CycloneDX v1.6 XML Reference
Schema Document Properties
Target Namespace | http://cyclonedx.org/schema/bom/1.6 |
---|---|
Version | 1.6.0 |
Element and Attribute Namespaces |
|
Schema Composition |
|
No documentation provided.
Global Declarations
Element: bom
No documentation provided.
<bom:bom version="xs:positiveInteger" [0..1] serialNumber="bom:urnUuid" [0..1] Allow any attributes from any namespace (lax validation). > <!-- Uniqueness Constraint - bom-ref Selector - .//* Field(s) - @bom-ref --> <bom:metadata> bom:metadata </bom:metadata> [0..1] <bom:components> bom:componentsType </bom:components> [0..1] <bom:services> bom:servicesType </bom:services> [0..1] <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] <bom:dependencies> bom:dependenciesType </bom:dependencies> [0..1] <bom:compositions> bom:compositionsType </bom:compositions> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] <bom:vulnerabilities> bom:vulnerabilitiesType </bom:vulnerabilities> [0..1] <bom:annotations> bom:annotationsType </bom:annotations> [0..1] <bom:formulation> bom:formulationType </bom:formulation> [0..1] <bom:declarations> bom:declarationsType </bom:declarations> [0..1] <bom:definitions> bom:definitionsType </bom:definitions> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </bom:bom>
<xs:element name="bom"> <xs:complexType> <xs:sequence> <xs:element name="metadata" type="bom:metadata" minOccurs="0" maxOccurs="1"/> <xs:element name="components" type="bom:componentsType" minOccurs="0" maxOccurs="1"/> <xs:element name="services" type="bom:servicesType" minOccurs="0" maxOccurs="1"/> <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/> <xs:element name="dependencies" type="bom:dependenciesType" minOccurs="0" maxOccurs="1"/> <xs:element name="compositions" type="bom:compositionsType" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:element name="vulnerabilities" type="bom:vulnerabilitiesType" minOccurs="0" maxOccurs="1"/> <xs:element name="annotations" type="bom:annotationsType" minOccurs="0" maxOccurs="1"/> <xs:element name="formulation" type="bom:formulationType" minOccurs="0" maxOccurs="1"/> <xs:element name="declarations" type="bom:declarationsType" minOccurs="0" maxOccurs="1"/> <xs:element name="definitions" type="bom:definitionsType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="version" type="xs:positiveInteger" default="1"/> <xs:attribute name="serialNumber" type="bom:urnUuid"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType> <xs:unique name="bom-ref"> <xs:selector xpath=".//*"/> <xs:field xpath="@bom-ref"/> </xs:unique> </xs:element>
Global Definitions
Complex Type: advisoryType
Super-types: | None |
---|---|
Sub-types: | None |
Name | advisoryType |
---|---|
Abstract | no |
No documentation provided.
Complex Type: annotationType
Super-types: | None |
---|---|
Sub-types: | None |
Name | annotationType |
---|---|
Abstract | no |
No documentation provided.
<... bom-ref="bom:refType" [0..1] Allow any attributes from any namespace (lax validation). > <bom:subjects > [0..1] Start Sequence [0..*] <bom:subject> bom:bomReferenceType </bom:subject> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:subjects> <bom:annotator> bom:annotatorChoiceType </bom:annotator> [1] <bom:timestamp> xs:dateTime </bom:timestamp> [1] <bom:text> xs:string </bom:text> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="annotationType"> <xs:sequence> <xs:element name="subjects" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="subject" type="bom:bomReferenceType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="annotator" type="bom:annotatorChoiceType" minOccurs="1" maxOccurs="1"/> <xs:element name="timestamp" type="xs:dateTime" minOccurs="1" maxOccurs="1"/> <xs:element name="text" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: annotationsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | annotationsType |
---|---|
Abstract | no |
No documentation provided.
<... Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:annotation> bom:annotationType </bom:annotation> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="annotationsType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="annotation" type="bom:annotationType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: annotatorChoiceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | annotatorChoiceType |
---|---|
Abstract | no |
No documentation provided.
<xs:complexType name="annotatorChoiceType"> <xs:choice> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="individual" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/> <xs:element name="component" type="bom:component" minOccurs="0" maxOccurs="1"/> <xs:element name="service" type="bom:service" minOccurs="0" maxOccurs="1"/> </xs:choice> </xs:complexType>
Complex Type: attachedTextType
Super-types: | xs:string < attachedTextType (by extension) |
---|---|
Sub-types: | None |
Name | attachedTextType |
---|---|
Abstract | no |
No documentation provided.
Complex Type: bomReferenceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | bomReferenceType |
---|---|
Abstract | no |
No documentation provided.
<... ref="union of: [ bom:refLinkType,bom:bomLinkType ]" [1] Allow any attributes from a namespace other than this schema's namespace (lax validation). />
Complex Type: co2MeasureType
Super-types: | None |
---|---|
Sub-types: | None |
Name | co2MeasureType |
---|---|
Abstract | no |
A measure of carbon dioxide (CO2).
<xs:complexType name="co2MeasureType"> <xs:sequence> <xs:element name="value" type="xs:decimal" minOccurs="1" maxOccurs="1"/> <xs:element name="unit" minOccurs="1" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="tCO2eq"/> </xs:restriction> </xs:simpleType> </xs:element> </xs:sequence> </xs:complexType>
Complex Type: commitType
Super-types: | None |
---|---|
Sub-types: | None |
Name | commitType |
---|---|
Abstract | no |
No documentation provided.
<...> <bom:uid> xs:normalizedString </bom:uid> [0..1] <bom:url> xs:anyURI </bom:url> [0..1] <bom:author> bom:identifiableActionType </bom:author> [0..1] <bom:committer> bom:identifiableActionType </bom:committer> [0..1] <bom:message> xs:normalizedString </bom:message> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="commitType"> <xs:sequence> <xs:element name="uid" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="author" type="bom:identifiableActionType" minOccurs="0" maxOccurs="1"/> <xs:element name="committer" type="bom:identifiableActionType" minOccurs="0" maxOccurs="1"/> <xs:element name="message" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType>
Complex Type: commitsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | commitsType |
---|---|
Abstract | no |
Zero or more commits can be specified.
<...> Start Sequence [0..*] <bom:commit> bom:commitType </bom:commit> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
Complex Type: component
Super-types: | None |
---|---|
Sub-types: | None |
Name | component |
---|---|
Abstract | no |
No documentation provided.
<... type="bom:classification" [1] mime-type="bom:mimeType" [0..1] bom-ref="bom:refType" [0..1] Allow any attributes from any namespace (lax validation). > <bom:supplier> bom:organizationalEntity </bom:supplier> [0..1] <bom:manufacturer> bom:organizationalEntity </bom:manufacturer> [0..1] <bom:authors > [0..1] Start Sequence [0..*] <bom:author> bom:organizationalContact </bom:author> [1] End Sequence </bom:authors> <bom:author> xs:normalizedString </bom:author> [0..1] <bom:publisher> xs:normalizedString </bom:publisher> [0..1] <bom:group> xs:normalizedString </bom:group> [0..1] <bom:name> xs:normalizedString </bom:name> [1] <bom:version> bom:versionType </bom:version> [0..1] <bom:description> xs:normalizedString </bom:description> [0..1] <bom:scope> bom:scope </bom:scope> [0..1] <bom:hashes > [0..1] Start Sequence [0..*] <bom:hash> bom:hashType </bom:hash> [1] End Sequence </bom:hashes> <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1] <bom:copyright> xs:normalizedString </bom:copyright> [0..1] <bom:cpe> bom:cpe </bom:cpe> [0..1] <bom:purl> xs:anyURI </bom:purl> [0..1] <bom:omniborId> xs:string </bom:omniborId> [0..*] <bom:swhid> xs:string </bom:swhid> [0..*] <bom:swid> bom:swidType </bom:swid> [0..1] <bom:modified> xs:boolean </bom:modified> [0..1] <bom:pedigree> bom:pedigreeType </bom:pedigree> [0..1] <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] <bom:components > [0..1] Start Sequence [0..*] <bom:component> bom:component </bom:component> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:components> <bom:evidence> bom:componentEvidenceType </bom:evidence> [0..1] <bom:releaseNotes> bom:releaseNotesType </bom:releaseNotes> [0..1] <bom:modelCard> bom:modelCardType </bom:modelCard> [0..1] <bom:data> bom:componentDataType </bom:data> [0..1] <bom:cryptoProperties> bom:cryptoPropertiesType </bom:cryptoProperties> [0..1] <bom:tags> bom:tagsType </bom:tags> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="component"> <xs:sequence> <xs:element name="supplier" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="manufacturer" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="authors" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="author" type="bom:organizationalContact"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="author" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="publisher" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="group" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="name" type="xs:normalizedString" minOccurs="1" maxOccurs="1"/> <xs:element name="version" type="bom:versionType" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="scope" type="bom:scope" minOccurs="0" maxOccurs="1" default="required"/> <xs:element name="hashes" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="hash" type="bom:hashType"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/> <xs:element name="copyright" type="xs:normalizedString" minOccurs="0" maxOccurs="1"/> <xs:element name="cpe" type="bom:cpe" minOccurs="0" maxOccurs="1"/> <xs:element name="purl" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="omniborId" type="xs:string" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="swhid" type="xs:string" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="swid" type="bom:swidType" minOccurs="0" maxOccurs="1"/> <xs:element name="modified" type="xs:boolean" minOccurs="0" maxOccurs="1"/> <xs:element name="pedigree" type="bom:pedigreeType" minOccurs="0" maxOccurs="1"/> <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> <xs:element name="components" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="component" type="bom:component"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="evidence" type="bom:componentEvidenceType" minOccurs="0" maxOccurs="1"/> <xs:element name="releaseNotes" type="bom:releaseNotesType" minOccurs="0" maxOccurs="1"/> <xs:element name="modelCard" type="bom:modelCardType" minOccurs="0" maxOccurs="1"/> <xs:element name="data" type="bom:componentDataType" minOccurs="0" maxOccurs="1"/> <xs:element name="cryptoProperties" type="bom:cryptoPropertiesType" minOccurs="0" maxOccurs="1"/> <xs:element name="tags" type="bom:tagsType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="type" type="bom:classification" use="required"/> <xs:attribute name="mime-type" type="bom:mimeType"/> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: componentDataType
Super-types: | None |
---|---|
Sub-types: | None |
Name | componentDataType |
---|---|
Abstract | no |
No documentation provided.
