Skip to content

Commit

Permalink
Create SupportType.md
Browse files Browse the repository at this point in the history
The support available for a software artifact is a factor increasingly being used in risk assessment.  equirement of listing the support type available.   This set of enumerations has been based on https://healthsectorcouncil.org/wp-content/uploads/2023/03/Health-Industry-Cybersecurity-Managing-Legacy-Technology-Security-HIC-MaLTS.pdf, with additional categories being added after discussion with the AI & Data profile working groups.   It should be able to be applied to software components, AI/ML trained models and datasets.
  • Loading branch information
kestewart authored Feb 5, 2024
1 parent 1b2cda1 commit c658e92
Showing 1 changed file with 22 additions and 0 deletions.
22 changes: 22 additions & 0 deletions model/Core/Vocabularies/SupportType.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
SPDX-License-Identifier: Community-Spec-1.0

# SupportType

## Summary

Indicates the type of support that is associated with an artifact.

## Description
SupportType is an enumeration of the various types of support commonly found for artifacts in the software supply chain. Specific details of what that support entails are provided by agreements between the producer and consumer of the artifact.

## Metadata

- name: SupportType

## Entries
- development - the artifact is in active development and is not considered ready for formal support from the supplier.
- support - the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.
- limitedSupport - the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.
- endOfSupport - there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.
- noSupport - there is no support for the artifact from the supplier, consumer assumes any support obligations.
- noAssertion - no assertion about the type of support is made. This is considered the default if no other support type is used.

0 comments on commit c658e92

Please sign in to comment.