At the recent SPDX Docfest, it was pointed out that the value we provide in the SPDX 2.3 SBOM for the "documentDescribes" field is a self-reference to the SPDX Document, rather than the subject of the SBOM: SPDXRef-DOCUMENT .
It would be better to provide a filename (possibly even a PURL when available) to identify (describe?) the overall subject of the SBOM. See attached.
At the recent SPDX Docfest, it was pointed out that the value we provide in the SPDX 2.3 SBOM for the "documentDescribes" field is a self-reference to the SPDX Document, rather than the subject of the SBOM:
SPDXRef-DOCUMENT.It would be better to provide a filename (possibly even a PURL when available) to identify (describe?) the overall subject of the SBOM. See attached.