Skip to content

Support for SPDX 3.0 #3867

Description

@stefan6419846

Short Description

Scancode Toolkit should support SPDX v3 exports as well.

Possible Labels

  • new feature
  • sbom

Select Category

  • Enhancement
  • Add License/Copyright
  • Scan Feature
  • Packaging
  • Documentation
  • Expand Support
  • Other

Describe the Update

At the moment, Scancode Toolkit uses SPDX 2.2.1, which corresponds to ISO/IEC 5962:2021. Two months ago, version 3.0 has been released with a large overhaul. Scancode Toolkit should support the new specification and its documented output formats: https://spdx.github.io/spdx-spec/v3.0/serializations/#42-rdf-serialization

How This Feature will help you/your organization

Keep Scancode Toolkit in sync with the latest standards.

Possible Solution/Implementation Details

We might need a switch to decide between version 2.2 and 3.0 to support multiple use-cases, for example interoperability with recent tooling, while still allowing for ISO conformance if required.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions