Updated CRE support based on conversation with CRE project.

Signed-off-by: Steve Springett <[email protected]>
CycloneDX · Oct 10, 2023 · f3d54da · f3d54da
1 parent 41fc736
commit f3d54da
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/schema/bom-1.6.schema.json b/schema/bom-1.6.schema.json
@@ -4236,10 +4236,14 @@
                 "items": { "type":  "string" }
               },
               "opencre": {
-                "type": "string",
-                "format": "iri-reference",
-                "title": "OWASP OpenCRE",
-                "description": "The URL to the corresponding Common Requirements Enumeration (CRE) common requirement identifier."
+                "type": "array",
+                "title": "OWASP OpenCRE Identifier(s)",
+                "description": "The Common Requirements Enumeration (CRE) identifier(s). CRE is a structured and standardized framework for uniting security standards and guidelines. CRE links each section of a resource to a shared topic identifier (a Common Requirement). Through this shared topic link, all resources map to each other. Use of CRE promotes clear and unambiguous communication among stakeholders.",
+                "items": {
+                  "type":  "string",
+                  "pattern": "^CRE:[0-9]+-[0-9]+$",
+                  "examples": [ "CRE:764-507" ]
+                }
               },
               "parent": {
                 "$ref": "#/definitions/refLinkType",