Finding BOM v1 Schema
Validates one L2 Finding BOM version. Shape-only: ref resolution (provenanceRef/approvalRef), author-identity equality with the provenance attestation, the disclosability condition, and supersession chains are verifier (adbom-cli) checks. Normative requirements: https://sec.hypermedia.au/standards/finding/v1
Validates the finding standard.Raw schema (JSON).
| Field | Type | Required | Constraints |
|---|---|---|---|
bomFormat | string | yes | one of: CycloneDX |
specVersion | string | yes | = 1.7 |
serialNumber | string | yes | pattern ^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ |
version | integer | yes | — |
metadata | object | yes | — |
componentsFND-003: exactly one data component — the finding document with its SHA-256 hash | array | yes | items 1–1 |
signature | object | yes | — |
Also defines: propertyEntry