Skip to content

feat: add origin region for hardware provenance#952

Open
taleodor wants to merge 3 commits into
CycloneDX:2.0-dev-hardwarefrom
relizaio:2.0-dev-hardware
Open

feat: add origin region for hardware provenance#952
taleodor wants to merge 3 commits into
CycloneDX:2.0-dev-hardwarefrom
relizaio:2.0-dev-hardware

Conversation

@taleodor

Copy link
Copy Markdown

This PR adds origin notion to track regional provenance of hardware components. Origin can be placed on a component level or a party level.

Proposed shape:

"origin": {
  "basis": "number of parts",
  "origins": [ { "originCode": "CA", "percentage": 0.7 } ]
}

Signed-off-by: Pavel Shukhman <taleodor@gmail.com>
@taleodor taleodor requested a review from a team as a code owner June 12, 2026 14:13
Based on HBOM group meeting from 2026-07-07.

Signed-off-by: Pavel Shukhman <pavel@reliza.io>
@taleodor

Copy link
Copy Markdown
Author

Updated shape based on HBOM group meeting of 2026-07-07:

"origins": [
  {
    "basis": "number of parts",
    "distribution": [
      { "isoCode": "CA", "percentage": 70 },
      { "isoCode": "US", "percentage": 30 }
    ]
  },
  {
    "basis": "manufacturing cost",
    "distribution": [ { "isoCode": "CA", "percentage": 100 } ]
  }
]

Signed-off-by: Pavel Shukhman <pavel@reliza.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant