Content Identifiers for Software Artifacts

model/Software/Classes/ContentIdentifier.md

@@ -0,0 +1,30 @@
+SPDX-License-Identifier: Community-Spec-1.0
+
+# ContentIdentifier
+
+## Summary
+
+A canonical, unique, immutable identifier
+
+## Description
+
+A ContentIdentifier is a canonical, unique, immutable identifier of the content of a software artifact, such as a package, a file, or a snippet.
+It can be used for verifying its identity and integrity.
+
+## Metadata
+
+- name: ContentIdentifier
+- SubclassOf: /Core/IntegrityMethod
+- Instantiability: Concrete
+
+## Properties
+
+- contentIdentifierType
+  - type: ContentIdentifierType
+  - minCount: 1
+  - maxCount: 1
+- contentIdentifierValue
+  - type: xsd:anyURI
+  - minCount: 1
+  - maxCount: 1
+

model/Software/Classes/SoftwareArtifact.md

@@ -19,10 +19,6 @@ such as a package, a file, or a snippet.
 
 ## Properties
 
-- gitoid
-  - type: xsd:anyURI
-  - minCount: 0
-  - maxCount: 2
 - primaryPurpose
   - type: SoftwarePurpose
   - minCount: 0
@@ -37,4 +33,7 @@ such as a package, a file, or a snippet.
 - attributionText
   - type: xsd:string
   - minCount: 0
+- contentIdentifier
+  - type: ContentIdentifier
+  - minCount: 0
 

model/Software/Properties/contentIdentifier.md

@@ -0,0 +1,19 @@
+SPDX-License-Identifier: Community-Spec-1.0
+
+# contentIdentifier
+
+## Summary
+
+A canonical, unique, immutable identifier of the artifact content, that may be used for verifying its identity and/or integrity.
+
+## Description
+
+A contentIdentifier is a canonical, unique, immutable identifier of the content of a software artifact, such as a package, a file, or a snippet.
+It may be used for verifying its identity and/or integrity.
+
+## Metadata
+
+- name: contentIdentifier
+- Nature: DataProperty
+- Range: ContentIdentifier
+

model/Software/Properties/contentIdentifierType.md

@@ -0,0 +1,18 @@
+SPDX-License-Identifier: Community-Spec-1.0
+
+# contentIdentifierType
+
+## Summary
+
+Specifies the type of the content identifier.
+
+## Description
+
+A contentIdentifierType specifies the type of the content identifier.
+
+## Metadata
+
+- name: contentIdentifierType
+- Nature: ObjectProperty
+- Range: ContentIdentifierType
+

model/Software/Properties/contentIdentifierValue.md

@@ -0,0 +1,18 @@
+SPDX-License-Identifier: Community-Spec-1.0
+
+# contentIdentifierValue
+
+## Summary
+
+Specifies the value of the content identifier.
+
+## Description
+
+A contentIdentifierValue specifies the value of a content identifier.
+
+## Metadata
+
+- name: contentIdentifierValue
+- Nature: DataProperty
+- Range: xsd:anyURI
+

model/Software/Vocabularies/ContentIdentifierType.md

@@ -0,0 +1,21 @@
+SPDX-License-Identifier: Community-Spec-1.0
+
+# ContentIdentifierType
+
+## Summary
+
+Specifies the type of a content identifier.
+
+## Description
+
+ContentIdentifierType specifies the type of a content identifier.
+
+## Metadata
+
+- name: ContentIdentifierType
+
+## Entries
+
+- gitoid: Gitoid stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects) and a gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent the software [Artifact ID](https://github.com/omnibor/spec/blob/main/spec/SPEC.md#artifact-id) or the [OmniBOR Identifier](https://github.com/omnibor/spec/blob/main/spec/SPEC.md#omnibor-identifier) for the software artifact's associated [OmniBOR Document](https://github.com/omnibor/spec/blob/main/spec/SPEC.md#omnibor-document).
+- swhid: SoftWare Hash IDentifier, persistent intrinsic identifiers for digital artifacts. The syntax of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) and in the case of filess they typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.
+