`component.evidence` is repeated in proto and object in jsonschema

[prabhu]

Looks like this got missed somehow

I think it must be optional in the proto as well.

https://github.com/CycloneDX/specification/blob/master/schema/bom-1.6.proto#L136

https://github.com/CycloneDX/specification/blob/master/schema/bom-1.6.schema.json#L2079

Originally reported here

[jkowalleck]

confirmed.

in ProtoBuf is it a repeated (optional) element:

specification/schema/bom-1.6.proto

Lines 135 to 136 in 55343ba

	// Specifies optional license and copyright evidence
	repeated Evidence evidence = 23;

in JSON it is a single optional element:

specification/schema/bom-1.6.schema.json

Lines 1061 to 1065 in 55343ba

	"evidence": {
	"$ref": "#/definitions/componentEvidence",
	"title": "Evidence",
	"description": "Provides the ability to document evidence collected through various forms of extraction or analysis."
	},

in XML ti is a single optional element:

specification/schema/bom-1.6.xsd

Lines 680 to 684 in 55343ba

	<xs:element name="evidence" type="bom:componentEvidenceType" minOccurs="0" maxOccurs="1">
	<xs:annotation>
	<xs:documentation>Provides the ability to document evidence collected through various forms of extraction or analysis.</xs:documentation>
	</xs:annotation>
	</xs:element>

i agree, there is a difference.

[jkowalleck]

#272 (comment)

Actually, the defect is in the JSON and XML schemas. In this case, the protobuf is correct. Identity should be an array.

[jkowalleck]

@stevespringett so we make the JSON/XML being a list?

[prabhu]

@jkowalleck I thought only evidence.identity becomes an array, while evidence continued to be an object.

[jkowalleck]

@jkowalleck I thought only evidence.identity becomes an array, while evidence continued to be an object.

i see.
proposed a PR to fix it: #425