Skip to content

Conversation

@P3tra-WP
Copy link

@P3tra-WP P3tra-WP commented Nov 23, 2025

Issue:
As discussed in ticket #731 , this PR is a review of the schema

Model schema reviewed to ensure no data loss
Risk schema changes done based on risk and compliance tooling taxonomies to ensure compatibility (including data classification etc)

This PR is to use for discussion on the TM-BOM discussion 0 not for merging yet

@P3tra-WP P3tra-WP requested a review from a team as a code owner November 23, 2025 22:51
"risk": "Risk management perspective",
"stakeholder": "General stakeholder perspective",
"use-case": "A high level persepctive that captures the data-flows of the use case, rather than deep granularity of systems",
"abuse-case": "A high level persepctive that captures the data-flows of a certain abuse case, rather than deep granularity of systems",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove use-case as this is covered in the usecase schema. Add abuse case to the threat schema

"service": "Service or microservice",
"dataStore": "Database, file system, or data repository",
"data": "Data asset or dataset",
"data": "Dataset",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Change data to dataSet

@jkowalleck jkowalleck added this to the 2.0 milestone Nov 27, 2025
@jkowalleck jkowalleck added the CDX 2.0 related to release v2.0 label Nov 27, 2025
@stevespringett
Copy link
Member

Thanks Petra. Let me know when these minor changes are in and I'll merge it in.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CDX 2.0 related to release v2.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants