@prefix dcterms: .
@prefix omg-ann: .
@prefix owl: .
@prefix rdf: .
@prefix rdfs: .
@prefix sh: .
@prefix skos: .
@prefix spdx: .
@prefix spdx-ai: .
@prefix spdx-build: .
@prefix spdx-core: .
@prefix spdx-dataset: .
@prefix spdx-expandedlicensing: .
@prefix spdx-extension: .
@prefix spdx-functionalsafety: .
@prefix spdx-hardware: .
@prefix spdx-licensing: .
@prefix spdx-lite: .
@prefix spdx-operations: .
@prefix spdx-security: .
@prefix spdx-service: .
@prefix spdx-simplelicensing: .
@prefix spdx-software: .
@prefix spdx-supplychain: .
@prefix vann: .
@prefix xsd: .
dcterms:abstract a owl:AnnotationProperty .
dcterms:creator a owl:AnnotationProperty .
dcterms:isReplacedBy a owl:AnnotationProperty .
dcterms:license a owl:AnnotationProperty .
dcterms:references a owl:AnnotationProperty .
dcterms:title a owl:AnnotationProperty .
vann:example a owl:AnnotationProperty .
vann:preferredNamespacePrefix a owl:AnnotationProperty .
vann:preferredNamespaceUri a owl:AnnotationProperty .
skos:definition a owl:AnnotationProperty .
skos:note a owl:AnnotationProperty .
spdx: a owl:Ontology ;
rdfs:label "System Package Data Exchange™ (SPDX®) Ontology"@en ;
dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ;
dcterms:creator "SPDX Project"@en ;
dcterms:license ;
dcterms:references ;
dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ;
vann:preferredNamespacePrefix "spdx" ;
vann:preferredNamespaceUri "https://spdx.org/rdf/3/terms/" ;
omg-ann:copyright "Copyright (C) SPDX Project"@en .
spdx-core:NoAssertionElement a owl:NamedIndividual,
spdx-core:IndividualElement ;
rdfs:comment """An Individual Value for Element representing a set of Elements of unknown
identity or cardinality (number)."""@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition """An Individual Value for Element representing a set of Elements of unknown
identity or cardinality (number)."""@en ;
spdx-core:creationInfo spdx:creationInfo_NoAssertionElement .
spdx-core:NoneElement a owl:NamedIndividual,
spdx-core:IndividualElement ;
rdfs:comment """An Individual Value for Element representing a set of Elements with
cardinality (number/count) of zero."""@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition """An Individual Value for Element representing a set of Elements with
cardinality (number/count) of zero."""@en ;
spdx-core:creationInfo spdx:creationInfo_NoneElement .
spdx-expandedlicensing:NoAssertionLicense a owl:NamedIndividual,
spdx-expandedlicensing:IndividualLicensingInfo ;
rdfs:comment """An Individual Value for License when no assertion can be made about its actual
value."""@en ;
rdfs:isDefinedBy spdx-expandedlicensing: ;
owl:sameAs spdx-licensing:NoAssertion ;
skos:definition """An Individual Value for License when no assertion can be made about its actual
value."""@en ;
spdx-core:creationInfo spdx:creationInfo_NoAssertionLicense .
spdx-expandedlicensing:NoneLicense a owl:NamedIndividual,
spdx-expandedlicensing:IndividualLicensingInfo ;
rdfs:comment """An Individual Value for License where the SPDX data creator determines that no
license is present."""@en ;
rdfs:isDefinedBy spdx-expandedlicensing: ;
owl:sameAs spdx-licensing:None ;
skos:definition """An Individual Value for License where the SPDX data creator determines that no
license is present."""@en ;
spdx-core:creationInfo spdx:creationInfo_NoneLicense .
spdx-hardware:mass a owl:DatatypeProperty ;
rdfs:label "mass"@en ;
rdfs:comment "Information related to physical hardware."@en ;
rdfs:isDefinedBy spdx-hardware: ;
rdfs:range xsd:decimal ;
skos:definition "Information related to physical hardware."@en ;
skos:note "Mass is defined as an intrinsic property of a body for describing a physical hardware component."@en .
spdx-licensing: vann:preferredNamespacePrefix "spdx-licensing" ;
vann:preferredNamespaceUri "https://spdx.org/rdf/3/terms/Licensing/" .
spdx-lite: vann:preferredNamespacePrefix "spdx-lite" ;
vann:preferredNamespaceUri "https://spdx.org/rdf/3/terms/Lite/" .
spdx-operations:exportControlClassificationResult a owl:DatatypeProperty ;
rdfs:label "exportControlClassificationResult"@en ;
rdfs:comment "Provides the result of an export control assessment."@en ;
rdfs:isDefinedBy spdx-operations: ;
rdfs:range spdx-operations:ExportControlClassification ;
skos:definition "Provides the result of an export control assessment."@en ;
skos:note "Provides the result of an export control assessment."@en .
omg-ann:copyright a owl:AnnotationProperty .
spdx-ai:AIPackage a owl:Class,
sh:NodeShape ;
rdfs:label "AIPackage"@en ;
rdfs:comment "A Package that contains AI software or an AI model."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:subClassOf spdx-software:Package ;
skos:definition "A Package that contains AI software or an AI model."@en ;
skos:note """A Package that contains code or a model that provides
artificial intelligence capabilities."""@en ;
sh:nodeKind sh:IRI ;
sh:property [ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:path spdx-ai:limitation ],
[ sh:class spdx-core:DictionaryEntry ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path spdx-ai:metric ],
[ sh:class spdx-core:DictionaryEntry ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path spdx-ai:hyperparameter ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:path spdx-ai:informationAboutTraining ],
[ sh:class spdx-ai:EnergyConsumption ;
sh:maxCount 1 ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path spdx-ai:energyConsumption ],
[ sh:in ( ) ;
sh:maxCount 1 ;
sh:path spdx-ai:autonomyType ],
[ sh:datatype xsd:string ;
sh:path spdx-ai:typeOfModel ],
[ sh:datatype xsd:string ;
sh:path spdx-ai:standardCompliance ],
[ sh:datatype xsd:string ;
sh:path spdx-ai:modelDataPreprocessing ],
[ sh:in ( ) ;
sh:maxCount 1 ;
sh:path spdx-ai:useSensitivePersonalInformation ],
[ sh:in ( ) ;
sh:maxCount 1 ;
sh:path spdx-ai:safetyRiskAssessment ],
[ sh:class spdx-core:DictionaryEntry ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path spdx-ai:metricDecisionThreshold ],
[ sh:datatype xsd:string ;
sh:path spdx-ai:domain ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:path spdx-ai:informationAboutApplication ],
[ sh:datatype xsd:string ;
sh:path spdx-ai:modelExplainability ],
[ sh:in ( ) ;
sh:maxCount 1 ;
sh:path spdx-core:isoAutomationLevel ] .
a owl:NamedIndividual,
spdx-ai:EnergyUnitType ;
rdfs:label "kilowattHour"@en ;
rdfs:comment "Kilowatt-hour."@en ;
rdfs:isDefinedBy spdx-ai: ;
skos:definition "Kilowatt-hour."@en .
a owl:NamedIndividual,
spdx-ai:EnergyUnitType ;
rdfs:label "megajoule"@en ;
rdfs:comment "Megajoule."@en ;
rdfs:isDefinedBy spdx-ai: ;
skos:definition "Megajoule."@en .
a owl:NamedIndividual,
spdx-ai:EnergyUnitType ;
rdfs:label "other"@en ;
rdfs:comment "Any other units of energy measurement."@en ;
rdfs:isDefinedBy spdx-ai: ;
skos:definition "Any other units of energy measurement."@en .
