swid

type CoSWIDExtension struct {
}

type Directories []Directory

type Directory struct {
	DirectoryExtension
	FileSystemItem
	*PathElements `cbor:"26,keyasint" json:"path-elements"`
}

type DirectoryExtension struct {
}

type Entities []Entity

type Entity struct {
	// EntityExtension corresponds to the $$entity-extension CDDL socket which
	// is used to extend the entity-entry group model.
	EntityExtension

	GlobalAttributes

	// The textual name of the organizational entity claiming the roles
	// specified by the role item for the CoSWID tag.
	EntityName string `cbor:"31,keyasint" json:"entity-name" xml:"name,attr"`

	// The registration id value is intended to uniquely identify a naming
	// authority in a given scope (e.g. global, organization, vendor, customer,
	// administrative domain, etc.) for the referenced entity. The value of a
	// registration ID MUST be a RFC 3986 URI; it is not intended to be
	// dereferenced The scope SHOULD be the scope of an organization.
	// In a given scope, the registration id MUST be used
	// consistently for CoSWID tag production.
	RegID string `cbor:"32,keyasint,omitempty" json:"reg-id,omitempty" xml:"regid,attr"`

	// An integer or textual value representing the relationship(s) between the
	// entity, and this tag or the referenced software component. If an integer
	// value is used it MUST be an index value in the range -256 to 255. Integer
	// values in the range -256 to -1 are reserved for testing and use in closed
	// environments (see Section 6.2.2 of I-D.ietf-sacm-coswid). Integer values
	// in the range 0 to 255 correspond to registered entries in the IANA
	// "SWID/CoSWID Entity Role Value" registry (see Section 6.2.5 of
	// I-D.ietf-sacm-coswid).
	// The following additional requirements exist for the use of the "role"
	// item:
	// * An entity item MUST be provided with the role of "tag-creator" for
	//   every CoSWID tag. This indicates the organization that created the
	//   CoSWID tag.
	// * An entity item SHOULD be provided with the role of "software-creator"
	//   for every CoSWID tag, if this information is known to the tag creator.
	//   This indicates the organization that created the referenced software
	//   component.
	Roles Roles `cbor:"33,keyasint" json:"role" xml:"role,attr"`

	// The value of the Thumbprint field provides a hash value
	// (i.e. the thumbprint) of the signing entity's public key certificate.
	// This provides an indicator of which entity signed the CoSWID tag,
	// which will typically be the tag creator. See Section 2.9.1 of
	// I-D.ietf-sacm-coswid for more details on the use of the
	// hash-entry data structure.
	Thumbprint *HashEntry `cbor:"34,keyasint,omitempty" json:"thumbprint,omitempty" xml:"thumbprint,omitempty"`
}

type EntityExtension struct {
}

type Evidence struct {
	EvidenceExtension

	GlobalAttributes
	ResourceCollection

	// The date and time the information was collected pertaining to the
	// evidence item.
	Date time.Time `cbor:"35,keyasint,omitempty" json:"date,omitempty" xml:"date,attr,omitempty"`

	// The endpoint's string identifier from which the evidence was
	// collected.
	DeviceID string `cbor:"36,keyasint,omitempty" json:"device-id,omitempty" xml:"deviceId,attr,omitempty"`
}

type EvidenceExtension struct {
}

type File struct {
	GlobalAttributes

	FileExtension

	FileSystemItem

	// The file's size in bytes.
	Size *int64 `cbor:"20,keyasint,omitempty" json:"size,omitempty" xml:"size,attr,omitempty"`

	// The file's version as reported by querying information on the file from
	// the operating system.
	FileVersion string `cbor:"21,keyasint,omitempty" json:"file-version,omitempty" xml:"version,attr,omitempty"`

