NAME

SBOM::CycloneDX::Citation - Citation

SYNOPSIS

SBOM::CycloneDX::Citation->new();

DESCRIPTION

SBOM::CycloneDX::Citation Details a specific attribution of data within the BOM to a contributing entity or process.

METHODS

SBOM::CycloneDX::Citation->new( %PARAMS )

Properties:

attributed_to, The bom-ref of an object, such as a component, service, tool, organisational entity, or person that supplied the cited information. At least one of the "attributed_to" or "process" elements must be present.

bom_ref, BOM Reference

expressions, One or more path expressions used to locate values within a BOM. Exactly one of the "pointers" or "expressions" elements must be present.

note, A description or comment about the context or quality of the data attribution.

pointers, One or more "JSON Pointers" (https://datatracker.ietf.org/doc/html/rfc6901) identifying the BOM fields to which the attribution applies. Exactly one of the "pointers" or "expressions" elements must be present.

process, The bom-ref to a process (such as a formula, workflow, task, or step) defined in the formulation section that executed or generated the attributed data. At least one of the "attributed_to" or "process" elements must be present.

signature, A digital signature verifying the authenticity or integrity of the attribution.

timestamp, The date and time when the attribution was made or the information was supplied.

$citation->attributed_to

$citation->bom_ref

$citation->expressions

$citation->note

$citation->pointers

$citation->process

$citation->signature

$citation->timestamp

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-SBOM-CycloneDX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-SBOM-CycloneDX

git clone https://github.com/giterlizzi/perl-SBOM-CycloneDX.git

AUTHOR

• Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2025-2026 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.