Merge pull request #15 from RedHatProductSecurity/consistent-doc-name…

…space Use consistent documentNamespace for component-level SBOMs
RedHatProductSecurity · Aug 15, 2024 · 8a61c52 · 8a61c52
2 parents 1a38449 + 2fd5e54
commit 8a61c52
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 5 deletions.
diff --git a/sbom/examples/product/rhel-9.2-eus.spdx.json b/sbom/examples/product/rhel-9.2-eus.spdx.json
@@ -9,7 +9,7 @@
     ]
   },
   "name": "RHEL 9.2 EUS",
-  "documentNamespace": "https://www.redhat.com/rhel-9.2-eus-6a659023-7a52-4792-a66c-a7f19ec14ba8.json",
+  "documentNamespace": "https://www.redhat.com/rhel-9.2-eus-6a659023-7a52-4792-a66c-a7f19ec14ba8.spdx.json",
   "packages": [
     {
       "SPDXID": "SPDXRef-RHEL-9.2-EUS",

diff --git a/sbom/examples/rpm/from-koji.py b/sbom/examples/rpm/from-koji.py
@@ -354,7 +354,7 @@ def handle_srpm(filename, name):
         ],
     },
     "name": build["nvr"],
-    "documentNamespace": f"https://access.redhat.com/security/data/sbom/beta/spdx/{build['nvr']}.json",
+    "documentNamespace": f"https://www.redhat.com/{build['nvr']}.spdx.json",
     "packages": packages,
     "files": files,
     "relationships": relationships,

diff --git a/sbom/examples/rpm/openshift-pipelines-client-1.14.3-11352.el8.spdx.json b/sbom/examples/rpm/openshift-pipelines-client-1.14.3-11352.el8.spdx.json
@@ -9,7 +9,7 @@
     ]
   },
   "name": "openshift-pipelines-client-1.14.3-11352.el8",
-  "documentNamespace": "https://access.redhat.com/security/data/sbom/beta/spdx/openshift-pipelines-client-1.14.3-11352.el8.json",
+  "documentNamespace": "https://www.redhat.com/openshift-pipelines-client-1.14.3-11352.el8.spdx.json",
   "packages": [
     {
       "name": "4d63.com/gocheckcompilerdirectives",

diff --git a/sbom/examples/rpm/openssl-3.0.7-18.el9_2.spdx.json b/sbom/examples/rpm/openssl-3.0.7-18.el9_2.spdx.json
@@ -9,7 +9,7 @@
     ]
   },
   "name": "openssl-3.0.7-18.el9_2",
-  "documentNamespace": "https://access.redhat.com/security/data/sbom/beta/spdx/openssl-3.0.7-18.el9_2.json",
+  "documentNamespace": "https://www.redhat.com/openssl-3.0.7-18.el9_2.spdx.json",
   "packages": [
     {
       "SPDXID": "SPDXRef-SRPM",

diff --git a/sbom/examples/rpm/poppler-21.01.0-19.el9.spdx.json b/sbom/examples/rpm/poppler-21.01.0-19.el9.spdx.json
@@ -9,7 +9,7 @@
     ]
   },
   "name": "poppler-21.01.0-19.el9",
-  "documentNamespace": "https://access.redhat.com/security/data/sbom/beta/spdx/poppler-21.01.0-19.el9.json",
+  "documentNamespace": "https://www.redhat.com/poppler-21.01.0-19.el9.spdx.json",
   "packages": [
     {
       "SPDXID": "SPDXRef-SRPM",