diff --git a/src/validate_pyproject/project_metadata.schema.json b/src/validate_pyproject/project_metadata.schema.json index 00c3d03..fdb51f6 100644 --- a/src/validate_pyproject/project_metadata.schema.json +++ b/src/validate_pyproject/project_metadata.schema.json @@ -144,6 +144,13 @@ "type": "string" } }, + "sbom-files": { + "description": "Paths or globs to paths of Software Bill-of-Materials files", + "type": "array", + "items": { + "type": "string" + } + }, "authors": { "type": "array", "items": {"$ref": "#/definitions/author"}, @@ -247,6 +254,7 @@ "requires-python", "license", "license-files", + "sbom-files", "authors", "maintainers", "keywords", diff --git a/tests/examples/simple/pep770.toml b/tests/examples/simple/pep770.toml new file mode 100644 index 0000000..5049970 --- /dev/null +++ b/tests/examples/simple/pep770.toml @@ -0,0 +1,4 @@ +[project] +name = "example" +version = "1.2.3" +sbom-files = ["sboms/bom.cdx.json", "sboms/*"] diff --git a/tests/invalid-examples/pep621/pep770/pep770-string.errors.txt b/tests/invalid-examples/pep621/pep770/pep770-string.errors.txt new file mode 100644 index 0000000..e421b7d --- /dev/null +++ b/tests/invalid-examples/pep621/pep770/pep770-string.errors.txt @@ -0,0 +1 @@ +`project.sbom-files` must be array diff --git a/tests/invalid-examples/pep621/pep770/pep770-string.toml b/tests/invalid-examples/pep621/pep770/pep770-string.toml new file mode 100644 index 0000000..4a06197 --- /dev/null +++ b/tests/invalid-examples/pep621/pep770/pep770-string.toml @@ -0,0 +1,4 @@ +[project] +name = "example" +version = "1.2.3" +sbom-files = "sboms/bom.cdx.json"