class

CycloneDX::ExternalReference

Inherits JSON::Serializable / Reference / Object

Constants

VALID_TYPES = ["vcs", "issue-tracker", "website", "advisories", "bom", "mailing-list", "social", "chat", "documentation", "support", "source-distribution", "distribution", "distribution-intake", "license", "build-meta", "build-system", "release-notes", "security-contact", "model-card", "log", "configuration", "evidence", "formulation", "attestation", "threat-model", "adversary-model", "risk-assessment", "vulnerability-assertion", "exploitability-statement", "pentest-report", "static-analysis-report", "dynamic-analysis-report", "runtime-analysis-report", "component-analysis-report", "maturity-report", "certification-report", "codified-infrastructure", "quality-metrics", "poam", "electronic-signature", "digital-signature", "rfc-9116", "patent", "patent-family", "patent-assertion", "citation", "other"]

Valid externalReference type enum values per the CycloneDX schema (externalReferenceType). "other" is the catch-all fallback, which the version gate downgrades too-new types to.

This is the union across all supported spec versions; see VersionGate::EXTERNAL_REFERENCE_TYPE_VERSIONS for when each was added.