cyclonedx dependsOn format includes a pipe

55 Views Asked by At

I have a CycloneDX-formatted sbom that includes this snippet. What does the pipe character in the dependsOn array mean?

enter image description here

1

There are 1 best solutions below

0
jko On

What does the pipe character in the dependsOn array mean?

nothing in particular.

The values in the dependencies are references to bom-ref in the same document. see the docs. The bom-ref is an arbitrary string that must be unique in the document. The values do not need to have any meaning. see the docs.

see also: https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/docs/result.md