<... bom-ref="bom:refType" [0..1] > <bom:type> bom:componentDataTypeEnumeration </bom:type> [1] <bom:name> xs:string </bom:name> [0..1] <bom:contents > [0..1] <bom:attachment> bom:attachedTextType </bom:attachment> [0..1] <bom:url> xs:anyURI </bom:url> [0..1] <bom:properties> bom:propertiesType </bom:properties> [0..1] </bom:contents> <bom:classification> xs:string </bom:classification> [0..1] <bom:sensitiveData> ... </bom:sensitiveData> [0..*] <bom:graphics> bom:graphicsCollectionType </bom:graphics> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:governance> bom:dataGovernance </bom:governance> [0..1] </...>
<xs:complexType name="componentDataType"> <xs:sequence> <xs:element name="type" type="bom:componentDataTypeEnumeration" minOccurs="1" maxOccurs="1"/> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="contents" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="attachment" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> <xs:element name="properties" type="bom:propertiesType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="classification" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="sensitiveData" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="graphics" type="bom:graphicsCollectionType" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="governance" type="bom:dataGovernance" minOccurs="0" maxOccurs="1"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType>
Complex Type: componentEvidenceType
Super-types: | None |
---|---|
Sub-types: | None |
Name | componentEvidenceType |
---|---|
Abstract | no |
No documentation provided.
<... Allow any attributes from any namespace (lax validation). > <bom:identity > [0..*] <bom:field> bom:identityFieldType </bom:field> [1] <bom:confidence> bom:decimalPercentType </bom:confidence> [0..1] <bom:concludedValue> xs:string </bom:concludedValue> [0..1] <bom:methods > [0..1] <bom:method > [0..*] <bom:technique> bom:evidenceTechnique </bom:technique> [1] <bom:confidence> bom:decimalPercentType </bom:confidence> [1] <bom:value> xs:string </bom:value> [0..1] </bom:method> </bom:methods> <bom:tools > [0..1] <bom:tool> bom:bomReferenceType </bom:tool> [0..*] </bom:tools> </bom:identity> <bom:occurrences > [0..1] <bom:occurrence bom-ref="bom:refType" [0..1] > [0..*] <bom:location> xs:string </bom:location> [1] <bom:line> xs:nonNegativeInteger </bom:line> [0..1] <bom:offset> xs:nonNegativeInteger </bom:offset> [0..1] <bom:symbol> xs:string </bom:symbol> [0..1] <bom:additionalContext> xs:string </bom:additionalContext> [0..1] </bom:occurrence> </bom:occurrences> <bom:callstack > [0..1] <bom:frames > [0..1] <bom:frame > [0..*] <bom:package> xs:string </bom:package> [0..1] <bom:module> xs:string </bom:module> [1] <bom:function> xs:string </bom:function> [0..1] <bom:parameters > [0..1] <bom:parameter> xs:string </bom:parameter> [0..*] </bom:parameters> <bom:line> xs:integer </bom:line> [0..1] <bom:column> xs:integer </bom:column> [0..1] <bom:fullFilename> xs:string </bom:fullFilename> [0..1] </bom:frame> </bom:frames> <bom:tools > [0..1] <bom:tool> bom:bomReferenceType </bom:tool> [0..*] </bom:tools> </bom:callstack> <bom:licenses> bom:licenseChoiceType </bom:licenses> [0..1] <bom:copyright> bom:copyrightsType </bom:copyright> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="componentEvidenceType"> <xs:sequence> <xs:element name="identity" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="field" type="bom:identityFieldType" minOccurs="1" maxOccurs="1"/> <xs:element name="confidence" type="bom:decimalPercentType" minOccurs="0" maxOccurs="1"/> <xs:element name="concludedValue" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="methods" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="method" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="technique" type="bom:evidenceTechnique" minOccurs="1" maxOccurs="1"/> <xs:element name="confidence" type="bom:decimalPercentType" minOccurs="1" maxOccurs="1"/> <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="tools" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="tool" type="bom:bomReferenceType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="occurrences" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="occurrence" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="location" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="line" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1"/> <xs:element name="offset" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1"/> <xs:element name="symbol" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="additionalContext" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="callstack" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="frames" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="frame" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="package" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="module" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="function" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="parameters" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="parameter" type="xs:string" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="line" type="xs:integer" minOccurs="0" maxOccurs="1"/> <xs:element name="column" type="xs:integer" minOccurs="0" maxOccurs="1"/> <xs:element name="fullFilename" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="tools" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="tool" type="bom:bomReferenceType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="licenses" type="bom:licenseChoiceType" minOccurs="0" maxOccurs="1"/> <xs:element name="copyright" type="bom:copyrightsType" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: componentsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | componentsType |
---|---|
Abstract | no |
No documentation provided.
<xs:complexType name="componentsType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="component" type="bom:component"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: compositionType
Super-types: | None |
---|---|
Sub-types: | None |
Name | compositionType |
---|---|
Abstract | no |
No documentation provided.
<... bom-ref="bom:refType" [0..1] > Start Sequence [0..*] <bom:aggregate> bom:aggregateType </bom:aggregate> [1] <bom:assemblies > [0..1] Start Sequence [0..*] <bom:assembly> bom:bomReferenceType </bom:assembly> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:assemblies> <bom:dependencies > [0..1] Start Sequence [0..*] <bom:dependency> bom:bomReferenceType </bom:dependency> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:dependencies> <bom:vulnerabilities > [0..1] Start Sequence [0..*] <bom:vulnerability> bom:bomReferenceType </bom:vulnerability> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </bom:vulnerabilities> End Sequence </...>
<xs:complexType name="compositionType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="aggregate" type="bom:aggregateType" default="not_specified"/> <xs:element name="assemblies" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="assembly" type="bom:bomReferenceType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="dependencies" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="dependency" type="bom:bomReferenceType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="vulnerabilities" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="vulnerability" type="bom:bomReferenceType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> </xs:complexType>
Complex Type: compositionsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | compositionsType |
---|---|
Abstract | no |
No documentation provided.
<... Allow any attributes from any namespace (lax validation). > Start Sequence [0..*] <bom:composition> bom:compositionType </bom:composition> [1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] End Sequence </...>
<xs:complexType name="compositionsType"> <xs:sequence minOccurs="0" maxOccurs="unbounded"> <xs:element name="composition" type="bom:compositionType"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:anyAttribute namespace="##any" processContents="lax"/> </xs:complexType>
Complex Type: copyrightsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | copyrightsType |
---|---|
Abstract | no |
No documentation provided.
Complex Type: cryptoPropertiesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | cryptoPropertiesType |
---|---|
Abstract | no |
Cryptographic assets have properties that uniquely define them and that make them
actionable for
further reasoning. As an example, it makes a difference if one knows the algorithm
family (e.g. AES)
or the specific variant or instantiation (e.g. AES-128-GCM). This is because the security
level and the
algorithm primitive (authenticated encryption) is only defined by the definition of
the algorithm variant.
The presence of a weak cryptographic algorithm like SHA1 vs. HMAC-SHA1 also makes
a difference.
<...> <bom:assetType> xs:string (value comes from list: {'algorithm'|'certificate'|'protocol'|'related-crypto-material'}) </bom:assetType> [1] <bom:algorithmProperties > [0..1] <bom:primitive> xs:string (value comes from list: { 'drbg'| 'mac'| 'block-cipher'| 'stream-cipher'| 'signature'| 'hash'| 'pke'| 'xof'| 'kdf'| 'key-agree'| 'kem'| 'ae'| 'combiner'| 'other'| 'unknown'}) </bom:primitive> [0..1] <bom:parameterSetIdentifier> xs:string </bom:parameterSetIdentifier> [0..1] <bom:curve> xs:string </bom:curve> [0..1] <bom:executionEnvironment> xs:string (value comes from list: { 'software-plain-ram'| 'software-encrypted-ram'| 'software-tee'| 'hardware'| 'other'| 'unknown'}) </bom:executionEnvironment> [0..1] <bom:implementationPlatform> xs:string (value comes from list: { 'generic'| 'x86_32'| 'x86_64'| 'armv7-a'| 'armv7-m'| 'armv8-a'| 'armv8-m'| 'armv9-a'| 'armv9-m'| 's390x'| 'ppc64'| 'ppc64le'| 'other'| 'unknown'}) </bom:implementationPlatform> [0..1] <bom:certificationLevel> xs:string (value comes from list: { 'none'| 'fips140-1-l1'| 'fips140-1-l2'| 'fips140-1-l3'| 'fips140-1-l4'| 'fips140-2-l1'| 'fips140-2-l2'| 'fips140-2-l3'| 'fips140-2-l4'| 'fips140-3-l1'| 'fips140-3-l2'| 'fips140-3-l3'| 'fips140-3-l4'| 'cc-eal1'| 'cc-eal1+'| 'cc-eal2'| 'cc-eal2+'| 'cc-eal3'| 'cc-eal3+'| 'cc-eal4'| 'cc-eal4+'| 'cc-eal5'| 'cc-eal5+'| 'cc-eal6'| 'cc-eal6+'| 'cc-eal7'| 'cc-eal7+'| 'other'| 'unknown'}) </bom:certificationLevel> [0..*] <bom:mode> xs:string (value comes from list: { 'cbc'| 'ecb'| 'ccm'| 'gcm'| 'cfb'| 'ofb'| 'ctr'| 'other'| 'unknown'}) </bom:mode> [0..1] <bom:padding> xs:string (value comes from list: { 'pkcs5'| 'pkcs7'| 'pkcs1v15'| 'oaep'| 'raw'| 'other'| 'unknown'}) </bom:padding> [0..1] <bom:cryptoFunctions > [0..1] <bom:cryptoFunction> xs:string (value comes from list: { 'generate'| 'keygen'| 'encrypt'| 'decrypt'| 'digest'| 'tag'| 'keyderive'| 'sign'| 'verify'| 'encapsulate'| 'decapsulate'| 'other'| 'unknown'}) </bom:cryptoFunction> [0..*] </bom:cryptoFunctions> <bom:classicalSecurityLevel> xs:integer (value >= 0) </bom:classicalSecurityLevel> [0..1] <bom:nistQuantumSecurityLevel> xs:integer (0 <= value <= 6) </bom:nistQuantumSecurityLevel> [0..1] </bom:algorithmProperties> <bom:certificateProperties > [0..1] <bom:subjectName> xs:string </bom:subjectName> [0..1] <bom:issuerName> xs:string </bom:issuerName> [0..1] <bom:notValidBefore> xs:dateTime </bom:notValidBefore> [0..1] <bom:notValidAfter> xs:dateTime </bom:notValidAfter> [0..1] <bom:signatureAlgorithmRef> bom:refType </bom:signatureAlgorithmRef> [0..1] <bom:subjectPublicKeyRef> bom:refType </bom:subjectPublicKeyRef> [0..1] <bom:certificateFormat> xs:string </bom:certificateFormat> [0..1] <bom:certificateExtension> xs:string </bom:certificateExtension> [0..1] </bom:certificateProperties> <bom:relatedCryptoMaterialProperties > [0..1] <bom:type> xs:string (value comes from list: { 'private-key'| 'public-key'| 'secret-key'| 'key'| 'ciphertext'| 'signature'| 'digest'| 'initialization-vector'| 'nonce'| 'seed'| 'salt'| 'shared-secret'| 'tag'| 'additional-data'| 'password'| 'credential'| 'token'| 'other'| 'unknown'}) </bom:type> [0..1] <bom:id> xs:string </bom:id> [0..1] <bom:state> xs:string (value comes from list: { 'pre-activation'| 'active'| 'suspended'| 'deactivated'| 'compromised'| 'destroyed'}) </bom:state> [0..1] <bom:algorithmRef> bom:refType </bom:algorithmRef> [0..1] <bom:creationDate> xs:dateTime </bom:creationDate> [0..1] <bom:activationDate> xs:dateTime </bom:activationDate> [0..1] <bom:updateDate> xs:dateTime </bom:updateDate> [0..1] <bom:expirationDate> xs:dateTime </bom:expirationDate> [0..1] <bom:value> xs:string </bom:value> [0..1] <bom:size> xs:integer </bom:size> [0..1] <bom:format> xs:string </bom:format> [0..1] <bom:securedBy > [0..1] <bom:mechanism> xs:string </bom:mechanism> [0..1] <bom:algorithmRef> bom:refType </bom:algorithmRef> [0..1] </bom:securedBy> </bom:relatedCryptoMaterialProperties> <bom:protocolProperties > [0..1] <bom:type> xs:string (value comes from list: { 'tls'| 'ssh'| 'ipsec'| 'ike'| 'sstp'| 'wpa'| 'other'| 'unknown'}) </bom:type> [0..1] <bom:version> xs:string </bom:version> [0..1] <bom:cipherSuites > [0..1] <bom:cipherSuite > [0..*] <bom:name> xs:string </bom:name> [0..1] <bom:algorithms > [0..1] <bom:algorithm> bom:refType </bom:algorithm> [0..*] </bom:algorithms> <bom:identifiers > [0..1] <bom:identifier> xs:string </bom:identifier> [0..*] </bom:identifiers> </bom:cipherSuite> </bom:cipherSuites> <bom:ikev2TransformTypes > [0..1] <bom:encr> bom:refType </bom:encr> [0..*] <bom:prf> bom:refType </bom:prf> [0..*] <bom:integ> bom:refType </bom:integ> [0..*] <bom:ke> bom:refType </bom:ke> [0..*] <bom:esn> xs:boolean </bom:esn> [0..1] <bom:auth> bom:refType </bom:auth> [0..*] </bom:ikev2TransformTypes> </bom:protocolProperties> <bom:oid> xs:string </bom:oid> [0..1] </...>
<xs:complexType name="cryptoPropertiesType"> <xs:sequence> <xs:element name="assetType" minOccurs="1" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="algorithm"/> <xs:enumeration value="certificate"/> <xs:enumeration value="protocol"/> <xs:enumeration value="related-crypto-material"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="algorithmProperties" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="primitive" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="drbg"/> <xs:enumeration value="mac"/> <xs:enumeration value="block-cipher"/> <xs:enumeration value="stream-cipher"/> <xs:enumeration value="signature"/> <xs:enumeration value="hash"/> <xs:enumeration value="pke"/> <xs:enumeration value="xof"/> <xs:enumeration value="kdf"/> <xs:enumeration value="key-agree"/> <xs:enumeration value="kem"/> <xs:enumeration value="ae"/> <xs:enumeration value="combiner"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="parameterSetIdentifier" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="curve" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="executionEnvironment" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="software-plain-ram"/> <xs:enumeration value="software-encrypted-ram"/> <xs:enumeration value="software-tee"/> <xs:enumeration value="hardware"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="implementationPlatform" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="generic"/> <xs:enumeration value="x86_32"/> <xs:enumeration value="x86_64"/> <xs:enumeration value="armv7-a"/> <xs:enumeration value="armv7-m"/> <xs:enumeration value="armv8-a"/> <xs:enumeration value="armv8-m"/> <xs:enumeration value="armv9-a"/> <xs:enumeration value="armv9-m"/> <xs:enumeration value="s390x"/> <xs:enumeration value="ppc64"/> <xs:enumeration value="ppc64le"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="certificationLevel" minOccurs="0" maxOccurs="unbounded"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="none"/> <xs:enumeration value="fips140-1-l1"/> <xs:enumeration value="fips140-1-l2"/> <xs:enumeration value="fips140-1-l3"/> <xs:enumeration value="fips140-1-l4"/> <xs:enumeration value="fips140-2-l1"/> <xs:enumeration value="fips140-2-l2"/> <xs:enumeration value="fips140-2-l3"/> <xs:enumeration value="fips140-2-l4"/> <xs:enumeration value="fips140-3-l1"/> <xs:enumeration value="fips140-3-l2"/> <xs:enumeration value="fips140-3-l3"/> <xs:enumeration value="fips140-3-l4"/> <xs:enumeration value="cc-eal1"/> <xs:enumeration value="cc-eal1+"/> <xs:enumeration value="cc-eal2"/> <xs:enumeration value="cc-eal2+"/> <xs:enumeration value="cc-eal3"/> <xs:enumeration value="cc-eal3+"/> <xs:enumeration value="cc-eal4"/> <xs:enumeration value="cc-eal4+"/> <xs:enumeration value="cc-eal5"/> <xs:enumeration value="cc-eal5+"/> <xs:enumeration value="cc-eal6"/> <xs:enumeration value="cc-eal6+"/> <xs:enumeration value="cc-eal7"/> <xs:enumeration value="cc-eal7+"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="mode" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="cbc"/> <xs:enumeration value="ecb"/> <xs:enumeration value="ccm"/> <xs:enumeration value="gcm"/> <xs:enumeration value="cfb"/> <xs:enumeration value="ofb"/> <xs:enumeration value="ctr"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="padding" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="pkcs5"/> <xs:enumeration