	// Files are expected to include a hash value that provides different level
	// of confidence that if the filename, file size and file hash code all
	// match, the the file has not been modified in any fashion.
	Hash *HashEntry `cbor:"7,keyasint,omitempty" json:"hash,omitempty" xml:"hash,attr,omitempty"`
}

type FileExtension struct {
}

type FileSystemItem struct {

	// A boolean value indicating if a file or directory is significant or
	// required for the software component to execute or function properly.
	// These are files or directories that can be used to affirmatively
	// determine if the software component is installed on an endpoint.
	Key *bool `cbor:"22,keyasint,omitempty" json:"key,omitempty" xml:"key,attr,omitempty"`

	// The filesystem path where a file is expected to be located when installed
	// or copied. The location MUST be either relative to the location of the
	// parent directory item (preferred) or relative to the location of the
	// CoSWID tag if no parent is defined. The location MUST NOT include a
	// file's name, which is provided by the fs-name item.
	Location string `cbor:"23,keyasint,omitempty" json:"location,omitempty" xml:"location,attr,omitempty"`

	// The name of the directory or file without any path information.
	FsName string `cbor:"24,keyasint" json:"fs-name" xml:"name,attr,omitempty"`

	// A filesystem-specific name for the root of the filesystem. The location
	// item is considered relative to this location if specified. If not
	// provided, the value provided by the location item is expected to be
	// relative to its parent or the location of the CoSWID tag if no parent is
	// provided.
	Root string `cbor:"25,keyasint,omitempty" json:"root,omitempty" xml:"root,attr,omitempty"`
}

type Files []File

type GlobalAttributes struct {
	Lang string `cbor:"15,keyasint,omitempty" json:"lang,omitempty" xml:"http://www.w3.org/XML/1998/namespace lang,attr,omitempty"`
}

type HashEntry struct {

	// The number used as a value for hash-alg-id is an integer-based
	// hash algorithm identifier who's value MUST refer to an ID in the
	// IANA "Named Information Hash Algorithm Registry" [IANA.named-information]
	// with a Status of "current" (at the time the generator software was built
	// or later); other hash algorithms MUST NOT be used. If the hash-alg-id is
	// not known, then the integer value "0" MUST be used. This allows for
	// conversion from ISO SWID tags [SWID], which do not allow an algorithm to
	// be identified for this field.
	HashAlgID uint64

	// The hash-value MUST represent the raw hash value as a byte string
	// (as opposed to, e.g., base64 encoded) generated from the representation
	// of the resource using the hash algorithm indicated by hash-alg-id.
	HashValue []byte
	// contains filtered or unexported fields
}

type Link struct {
	LinkExtension

	GlobalAttributes

	// To be used with rel="installation-media", this item's value provides the
	// path to the installer executable or script that can be run to launch the
	// referenced installation. Links with the same artifact name MUST be
	// considered mirrors of each other, allowing the installation media to be
	// acquired from any of the described sources.
	Artifact string `cbor:"37,keyasint,omitempty" json:"artifact,omitempty" xml:"artifact,attr,omitempty"`

	// A URI for the referenced resource. The "href" item's value can be, but is
	// not limited to, the following (which is a slightly modified excerpt from
	// [SWID]):
	// * If no URI scheme is provided, then the URI is to be interpreted as
	//   being relative to the base URI of the CoSWID tag, i.e., the URI
	//   under which the CoSWID tag was provided. For example,
	//   "folder/supplemental.coswid"
	// * a physical resource location with any acceptable URI scheme (e.g., file://
	//   http:// https:// ftp://)
	// * a URI with "swid:" as the scheme refers to another SWID or CoSWID by
	//   the referenced tag's tag-id. This URI needs to be resolved in the context
	//   of the endpoint by software that can lookup other SWID or CoSWID tags.
	//   For example, "swid:2df9de35-0aff-4a86-ace6-f7dddd1ade4c" references the
	//   tag with the tag-id value "2df9de35-0aff-4a86-ace6-f7dddd1ade4c".
	// * a URI with "swidpath:" as the scheme, which refers to another CoSIWD
	//   via an XPATH query [W3C.REC-xpath20-20101214] that matches items in that
	//   tag (Section 5.2). This URI would need to be resolved in the context of
	//   the system entity via software components that can lookup other CoSWID
	//   tags and select the appropriate tag based on an XPATH query
	//   [W3C.REC-xpath20-20101214].
	//   Examples include:
	//   * swidpath://SoftwareIdentity[Entity/@regid='http://contoso.com'] would
	//    retrieve all SWID or CoSWID tags that include an entity where the regid
	//    is "Contoso"
	//   * swidpath://SoftwareIdentity[Meta/@persistentId='b0c55172-38e9-4e36-be86-92206ad8eddb']
	//   would match all SWID or CoSWID tags with the persistent-id value
	//   "b0c55172-38e9-4e36-be86-92206ad8eddb"
	Href string `cbor:"38,keyasint" json:"href" xml:"href,attr"`