a owl:NamedIndividual,
spdx-ai:SafetyRiskAssessmentType ;
rdfs:label "high"@en ;
rdfs:comment "The second-highest level of risk posed by an AI system."@en ;
rdfs:isDefinedBy spdx-ai: ;
skos:definition "The second-highest level of risk posed by an AI system."@en .
a owl:NamedIndividual,
spdx-ai:SafetyRiskAssessmentType ;
rdfs:label "low"@en ;
rdfs:comment "Low/no risk is posed by an AI system."@en ;
rdfs:isDefinedBy spdx-ai: ;
skos:definition "Low/no risk is posed by an AI system."@en .
a owl:NamedIndividual,
spdx-ai:SafetyRiskAssessmentType ;
rdfs:label "medium"@en ;
rdfs:comment "The third-highest level of risk posed by an AI system."@en ;
rdfs:isDefinedBy spdx-ai: ;
skos:definition "The third-highest level of risk posed by an AI system."@en .
a owl:NamedIndividual,
spdx-ai:SafetyRiskAssessmentType ;
rdfs:label "serious"@en ;
rdfs:comment "The highest level of risk posed by an AI system."@en ;
rdfs:isDefinedBy spdx-ai: ;
skos:definition "The highest level of risk posed by an AI system."@en .
spdx-ai:autonomyType a owl:ObjectProperty ;
rdfs:label "autonomyType"@en ;
rdfs:comment """**DEPRECATED in SPDX 3.1.**
Use /Core/isoAutomationLevel
instead.
Indicates whether the system can perform a decision or action without human
involvement or guidance."""@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-core:PresenceType ;
skos:definition """**DEPRECATED in SPDX 3.1.**
Use /Core/isoAutomationLevel
instead.
Indicates whether the system can perform a decision or action without human
involvement or guidance."""@en ;
skos:note """**NOTE:**
This property is deprecated and only included for backward compatibility.
New documents should use
/Core/isoAutomationLevel
instead.
Indicates if the system is fully automated or a human is involved in any of the
decisions of the AI system.
- yes: Indicates that the system is fully automated.
- no: Indicates that a human is involved in any of the decisions of the AI
system.
- noAssertion: Makes no assertion about the autonomy."""@en .
spdx-ai:domain a owl:DatatypeProperty ;
rdfs:label "domain"@en ;
rdfs:comment "Domain in which the AI package can be used."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:string ;
skos:definition "Domain in which the AI package can be used."@en ;
skos:note """A free-form text that describes the domain where the AI model contained in the
AI software can be expected to operate successfully.
Examples include computer vision, natural language processing, etc."""@en .
spdx-ai:energyConsumption a owl:ObjectProperty ;
rdfs:label "energyConsumption"@en ;
rdfs:comment "Energy consumption incurred by an AI model."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-ai:EnergyConsumption ;
skos:definition "Energy consumption incurred by an AI model."@en ;
skos:note """Energy consumption of an AI model, either known or estimated.
In the absence of direct measurements, an SPDX data creator may choose to
estimate the energy consumption based on information about computational
resources (e.g., number of floating-point operations), training time, and other
relevant training details."""@en .
spdx-ai:energyQuantity a owl:DatatypeProperty ;
rdfs:label "energyQuantity"@en ;
rdfs:comment "Energy quantity."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:decimal ;
skos:definition "Energy quantity."@en ;
skos:note "Provides the quantity information of the energy."@en .
spdx-ai:energyUnit a owl:ObjectProperty ;
rdfs:label "energyUnit"@en ;
rdfs:comment "Unit in which energy is measured."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-ai:EnergyUnitType ;
skos:definition "Unit in which energy is measured."@en ;
skos:note "Provides the unit information of the energy."@en .
spdx-ai:finetuningEnergyConsumption a owl:ObjectProperty ;
rdfs:label "finetuningEnergyConsumption"@en ;
rdfs:comment """Energy consumed when finetuning the AI model that is
being used in the AI system."""@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-ai:EnergyConsumptionDescription ;
skos:definition """Energy consumed when finetuning the AI model that is
being used in the AI system."""@en ;
skos:note """The field specifies the amount of energy consumed when finetuning the AI model
that is being used in the AI system."""@en .
spdx-ai:hyperparameter a owl:ObjectProperty ;
rdfs:label "hyperparameter"@en ;
rdfs:comment "Hyperparameter used to build the AI model contained in the AI package."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-core:DictionaryEntry ;
skos:definition "Hyperparameter used to build the AI model contained in the AI package."@en ;
skos:note """Records a hyperparameter value.
Hyperparameters are settings defined before the training process that control
the learning algorithm's behavior. They differ from model parameters,
which are learned from the data during training. Developers typically set
hyperparameters manually or through a process of hyperparameter tuning
(also known as trial and error).
Examples of hyperparameters include learning rate, batch size, and the number
of layers in a neural network."""@en .
spdx-ai:inferenceEnergyConsumption a owl:ObjectProperty ;
rdfs:label "inferenceEnergyConsumption"@en ;
rdfs:comment """Energy consumed during inference time by an AI model
that is being used in the AI system."""@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-ai:EnergyConsumptionDescription ;
skos:definition """Energy consumed during inference time by an AI model
that is being used in the AI system."""@en ;
skos:note """The field specifies the amount of energy consumed during inference time by an
AI model that is being used in the AI system."""@en .
spdx-ai:informationAboutApplication a owl:DatatypeProperty ;
rdfs:label "informationAboutApplication"@en ;
rdfs:comment "Information about the AI software, not including the model description."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:string ;
skos:definition "Information about the AI software, not including the model description."@en ;
skos:note """A free-form text description of how the AI model is used within the software.
It should include any relevant information, such as pre-processing steps,
third-party APIs, and other pertinent details.
It can also include:
- Functionality provided by the AI model within the software application,
including: any specific tasks or decisions it is designed to perform;
any pre-processing steps that are applied to the input data before it is
fed into the AI model for inference, such as data cleaning, normalization,
or feature extraction;
and any third-party APIs or services that are used in conjunction with
the AI model, such as data sources, cloud services, or other AI models.
- Description of any dependencies or requirements needed to run the AI model
within the software application, including: specific hardware,
software libraries, and operating systems."""@en .
spdx-ai:informationAboutTraining a owl:DatatypeProperty ;
rdfs:label "informationAboutTraining"@en ;
rdfs:comment "Information about different steps of the training process."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:string ;
skos:definition "Information about different steps of the training process."@en ;
skos:note """A detailed explanation of the training process,
including the specific techniques, algorithms, and methods employed.
Examples include:
- training data used to train the AI model, along with any relevant details
about its source, quality, and pre-processing steps;
- specific training algorithms employed, including stochastic gradient descent,
backpropagation, and reinforcement learning;
- specific training techniques used to improve the performance or accuracy
of the AI model, such as transfer learning, fine-tuning, or active learning;
and
- any evaluation metrics used to assess the performance of the AI model
during the training process, including accuracy, precision, recall, and F1
score."""@en .
spdx-ai:limitation a owl:DatatypeProperty ;
rdfs:label "limitation"@en ;
rdfs:comment "Limitation of the AI software."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:string ;
skos:definition "Limitation of the AI software."@en ;
skos:note """A free-form text that captures a limitation of the AI package
(or of the AI models present in the AI package).
Note that this is not guaranteed to be exhaustive.
