From 7f12c52d299bdc0dd4d02a4b62fdd1f86a118c29 Mon Sep 17 00:00:00 2001 From: Arthit Suriyawongkul Date: Tue, 21 Jul 2026 09:37:57 +0100 Subject: [PATCH 1/3] Lite: fix typos + shall/should To address some of issues in https://github.com/spdx/spdx-spec/issues/1419 Signed-off-by: Arthit Suriyawongkul --- docs/annexes/spdx-lite.md | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/docs/annexes/spdx-lite.md b/docs/annexes/spdx-lite.md index 8211502564ad..f2aaa848f23c 100644 --- a/docs/annexes/spdx-lite.md +++ b/docs/annexes/spdx-lite.md @@ -24,8 +24,8 @@ as an SPDX document in the software supply chain. ## Mandatory and recommended properties -The Lite profile specifies that some properties shall be present -and some others should be present, as much as possible. +The Lite profile specifies that some properties shall be present, +and some others should be present as much as possible. The following lists collect and present this information for every class present in the SPDX data, @@ -37,21 +37,21 @@ The lists of properties are in alphabetical order, for easy reference. - Mandatory 1. creationInfo 1. element (may be multiple), shall have at least one /Software/Sbom object - 1. rootElement (may be multiple), should be objects of type /Software/Sbom + 1. rootElement (may be multiple), shall be objects of type /Software/Sbom 1. spdxId - Recommended 1. comment 1. dataLicense 1. name 1. namespaceMap (may be multiple) - 1. verifiedUsing (may be multiple), should be objects of type /Core/Hash + 1. verifiedUsing (may be multiple), shall be objects of type /Core/Hash ### /Software/Sbom - Mandatory 1. creationInfo 1. element (may be multiple), shall have at least one /Software/Package object - 1. rootElement (may be multiple), should be objects of type /Software/Package + 1. rootElement (may be multiple), shall be objects of type /Software/Package 1. spdxId - Recommended 1. sbomType (may be multiple) @@ -64,19 +64,19 @@ The lists of properties are in alphabetical order, for easy reference. 1. name 1. packageVersion 1. spdxId - 1. suppliedBy, should be an object of type /Core/Agent + 1. suppliedBy, shall be an object of type /Core/Agent - Recommended 1. attributionText (may be multiple) 1. builtTime 1. comment 1. downloadLocation - 1. homepage - 1. originatedBy (may be multiple), should be objects of type /Core/Agent + 1. homePage + 1. originatedBy (may be multiple), shall be objects of type /Core/Agent 1. packageUrl 1. releaseTime 1. supportLevel (may be multiple) 1. validUntilTime - 1. verifiedUsing (may be multiple), should be objects of type /Core/Hash + 1. verifiedUsing (may be multiple), shall be objects of type /Core/Hash However, there shall be at least a “downloadLocation” or “packageUrl” property. @@ -132,7 +132,7 @@ Additionally: - Mandatory 1. created - 1. createdBy (may be multiple), should be objects of type /Core/Agent + 1. createdBy (may be multiple), shall be objects of type /Core/Agent 1. specVersion, shall be a fixed string, “3.1.n” - where n is any supported patch version of the SPDX specification - Recommended @@ -144,7 +144,7 @@ Additionally: 1. externalIdentifierType 1. identifier -### /Core/NameSpaceMap +### /Core/NamespaceMap - Mandatory 1. namespace From 7ebad76396251bcd887ee13797b7949d74eb0e3c Mon Sep 17 00:00:00 2001 From: Arthit Suriyawongkul Date: Tue, 21 Jul 2026 21:58:46 +0100 Subject: [PATCH 2/3] Revert shall/should Verify with the published https://spdx.github.io/spdx-spec/v3.0.1/annexes/spdx-lite/ Signed-off-by: Arthit Suriyawongkul --- docs/annexes/spdx-lite.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/docs/annexes/spdx-lite.md b/docs/annexes/spdx-lite.md index f2aaa848f23c..7c2e531b2ace 100644 --- a/docs/annexes/spdx-lite.md +++ b/docs/annexes/spdx-lite.md @@ -37,21 +37,21 @@ The lists of properties are in alphabetical order, for easy reference. - Mandatory 1. creationInfo 1. element (may be multiple), shall have at least one /Software/Sbom object - 1. rootElement (may be multiple), shall be objects of type /Software/Sbom + 1. rootElement (may be multiple), should be objects of type /Software/Sbom 1. spdxId - Recommended 1. comment 1. dataLicense 1. name 1. namespaceMap (may be multiple) - 1. verifiedUsing (may be multiple), shall be objects of type /Core/Hash + 1. verifiedUsing (may be multiple), should be objects of type /Core/Hash ### /Software/Sbom - Mandatory 1. creationInfo 1. element (may be multiple), shall have at least one /Software/Package object - 1. rootElement (may be multiple), shall be objects of type /Software/Package + 1. rootElement (may be multiple), should be objects of type /Software/Package 1. spdxId - Recommended 1. sbomType (may be multiple) @@ -64,19 +64,19 @@ The lists of properties are in alphabetical order, for easy reference. 1. name 1. packageVersion 1. spdxId - 1. suppliedBy, shall be an object of type /Core/Agent + 1. suppliedBy, should be an object of type /Core/Agent - Recommended 1. attributionText (may be multiple) 1. builtTime 1. comment 1. downloadLocation 1. homePage - 1. originatedBy (may be multiple), shall be objects of type /Core/Agent + 1. originatedBy (may be multiple), should be objects of type /Core/Agent 1. packageUrl 1. releaseTime 1. supportLevel (may be multiple) 1. validUntilTime - 1. verifiedUsing (may be multiple), shall be objects of type /Core/Hash + 1. verifiedUsing (may be multiple), should be objects of type /Core/Hash However, there shall be at least a “downloadLocation” or “packageUrl” property. @@ -132,8 +132,8 @@ Additionally: - Mandatory 1. created - 1. createdBy (may be multiple), shall be objects of type /Core/Agent - 1. specVersion, shall be a fixed string, “3.1.n” - where n is + 1. createdBy (may be multiple), should be objects of type /Core/Agent + 1. specVersion, should be a fixed string, “3.1.n” - where n is any supported patch version of the SPDX specification - Recommended 1. comment From 3d434d0b36c7741439eeb9752be571e9fec19d3a Mon Sep 17 00:00:00 2001 From: Arthit Suriyawongkul Date: Tue, 21 Jul 2026 22:01:36 +0100 Subject: [PATCH 3/3] Revert shall/should Signed-off-by: Arthit Suriyawongkul --- docs/annexes/spdx-lite.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/annexes/spdx-lite.md b/docs/annexes/spdx-lite.md index 7c2e531b2ace..1dbc35d15229 100644 --- a/docs/annexes/spdx-lite.md +++ b/docs/annexes/spdx-lite.md @@ -133,7 +133,7 @@ Additionally: - Mandatory 1. created 1. createdBy (may be multiple), should be objects of type /Core/Agent - 1. specVersion, should be a fixed string, “3.1.n” - where n is + 1. specVersion, shall be a fixed string, “3.1.n” - where n is any supported patch version of the SPDX specification - Recommended 1. comment