value="pkcs7"/> <xs:enumeration value="pkcs1v15"/> <xs:enumeration value="oaep"/> <xs:enumeration value="raw"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="cryptoFunctions" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="cryptoFunction" minOccurs="0" maxOccurs="unbounded"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="generate"/> <xs:enumeration value="keygen"/> <xs:enumeration value="encrypt"/> <xs:enumeration value="decrypt"/> <xs:enumeration value="digest"/> <xs:enumeration value="tag"/> <xs:enumeration value="keyderive"/> <xs:enumeration value="sign"/> <xs:enumeration value="verify"/> <xs:enumeration value="encapsulate"/> <xs:enumeration value="decapsulate"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="classicalSecurityLevel" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:integer"> <xs:minInclusive value="0"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="nistQuantumSecurityLevel" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:integer"> <xs:minInclusive value="0"/> <xs:maxInclusive value="6"/> </xs:restriction> </xs:simpleType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="certificateProperties" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="subjectName" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="issuerName" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="notValidBefore" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="notValidAfter" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="signatureAlgorithmRef" type="bom:refType" minOccurs="0" maxOccurs="1"/> <xs:element name="subjectPublicKeyRef" type="bom:refType" minOccurs="0" maxOccurs="1"/> <xs:element name="certificateFormat" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="certificateExtension" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="relatedCryptoMaterialProperties" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="type" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="private-key"/> <xs:enumeration value="public-key"/> <xs:enumeration value="secret-key"/> <xs:enumeration value="key"/> <xs:enumeration value="ciphertext"/> <xs:enumeration value="signature"/> <xs:enumeration value="digest"/> <xs:enumeration value="initialization-vector"/> <xs:enumeration value="nonce"/> <xs:enumeration value="seed"/> <xs:enumeration value="salt"/> <xs:enumeration value="shared-secret"/> <xs:enumeration value="tag"/> <xs:enumeration value="additional-data"/> <xs:enumeration value="password"/> <xs:enumeration value="credential"/> <xs:enumeration value="token"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="id" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="state" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="pre-activation"/> <xs:enumeration value="active"/> <xs:enumeration value="suspended"/> <xs:enumeration value="deactivated"/> <xs:enumeration value="compromised"/> <xs:enumeration value="destroyed"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="algorithmRef" type="bom:refType" minOccurs="0" maxOccurs="1"/> <xs:element name="creationDate" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="activationDate" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="updateDate" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="expirationDate" type="xs:dateTime" minOccurs="0" maxOccurs="1"/> <xs:element name="value" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="size" type="xs:integer" minOccurs="0" maxOccurs="1"/> <xs:element name="format" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="securedBy" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="mechanism" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="algorithmRef" type="bom:refType" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="protocolProperties" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="type" minOccurs="0" maxOccurs="1"> <xs:simpleType> <xs:restriction base="xs:string"> <xs:enumeration value="tls"/> <xs:enumeration value="ssh"/> <xs:enumeration value="ipsec"/> <xs:enumeration value="ike"/> <xs:enumeration value="sstp"/> <xs:enumeration value="wpa"/> <xs:enumeration value="other"/> <xs:enumeration value="unknown"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="version" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="cipherSuites" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="cipherSuite" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="algorithms" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="algorithm" type="bom:refType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="identifiers" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="identifier" type="xs:string" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="ikev2TransformTypes" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="encr" type="bom:refType" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="prf" type="bom:refType" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="integ" type="bom:refType" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="ke" type="bom:refType" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="esn" type="xs:boolean" minOccurs="0" maxOccurs="1"/> <xs:element name="auth" type="bom:refType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="oid" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType>
Complex Type: dataClassificationType
Super-types: | xs:normalizedString < dataClassificationType (by extension) |
---|---|
Sub-types: | None |
Name | dataClassificationType |
---|---|
Abstract | no |
Specifies the data classification.
