spdx/spdx-3-model

Create a securityContact ExternalIdentifierType

goneall opened this issue · 1 comments

Suggested during a review of a BSI proposal.

Having a security contact would support implementation of RFC 9116 section 2.5.3 as part of the SPDX metadata.

bact commented

May be benefit from thinking about this together with "Steward" concept in #855