Fix SBOM examples to adhere more closely to the spec

RedHatProductSecurity · Jun 12, 2024 · 0a0a27e · 0a0a27e
1 parent 4d5130a
commit 0a0a27e
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 4 deletions.
diff --git a/sbom/examples/rpm/from-koji.py b/sbom/examples/rpm/from-koji.py
@@ -314,10 +314,11 @@ def handle_srpm(filename, name):
     "creationInfo": {
         "created": "2006-08-14T02:34:56-06:00",
         "creators": [
-            "example SPDX document only",
+            "Tool: example SPDX document only",
         ],
     },
     "name": build["nvr"],
+    "documentNamespace": f"https://access.redhat.com/security/data/sbom/beta/spdx/{build['nvr']}.json",
     "packages": packages,
     "files": files,
     "relationships": relationships,

diff --git a/sbom/examples/rpm/openshift-pipelines-client-1.14.3-11352.el8-sbom.json b/sbom/examples/rpm/openshift-pipelines-client-1.14.3-11352.el8-sbom.json
@@ -5,10 +5,11 @@
   "creationInfo": {
     "created": "2006-08-14T02:34:56-06:00",
     "creators": [
-      "example SPDX document only"
+      "Tool: example SPDX document only"
     ]
   },
   "name": "openshift-pipelines-client-1.14.3-11352.el8",
+  "documentNamespace": "https://access.redhat.com/security/data/sbom/beta/spdx/openshift-pipelines-client-1.14.3-11352.el8.json",
   "packages": [
     {
       "name": "4d63.com/gocheckcompilerdirectives",

diff --git a/sbom/examples/rpm/openssl-3.0.7-18.el9_2-sbom.json b/sbom/examples/rpm/openssl-3.0.7-18.el9_2-sbom.json
@@ -5,10 +5,11 @@
   "creationInfo": {
     "created": "2006-08-14T02:34:56-06:00",
     "creators": [
-      "example SPDX document only"
+      "Tool: example SPDX document only"
     ]
   },
   "name": "openssl-3.0.7-18.el9_2",
+  "documentNamespace": "https://access.redhat.com/security/data/sbom/beta/spdx/openssl-3.0.7-18.el9_2.json",
   "packages": [
     {
       "SPDXID": "SPDXRef-SRPM",

diff --git a/sbom/examples/rpm/poppler-21.01.0-19.el9-sbom.json b/sbom/examples/rpm/poppler-21.01.0-19.el9-sbom.json
@@ -5,10 +5,11 @@
   "creationInfo": {
     "created": "2006-08-14T02:34:56-06:00",
     "creators": [
-      "example SPDX document only"
+      "Tool: example SPDX document only"
     ]
   },
   "name": "poppler-21.01.0-19.el9",
+  "documentNamespace": "https://access.redhat.com/security/data/sbom/beta/spdx/poppler-21.01.0-19.el9.json",
   "packages": [
     {
       "SPDXID": "SPDXRef-SRPM",