cannot used to validate an element instance. If there is a reference to an abstract element, only element declarations that can substitute the abstract element can be used to validate the instance. For references to abstract type definitions, only derived types can be used.

All Model Group Child elements can be provided in any order in instances. See: http://www.w3.org/TR/xmlschema-1/#element-all.

Choice Model Group Only one from the list of child elements and model groups can be provided in instances. See: http://www.w3.org/TR/xmlschema-1/#element-choice.

Collapse Whitespace Policy Replace tab, line feed, and carriage return characters with space character (Unicode character 32). Then, collapse contiguous sequences of space characters into single space character, and remove leading and trailing space characters.

Disallowed Substitutions (Applies to element declarations). If substitution is specified, then substitution group members cannot be used in place of the given element declaration to validate element instances. If derivation methods, e.g. extension, restriction, are specified, then the given element declaration will not validate element instances that have types derived from the element declaration's type using the specified derivation methods. Normally, element instances can override their declaration's type by specifying an xsi:type attribute.

Key Constraint Like Uniqueness Constraint, but additionally requires that the specified value(s) must be provided. See: http://www.w3.org/TR/xmlschema-1/#cIdentity-constraint_Definitions.

Key Reference Constraint Ensures that the specified value(s) must match value(s) from a Key Constraint or Uniqueness Constraint. See: http://www.w3.org/TR/xmlschema-1/#cIdentity-constraint_Definitions.

Model Group Groups together element content, specifying the order in which the element content can occur and the number of times the group of element content may be repeated. See: http://www.w3.org/TR/xmlschema-1/#Model_Groups.

Nillable (Applies to element declarations). If an element declaration is nillable, instances can use the xsi:nil attribute. The xsi:nil attribute is the boolean attribute, nil, from the http://www.w3.org/2001/XMLSchema-instance namespace. If an element instance has an xsi:nil attribute set to true, it can be left empty, even though its element declaration may have required content.

Notation A notation is used to identify the format of a piece of data. Values of elements and attributes that are of type, NOTATION, must come from the names of declared notations. See: http://www.w3.org/TR/xmlschema-1/#cNotation_Declarations.

Preserve Whitespace Policy Preserve whitespaces exactly as they appear in instances.

Prohibited Derivations (Applies to type definitions). Derivation methods that cannot be used to create sub-types from a given type definition.

Prohibited Substitutions (Applies to complex type definitions). Prevents sub-types that have been derived using the specified derivation methods from validating element instances in place of the given type definition.

Replace Whitespace Policy Replace tab, line feed, and carriage return characters with space character (Unicode character 32).

Sequence Model Group Child elements and model groups must be provided in the specified order in instances. See: http://www.w3.org/TR/xmlschema-1/#element-sequence.

Substitution Group Elements that are members of a substitution group can be used wherever the head element of the substitution group is referenced.

Substitution Group Exclusions (Applies to element declarations). Prohibits element declarations from nominating themselves as being able to substitute a given element declaration, if they have types that are derived from the original element's type using the specified derivation methods.

Target Namespace The target namespace identifies the namespace that components in this schema belongs to. If no target namespace is provided, then the schema components do not belong to any namespace.

Uniqueness Constraint Ensures uniqueness of an element/attribute value, or a combination of values, within a specified scope. See: http://www.w3.org/TR/xmlschema-1/#cIdentity-constraint_Definitions.