For instance, a limitation can be that the AI package is having poor accuracy
for a certain demography."""@en .
spdx-ai:metric a owl:ObjectProperty ;
rdfs:label "metric"@en ;
rdfs:comment "Metric used to evaluate the AI model."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-core:DictionaryEntry ;
skos:definition "Metric used to evaluate the AI model."@en ;
skos:note """Metric used to evaluate the AI model.
This makes statements about the prediction quality including uncertainty,
accuracy, characteristics of the tested population, quality, fairness,
explainability, robustness etc."""@en .
spdx-ai:metricDecisionThreshold a owl:ObjectProperty ;
rdfs:label "metricDecisionThreshold"@en ;
rdfs:comment """Threshold that was used for computation of a metric described in
the metric field."""@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-core:DictionaryEntry ;
skos:definition """Threshold that was used for computation of a metric described in
the metric field."""@en ;
skos:note """Each metric can be computed based on a decision threshold.
For instance, precision or recall is typically computed by checking if the
probability of the outcome is larger than 0.5.
Each decision threshold shall match with a metric field defined in the AI
package."""@en .
spdx-ai:modelDataPreprocessing a owl:DatatypeProperty ;
rdfs:label "modelDataPreprocessing"@en ;
rdfs:comment "Preprocessing steps applied to the training data before the model training."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:string ;
skos:definition "Preprocessing steps applied to the training data before the model training."@en ;
skos:note """A free-form text that describes the preprocessing steps applied to the training
data before training of the model(s) contained in the AI software."""@en .
spdx-ai:modelExplainability a owl:DatatypeProperty ;
rdfs:label "modelExplainability"@en ;
rdfs:comment "Methods that can be used to explain the results from the AI model."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:string ;
skos:definition "Methods that can be used to explain the results from the AI model."@en ;
skos:note """A free-form text that lists the different explainability mechanisms and how
they can be used to explain the results from the AI model.
The mechanisms can be model-agnostic methods, such as
SHapley Additive exPlanations (SHAP) and
Local Interpretable Model-agnostic Explanations (LIME) ,
and model-specific methods that applied to a limited category of models."""@en .
spdx-ai:safetyRiskAssessment a owl:ObjectProperty ;
rdfs:label "safetyRiskAssessment"@en ;
rdfs:comment "Results of general safety risk assessment of the AI system."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-ai:SafetyRiskAssessmentType ;
skos:definition "Results of general safety risk assessment of the AI system."@en ;
skos:note """Results of general safety risk assessment of the AI system.
Using categorization according to the
EU general risk assessment methodology .
The methodology implements Article 20 of Regulation (EC) No 765/2008 and is
intended to assist authorities when they assess general product safety
compliance.
It is important to note that this categorization differs from the one proposed
in the EU AI Act's provisional agreement."""@en .
spdx-ai:standardCompliance a owl:DatatypeProperty ;
rdfs:label "standardCompliance"@en ;
rdfs:comment "A standard with which the artifact complies."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:string ;
skos:definition "A standard with which the artifact complies."@en ;
skos:note """A free-form textual description that captures a standard with which the
artifact complies.
The standard may, but is not necessarily required to, satisfy a legal or
regulatory requirement.
If the artifact is using a standard as a reference or guideline, but not
necessarily compliant with it, use the /Core/standardName property instead.
For a detailed compliance information, please consider defining
a /Core/Relationship with "conformsTo" relationship type to
a /Core/Regulation."""@en .
spdx-ai:trainingEnergyConsumption a owl:ObjectProperty ;
rdfs:label "trainingEnergyConsumption"@en ;
rdfs:comment """Energy consumed when training the AI model that is
being used in the AI system."""@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-ai:EnergyConsumptionDescription ;
skos:definition """Energy consumed when training the AI model that is
being used in the AI system."""@en ;
skos:note """The field specifies the amount of energy consumed when training the AI model
that is being used in the AI system."""@en .
spdx-ai:typeOfModel a owl:DatatypeProperty ;
rdfs:label "typeOfModel"@en ;
rdfs:comment "Type of the model used in the AI software."@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range xsd:string ;
skos:definition "Type of the model used in the AI software."@en ;
skos:note """A free-form text that records the type of the AI model(s) used in the software.
For instance, if it is a supervised model, unsupervised model, reinforcement
learning model or a combination of those."""@en .
spdx-ai:useSensitivePersonalInformation a owl:ObjectProperty ;
rdfs:label "useSensitivePersonalInformation"@en ;
rdfs:comment """Records if sensitive personal information is used during model training or
could be used during the inference."""@en ;
rdfs:isDefinedBy spdx-ai: ;
rdfs:range spdx-core:PresenceType ;
skos:definition """Records if sensitive personal information is used during model training or
could be used during the inference."""@en ;
skos:note """Notes if sensitive personal information is used in the training or inference of
the AI models.
This can include biometric data, addresses or other data that can be used to
infer a person's identity.
Related: hasSensitivePersonalInformation in /Dataset/DatasetPackage"""@en .
spdx-build:buildEndTime a owl:DatatypeProperty ;
rdfs:label "buildEndTime"@en ;
rdfs:comment """**DEPRECATED in SPDX 3.1.**
Use /Core/endTime instead.
Property that describes the time at which a build stops."""@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range xsd:dateTimeStamp ;
skos:definition """**DEPRECATED in SPDX 3.1.**
Use /Core/endTime instead.
Property that describes the time at which a build stops."""@en ;
skos:note """**NOTE:**
This property is deprecated and only included for backward compatibility.
New documents should use
/Core/endTime
instead.
buildEndTime describes the time at which a build stops or finishes.
This value is typically recorded by the builder."""@en .
spdx-build:buildId a owl:DatatypeProperty ;
rdfs:label "buildId"@en ;
rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique
instance of a build produced by it."""@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range xsd:string ;
skos:definition """A buildId is a locally unique identifier used by a builder to identify a unique
instance of a build produced by it."""@en ;
skos:note """A buildId is a locally unique identifier to identify a unique instance of a
build, according to the buildType.
This identifier differs based on build toolchain, platform, or naming
convention used by an organization or standard."""@en .
spdx-build:buildStartTime a owl:DatatypeProperty ;
rdfs:label "buildStartTime"@en ;
rdfs:comment """**DEPRECATED in SPDX 3.1.**
Use /Core/startTime instead.
Property describing the start time of a build."""@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range xsd:dateTimeStamp ;
skos:definition """**DEPRECATED in SPDX 3.1.**
Use /Core/startTime instead.
Property describing the start time of a build."""@en ;
skos:note """**NOTE:**
This property is deprecated and only included for backward compatibility.
New documents should use
/Core/startTime
instead.
buildStartTime is the time at which a build is triggered.
The builder typically records this value."""@en .
spdx-build:buildType a owl:DatatypeProperty ;
rdfs:label "buildType"@en ;
rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or
infrastructure that the build was invoked on."""@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range xsd:anyURI ;
skos:definition """A buildType is a hint that is used to indicate the toolchain, platform, or
infrastructure that the build was invoked on."""@en ;
skos:note """A buildType is an IRI expressing the toolchain, platform, or infrastructure that
the build was invoked on.
The buildType is used to interpret the meaning of other build parameters by
defining the "type" of build; if the same buildType is seen in different Build
elements, it means they are the same kind of build, but difference instances
and possible with different configurations.
If you are not using a well-known buildType, it should be namespaced to a
domain you own to prevent conflicts with other buildType IRIs.
Examples of a buildType can be:
- A GitHub action workflow
- A step in a GitHub actions pipeline
- An invocation of a compiler or other tool
- A script that orchestrates builds at a higher level
Keep in mind that builds can be "nested" using the ancestorOf relationship.
If the buildType IRI is not recognized, it is still possible to inspect other
properties of the build, but it may not be possible to derive deeper meaning
from them.
For more information, see the SLSA definition of buildType."""@en .
spdx-build:configSourceDigest a owl:ObjectProperty ;
rdfs:label "configSourceDigest"@en ;
rdfs:comment """Property that describes the digest of the build configuration file used to
invoke a build."""@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range spdx-core:Hash ;
skos:definition """Property that describes the digest of the build configuration file used to
invoke a build."""@en ;
skos:note """configSourceDigest is the checksum of the build configuration file used by a
builder to execute a build, according to the buildType.
This property uses the Core model's Hash class."""@en .
spdx-build:configSourceEntrypoint a owl:DatatypeProperty ;
rdfs:label "configSourceEntrypoint"@en ;
rdfs:comment "Property describes the invocation entrypoint of a build."@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range xsd:string ;
skos:definition "Property describes the invocation entrypoint of a build."@en ;
skos:note """A build entrypoint is the invoked executable of a build which always runs when
the build is triggered, according to the buildType.
For example, when a build is triggered by running a shell script, the
entrypoint is script.sh.
In terms of a declared build, the entrypoint is the position in a configuration
file or a build declaration which is always run when the build is triggered.
For example, in the following configuration file, the entrypoint of the build
is publish.
name: Publish packages to PyPI
on:
create:
tags: "*"
jobs:
publish:
runs-on: ubuntu-latest
if: startsWith(github.ref, 'refs/tags/')
steps:
..."""@en .
spdx-build:configSourceUri a owl:DatatypeProperty ;
rdfs:label "configSourceUri"@en ;
rdfs:comment "Property that describes the URI of the build configuration source file."@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range xsd:anyURI ;
skos:definition "Property that describes the URI of the build configuration source file."@en ;
skos:note """If a build configuration exists for the toolchain or platform performing the
build, the configSourceUri of a build is the URI of that build configuration,
according to the buildType.
For example, a build triggered by a GitHub Action is defined by a build
configuration YAML file. In this case, the configSourceUri is the URL of that
YAML file."""@en .
spdx-build:environment a owl:ObjectProperty ;
rdfs:label "environment"@en ;
rdfs:comment "Property describing the session in which a build is invoked."@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range spdx-core:DictionaryEntry ;
skos:definition "Property describing the session in which a build is invoked."@en ;
skos:note """environment is a map of environment variables and values that are set during a
build session, according to the buildType.
This is different from the parameter property in that it
describes the environment variables set before a build is invoked rather than
the variables provided to the builder."""@en .
spdx-build:parameter a owl:ObjectProperty ;
rdfs:label "parameter"@en ;
rdfs:comment "Property describing a parameter used in an instance of a build."@en ;
rdfs:isDefinedBy spdx-build: ;
rdfs:range spdx-core:DictionaryEntry ;
skos:definition "Property describing a parameter used in an instance of a build."@en ;
skos:note """parameter is a key-value of a build parameter and its value that
was provided to the builder for a build instance, according to the buildType.
This is different from the environment property in that
the key and value are provided as command line arguments or
a configuration file to the builder."""@en .
a owl:NamedIndividual,
spdx-core:AnnotationType ;
rdfs:label "other"@en ;
rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en .
a owl:NamedIndividual,
spdx-core:AnnotationType ;
rdfs:label "review"@en ;
rdfs:comment "Used when someone reviews the Element."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Used when someone reviews the Element."@en .
a owl:NamedIndividual,
spdx-core:ContactPointRelationshipType ;
rdfs:label "compliance"@en ;
rdfs:comment "A contact point for compliance (i.e. export control, licensing)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A contact point for compliance (i.e. export control, licensing)."@en .
a owl:NamedIndividual,
spdx-core:ContactPointRelationshipType ;
rdfs:label "other"@en ;
rdfs:comment "A generic contact point to be used when the contact type does not match any of the other options."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A generic contact point to be used when the contact type does not match any of the other options."@en .
a owl:NamedIndividual,
spdx-core:ContactPointRelationshipType ;
rdfs:label "securityVulnerability"@en ;
rdfs:comment "A contact for reporting security vulnerabilities."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A contact for reporting security vulnerabilities."@en .
a owl:NamedIndividual,
spdx-core:ContactPointRelationshipType ;
rdfs:label "support"@en ;
rdfs:comment "A contact point for support."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A contact point for support."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "ark"@en ;
rdfs:comment "Archival Resource Key (ARK) , is a Uniform Resource Identifier (URI) suited to being a persistent identifier for information objects of any type, standardized by the ARK Identifier Scheme Internet-Draft. It consists of the \"ark:\" label followed by a Name Assigning Authority Number, a forward slash, a name, and an optional qualifier (e.g., ark:12148/btv1b8449691v/f29)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Archival Resource Key (ARK) , is a Uniform Resource Identifier (URI) suited to being a persistent identifier for information objects of any type, standardized by the ARK Identifier Scheme Internet-Draft. It consists of the \"ark:\" label followed by a Name Assigning Authority Number, a forward slash, a name, and an optional qualifier (e.g., ark:12148/btv1b8449691v/f29)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "bic"@en ;
rdfs:comment "Business Identifier Code (BIC), also known as SWIFT-BIC or SWIFT code, is a unique 8 or 11-character alphanumeric code standardized by ISO 9362 to identify financial and non-financial institutions (e.g., BBWCUS33)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Business Identifier Code (BIC), also known as SWIFT-BIC or SWIFT code, is a unique 8 or 11-character alphanumeric code standardized by ISO 9362 to identify financial and non-financial institutions (e.g., BBWCUS33)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "cpe22"@en ;
rdfs:comment "Common Platform Enumeration Specification 2.2 ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Common Platform Enumeration Specification 2.2 ."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "cpe23"@en ;
rdfs:comment "Common Platform Enumeration: Naming Specification Version 2.3 ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Common Platform Enumeration: Naming Specification Version 2.3 ."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "cve"@en ;
rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the CVE specification ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the CVE specification ."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "doi"@en ;
rdfs:comment "Digital Object Identifier (DOI) is a unique, ISO 26324 -standardized identifier for physical, digital, or abstract objects, formatted as a prefix and suffix separated by a forward slash (e.g., 10.1000/182)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Digital Object Identifier (DOI) is a unique, ISO 26324 -standardized identifier for physical, digital, or abstract objects, formatted as a prefix and suffix separated by a forward slash (e.g., 10.1000/182)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "duns"@en ;
rdfs:comment "Data Universal Numbering System (D-U-N-S) Number is a unique nine-digit identifier, issued by Dun & Bradstreet, that identifies a business entity, often on a location-specific basis."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Data Universal Numbering System (D-U-N-S) Number is a unique nine-digit identifier, issued by Dun & Bradstreet, that identifies a business entity, often on a location-specific basis."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "ecli"@en ;
rdfs:comment "European Case Law Identifier (ECLI) is a uniform identifier for judicial decisions across Europe. It consists of five mandatory components: the \"ECLI\" prefix, a country code, a court code, the year of the decision, and a unique serial number (e.g., ECLI:EU:C:2023:94)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "European Case Law Identifier (ECLI) is a uniform identifier for judicial decisions across Europe. It consists of five mandatory components: the \"ECLI\" prefix, a country code, a court code, the year of the decision, and a unique serial number (e.g., ECLI:EU:C:2023:94)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "eli"@en ;
rdfs:comment "European Legislation Identifier (ELI) is a Uniform Resource Identifier (URI) that uniquely identifies a legal resource, typically consisting of a document type, adoption year, and document number (e.g., http://data.europa.eu/eli/reg/2024/2847/oj)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "European Legislation Identifier (ELI) is a Uniform Resource Identifier (URI) that uniquely identifies a legal resource, typically consisting of a document type, adoption year, and document number (e.g., http://data.europa.eu/eli/reg/2024/2847/oj)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "email"@en ;
rdfs:comment "Email address, as defined in RFC 3696 Section 3."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Email address, as defined in RFC 3696 Section 3."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "eori"@en ;
