@@ -76,7 +76,7 @@ say this is a [Person][Class_Person].
76
76
Next, we need to name our object:
77
77
```json
78
78
79
- "spdxId" : " http://spdx.example.com/ Person/JoshuaWatt" ,
79
+ "spdxId" : " http://spdx.org/spdxdocs/ Person/JoshuaWatt-141ec767-40f2-4aad-9658-ac2703f3a7d9 " ,
80
80
```
81
81
82
82
Most objects can have some sort of "ID" property that gives it a name. In the
@@ -96,7 +96,7 @@ are considered to be the same object, and any references to this URI is a
96
96
reference to this _specific_ object we are creating.
97
97
98
98
If you work for a company, own a domain, etc. it is encouraged to use that (or
99
- some subdomain of it) in place of `spdx.example.com `.
99
+ some subdomain of it) in place of `spdx.org/spdxdocs `.
100
100
101
101
In practice, many `spdxId` values will have some sort of hash or random
102
102
UUID-like string incorporated to make them unique.
@@ -231,7 +231,7 @@ who (or what) created the elements that are linked to this
231
231
232
232
```json
233
233
"createdBy" : [
234
- " http://spdx.example.com/ Person/JoshuaWatt"
234
+ " http://spdx.org/spdxdocs/ Person/JoshuaWatt-141ec767-40f2-4aad-9658-ac2703f3a7d9 "
235
235
],
236
236
```
237
237
@@ -271,7 +271,7 @@ do that now:
271
271
```json
272
272
{
273
273
"type" : " SpdxDocument" ,
274
- "spdxId" : " http ://spdx.example.com/ Document1" ,
274
+ "spdxId" : " https ://spdx.org/spdxdocs/ Document1-d078aed9-384d-4a64-87cb-99c79647c8c9 " ,
275
275
"creationInfo" : " _:creationinfo" ,
276
276
```
277
277
@@ -307,7 +307,7 @@ Element) references. Add this now and close our our
307
307
308
308
```json
309
309
"rootElement" : [
310
- " http ://spdx.example.com/BOM1 "
310
+ " https ://spdx.org/spdxdocs/BOM-e2e955f5-c50e-4a3a-8c69-db152f0f4615 "
311
311
]
312
312
},
313
313
```
@@ -365,7 +365,7 @@ Lets define our package:
365
365
```json
366
366
{
367
367
"type" : " software_Package" ,
368
- "spdxId" : " http ://spdx.example.com/amazing-widget " ,
368
+ "spdxId" : " https ://spdx.org/spdxdocs/Package-d1db6e61-aebe-4b13-ae73-d0f66018dbe0 " ,
369
369
"creationInfo" : " _:creationinfo" ,
370
370
```
371
371
This should be familiar by now. Note the reuse of our previous
@@ -425,7 +425,7 @@ property:
425
425
426
426
```json
427
427
"originatedBy" : [
428
- " http://spdx.example.com/ Person/JoshuaWatt"
428
+ " http://spdx.org/spdxdocs/ Person/JoshuaWatt-141ec767-40f2-4aad-9658-ac2703f3a7d9 "
429
429
],
430
430
```
431
431
@@ -472,7 +472,7 @@ Lets get started with our first file, the program executable:
472
472
```json
473
473
{
474
474
"type" : " software_File" ,
475
- "spdxId" : " http ://spdx.example.com/amazing-widget/main " ,
475
+ "spdxId" : " https ://spdx.org/spdxdocs/File-8f79956e-4089-4166-9a71-457de77e4846 " ,
476
476
"creationInfo" : " _:creationinfo" ,
477
477
"name" : " /usr/bin/amazing-widget" ,
478
478
"verifiedUsing" : [
@@ -484,7 +484,7 @@ Lets get started with our first file, the program executable:
484
484
],
485
485
