sbom

type AnnotationSPDX struct {
	Annotator string `json:"annotator"`
	Date      string `json:"annotationDate"`
	Type      string `json:"annotationType"`
	Comment   string `json:"comment"`
}

type Checksum struct {
	Algorithm string `json:"algorithm"`
	Value     string `json:"checksumValue"`
}

type CreationInfo struct {
	Created  string   `json:"created"`
	Creators []string `json:"creators"`
}

type Document struct {
	SPDXVersion    string          `json:"spdxVersion"`
	DataLicense    string          `json:"dataLicense"`
	SPDXID         string          `json:"SPDXID"`
	Name           string          `json:"name"`
	Namespace      string          `json:"documentNamespace"`
	CreationInfo   CreationInfo    `json:"creationInfo"`
	Packages       []Package       `json:"packages"`
	Relationships  []Relationship  `json:"relationships,omitempty"`
	ExtractedTexts []ExtractedText `json:"hasExtractedLicensingInfos,omitempty"`
}

type ExternalRef struct {
	Category string `json:"referenceCategory"`
	Type     string `json:"referenceType"`
	Locator  string `json:"referenceLocator"`
}

type ExtractedText struct {
	ID   string `json:"licenseId"`
	Name string `json:"name"`
	Text string `json:"extractedText"`
}

type GenerateOptions struct {
	// Namespace is the SPDX document namespace URI.
	// If empty, a default based on the solution name and version is used.
	Namespace string

	// ContentDigest is the sha256 digest of the primary content layer.
	ContentDigest string

	// BundleDigest is the sha256 digest of the bundle layer (empty if no bundle).
	BundleDigest string

	// BinaryName is the tool name (e.g., "scafctl") for the creator field.
	BinaryName string
}

type Package struct {
	SPDXID           string           `json:"SPDXID"`
	Name             string           `json:"name"`
	Version          string           `json:"versionInfo,omitempty"`
	Supplier         string           `json:"supplier,omitempty"`
	DownloadLocation string           `json:"downloadLocation"`
	FilesAnalyzed    bool             `json:"filesAnalyzed"`
	Checksums        []Checksum       `json:"checksums,omitempty"`
	ExternalRefs     []ExternalRef    `json:"externalRefs,omitempty"`
	Description      string           `json:"description,omitempty"`
	PrimaryPurpose   string           `json:"primaryPackagePurpose,omitempty"`
	Annotations      []AnnotationSPDX `json:"annotations,omitempty"`
}

type Relationship struct {
	Element string `json:"spdxElementId"`
	Type    string `json:"relationshipType"`
	Related string `json:"relatedSpdxElement"`
}