Skip to content

Commit

Permalink
fixup! fix formatting
Browse files Browse the repository at this point in the history
  • Loading branch information
kosciCZ committed Sep 11, 2024
1 parent 2f59a1d commit ae7a50c
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions docs/design/generic.md
Original file line number Diff line number Diff line change
Expand Up @@ -69,13 +69,14 @@ checksums. However, it will provide enough information in the SBOM so tooling th
An example of this would be the [Enterprise Contract](https://enterprisecontract.dev/) (EC) project, that enforces policies
based on the provided SBOM.

In the context of this feature, EC policy would be supplied with the following information by cachi2:
In the context of this feature, EC would be supplied with the following information by cachi2 in the SBOM:

- checksums were provided and verified
- list of checksum algorithms used
- download urls (as part of the purl)
Enterprise contract policy would then be able to restrict accepting content without checksums, enforce certain algorithms
- for checksum verification or only allow certain patterns in the download url.

Enterprise contract policy would then be able to restrict accepting content without checksums, enforce certain algorithms
for checksum verification or only allow certain patterns in the download url.

### Integration testing

Expand Down

0 comments on commit ae7a50c

Please sign in to comment.