Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Expand support for service dataflows #191

Closed
stevespringett opened this issue Mar 13, 2023 · 1 comment · Fixed by #194
Closed

Expand support for service dataflows #191

stevespringett opened this issue Mar 13, 2023 · 1 comment · Fixed by #194
Assignees
@stevespringett
Labels
proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration RFC vote accepted
Milestone
1.5

Comments

@stevespringett
Copy link
Member

Currently, services that communicate with other services can be represented as dependencies (which is correct), the data flow and classification can be specified, but the URIs describing other services or URLs are not currently possible.
@stevespringett stevespringett added this to the 1.5 milestone Mar 13, 2023
@stevespringett stevespringett self-assigned this Mar 13, 2023
@stevespringett
Copy link
Member Author

stevespringett commented Mar 19, 2023 •
edited
Loading

In addition, trustZone, name, and description are added, and minor refactoring necessary. In the XML schema, some deprecation was required along with adding a new dataflow introduced in 1.5 for representing the data. Both work.

These changes make CDX more compatible with OpenThreatModel (OTM)

@stevespringett stevespringett changed the title Add explicit support for service-to-service dataflow Expand support for service dataflows Mar 19, 2023
@stevespringett stevespringett mentioned this issue Mar 19, 2023
Merged
@stevespringett stevespringett linked a pull request Mar 19, 2023 that will close this issue
Extend service dataflow support #194
Merged
@stevespringett stevespringett added request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration labels Mar 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@stevespringett stevespringett

Labels
proposed core enhancement request for comment RFC notice sent A public RFC notice was distributed to the CycloneDX mailing list for consideration RFC vote accepted
Projects
None yet
Milestone
1.5
Development

Successfully merging a pull request may close this issue.

Extend service dataflow support CycloneDX/specification
1 participant
@stevespringett