rdfs:comment "Economic Operators Registration and Identification (EORI) number is a unique identifier for businesses undertaking customs operations across European Union customs territory, such as import, export, and transit. It consists of an ISO 3166-1 alpha-2 country code followed by a national identifier of up to 15 alphanumeric characters (e.g., PL1234567890ABCDE)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Economic Operators Registration and Identification (EORI) number is a unique identifier for businesses undertaking customs operations across European Union customs territory, such as import, export, and transit. It consists of an ISO 3166-1 alpha-2 country code followed by a national identifier of up to 15 alphanumeric characters (e.g., PL1234567890ABCDE)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "evidenceUID"@en ;
rdfs:comment "The unique identifier used by a reporting management system or any other lifecycle management tool to uniquely identify an evidence relationship item."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "The unique identifier used by a reporting management system or any other lifecycle management tool to uniquely identify an evidence relationship item."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "gitoid"@en ;
rdfs:comment "Gitoid , stands for Git Object ID . A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an Artifact Identifier for the software artifact or an Input Manifest Identifier for the software artifact's associated Artifact Input Manifest ; this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3 Element's externalIdentifier property. See OmniBOR Specification , a minimalistic specification for describing software Artifact Dependency Graphs ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Gitoid , stands for Git Object ID . A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an Artifact Identifier for the software artifact or an Input Manifest Identifier for the software artifact's associated Artifact Input Manifest ; this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3 Element's externalIdentifier property. See OmniBOR Specification , a minimalistic specification for describing software Artifact Dependency Graphs ."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "gln"@en ;
rdfs:comment "Global Location Number (GLN) is a 13-digit number, assigned by GS1, that uniquely identifies a legal entity (e.g., a company or customer), a function within a legal entity, a physical location (e.g., a warehouse or a specific shelf in a store), or a digital location (e.g., an Electronic Data Interchange (EDI) gateway)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Global Location Number (GLN) is a 13-digit number, assigned by GS1, that uniquely identifies a legal entity (e.g., a company or customer), a function within a legal entity, a physical location (e.g., a warehouse or a specific shelf in a store), or a digital location (e.g., an Electronic Data Interchange (EDI) gateway)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "glue"@en ;
rdfs:comment "GLobal Unique Enterprise (GLUE) Identifiers , as defined by the IETF Internet-Draft, is expressed as a GLUE URI, a Uniform Resource Identifier that standardizes the representation of existing organizational entity identifiers."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "GLobal Unique Enterprise (GLUE) Identifiers , as defined by the IETF Internet-Draft, is expressed as a GLUE URI, a Uniform Resource Identifier that standardizes the representation of existing organizational entity identifiers."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "gtin"@en ;
rdfs:comment "Global Trade Item Number (GTIN) is a number, assigned by GS1, that uniquely identifies a trade item (product or service)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Global Trade Item Number (GTIN) is a number, assigned by GS1, that uniquely identifies a trade item (product or service)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "hsCodes"@en ;
rdfs:comment "The Harmonized System (HS) of tariff nomenclature is an internationally standardized system of names and numbers, defined by the World Customs Organization, used to classify traded products."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "The Harmonized System (HS) of tariff nomenclature is an internationally standardized system of names and numbers, defined by the World Customs Organization, used to classify traded products."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "iban"@en ;
rdfs:comment "International Bank Account Number (IBAN) is a system for identifying bank accounts across national borders standardized by ISO 13616 . It consists of up to 34 alphanumeric characters, including a country code, two check digits, and a basic bank account number. While spaces may be inserted for human readability, they must be omitted when used for electronic data exchange (e.g., IE64IRCE92050112345678)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Bank Account Number (IBAN) is a system for identifying bank accounts across national borders standardized by ISO 13616 . It consists of up to 34 alphanumeric characters, including a country code, two check digits, and a basic bank account number. While spaces may be inserted for human readability, they must be omitted when used for electronic data exchange (e.g., IE64IRCE92050112345678)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "ibid"@en ;
rdfs:comment "International Business Identifier (IBID) is a verifiable unique identifier for legal entities as defined in the ISO/DIS 25500-3 draft standard. It is composed of three data elements: the International Business Registration Number (IBRN), the legal name, and the date of origin formatted as eight numeric characters (YYYYMMDD). Each element is separated by a pipe character (|) (e.g., US-DE.BER:3031657|Code Management Association|19990420)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Business Identifier (IBID) is a verifiable unique identifier for legal entities as defined in the ISO/DIS 25500-3 draft standard. It is composed of three data elements: the International Business Registration Number (IBRN), the legal name, and the date of origin formatted as eight numeric characters (YYYYMMDD). Each element is separated by a pipe character (|) (e.g., US-DE.BER:3031657|Code Management Association|19990420)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "ibrn"@en ;
rdfs:comment "International Business Registration Number (IBRN) is a unique identifier for legal entities standardized by ISO 8000-116 . It is composed of two parts: a jurisdiction prefix and a local authoritative legal entity identifier (ALEI), separated by a colon. The prefix contains an ISO 3166 country code, an optional subdivision code, and a register code (e.g., US-DE.BER:3031657)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Business Registration Number (IBRN) is a unique identifier for legal entities standardized by ISO 8000-116 . It is composed of two parts: a jurisdiction prefix and a local authoritative legal entity identifier (ALEI), separated by a colon. The prefix contains an ISO 3166 country code, an optional subdivision code, and a register code (e.g., US-DE.BER:3031657)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "isan"@en ;
rdfs:comment "International Standard Audiovisual Number (ISAN) is a unique 24-digit hexadecimal identifier for audiovisual works standardized by ISO 15706 . The ISAN remains persistent for a work regardless of its distribution format or its use. To facilitate human readability, the \"ISAN\" label, grouping hyphens, and two check characters are included (e.g., ISAN 0000-0000-3A8D-0000-Z-0000-0000-6); however, these elements shall be omitted when the identifier is stored electronically (e.g., 000000003A8D000000000000)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Audiovisual Number (ISAN) is a unique 24-digit hexadecimal identifier for audiovisual works standardized by ISO 15706 . The ISAN remains persistent for a work regardless of its distribution format or its use. To facilitate human readability, the \"ISAN\" label, grouping hyphens, and two check characters are included (e.g., ISAN 0000-0000-3A8D-0000-Z-0000-0000-6); however, these elements shall be omitted when the identifier is stored electronically (e.g., 000000003A8D000000000000)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "isbn"@en ;
rdfs:comment "International Standard Book Number (ISBN) is a unique numeric identifier for monographic publications standardized by ISO 2108 . It consists of either 10 digits (for assignments prior to January 1, 2007) or 13 digits. A 13-digit ISBN is composed of five parts: a GS1 prefix, a registration group, a registrant, a publication element, and a check digit. While elements may be divided by spaces or hyphens for human readability, these separators shall be omitted when the identifier is stored electronically (e.g., 9780198836063)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Book Number (ISBN) is a unique numeric identifier for monographic publications standardized by ISO 2108 . It consists of either 10 digits (for assignments prior to January 1, 2007) or 13 digits. A 13-digit ISBN is composed of five parts: a GS1 prefix, a registration group, a registrant, a publication element, and a check digit. While elements may be divided by spaces or hyphens for human readability, these separators shall be omitted when the identifier is stored electronically (e.g., 9780198836063)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "iscc"@en ;
rdfs:comment "International Standard Content Code (ISCC) is a content-derived identifier standardized by ISO 24138 for identifying digital assets. ISCC can be used in conjunction with other schemes, such as DOI, ISAN, ISBN, ISRC, ISSN and ISWC. A standard ISCC-CODE is build from multiple ISCC-UNITs. Each unit serve a different purpose. An ISCC-CODE typically look like ISCC:KACT4EBWK27737D2AYCJRAL5Z36G76RFRMO4554RU26HZ4ORJGIVHDI."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Content Code (ISCC) is a content-derived identifier standardized by ISO 24138 for identifying digital assets. ISCC can be used in conjunction with other schemes, such as DOI, ISAN, ISBN, ISRC, ISSN and ISWC. A standard ISCC-CODE is build from multiple ISCC-UNITs. Each unit serve a different purpose. An ISCC-CODE typically look like ISCC:KACT4EBWK27737D2AYCJRAL5Z36G76RFRMO4554RU26HZ4ORJGIVHDI."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "isci"@en ;
