Skip to content

feat: add origin region for hardware provenance#952

Merged
stevespringett merged 3 commits into
CycloneDX:2.0-dev-hardwarefrom
relizaio:2.0-dev-hardware
Jul 21, 2026
Merged

feat: add origin region for hardware provenance#952
stevespringett merged 3 commits into
CycloneDX:2.0-dev-hardwarefrom
relizaio:2.0-dev-hardware

Conversation

@taleodor

Copy link
Copy Markdown

This PR adds origin notion to track regional provenance of hardware components. Origin can be placed on a component level or a party level.

Proposed shape:

"origin": {
  "basis": "number of parts",
  "origins": [ { "originCode": "CA", "percentage": 0.7 } ]
}

Signed-off-by: Pavel Shukhman <taleodor@gmail.com>
@taleodor
taleodor requested a review from a team as a code owner June 12, 2026 14:13
Based on HBOM group meeting from 2026-07-07.

Signed-off-by: Pavel Shukhman <pavel@reliza.io>
@taleodor

Copy link
Copy Markdown
Author

Updated shape based on HBOM group meeting of 2026-07-07:

"origins": [
  {
    "basis": "number of parts",
    "distribution": [
      { "isoCode": "CA", "percentage": 70 },
      { "isoCode": "US", "percentage": 30 }
    ]
  },
  {
    "basis": "manufacturing cost",
    "distribution": [ { "isoCode": "CA", "percentage": 100 } ]
  }
]

Signed-off-by: Pavel Shukhman <pavel@reliza.io>
@stevespringett
stevespringett merged commit 5e5915f into CycloneDX:2.0-dev-hardware Jul 21, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants