https://spdx.org/rdf/3.0.1/terms/Software/Sbom
A collection of SPDX Elements describing a single package.
By the associated SHACL property shapes, instances of software:Sbom can have the following properties:
| PROPERTY | PROPERTY TYPE | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS | GLOBAL RANGE |
|---|---|---|---|---|---|---|---|
| software:Sbom | |||||||
| software:sbomType | owl:ObjectProperty | Provides information about the type of an SBOM. | 0 | * | software:SbomType sh:IRI |
sh:in
software:SbomType/design, software:SbomType/source, software:SbomType/build, software:SbomType/deployed, software:SbomType/runtime, software:SbomType/analyzed
|
software:SbomType |
| core:Bundle | |||||||
| core:context | owl:DatatypeProperty | Gives information about the circumstances or unifying properties that Elements of the bundle have been assembled under. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:ElementCollection | |||||||
| core:element | owl:ObjectProperty | Refers to one or more Elements that are part of an ElementCollection. | 0 | * | core:Element sh:IRI |
core:Element | |
| core:profileConformance | owl:ObjectProperty | Describes one a profile which the creator of this ElementCollection intends to conform to. | 0 | * | core:ProfileIdentifierType sh:IRI |
sh:in
core:ProfileIdentifierType/core, core:ProfileIdentifierType/software, core:ProfileIdentifierType/simpleLicensing, core:ProfileIdentifierType/expandedLicensing, core:ProfileIdentifierType/security, core:ProfileIdentifierType/build, core:ProfileIdentifierType/ai, core:ProfileIdentifierType/dataset, core:ProfileIdentifierType/extension, core:ProfileIdentifierType/lite
|
core:ProfileIdentifierType |
| core:rootElement | owl:ObjectProperty | This property is used to denote the root Element(s) of a tree of elements contained in a BOM. | 0 | * | core:Element sh:IRI |
core:Element | |
rdf:type |
-- | sh:message https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection is an abstract class and should not be instantiated directly. Instantiate a subclass instead. |
0 | * |
sh:not
sh:hasValue core:ElementCollection
|
-- | |
| core:Element | |||||||
| core:comment | owl:DatatypeProperty | Provide consumers with comments by the creator of the Element about the Element. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:creationInfo | owl:ObjectProperty | Provides information about the creation of the Element. | 1 | 1 | core:CreationInfo sh:BlankNodeOrIRI |
core:CreationInfo | |
| core:description | owl:DatatypeProperty | Provides a detailed description of the Element. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:extension | owl:ObjectProperty | Specifies an Extension characterization of some aspect of an Element. sh:message Class is known to not derive from Extension and cannot be used |
0 | * | sh:BlankNodeOrIRI |
sh:not
sh:or (security:SsvcVulnAssessmentRelationship, security:CvssV2VulnAssessmentRelationship, security:ExploitCatalogVulnAssessmentRelationship, security:CvssV4VulnAssessmentRelationship, security:VexAffectedVulnAssessmentRelationship, security:VexNotAffectedVulnAssessmentRelationship, security:CvssV3VulnAssessmentRelationship, security:Vulnerability, security:VexUnderInvestigationVulnAssessmentRelationship, security:EpssVulnAssessmentRelationship, security:VexFixedVulnAssessmentRelationship, core:NamespaceMap, core:LifecycleScopedRelationship, core:Hash, core:Agent, core:CreationInfo, core:ExternalRef, core:Bom, core:IndividualElement, core:Relationship, core:PositiveIntegerRange, core:DictionaryEntry, core:ExternalMap, core:Annotation, core:SpdxDocument, core:Person, core:Organization, core:Bundle, core:Tool, core:ExternalIdentifier, core:SoftwareAgent, core:PackageVerificationCode, ai:AIPackage, ai:EnergyConsumptionDescription, ai:EnergyConsumption, build:Build, dataset:DatasetPackage, expandedlicensing:CustomLicense, expandedlicensing:OrLaterOperator, expandedlicensing:ListedLicense, expandedlicensing:DisjunctiveLicenseSet, expandedlicensing:ListedLicenseException, expandedlicensing:WithAdditionOperator, expandedlicensing:IndividualLicensingInfo, expandedlicensing:CustomLicenseAddition, expandedlicensing:ConjunctiveLicenseSet, simplelicensing:LicenseExpression, simplelicensing:SimpleLicensingText, extension:CdxPropertyEntry, software:Package, software:File, software:Sbom, software:Snippet, software:ContentIdentifier)
|
extension:Extension |
| core:externalIdentifier | owl:ObjectProperty | Provides a reference to a resource outside the scope of SPDX-3.0 content that uniquely identifies an Element. | 0 | * | core:ExternalIdentifier sh:BlankNodeOrIRI |
core:ExternalIdentifier | |
| core:externalRef | owl:ObjectProperty | Points to a resource outside the scope of the SPDX-3.0 content that provides additional characteristics of an Element. | 0 | * | core:ExternalRef sh:BlankNodeOrIRI |
core:ExternalRef | |
| core:name | owl:DatatypeProperty | Identifies the name of an Element as designated by the creator. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:summary | owl:DatatypeProperty | A short description of an Element. | 0 | 1 | xsd:string sh:Literal |
xsd:string | |
| core:verifiedUsing | owl:ObjectProperty | Provides an IntegrityMethod with which the integrity of an Element can be asserted. | 0 | * | core:IntegrityMethod sh:BlankNodeOrIRI |
core:IntegrityMethod | |
rdf:type |
-- | sh:message https://spdx.org/rdf/3.0.1/terms/Core/Element is an abstract class and should not be instantiated directly. Instantiate a subclass instead. |
0 | * |
sh:not
sh:hasValue core:Element
|
-- | |
@prefix core: <https://spdx.org/rdf/3.0.1/terms/Core/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix software: <https://spdx.org/rdf/3.0.1/terms/Software/> .
software:Sbom a owl:Class,
sh:NodeShape ;
rdfs:comment "A collection of SPDX Elements describing a single package."@en ;
rdfs:subClassOf core:Bom ;
sh:nodeKind sh:IRI ;
sh:property [ sh:class software:SbomType ;
sh:in ( <https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design> <https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source> <https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build> <https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed> <https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime> <https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed> ) ;
sh:nodeKind sh:IRI ;
sh:path software:sbomType ] .