diff --git a/schema/bom-1.6.proto b/schema/bom-1.6.proto index c182a815..0023df1f 100644 --- a/schema/bom-1.6.proto +++ b/schema/bom-1.6.proto @@ -280,7 +280,7 @@ enum ExternalReferenceType { EXTERNAL_REFERENCE_TYPE_EVIDENCE = 36; // Describes how a component or service was manufactured or deployed. EXTERNAL_REFERENCE_TYPE_FORMULATION = 37; - // URL to a source archive. + // The location where the source code distributable can be obtained. This is often an archive format such as zip or tgz. The source-distribution type complements use of the version control (vcs) type. EXTERNAL_REFERENCE_TYPE_SOURCE_DISTRIBUTION = 38; // An e-signature is commonly a scanned representation of a written signature or a stylized script of the persons name. EXTERNAL_REFERENCE_TYPE_ELECTRONIC_SIGNATURE = 39; diff --git a/schema/bom-1.6.schema.json b/schema/bom-1.6.schema.json index b0b5bede..8fc57e40 100644 --- a/schema/bom-1.6.schema.json +++ b/schema/bom-1.6.schema.json @@ -1726,7 +1726,7 @@ "chat": "Real-time chat platform", "documentation": "Documentation, guides, or how-to instructions", "support": "Community or commercial support", - "source-distribution": "URL to a source archive", + "source-distribution": "The location where the source code distributable can be obtained. This is often an archive format such as zip or tgz. The source-distribution type complements use of the version control (vcs) type.", "distribution": "Direct or repository download location", "distribution-intake": "The location where a component was published to. This is often the same as \"distribution\" but may also include specialized publishing processes that act as an intermediary.", "license": "The reference to the license file. If a license URL has been defined in the license node, it should also be defined as an external reference for completeness.", diff --git a/schema/bom-1.6.xsd b/schema/bom-1.6.xsd index 6f727602..8bed34d7 100644 --- a/schema/bom-1.6.xsd +++ b/schema/bom-1.6.xsd @@ -1323,7 +1323,7 @@ limitations under the License. - URL to a source archive + The location where the source code distributable can be obtained. This is often an archive format such as zip or tgz. The source-distribution type complements use of the version control (vcs) type.