"builtTime" : " 2024-03-05T00:00:00Z" ,
486
486
"originatedBy" : [
487
- " http://spdx.example.com/ Person/JoshuaWatt"
487
+ " http://spdx.org/spdxdocs/ Person/JoshuaWatt-141ec767-40f2-4aad-9658-ac2703f3a7d9 "
488
488
],
489
489
```
490
490
@@ -527,7 +527,7 @@ program:
527
527
```json
528
528
{
529
529
"type" : " software_File" ,
530
- "spdxId" : " http ://spdx.example.com/amazing-widget/config " ,
530
+ "spdxId" : " https ://spdx.org/spdxdocs/File-77808a5c-7a1b-43d1-9fa9-410a309ca9f3 " ,
531
531
"creationInfo" : " _:creationinfo" ,
532
532
"name" : " /etc/amazing-widget.cfg" ,
533
533
"verifiedUsing" : [
@@ -539,7 +539,7 @@ program:
539
539
],
540
540
"builtTime" : " 2024-03-05T00:00:00Z" ,
541
541
"originatedBy" : [
542
- " http://spdx.example.com/ Person/JoshuaWatt"
542
+ " http://spdx.org/spdxdocs/ Person/JoshuaWatt-141ec767-40f2-4aad-9658-ac2703f3a7d9 "
543
543
],
544
544
"software_primaryPurpose" : " configuration"
545
545
},
@@ -564,7 +564,7 @@ new one:
564
564
```json
565
565
{
566
566
"type" : " Relationship" ,
567
- "spdxId" : " http ://spdx.example.com/amazing-widet-contains " ,
567
+ "spdxId" : " https ://spdx.org/spdxdocs/Relationship/contains-6b0b7ce4-a069-406d-9088-9e91f65b79f0 " ,
568
568
"creationInfo" : " _:creationinfo" ,
569
569
```
570
570
@@ -592,10 +592,10 @@ with them: you can think of them as an arrow pointing from their
592
592
express this:
593
593
594
594
```json
595
- "from" : " http ://spdx.example.com/amazing-widget " ,
595
+ "from" : " https ://spdx.org/spdxdocs/Package-d1db6e61-aebe-4b13-ae73-d0f66018dbe0 " ,
596
596
"to" : [
597
- " http ://spdx.example.com/amazing-widget/config " ,
598
- " http ://spdx.example.com/amazing-widget/main "
597
+ " https ://spdx.org/spdxdocs/File-8f79956e-4089-4166-9a71-457de77e4846 " ,
598
+ " https ://spdx.org/spdxdocs/File-77808a5c-7a1b-43d1-9fa9-410a309ca9f3 "
599
599
],
600
600
```
601
601
@@ -631,7 +631,7 @@ This is done by creating a [software_Sbom][Class_software_Sbom] object:
631
631
```json
632
632
{
633
633
"type" : " software_Sbom" ,
634
- "spdxId" : " http ://spdx.example.com/BOM1 " ,
634
+ "spdxId" : " https ://spdx.org/spdxdocs/BOM-e2e955f5-c50e-4a3a-8c69-db152f0f4615 " ,
635
635
"creationInfo" : " _:creationinfo" ,
636
636
```
637
637
@@ -647,7 +647,7 @@ of the SBOM, which is our [software_Package][Class_software_Package]:
647
647
648
648
```json
649
649
"rootElement" : [
650
- " http ://spdx.example.com/amazing-widget "
650
+ " https ://spdx.org/spdxdocs/Package-d1db6e61-aebe-4b13-ae73-d0f66018dbe0 "
651
651
],
652
652
```
653
653
@@ -661,8 +661,8 @@ included:
661
661
662
662
```json
663
663
"element" : [
664
- " http ://spdx.example.com/amazing-widget/main " ,
665
- " http ://spdx.example.com/amazing-widget/config "
664
+ " https ://spdx.org/spdxdocs/File-8f79956e-4089-4166-9a71-457de77e4846 " ,
665
+ " https ://spdx.org/spdxdocs/File-77808a5c-7a1b-43d1-9fa9-410a309ca9f3 "
666
666
],
667
667
```
668
668
0 commit comments