@@ -23,7 +23,7 @@ A SPDX document with the Lite profile must include properties for each class lis
23
23
| 3 | /Core/SpdxDocument/comment | 0..1 | |
24
24
| 4 | /Core/SpdxDocument/creationInfo | 1..1 | |
25
25
| 5 | /Core/SpdxDocument/verifiedUsing | 0..* | This should be objects of /Core/Hash |
26
- | 6 | /Core/SpdxDocument/element | 1..* | MUST have at least one element |
26
+ | 6 | /Core/SpdxDocument/element | 1..* | MUST have at least one /Core/Sbom object |
27
27
| 7 | /Core/SpdxDocument/rootElement | 1..* | This should be objects of /Core/Sbom |
28
28
| 8 | /Core/SpdxDocument/namespaceMap | 0..* | |
29
29
| 9 | /Core/SpdxDocument/dataLicense | 0..1 | |
@@ -41,7 +41,7 @@ A SPDX document with the Lite profile must include properties for each class lis
41
41
| :-:| :--| :--| :--|
42
42
| 1 | /Software/Sbom/spdxId | 1..1 | |
43
43
| 2 | /Software/Sbom/creationInfo | 1..1 | |
44
- | 3 | /Software/Sbom/element | 1..* | MUST have at least one element |
44
+ | 3 | /Software/Sbom/element | 1..* | MUST have at least one /Software/Package object |
45
45
| 4 | /Software/Sbom/rootElement | 1..* | This should be objects of /Software/Package |
46
46
| 5 | /Software/Sbom/sbomType | 0..* | |
47
47
@@ -80,7 +80,7 @@ And all /Software/Package objects MUST have “downloadLocation” OR “package
80
80
| 3 | /Software/Package/comment | 0..1 | |
81
81
| 4 | /Software/Package/creationInfo | 1..1 | |
82
82
| 5 | /Software/Package/verifiedUsing | 0..* | This should be objects of /Core/Hash |
83
- | 6 | /Software/Package/originatedBy | 0..* | This should be an object of /Core/Agent |
83
+ | 6 | /Software/Package/originatedBy | 0..* | This should be objects of /Core/Agent |
84
84
| 7 | /Software/Package/suppliedBy | 1..1 | This should be an object of /Core/Agent |
85
85
| 8 | /Software/Package/builtTime | 0..1 | |
86
86
| 9 | /Software/Package/releaseTime | 0..1 | |
0 commit comments