rdfs:comment "International Standard Collection Identifier (ISCI) is a variable-length identifier standardized by ISO 27730 for identifying collections held by libraries, archives, museums, and other memory institutions. It consists of two parts: the identifier for the assigning organization (an ISIL) enclosed in square brackets, followed by a local collection identifier string (e.g., [FR-751041001]Casadesus1)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Collection Identifier (ISCI) is a variable-length identifier standardized by ISO 27730 for identifying collections held by libraries, archives, museums, and other memory institutions. It consists of two parts: the identifier for the assigning organization (an ISIL) enclosed in square brackets, followed by a local collection identifier string (e.g., [FR-751041001]Casadesus1)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "isil"@en ;
rdfs:comment "International Standard Identifier for Libraries and Related Organizations (ISIL) is a unique alphanumeric code for identifying libraries, archives, museums, and related organizations standardized by ISO 15511 . It consists of a prefix—which may be an ISO 3166-1 alpha-2 country code or a non-country code assigned by the ISIL Registration Authority—followed by a unit identifier, totaling up to 16 characters (e.g., FI-Sipoo-Sö or ZDB-1-SBD). Valid symbols include any alphanumeric character, solidus (/), hyphen-minus (-), or colon."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Identifier for Libraries and Related Organizations (ISIL) is a unique alphanumeric code for identifying libraries, archives, museums, and related organizations standardized by ISO 15511 . It consists of a prefix—which may be an ISO 3166-1 alpha-2 country code or a non-country code assigned by the ISIL Registration Authority—followed by a unit identifier, totaling up to 16 characters (e.g., FI-Sipoo-Sö or ZDB-1-SBD). Valid symbols include any alphanumeric character, solidus (/), hyphen-minus (-), or colon."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "ismn"@en ;
rdfs:comment "International Standard Music Number (ISMN) is a unique numeric identifier for printed music (notated music) standardized by ISO 10957 . It consists of either 10 characters (starting with the letter \"M\" for assignments prior to January 1, 2008) or 13 digits. A 13-digit ISMN is composed of four parts: the GS1 prefix 979-0, a registrant element, an item element, and a check digit. While elements may be divided by spaces or hyphens for human readability, these separators shall be omitted when the identifier is stored electronically (e.g., 9790006538424)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Music Number (ISMN) is a unique numeric identifier for printed music (notated music) standardized by ISO 10957 . It consists of either 10 characters (starting with the letter \"M\" for assignments prior to January 1, 2008) or 13 digits. A 13-digit ISMN is composed of four parts: the GS1 prefix 979-0, a registrant element, an item element, and a check digit. While elements may be divided by spaces or hyphens for human readability, these separators shall be omitted when the identifier is stored electronically (e.g., 9790006538424)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "isni"@en ;
rdfs:comment "International Standard Name Identifier (ISNI) is a unique identifier used to distinguish the public identities of parties involved in the creation, production, and distribution of media content. Standardized by ISO 27729 , it consists of 16 characters—15 digits plus a final check character—and is often represented as a URI, such as https://isni.org/isni/000000012146438X."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Name Identifier (ISNI) is a unique identifier used to distinguish the public identities of parties involved in the creation, production, and distribution of media content. Standardized by ISO 27729 , it consists of 16 characters—15 digits plus a final check character—and is often represented as a URI, such as https://isni.org/isni/000000012146438X."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "isrc"@en ;
rdfs:comment "International Standard Recording Code (ISRC) is a unique 12-character alphanumeric identifier for sound recordings and music video recordings standardized by ISO 3901 . While the \"ISRC\" label and grouping hyphens used for human readability, they shall be omitted when the identifier is stored electronically (e.g., USCA28900153)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Recording Code (ISRC) is a unique 12-character alphanumeric identifier for sound recordings and music video recordings standardized by ISO 3901 . While the \"ISRC\" label and grouping hyphens used for human readability, they shall be omitted when the identifier is stored electronically (e.g., USCA28900153)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "issn"@en ;
rdfs:comment "International Standard Serial Number (ISSN) is an eight-digit identifier for serial publications and other continuing resources standardized by ISO 3297 . It consists of two groups of four digits separated by a hyphen, where the final character is a check digit that may be an \"X\". The hyphen is retained when the identifier is stored electronically to maintain the standard 9-character string format (e.g., 1464-3693). The ISSN is media-specific; the same journal title may be assigned different identifiers for its physical and digital versions."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Serial Number (ISSN) is an eight-digit identifier for serial publications and other continuing resources standardized by ISO 3297 . It consists of two groups of four digits separated by a hyphen, where the final character is a check digit that may be an \"X\". The hyphen is retained when the identifier is stored electronically to maintain the standard 9-character string format (e.g., 1464-3693). The ISSN is media-specific; the same journal title may be assigned different identifiers for its physical and digital versions."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "iswc"@en ;
rdfs:comment "International Standard Musical Work Code (ISWC) is an 11-character unique identifier standardized by ISO 15707 for musical works (compositions) as distinct from specific recordings. While the \"ISWC\" label and grouping separators (dots and hyphens) are used for human readability, they shall be omitted when the identifier is stored electronically (e.g., T0017812031)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "International Standard Musical Work Code (ISWC) is an 11-character unique identifier standardized by ISO 15707 for musical works (compositions) as distinct from specific recordings. While the \"ISWC\" label and grouping separators (dots and hyphens) are used for human readability, they shall be omitted when the identifier is stored electronically (e.g., T0017812031)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "lei"@en ;
rdfs:comment "The Legal Entity Identifier (LEI) is a 20-character, alphanumeric code based on the ISO 17442 standard developed by the International Organization for Standardization."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "The Legal Entity Identifier (LEI) is a 20-character, alphanumeric code based on the ISO 17442 standard developed by the International Organization for Standardization."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "lexid"@en ;
rdfs:comment "LEX Identifier is a Uniform Resource Name (URN) for sources of law within the LEX namespace , as defined in RFC 9676 (e.g., urn:lex:it:stato:decreto.legislativo:2018-08-10;101)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "LEX Identifier is a Uniform Resource Name (URN) for sources of law within the LEX namespace , as defined in RFC 9676 (e.g., urn:lex:it:stato:decreto.legislativo:2018-08-10;101)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "nli"@en ;
rdfs:comment "Natural Location Identifier (NLI) is a 14- or 15-character alphanumeric string standardized by ISO 8000-118 that uniquely identifies a three-dimensional geographic point location. The identifier is generated from geodetic coordinates and elevation data. For electronic storage, the ISO.NLI: prefix shall be retained (e.g., ISO.NLI:41TS8M-A8ELTQ-H2)."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Natural Location Identifier (NLI) is a 14- or 15-character alphanumeric string standardized by ISO 8000-118 that uniquely identifies a three-dimensional geographic point location. The identifier is generated from geodetic coordinates and elevation data. For electronic storage, the ISO.NLI: prefix shall be retained (e.g., ISO.NLI:41TS8M-A8ELTQ-H2)."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "orcidid"@en ;
rdfs:comment "Open Researcher and Contributor ID (ORCID) iD is a unique identifier for authors and contributors in scholarly communication; as a subset of the International Standard Name Identifier (ISNI), it typically appears as a URI such as https://orcid.org/0000-0002-1825-0097."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Open Researcher and Contributor ID (ORCID) iD is a unique identifier for authors and contributors in scholarly communication; as a subset of the International Standard Name Identifier (ISNI), it typically appears as a URI such as https://orcid.org/0000-0002-1825-0097."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "other"@en ;
rdfs:comment "Used when the type does not match any of the other options."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Used when the type does not match any of the other options."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "packageUrl"@en ;
rdfs:comment "Package-URL (PURL), as defined in ECMA-427 ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Package-URL (PURL), as defined in ECMA-427 ."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "phoneNumber"@en ;
rdfs:comment "Phone number; A string of decimal digits that uniquely indicates the network termination point defined in RFC 3966 Section 5."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Phone number; A string of decimal digits that uniquely indicates the network termination point defined in RFC 3966 Section 5."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "requirementUID"@en ;