	// A hint to the consumer of the link to what target platform the link is
	// applicable to. This item represents a query as defined by the W3C Media
	// Queries Recommendation (see [W3C.REC-css3-mediaqueries-20120619]).
	Media string `cbor:"10,keyasint,omitempty" json:"media,omitempty" xml:"media,attr,omitempty"`

	// An integer or textual value (integer label with text escape,
	// see Section 2, for the "Software Tag Link Ownership Values"
	// registry Section 4.3) used when the "href" item references another
	// software component to indicate the degree of ownership between the
	// software component referenced by the CoSWID tag and the software
	// component referenced by the link. If an integer value is used it MUST
	// be an index value in the range -256 to 255. Integer values in the range
	// -256 to -1 are reserved for testing and use in closed environments
	// (see Section 6.2.2). Integer values in the range 0 to 255 correspond
	// to registered entries in the "Software Tag Link Ownership Values" registry.
	Ownership *Ownership `cbor:"39,keyasint,omitempty" json:"ownership,omitempty" xml:"ownership,attr,omitempty"`

	// An integer or textual value that (integer label with text escape,
	// see Section 2, for the "Software Tag Link Link Relationship Values"
	// registry Section 4.3) identifies the relationship between this CoSWID
	// and the target resource identified by the "href" item. If an integer
	// value is used it MUST be an index value in the range -256 to 65535.
	// Integer values in the range -256 to -1 are reserved for testing and
	// use in closed environments (see Section 6.2.2). Integer values in the
	// range 0 to 65535 correspond to registered entries in the IANA
	// "Software Tag Link Relationship Values" registry (see Section 6.2.7.
	// If a string value is used it MUST be either a private use name as defined
	// in Section 6.2.2 or a "Relation Name" from the IANA "Link Relation Types"
	// registry: https://www.iana.org/assignments/link-relations/link-relations.xhtml
	// as defined by [RFC8288]. When a string value defined in the IANA
	// "Software Tag Link Relationship Values" registry matches a Relation
	// Name defined in the IANA "Link Relation Types" registry, the index
	// value in the IANA "Software Tag Link Relationship Values" registry
	// MUST be used instead, as this relationship has a specialized meaning
	// in the context of a CoSWID tag. String values correspond to registered
	// entries in the "Software Tag Link Relationship Values" registry.
	Rel Rel `cbor:"40,keyasint" json:"rel" xml:"rel,attr"`

	// A link can point to arbitrary resources on the endpoint, local network,
	// or Internet using the href item. Use of this item supplies the resource
	// consumer with a hint of what type of resource to expect. (This is a hint:
	// There is no obligation for the server hosting the target of the URI to
	// use the indicated media type when the URI is dereferenced.) Media types
	// are identified by referencing a "Name" from the IANA "Media Types"
	// registry: http://www.iana.org/assignments/media-types/media-types.xhtml.
	// This item maps to '/SoftwareIdentity/Link/@type' in [SWID].
	MediaType string `cbor:"41,keyasint,omitempty" json:"media-type,omitempty" xml:"type,attr,omitempty"`

	// An integer or textual value (integer label with text escape, see
	// Section 2, for the "Software Tag Link Link Relationship Values"
	// registry Section 4.3) used to determine if the referenced software
	// component has to be installed before installing the software component
	// identified by the COSWID tag. If an integer value is used it MUST be an
	// index value in the range -256 to 255. Integer values in the range -256
	// to -1 are reserved for testing and use in closed environments
	// (see Section 6.2.2). Integer values in the range 0 to 255 correspond to
	// registered entries in the IANA "Link Use Values" registry (see
	// Section 6.2.8. If a string value is used it MUST be a private use name
	// as defined in Section 6.2.2. String values correspond to registered
	// entries in the "Software Tag Link Use Values" registry
	Use *Use `cbor:"42,keyasint,omitempty" json:"use,omitempty" xml:"use,attr,omitempty"`
}

type LinkExtension struct {
}

type Links []Link

type Ownership struct {
	// contains filtered or unexported fields
}

type PathElements struct {
	Directories *Directories `cbor:"16,keyasint,omitempty" json:"directory,omitempty" xml:"Directory,omitempty"`
	Files       *Files       `cbor:"17,keyasint,omitempty" json:"file,omitempty" xml:"File,omitempty"`
}

type Payload struct {
	PayloadExtension
	GlobalAttributes
	ResourceCollection
}

type PayloadExtension struct {
}

type Process struct {
	ProcessExtension

	GlobalAttributes

	// The software component's process name as it will appear in an endpoint's
	// process list.
	ProcessName string `cbor:"27,keyasint" json:"process-name" xml:"name,attr"`

	//  The process ID identified for a running instance of the software
	//  component in the endpoint's process list. This is used as part of the
	//  evidence item.
	Pid *int `cbor:"28,keyasint,omitempty" json:"pid,omitempty" xml:"pid,attr,omitempty"`
}

type ProcessExtension struct {
}

type Processes []Process

type Rel struct {
	// contains filtered or unexported fields
}

type Resource struct {
	ResourceExtension
	GlobalAttributes
	Type string `cbor:"29,keyasint" json:"type" xml:"type,attr"`
}

type ResourceCollection struct {
	ResourceCollectionExtension

	PathElements

	// A process item allows details to be provided about the runtime behavior
	// of the software component, such as information that will appear in a
	// process listing on an endpoint
	Processes *Processes `cbor:"18,keyasint,omitempty" json:"process,omitempty" xml:"Process,omitempty"`

	// A resource item can be used to provide details about an artifact or
	// capability expected to be found on an endpoint or evidence collected
	// related to the software component. This can be used to represent concepts
	// not addressed directly by the directory, file, or process items. Examples
	// include: registry keys, bound ports, etc. The equivalent construct in
	// [SWID] is currently under specified. As a result, this item might be
	// further defined through extension in the future.
	Resources *Resources `cbor:"19,keyasint,omitempty" json:"resource,omitempty" xml:"Resource,omitempty"`
}

type ResourceCollectionExtension struct {
}

type ResourceExtension struct {
}

type Resources []Resource

type Roles struct {
	// contains filtered or unexported fields
}

type SoftwareIdentity struct {
	XMLName xml.Name `cbor:"-" json:"-"`

	CoSWIDExtension

	GlobalAttributes

	// A 16 byte binary string or textual identifier uniquely referencing a
	// software component. The tag identifier MUST be globally unique. If
	// represented as a 16 byte binary string, the identifier MUST be a valid
	// universally unique identifier as defined by [RFC4122]. There are no
	// strict guidelines on how this identifier is structured, but examples
	// include a 16 byte GUID (e.g. class 4 UUID) [RFC4122], or a text string
	// appended to a DNS domain name to ensure uniqueness across organizations.
	TagID TagID `cbor:"0,keyasint" json:"tag-id" xml:"tagId,attr"`

	// An integer value that indicate the specific release revision of the tag.
	// Typically, the initial value of this field is set to 0 and the value is
	// monotonically increased for subsequent tags produced for the same
	// software component release. This value allows a CoSWID tag producer to
	// correct an incorrect tag previously released without indicating a change
	// to the underlying software component the tag represents. For example, the
	// tag version could be changed to add new metadata, to correct a broken
	// link, to add a missing payload entry, etc. When producing a revised tag,
	// the new tag-version value MUST be greater than the old tag-version value.
	TagVersion int `cbor:"12,keyasint" json:"tag-version" xml:"tagVersion,attr,omitempty"`

	// A boolean value that indicates if the tag identifies and describes an
	// installable software component in its pre-installation state. Installable
	// software includes a installation package or installer for a software
	// component, a software update, or a patch. If the CoSWID tag represents
	// installable software, the corpus item MUST be set to "true". If not
	// provided, the default value MUST be considered "false"
	Corpus bool `cbor:"8,keyasint,omitempty" json:"corpus,omitempty" xml:"corpus,attr,omitempty"`

	// A boolean value that indicates if the tag identifies and describes an
	// installed patch that has made incremental changes to a software component
	// installed on an endpoint. Typically, an installed patch has made a set of
	// file modifications to pre-installed software and does not alter the
	// version number or the descriptive metadata of an installed software
	// component. If a CoSWID tag is for a patch, the patch item MUST be set to
	// "true". If not provided, the default value MUST be considered "false".
	//
	// Note: If the software component's version number is modified, then the
	// correct course of action would be to replace the previous primary tag for
	// the component with a new primary tag that reflected this new version. In
	// such a case, the new tag would have a patch item value of "false" or
	// would omit this item completely.
	Patch bool `cbor:"9,keyasint,omitempty" json:"patch,omitempty" xml:"patch,attr,omitempty"`

	// A boolean value that indicates if the tag is providing additional
	// information to be associated with another referenced SWID or CoSWID tag.
	// This allows tools and users to record their own metadata about a software
	// component without modifying SWID primary or patch tags created by a
	// software provider. If a CoSWID tag is a supplemental tag, the
	// supplemental item MUST be set to "true". If not provided, the default
	// value MUST be considered "false".
	Supplemental bool `cbor:"11,keyasint,omitempty" json:"supplemental,omitempty" xml:"supplemental,attr,omitempty"`

	// This textual item provides the software component's name. This name is
	// likely the same name that would appear in a package management tool.
	SoftwareName string `cbor:"1,keyasint" json:"software-name" xml:"name,attr"`

	// A textual value representing the specific release or development version
	// of the software component.
	SoftwareVersion string `cbor:"13,keyasint,omitempty" json:"software-version,omitempty" xml:"version,attr"`

	// An integer or textual value representing the versioning scheme used for
	// the software-version item. If an integer value is used it MUST be an
	// index value in the range -256 to 65535. Integer values in the range -256
	// to -1 are reserved for testing and use in closed environments (see
	// section Section 5.2.2). Integer values in the range 0 to 65535 correspond
	// to registered entries in the IANA "SWID/CoSWID Version Scheme Value"
	// registry (see section Section 5.2.4. If a string value is used it MUST be
	// a private use name as defined in section Section 5.2.2. String values
	// based on a Version Scheme Name from the IANA "SWID/CoSWID Version Scheme
	// Value" registry MUST NOT be used, as these values are less concise than
	// their index value equivalent.
	VersionScheme *VersionScheme `cbor:"14,keyasint,omitempty" json:"version-scheme,omitempty" xml:"versionScheme,attr,omitempty"`

	// This text value is a hint to the tag consumer to understand what target
	// platform this tag applies to. This item represents a query as defined by
	// the W3C Media Queries Recommendation (see
	// http://www.w3.org/TR/2012/REC-css3-mediaqueries-20120619)
	Media string `cbor:"10,keyasint,omitempty" json:"media,omitempty" xml:"media,attr,omitempty"`

	// An open-ended map of key/value data pairs. A number of predefined keys
	// can be used within this item providing for common usage and semantics
	// across the industry. Use of this map allows any additional attribute to
	// be included in the tag. It is expected that industry groups will use a
	// common set of attribute names to allow for interoperability within their
	// communities.
	SoftwareMetas *SoftwareMetas `cbor:"5,keyasint,omitempty" json:"software-meta,omitempty" xml:"Meta,omitempty"`

