Skip to content

Commit

Permalink
better link for rfc1422
Browse files Browse the repository at this point in the history
Co-authored-by: Arthit Suriyawongkul <[email protected]>
Signed-off-by: Gary O'Neall <[email protected]>
  • Loading branch information
goneall and bact authored Jan 22, 2025
1 parent bd45c24 commit 344093f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion model/Core/Vocabularies/ExternalRefType.md
Original file line number Diff line number Diff line change
Expand Up @@ -62,4 +62,4 @@ ExternalRefType specifies the type of an external reference.
- vcs: A reference to a version control system related to a software artifact.
- vulnerabilityDisclosureReport: A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).
- vulnerabilityExploitabilityAssessment: A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).
- x509Cert: A reference to an X.509 certificate as defined in [RFC 1422](https://datatracker.ietf.org/doc/html/rfc1422). The media type should be one of application/x-x509-ca-cert or application/x-x509-user-cert.
- x509Cert: A reference to an X.509 certificate as defined in [RFC 1422](https://datatracker.ietf.org/doc/rfc1422/). The media type should be one of application/x-x509-ca-cert or application/x-x509-user-cert.

0 comments on commit 344093f

Please sign in to comment.