rdfs:comment "The unique identifier used by a requirements management or any other lifecycle management tool to uniquely identify a requirement item."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "The unique identifier used by a requirements management or any other lifecycle management tool to uniquely identify a requirement item."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "rorid"@en ;
rdfs:comment "Research Organization Registry (ROR) identifier is a unique identifier for research and funding organization, typically expressed in its preferred URI form such as https://ror.org/02mhbdp94."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Research Organization Registry (ROR) identifier is a unique identifier for research and funding organization, typically expressed in its preferred URI form such as https://ror.org/02mhbdp94."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "securityOther"@en ;
rdfs:comment "Used when there is a security related identifier of unspecified type."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Used when there is a security related identifier of unspecified type."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "swhid"@en ;
rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the SWHID specification (ISO/IEC 18670 ). They typically look like swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the SWHID specification (ISO/IEC 18670 ). They typically look like swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "swid"@en ;
rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in RFC 9393 Section 2.3."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Concise Software Identification (CoSWID) tag, as defined in RFC 9393 Section 2.3."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "urlScheme"@en ;
rdfs:comment "Uniform Resource Identifier (URI) Schemes . The scheme used in order to locate a resource."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Uniform Resource Identifier (URI) Schemes . The scheme used in order to locate a resource."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "vatNumber"@en ;
rdfs:comment "Value Added Tax (VAT) number, or Goods and Services Tax (GST) number, is an identifier assigned by tax authorities that uniquely identifies a business within a specific national border or tax jurisdiction for the collection and tracking of VAT/GST."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Value Added Tax (VAT) number, or Goods and Services Tax (GST) number, is an identifier assigned by tax authorities that uniquely identifies a business within a specific national border or tax jurisdiction for the collection and tracking of VAT/GST."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "verificationUID"@en ;
rdfs:comment "The unique identifier used by a verification management system or any other lifecycle management tool to uniquely identify a verification item."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "The unique identifier used by a verification management system or any other lifecycle management tool to uniquely identify a verification item."@en .
a owl:NamedIndividual,
spdx-core:ExternalIdentifierType ;
rdfs:label "webpage"@en ;
rdfs:comment "A Uniform Resource Locator (URL) that can be used to locate a resource, as defined in RFC 9110 Section 4.2.1 or Section 4.2.2. It may include an optional fragment identifier as specified in RFC 3986 Section 3.5."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A Uniform Resource Locator (URL) that can be used to locate a resource, as defined in RFC 9110 Section 4.2.1 or Section 4.2.2. It may include an optional fragment identifier as specified in RFC 3986 Section 3.5."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "altDownloadLocation"@en ;
rdfs:comment "A reference to an alternative download location."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to an alternative download location."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "altWebPage"@en ;
rdfs:comment "A reference to an alternative web page."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to an alternative web page."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "binaryArtifact"@en ;
rdfs:comment "A reference to binary artifacts related to a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to binary artifacts related to a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "bom"@en ;
rdfs:comment "A reference to a bill of materials related to a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a bill of materials related to a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "bower"@en ;
rdfs:comment "A reference to a Bower package. The package locator format, looks like package#version, is defined in the \"install\" section of Bower API documentation ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a Bower package. The package locator format, looks like package#version, is defined in the \"install\" section of Bower API documentation ."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "buildMeta"@en ;
rdfs:comment "A reference to the build metadata related to a published package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the build metadata related to a published package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "buildSystem"@en ;
rdfs:comment "A reference to the build system used to create or publish the package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the build system used to create or publish the package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "certificationReport"@en ;
rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a certification report for a package from an accredited/independent body."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "chat"@en ;
rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the instant messaging system used by the maintainer for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "componentAnalysisReport"@en ;
rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a Software Composition Analysis (SCA) report."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "cwe"@en ;
rdfs:comment "Common Weakness Enumeration . A reference to a source of software flaws defined within the official CWE List that conforms to the CWE specification ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Common Weakness Enumeration . A reference to a source of software flaws defined within the official CWE List that conforms to the CWE specification ."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "documentation"@en ;
rdfs:comment "A reference to the documentation for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the documentation for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "dynamicAnalysisReport"@en ;
rdfs:comment "A reference to a dynamic analysis report for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a dynamic analysis report for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "eolNotice"@en ;
rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "exportControlAssessment"@en ;
rdfs:comment "A reference to an export control assessment for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to an export control assessment for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "funding"@en ;
rdfs:comment "A reference to funding information related to a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to funding information related to a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "issueTracker"@en ;
rdfs:comment "A reference to the issue tracker for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the issue tracker for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "license"@en ;
rdfs:comment "A reference to additional license information related to an artifact."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to additional license information related to an artifact."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "mailingList"@en ;
rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the mailing list used by the maintainer for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "mavenCentral"@en ;
rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the Maven documentation and looks like groupId:artifactId[:version]."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a Maven repository artifact. The artifact locator format is defined in the Maven documentation and looks like groupId:artifactId[:version]."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "metrics"@en ;
rdfs:comment "A reference to metrics related to a package such as OpenSSF scorecards."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to metrics related to a package such as OpenSSF scorecards."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "npm"@en ;
rdfs:comment "A reference to an npm package. The package locator format is defined in the npm documentation and looks like package@version."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to an npm package. The package locator format is defined in the npm documentation and looks like package@version."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "nuget"@en ;
rdfs:comment "A reference to a NuGet package. The package locator format is defined in the NuGet documentation and looks like package/version."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a NuGet package. The package locator format is defined in the NuGet documentation and looks like package/version."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "other"@en ;
rdfs:comment "Used when the type does not match any of the other options."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Used when the type does not match any of the other options."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "privacyAssessment"@en ;
rdfs:comment "A reference to a privacy assessment for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a privacy assessment for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "productMetadata"@en ;
rdfs:comment "A reference to additional product metadata such as a reference within an organization's product catalog."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to additional product metadata such as a reference within an organization's product catalog."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "purchaseOrder"@en ;
