aboutsummaryrefslogtreecommitdiff
path: root/spdx/common
diff options
context:
space:
mode:
authorBrandon Lum <lumjjb@gmail.com>2022-10-31 16:21:07 -0400
committerGitHub <noreply@github.com>2022-10-31 16:21:07 -0400
commite20ab888a04478990a42fc816a3bd188364fb9ce (patch)
tree3334341a7baf56335d158f35c11fc6d57e5c2e3e /spdx/common
parentfb7fe8874d01f3c9e2d7f450cf1407e7513b02ee (diff)
parentbc625283024d89fd4cea91df08bcd8c0c0a79405 (diff)
downloadspdx-tools-e20ab888a04478990a42fc816a3bd188364fb9ce.tar.gz
Merge pull request #164 from kzantow-anchore/feat/spdx-2.3-support
Add support for SPDX 2.3
Diffstat (limited to 'spdx/common')
-rw-r--r--spdx/common/checksum.go26
-rw-r--r--spdx/common/package.go2
2 files changed, 18 insertions, 10 deletions
diff --git a/spdx/common/checksum.go b/spdx/common/checksum.go
index 02a57ff..aa2ae52 100644
--- a/spdx/common/checksum.go
+++ b/spdx/common/checksum.go
@@ -7,15 +7,23 @@ type ChecksumAlgorithm string
// The checksum algorithms mentioned in the spdxv2.2.0 https://spdx.github.io/spdx-spec/4-file-information/#44-file-checksum
const (
- SHA224 ChecksumAlgorithm = "SHA224"
- SHA1 ChecksumAlgorithm = "SHA1"
- SHA256 ChecksumAlgorithm = "SHA256"
- SHA384 ChecksumAlgorithm = "SHA384"
- SHA512 ChecksumAlgorithm = "SHA512"
- MD2 ChecksumAlgorithm = "MD2"
- MD4 ChecksumAlgorithm = "MD4"
- MD5 ChecksumAlgorithm = "MD5"
- MD6 ChecksumAlgorithm = "MD6"
+ SHA224 ChecksumAlgorithm = "SHA224"
+ SHA1 ChecksumAlgorithm = "SHA1"
+ SHA256 ChecksumAlgorithm = "SHA256"
+ SHA384 ChecksumAlgorithm = "SHA384"
+ SHA512 ChecksumAlgorithm = "SHA512"
+ MD2 ChecksumAlgorithm = "MD2"
+ MD4 ChecksumAlgorithm = "MD4"
+ MD5 ChecksumAlgorithm = "MD5"
+ MD6 ChecksumAlgorithm = "MD6"
+ SHA3_256 ChecksumAlgorithm = "SHA3-256"
+ SHA3_384 ChecksumAlgorithm = "SHA3-384"
+ SHA3_512 ChecksumAlgorithm = "SHA3-512"
+ BLAKE2b_256 ChecksumAlgorithm = "BLAKE2b-256"
+ BLAKE2b_384 ChecksumAlgorithm = "BLAKE2b-384"
+ BLAKE2b_512 ChecksumAlgorithm = "BLAKE2b-512"
+ BLAKE3 ChecksumAlgorithm = "BLAKE3"
+ ADLER32 ChecksumAlgorithm = "ADLER32"
)
// Checksum provides a unique identifier to match analysis information on each specific file in a package.
diff --git a/spdx/common/package.go b/spdx/common/package.go
index e0635df..de5a075 100644
--- a/spdx/common/package.go
+++ b/spdx/common/package.go
@@ -101,5 +101,5 @@ type PackageVerificationCode struct {
// Spec also allows specifying files to exclude from the
// verification code algorithm; intended to enable exclusion of
// the SPDX document file itself.
- ExcludedFiles []string `json:"packageVerificationCodeExcludedFiles"`
+ ExcludedFiles []string `json:"packageVerificationCodeExcludedFiles,omitempty"`
}