Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

purl #701

Merged
merged 2 commits into from
Mar 27, 2024
Merged

purl #701

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1f671f0
purl
tschmidtb51 Feb 24, 2024
4fb0144
Revert of section title case change
sthagen Feb 26, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions csaf_2.1/prose/edit/src/introduction-04-informative-references.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ OPENSSL
: _GTLS/SSL and crypto library_, OpenSSL Software Foundation, https://www.openssl.org/.

PURL
: _Package URL (PURL)_, GitHub Project, https://github.com/package-url/purl-spec.
: _Package URL (purl)_, GitHub Project, https://github.com/package-url/purl-spec.

RFC3339
: Klyne, G. and C. Newman, "Date and Time on the Internet: Timestamps", RFC 3339, DOI 10.17487/RFC3339, July 2002,
Expand Down Expand Up @@ -118,7 +118,7 @@ SPDX22
https://spdx.github.io/spdx-spec/.

VERS
: _vers: a mostly universal version range specifier_, Part of the PURL GitHub Project,
: _vers: a mostly universal version range specifier_, Part of the purl GitHub Project,
https://github.com/package-url/purl-spec/blob/version-range-spec/VERSION-RANGE-SPEC.rst.

VEX
Expand Down
10 changes: 5 additions & 5 deletions csaf_2.1/prose/edit/src/schema-elements-01-defs-03-full-product-name.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -238,20 +238,20 @@ Two `*` MUST NOT follow each other.
IC25T060ATCS05-0
```

##### Full Product Name Type - Product Identification Helper - PURL
##### Full Product Name Type - Product Identification Helper - purl

The package URL (PURL) representation (`purl`) is a `string` of 7 or more characters with `pattern` (regular expression):
The package URL (purl) representation (`purl`) is a `string` of 7 or more characters with `pattern` (regular expression):

```
^pkg:[A-Za-z\\.\\-\\+][A-Za-z0-9\\.\\-\\+]*/.+
```

> The given pattern does not completely evaluate whether a PURL is valid according to the [cite](#PURL) specification.
> The given pattern does not completely evaluate whether a purl is valid according to the [cite](#PURL) specification.
> It provides a more generic approach and general guidance to enable forward compatibility.
> CSAF uses only the canonical form of PURL to conform with section 3.3 of [cite](#RFC3986).
> CSAF uses only the canonical form of purl to conform with section 3.3 of [cite](#RFC3986).
> Therefore, URLs starting with `pkg://` are considered invalid.

This package URL (PURL) attribute refers to a method for reliably identifying and locating software packages external to this specification.
This package URL (purl) attribute refers to a method for reliably identifying and locating software packages external to this specification.
See [cite](#PURL) for details.

##### Full Product Name Type - Product Identification Helper - SBOM URLs
Expand Down
4 changes: 2 additions & 2 deletions csaf_2.1/prose/edit/src/tests-01-mndtr-13-purl.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
### PURL
### purl

sthagen marked this conversation as resolved.
Show resolved Hide resolved
It MUST be tested that given PURL is valid.
It MUST be tested that given purl is valid.

The relevant paths for this test are:

Expand Down
Loading