rdfs:comment "A reference to a purchase order for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a purchase order for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "qualityAssessmentReport"@en ;
rdfs:comment "A reference to a quality assessment for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a quality assessment for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "releaseHistory"@en ;
rdfs:comment "A reference to a published list of releases for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a published list of releases for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "releaseNotes"@en ;
rdfs:comment "A reference to the release notes for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the release notes for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "riskAssessment"@en ;
rdfs:comment "A reference to a risk assessment for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a risk assessment for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "runtimeAnalysisReport"@en ;
rdfs:comment "A reference to a runtime analysis report for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a runtime analysis report for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "secureSoftwareAttestation"@en ;
rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1 or CISA Secure Software Development Attestation Form ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to information assuring that the software is developed using security practices as defined by NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1 or CISA Secure Software Development Attestation Form ."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "securityAdversaryModel"@en ;
rdfs:comment "A reference to the security adversary model for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the security adversary model for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "securityAdvisory"@en ;
rdfs:comment "A reference to a published security advisory (where advisory is defined per ISO 29147:2018 ) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a published security advisory (where advisory is defined per ISO 29147:2018 ) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "securityFix"@en ;
rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the patch or source code that fixes a vulnerability."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "securityOther"@en ;
rdfs:comment "A reference to related security information of unspecified type."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to related security information of unspecified type."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "securityPenTestReport"@en ;
rdfs:comment "A reference to a penetration test report for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a penetration test report for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "securityPolicy"@en ;
rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "securityThreatModel"@en ;
rdfs:comment "A reference to the security threat model for the package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the security threat model for the package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "socialMedia"@en ;
rdfs:comment "A reference to a social media channel for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a social media channel for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "sourceArtifact"@en ;
rdfs:comment "A reference to an artifact containing the sources for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to an artifact containing the sources for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "staticAnalysisReport"@en ;
rdfs:comment "A reference to a static analysis report for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a static analysis report for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "support"@en ;
rdfs:comment "A reference to the software support channel or other support information for a package."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to the software support channel or other support information for a package."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "vcs"@en ;
rdfs:comment "A reference to a version control system related to a software artifact."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a version control system related to a software artifact."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "vulnerabilityDisclosureReport"@en ;
rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations ."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "vulnerabilityExploitabilityAssessment"@en ;
rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also NTIA VEX one-page summary ."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also NTIA VEX one-page summary ."@en .
a owl:NamedIndividual,
spdx-core:ExternalRefType ;
rdfs:label "x509Cert"@en ;
rdfs:comment "A reference to an X.509 certificate as defined in RFC 5280 . The primary media type shall be application/pkix-cert. The legacy media types application/x-x509-ca-cert and application/x-x509-user-cert may be used for backward compatibility, but shall not be used in new implementations. NOTE — RFC 5280 supersedes earlier X.509 profiles, including RFC 1422. Existing references based on RFC 1422 remain valid."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "A reference to an X.509 certificate as defined in RFC 5280 . The primary media type shall be application/pkix-cert. The legacy media types application/x-x509-ca-cert and application/x-x509-user-cert may be used for backward compatibility, but shall not be used in new implementations. NOTE — RFC 5280 supersedes earlier X.509 profiles, including RFC 1422. Existing references based on RFC 1422 remain valid."@en .
a owl:NamedIndividual,
spdx-core:IsoAutomationLevel ;
rdfs:label "assistiveAutomation"@en ;
rdfs:comment "Level 1 - Assistive automation. The system assists an operator."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Level 1 - Assistive automation. The system assists an operator."@en .
a owl:NamedIndividual,
spdx-core:IsoAutomationLevel ;
rdfs:label "autonomous"@en ;
rdfs:comment "Level 6 - Autonomous. The system is capable of modifying its intended domain of use or its goals without external intervention, control or oversight."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Level 6 - Autonomous. The system is capable of modifying its intended domain of use or its goals without external intervention, control or oversight."@en .
a owl:NamedIndividual,
spdx-core:IsoAutomationLevel ;
rdfs:label "conditionalAutomation"@en ;
rdfs:comment "Level 3 - Conditional automation. The system can propose strategies and then automatically execute the approved plan, with an external agent being ready to take over when necessary."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Level 3 - Conditional automation. The system can propose strategies and then automatically execute the approved plan, with an external agent being ready to take over when necessary."@en .
a owl:NamedIndividual,
spdx-core:IsoAutomationLevel ;
rdfs:label "fullAutomation"@en ;
rdfs:comment "Level 5 - Full automation. The system is capable of performing its entire mission without external intervention."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Level 5 - Full automation. The system is capable of performing its entire mission without external intervention."@en .
a owl:NamedIndividual,
spdx-core:IsoAutomationLevel ;
rdfs:label "highAutomation"@en ;
rdfs:comment "Level 4 - High automation. The system performs parts of its mission without external intervention."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Level 4 - High automation. The system performs parts of its mission without external intervention."@en .
a owl:NamedIndividual,
spdx-core:IsoAutomationLevel ;
rdfs:label "notAutomated"@en ;
rdfs:comment "Level 0 - Not automated. No automation. The operator fully controls the system."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Level 0 - Not automated. No automation. The operator fully controls the system."@en .
a owl:NamedIndividual,
spdx-core:IsoAutomationLevel ;
rdfs:label "partialAutomation"@en ;
rdfs:comment "Level 2 - Partial automation or task automation. Some sub-functions of the system are fully automated while the system remain under control of an external agent. The system can perform actions for an approved task without requiring the agent's continuous direct control."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Level 2 - Partial automation or task automation. Some sub-functions of the system are fully automated while the system remain under control of an external agent. The system can perform actions for an approved task without requiring the agent's continuous direct control."@en .
spdx-core:Person a owl:Class,
sh:NodeShape ;
rdfs:label "Person"@en ;
rdfs:comment "An individual human being."@en ;
rdfs:isDefinedBy spdx-core: ;
rdfs:subClassOf spdx-core:Agent ;
skos:definition "An individual human being."@en ;
skos:note "A Person is an individual human being."@en ;
sh:nodeKind sh:IRI .
a owl:NamedIndividual,
spdx-core:ProcessReadinessType ;
rdfs:label "active"@en ;
rdfs:comment "In use."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "In use."@en .
a owl:NamedIndividual,
spdx-core:ProcessReadinessType ;
rdfs:label "draft"@en ;
rdfs:comment "Not yet finalized; under development or review."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Not yet finalized; under development or review."@en .
a owl:NamedIndividual,
spdx-core:ProcessReadinessType ;
rdfs:label "obsoleted"@en ;
rdfs:comment "Superseded or not valid at present."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Superseded or not valid at present."@en .
a owl:NamedIndividual,
spdx-core:ProcessReadinessType ;
rdfs:label "other"@en ;
rdfs:comment "Other."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "Other."@en .
a owl:NamedIndividual,
spdx-core:ProfileIdentifierType ;
rdfs:label "ai"@en ;
rdfs:comment "The element follows the AI profile specification."@en ;
rdfs:isDefinedBy spdx-core: ;
skos:definition "The element follows the AI profile specification."@en .