Initial commit of the party model and test cases. (#930)

superceeds #776 and closes #718.


I have included the change to the `component` schema as an example of
how this would look like in other schemas. Once approved by TC54, I will
refactor the remaining part of the schemas to use the party model. The
refactor shall use the same pattern as the component schema and should
be considered during the review.

Author: stevespringett

schema/2.0/model/cyclonedx-component-2.0.schema.json

@@ -68,27 +68,8 @@
           "title": "BOM Reference",
           "description": "An identifier which can be used to reference the component elsewhere in the BOM. Every `bom-ref` must be unique within the BOM.\nValue SHOULD not start with the BOM-Link intro 'urn:cdx:' to avoid conflicts with BOM-Links."
         },
-        "supplier": {
-          "title": "Component Supplier",
-          "description": " The organization that supplied the component. The supplier may often be the manufacturer, but may also be a distributor or repackager.",
-          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/organizationalEntity"
-        },
-        "manufacturer": {
-          "title": "Component Manufacturer",
-          "description": "The organization that created the component.\nManufacturer is common in components created through automated processes. Components created through manual means may have `@.authors` instead.",
-          "$ref": "cyclonedx-common-2.0.schema.json#/$defs/organizationalEntity"
-        },
-        "authors" :{
-          "type": "array",
-          "title": "Component Authors",
-          "description": "The person(s) who created the component.\nAuthors are common in components created through manual processes. Components created through automated means may have `@.manufacturer` instead.",
-          "items": {"$ref": "cyclonedx-common-2.0.schema.json#/$defs/organizationalContact"}
-        },
-        "publisher": {
-          "type": "string",
-          "title": "Component Publisher",
-          "description": "The person(s) or organization(s) that published the component",
-          "examples": ["Acme Inc"]
+        "parties": {
+          "$ref": "cyclonedx-party-2.0.schema.json#/$defs/parties"
         },
         "group": {
           "type": "string",

schema/2.0/model/cyclonedx-party-2.0.schema.json

@@ -0,0 +1,30 @@
+{
+  "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json",
+  "specFormat": "CycloneDX",
+  "specVersion": "2.0",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "Acme App"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "Some Library",
+      "parties": [
+        {
+          "roles": [
+            {
+              "role": "overlord"
+            }
+          ],
+          "person": {
+            "name": "Alice"
+          }
+        }
+      ]
+    }
+  ]
+}

tools/src/test/resources/2.0/invalid-party-bad-role-value-2.0.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json",
+  "specFormat": "CycloneDX",
+  "specVersion": "2.0",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "Acme App"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "Some Library",
+      "parties": [
+        {
+          "roles": [],
+          "person": {
+            "name": "Alice"
+          }
+        }
+      ]
+    }
+  ]
+}

tools/src/test/resources/2.0/invalid-party-empty-roles-2.0.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json",
+  "specFormat": "CycloneDX",
+  "specVersion": "2.0",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "Acme App"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "Some Library",
+      "parties": [
+        {
+          "roles": [
+            {
+              "role": "supplier"
+            }
+          ],
+          "organization": {
+            "legalName": "Acme Inc.",
+            "addresses": [
+              {
+                "isoCode": "italy-monza"
+              }
+            ]
+          }
+        }
+      ]
+    }
+  ]
+}

tools/src/test/resources/2.0/invalid-party-iso-code-pattern-2.0.json

@@ -0,0 +1,39 @@
+{
+  "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json",
+  "specFormat": "CycloneDX",
+  "specVersion": "2.0",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "Acme App"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "Some Library",
+      "parties": [
+        {
+          "roles": [
+            {
+              "role": "supplier"
+            }
+          ],
+          "organization": {
+            "legalName": "Acme Inc.",
+            "addresses": [
+              {
+                "country": "Antarctica",
+                "coordinates": {
+                  "latitude": -123.456,
+                  "longitude": 0.0
+                }
+              }
+            ]
+          }
+        }
+      ]
+    }
+  ]
+}

tools/src/test/resources/2.0/invalid-party-latitude-out-of-range-2.0.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json",
+  "specFormat": "CycloneDX",
+  "specVersion": "2.0",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "Acme App"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "Some Library",
+      "parties": [
+        {
+          "person": {
+            "name": "Alice"
+          }
+        }
+      ]
+    }
+  ]
+}

tools/src/test/resources/2.0/invalid-party-missing-roles-2.0.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json",
+  "specFormat": "CycloneDX",
+  "specVersion": "2.0",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "Product"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "Some Library",
+      "parties": [
+        {
+          "organization": {
+            "legalName": "Acme Incorporated"
+          }
+        }
+      ]
+    }
+  ]
+}

tools/src/test/resources/2.0/invalid-party-missing-roles-via-component-2.0.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json",
+  "specFormat": "CycloneDX",
+  "specVersion": "2.0",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "Acme App"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "Some Library",
+      "parties": [
+        {
+          "roles": [
+            {
+              "role": "author"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

tools/src/test/resources/2.0/invalid-party-no-identity-2.0.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://cyclonedx.org/schema/2.0/cyclonedx-2.0.schema.json",
+  "specFormat": "CycloneDX",
+  "specVersion": "2.0",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "Product"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "Some Library",
+      "parties": [
+        {
+          "roles": [
+            {
+              "role": "supplier"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}