	// Provides information about one or more organizations responsible for
	// producing the CoSWID tag, and producing or releasing the software
	// component referenced by this CoSWID tag.
	Entities Entities `cbor:"2,keyasint" json:"entity" xml:"Entity"`

	// Provides a means to establish relationship arcs between the tag and
	// another items. A given link can be used to establish the relationship
	// between tags or to reference another resource that is related to the
	// CoSWID tag, e.g. vulnerability database association, ROLIE feed
	// [RFC8322], MUD resource [RFC8520], software download location, etc). This
	// is modeled after the HTML "link" element.
	Links *Links `cbor:"4,keyasint,omitempty" json:"link,omitempty" xml:"Link,omitempty"`

	// This item represents a collection of software artifacts (described by
	// child items) that compose the target software. For example, these
	// artifacts could be the files included with an installer for a corpus tag
	// or installed on an endpoint when the software component is installed for
	// a primary or patch tag. The artifacts listed in a payload may be a
	// superset of the software artifacts that are actually installed. Based on
	// user selections at install time, an installation might not include every
	// artifact that could be created or executed on the endpoint when the
	// software component is installed or run.
	Payload *Payload `cbor:"6,keyasint,omitempty" json:"payload,omitempty" xml:"Payload,omitempty"`

	// This item can be used to record the results of a software discovery
	// process used to identify untagged software on an endpoint or to represent
	// indicators for why software is believed to be installed on the endpoint.
	// In either case, a CoSWID tag can be created by the tool performing an
	// analysis of the software components installed on the endpoint.
	Evidence *Evidence `cbor:"3,keyasint,omitempty" json:"evidence,omitempty" xml:"Evidence,omitempty"`
}

type SoftwareMeta struct {
	SoftwareMetaExtension

	GlobalAttributes

	// A textual value that identifies how the software component has been
	// activated, which might relate to specific terms and conditions for its
	// use (e.g. Trial, Serialized, Licensed, Unlicensed, etc) and relate to an
	// entitlement. This attribute is typically used in supplemental tags as it
	// contains information that might be selected during a specific install.
	ActivationStatus string `cbor:"43,keyasint,omitempty" json:"activation-status,omitempty" xml:"activationStatus,attr,omitempty"`

	// A textual value that identfies which sales, licensing, or marketing
	// channel the software component has been targeted for (e.g. Volume,
	// Retail, OEM, Academic, etc). This attribute is typically used in
	// supplemental tags as it contains information that might be selected
	// during a specific install.
	ChannelType string `cbor:"44,keyasint,omitempty" json:"channel-type,omitempty" xml:"channelType,attr,omitempty"`

	// A textual value for the software component's informal or colloquial
	// version. Examples may include a year value, a major version number, or
	// similar value that are used to identify a group of specific software
	// component releases that are part of the same release/support cycle. This
	// version can be the same through multiple releases of a software
	// component, while the software-version specified in the concise-swid-tag
	// group is much more specific and will change for each software component
	// release. This version is intended to be used for string comparison
	// (byte-by-byte) only and is not intended to be used to determine if a
	// specific value is earlier or later in a sequence.
	ColloquialVersion string `cbor:"45,keyasint,omitempty" json:"colloquial-version,omitempty" xml:"colloquialVersion,attr,omitempty"`

	// A textual value that provides a detailed description of the software
	// component. This value MAY be multiple paragraphs separated by CR LF
	// characters as described by [RFC5198].
	Description string `cbor:"46,keyasint,omitempty" json:"description,omitempty" xml:"description,attr,omitempty"`

	// A textual value indicating that the software component represents a
	// functional variation of the code base used to support multiple software
	// components. For example, this item can be used to differentiate
	// enterprise, standard, or professional variants of a software component.
	Edition string `cbor:"47,keyasint,omitempty" json:"edition,omitempty" xml:"edition,attr,omitempty"`

