SPDX Specification 3.0.1

https://spdx.github.io/spdx-spec/v3.0.1/
Admin
The SPDX Specification defines a standard format for communicating software bill of material (SBOM)...
Tokens:82,783
Snippets:1,142
Trust Score:8.3
Update:1 week ago
Show doc for...
Tokens:
Raw
### Example JSON for EnergyConsumptionDescription

Source: https://spdx.github.io/spdx-spec/v3.0.1/model/AI/Classes/EnergyConsumptionDescription

Shows a JSON object representing an instance of the EnergyConsumptionDescription class. The example uses 0.042 kilowatt-hour, with energyQuantity as '0.042' and energyUnit as 'kilowattHour'.

```json
{
  "type": "ai_EnergyConsumptionDescription",
  "ai_energyQuantity": "0.042",
  "ai_energyUnit": "kilowattHour"
}
```

--------------------------------

### EnergyConsumption JSON Example

Source: https://spdx.github.io/spdx-spec/v3.0.1/model/AI/Classes/EnergyConsumption

Example JSON representation of an EnergyConsumption instance, showing training and inference energy consumption with quantities in kilowatt-hours.

```json
{
  "type": "ai_EnergyConsumption",
  "ai_trainingEnergyConsumption": [
    {
      "type": "ai_EnergyConsumptionDescription",
      "ai_energyQuantity": "36.5",
      "ai_energyUnit": "kilowattHour"
    }
  ],
  "ai_inferenceEnergyConsumption": [
    {
      "type": "ai_EnergyConsumptionDescription",
      "ai_energyQuantity": "0.042",
      "ai_energyUnit": "kilowattHour"
    }
  ]
}
```

--------------------------------

### SsvcVulnAssessmentRelationship JSON example

Source: https://spdx.github.io/spdx-spec/v3.0.1/model/Security/Classes/SsvcVulnAssessmentRelationship

Example JSON object for an SsvcVulnAssessmentRelationship. The relationship type must be set to hasAssessmentFor. The example shows the required properties and typical values.

```json
{
  "@type": "SsvcVulnAssessmentRelationship",
  "@id": "urn:spdx.dev:ssvc-1",
  "relationshipType": "hasAssessmentFor",
  "security_decisionType": "act",
  "from": "urn:spdx.dev:vuln-cve-2020-28498",
  "to": ["urn:product-acme-application-1.3"],
  "security_assessedElement": "urn:npm-elliptic-6.5.2",
  "suppliedBy": ["urn:spdx.dev:agent-jane-doe"],
  "publishedTime": "2021-03-09T11:04:53Z"
}
```

--------------------------------

### GitHub Actions workflow configuration with entrypoint 'publish'

Source: https://spdx.github.io/spdx-spec/v3.0.1/model/Build/Properties/configSourceEntrypoint

Example configuration file showing a build declaration where the entrypoint is the 'publish' job. The entrypoint is the position in the configuration file that is always run when the build is triggered.

```yaml
name: Publish packages to PyPI

on:
  create:
    tags: "*"

jobs:
  publish:
    runs-on: ubuntu-latest
    if: startsWith(github.ref, 'refs/tags/')
    steps:

...

```
Tokens:
Raw