NAME
SBOM::CycloneDX::Formulation - Formula
SYNOPSIS
SBOM::CycloneDX::Formulation->new();
DESCRIPTION
SBOM::CycloneDX::Formulation describes the formulation of any referencable object within the BOM, including components, services, metadata, declarations, or the BOM itself. This may encompass how the object was created, assembled, deployed, tested, certified, or otherwise brought into its present form. Common examples include software build pipelines, deployment processes, AI/ML model training, cryptographic key generation or certification, and third-party audits. Processes are modeled using declared and observed formulas, composed of workflows, tasks, and individual steps.
METHODS
SBOM::CycloneDX::Formulation inherits all methods from SBOM::CycloneDX::Base and implements the following new ones.
- SBOM::CycloneDX::Formulation->new( %PARAMS )
-
Properties:
bom_ref, An identifier which can be used to reference the formula elsewhere in the BOM. Every bom-ref must be unique within the BOM. Value SHOULD not start with the BOM-Link intro 'urn:cdx:' to avoid conflicts with BOM-Links.components, Transient components that are used in tasks that constitute one or more of this formula's workflowsproperties, Provides the ability to document properties in a name-value store. This provides flexibility to include data not officially supported in the standard without having to use additional namespaces or create extensions. Unlike key-value stores, properties support duplicate names, each potentially having different values. Property names of interest to the general public are encouraged to be registered in the CycloneDX Property Taxonomy (https://github.com/CycloneDX/cyclonedx-property-taxonomy). Formal registration is optional.services, Transient services that are used in tasks that constitute one or more of this formula's workflowsworkflows, List of workflows that can be declared to accomplish specific orchestrated goals and independently triggered.
- $formulation->bom_ref
- $formulation->components
- $formulation->properties
- $formulation->services
- $formulation->workflows
SUPPORT
Bugs / Feature Requests
Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-SBOM-CycloneDX/issues. You will be notified automatically of any progress on your issue.
Source Code
This is open source software. The code repository is available for public review and contribution under the terms of the license.
https://github.com/giterlizzi/perl-SBOM-CycloneDX
git clone https://github.com/giterlizzi/perl-SBOM-CycloneDX.git
AUTHOR
Giuseppe Di Terlizzi <gdt@cpan.org>
LICENSE AND COPYRIGHT
This software is copyright (c) 2025-2026 by Giuseppe Di Terlizzi.
This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.