Component Descriptor

The OCM Component Descriptor is the central data structure of the Open Component Model. It describes a component version with its resources, sources, references, labels, and signatures.

Sources are deprecated

The component.sources field is deprecated. Sources carry no digest, so neither the component version digest nor a signature covers their content. Declare this content as resources instead; see Migrate from Sources to Resources.

The schema below defines the full structure of a component descriptor as specified by JSON Schema 2020-12.