<... flow="bom:dataFlowType" [1] > xs:normalizedString </...>
Complex Type: dataGovernance
Super-types: | None |
---|---|
Sub-types: | None |
Name | dataGovernance |
---|---|
Abstract | no |
No documentation provided.
<...> <bom:custodians > [0..1] <bom:custodian> bom:organizationOrIndividualType </bom:custodian> [0..*] </bom:custodians> <bom:stewards > [0..1] <bom:steward> bom:organizationOrIndividualType </bom:steward> [0..*] </bom:stewards> <bom:owners > [0..1] <bom:owner> bom:organizationOrIndividualType </bom:owner> [0..*] </bom:owners> </...>
<xs:complexType name="dataGovernance"> <xs:sequence> <xs:element name="custodians" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="custodian" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="stewards" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="steward" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="owners" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="owner" type="bom:organizationOrIndividualType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType>
Complex Type: declarationsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | declarationsType |
---|---|
Abstract | no |
No documentation provided.
<...> <bom:assessors > [0..1] <bom:assessor bom-ref="bom:refType" [0..1] Allow any attributes from a namespace other than this schema's namespace (lax validation). > [0..*] <bom:thirdParty> xs:boolean </bom:thirdParty> [0..1] <bom:organization> bom:organizationalEntity </bom:organization> [0..1] </bom:assessor> </bom:assessors> <bom:attestations > [0..1] <bom:attestation > [0..*] <bom:summary> xs:string </bom:summary> [0..1] <bom:assessor> bom:refLinkType </bom:assessor> [0..1] <bom:map > [0..*] <bom:requirement> bom:refLinkType </bom:requirement> [0..1] <bom:claims > [0..1] <bom:claim> bom:refLinkType </bom:claim> [0..*] </bom:claims> <bom:counterClaims > [0..1] <bom:counterClaim> bom:refLinkType </bom:counterClaim> [0..*] </bom:counterClaims> <bom:conformance > [0..1] <bom:score> xs:decimal (0 <= value <= 1) </bom:score> [1] <bom:rationale> xs:string </bom:rationale> [0..1] <bom:mitigationStrategies > [0..1] <bom:mitigationStrategy> bom:refLinkType </bom:mitigationStrategy> [0..*] </bom:mitigationStrategies> </bom:conformance> <bom:confidence > [0..1] <bom:score> xs:decimal (0 <= value <= 1) </bom:score> [1] <bom:rationale> xs:string </bom:rationale> [0..1] </bom:confidence> </bom:map> Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </bom:attestation> </bom:attestations> <bom:claims > [0..1] <bom:claim bom-ref="bom:refType" [0..1] Allow any attributes from a namespace other than this schema's namespace (lax validation). > [0..*] <bom:target> bom:refLinkType </bom:target> [0..1] <bom:predicate> xs:string </bom:predicate> [0..1] <bom:mitigationStrategies > [0..1] <bom:mitigationStrategy> bom:refLinkType </bom:mitigationStrategy> [0..*] </bom:mitigationStrategies> <bom:reasoning> xs:string </bom:reasoning> [0..1] <bom:evidence> bom:refLinkType </bom:evidence> [0..*] <bom:counterEvidence> bom:refLinkType </bom:counterEvidence> [0..*] <bom:externalReferences> bom:externalReferences </bom:externalReferences> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </bom:claim> </bom:claims> <bom:evidence > [0..1] <bom:evidence bom-ref="bom:refType" [0..1] Allow any attributes from a namespace other than this schema's namespace (lax validation). > [0..*] <bom:propertyName> xs:string </bom:propertyName> [0..1] <bom:description> xs:string </bom:description> [0..1] <bom:data > [0..*] <bom:name> xs:string </bom:name> [0..1] <bom:contents > [0..1] <bom:attachment> bom:attachedTextType </bom:attachment> [0..1] <bom:url> xs:anyURI </bom:url> [0..1] </bom:contents> <bom:classification> xs:string </bom:classification> [0..1] <bom:sensitiveData> ... </bom:sensitiveData> [0..*] <bom:governance> bom:dataGovernance </bom:governance> [0..1] </bom:data> <bom:created> xs:dateTime </bom:created> [0..1] <bom:expires> xs:dateTime </bom:expires> [0..1] <bom:author> bom:organizationalContact </bom:author> [0..1] <bom:reviewer> bom:organizationalContact </bom:reviewer> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </bom:evidence> </bom:evidence> <bom:targets > [0..1] <bom:organizations > [0..1] <bom:organization> bom:organizationalEntity </bom:organization> [0..*] </bom:organizations> <bom:components > [0..1] <bom:component> bom:component </bom:component> [0..*] </bom:components> <bom:services > [0..1] <bom:service> bom:service </bom:service> [0..*] </bom:services> </bom:targets> <bom:affirmation > [0..1] <bom:statement> xs:string </bom:statement> [0..1] <bom:signatories > [0..1] <bom:signatory > [0..*] <bom:name> xs:string </bom:name> [0..1] <bom:role> xs:string </bom:role> [0..1] <bom:organization> bom:organizationalEntity </bom:organization> [0..1] <bom:externalReference> bom:externalReference </bom:externalReference> [0..1] Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </bom:signatory> </bom:signatories> Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </bom:affirmation> Allow any elements from a namespace other than this schema's namespace (lax validation). [0..*] </...>