	// A boolean value that can be used to determine if accompanying proof of
	// entitlement is needed when a software license reconciliation process is
	// performed.
	EntitlementDataRequired *bool `cbor:"48,keyasint,omitempty" json:"entitlement-data-required,omitempty" xml:"entitlementDataRequired,attr,omitempty"`

	// A vendor-specific textual key that can be used to identify and establish
	// a relationship to an entitlement. Examples of an entitlement-key might
	// include a serial number, product key, or license key. For values that
	// relate to a given software component install (i.e., license key), a
	// supplemental tag will typically contain this information. In other cases,
	// where a general-purpose key can be provided that applies to all possible
	// installs of the software component on different endpoints, a primary tag
	// will typically contain this information. Since CoSWID tags are not
	// intended to contain confidential information, tag authors are advised
	// not to record unprotected, private software license keys in this field.
	EntitlementKey string `cbor:"49,keyasint,omitempty" json:"entitlement-key,omitempty" xml:"entitlementKey,attr,omitempty"`

	// The name (or tag-id) of the software component that created the CoSWID
	// tag. If the generating software component has a SWID or CoSWID tag, then
	// the tag-id for the generating software component SHOULD be provided.
	Generator *TagID `cbor:"50,keyasint,omitempty" json:"generator,omitempty" xml:"generator,attr,omitempty"`

	// A globally unique identifier used to identify a set of software
	// components that are related. Software components sharing the same
	// persistent-id can be different versions. This item can be used to relate
	// software components, released at different points in time or through
	// different release channels, that may not be able to be related through
	// use of the link item.
	PersistentID string `cbor:"51,keyasint,omitempty" json:"persistent-id,omitempty" xml:"persistentId,attr,omitempty"`

	// A basic name for the software component that can be common across
	// multiple tagged software components (e.g., Apache HTTPD).
	Product string `cbor:"52,keyasint,omitempty" json:"product,omitempty" xml:"product,attr,omitempty"`

	// A textual value indicating the software components overall product
	// family. This should be used when multiple related software components
	// form a larger capability that is installed on multiple different
	// endpoints. For example, some software families may consist of server,
	// client, and shared service components that are part of a larger
	// capability. Email systems, enterprise applications, backup services, web
	// conferencing, and similar capabilities are examples of families. Use of
	// this item is not intended to represent groups of software that are
	// bundled or installed together. The persistent-id or link items SHOULD be
	// used to relate bundled software components.
	ProductFamily string `cbor:"53,keyasint,omitempty" json:"product-family,omitempty" xml:"productFamily,attr,omitempty"`

	// A string value indicating an informal or colloquial release version of
	// the software. This value can provide a different version value as
	// compared to the software-version specified in the concise-swid-tag group.
	// This is useful when one or more releases need to have an informal version
	// label that differs from the specific exact version value specified by
	// software-version. Examples can include SP1, RC1, Beta, etc.
	Revision string `cbor:"54,keyasint,omitempty" json:"revision,omitempty" xml:"revision,attr,omitempty"`

	// A short description of the software component. This MUST be a single
	// sentence suitable for display in a user interface.
	Summary string `cbor:"55,keyasint,omitempty" json:"summary,omitempty" xml:"summary,attr,omitempty"`

	// An 8 digit UNSPSC classification code for the software component. For
	// more information see https://www.unspsc.org/
	UnspscCode string `cbor:"56,keyasint,omitempty" json:"unspsc-code,omitempty" xml:"unspscCode,attr,omitempty"`

	// The version of UNSPSC used to define the unspsc-code value.
	UnspscVersion string `cbor:"57,keyasint,omitempty" json:"unspsc-version,omitempty" xml:"unspscVersion,attr,omitempty"`
}

type SoftwareMetaExtension struct {
}

type SoftwareMetas []SoftwareMeta

type TagID struct {
	// contains filtered or unexported fields
}

type Use struct {
	// contains filtered or unexported fields
}

type VersionScheme struct {
	// contains filtered or unexported fields
}