<xs:complexType name="declarationsType"> <xs:sequence> <xs:element name="assessors" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="assessor" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="thirdParty" type="xs:boolean" minOccurs="0" maxOccurs="1"/> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##other" processContents="lax"/> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="attestations" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="attestation" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="summary" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="assessor" type="bom:refLinkType" minOccurs="0" maxOccurs="1"/> <xs:element name="map" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="requirement" type="bom:refLinkType" minOccurs="0" maxOccurs="1"/> <xs:element name="claims" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="claim" type="bom:refLinkType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="counterClaims" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="counterClaim" type="bom:refLinkType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="conformance" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="score"> <xs:simpleType> <xs:restriction base="xs:decimal"> <xs:minInclusive value="0"/> <xs:maxInclusive value="1"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="rationale" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="mitigationStrategies" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="mitigationStrategy" type="bom:refLinkType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="confidence" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="score"> <xs:simpleType> <xs:restriction base="xs:decimal"> <xs:minInclusive value="0"/> <xs:maxInclusive value="1"/> </xs:restriction> </xs:simpleType> </xs:element> <xs:element name="rationale" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="claims" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="claim" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="target" type="bom:refLinkType" minOccurs="0" maxOccurs="1"/> <xs:element name="predicate" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="mitigationStrategies" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="mitigationStrategy" type="bom:refLinkType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="reasoning" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="evidence" type="bom:refLinkType" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="counterEvidence" type="bom:refLinkType" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="externalReferences" type="bom:externalReferences" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##other" processContents="lax"/> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="evidence" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="evidence" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="propertyName" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="description" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="data" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="contents" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="attachment" type="bom:attachedTextType" minOccurs="0" maxOccurs="1"/> <xs:element name="url" type="xs:anyURI" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="classification" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="sensitiveData" minOccurs="0" maxOccurs="unbounded"/> <xs:element name="governance" type="bom:dataGovernance" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="created" type="xs:dateTime" minOccurs="0"/> <xs:element name="expires" type="xs:dateTime" minOccurs="0"/> <xs:element name="author" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/> <xs:element name="reviewer" type="bom:organizationalContact" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="bom-ref" type="bom:refType"/> <xs:anyAttribute namespace="##other" processContents="lax"/> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="targets" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="organizations" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="components" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="component" type="bom:component" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="services" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="service" type="bom:service" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:element name="affirmation" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="statement" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="signatories" minOccurs="0" maxOccurs="1"> <xs:complexType> <xs:sequence> <xs:element name="signatory" minOccurs="0" maxOccurs="unbounded"> <xs:complexType> <xs:sequence> <xs:element name="name" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="role" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="organization" type="bom:organizationalEntity" minOccurs="0" maxOccurs="1"/> <xs:element name="externalReference" type="bom:externalReference" minOccurs="0" maxOccurs="1"/> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> </xs:sequence> </xs:complexType> </xs:element> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType> </xs:element> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:complexType>
Complex Type: definitionsType
Super-types: | None |
---|---|
Sub-types: | None |
Name | definitionsType |
---|---|
Abstract | no |
A collection of reusable objects that are defined and may be used elsewhere in the
BOM.
<...> <bom:standards> bom:standardsType </bom:standards> [0..1] </...>
Complex Type: dependenciesType
Super-types: | None |
---|---|
Sub-types: | None |
Name | dependenciesType |
---|---|
Abstract | no |
No documentation provided.
<...> Start Sequence [0..*] <bom:dependency> bom:dependencyType </bom:dependency> [1] End Sequence </...>
Complex Type: dependencyType
Super-types: | None |
---|---|
Sub-types: | None |
Name | dependencyType |
---|---|
Abstract | no |
No documentation provided.
Element comment