Information about OpenChain Telco SBOM Guide

[bact]

I just like to put somewhere this information from the SPDX General Meeting that I think relevant to this project.

Slides from Takashi Ninjouji, SBOM Sub-WG of OpenChain Japan (presented at SPDX General Meeting 2024-12-05)

• Slide https://drive.google.com/file/d/14HZGYD7pSSWEmtaHZzWrzPhxCXaCnloJ/view
• SBOM element comparsion sheet https://docs.google.com/spreadsheets/d/1SuGv1L3H_-Iq6dmH7DnjDgAa90LCRnoHB3DTfuWh0Jg/edit?gid=1936044844#gid=1936044844
• Comparing CISA Baseline Attributes with NTIA Minimum Elements
  • SBOM Type, Component Cryptographic Hash, Component License, and Component Holder added -- (discussed in Update to new edition of minimum elements (2024) #214)
• Some Japanese companies use SPDX 2.2.1 (ISO) Lite with some extensions from SPDX 2.3
• OpenChain Telco SBOM Guide -- (we may look at this)
  • Nokia releases OpenChain Telco SBOM validator
  • Effectively covers CISA Baseline Attributes and considered an industry neutral

[jspeed-meyers]

Sounds good to me. Feel free to add it in the README somewhere or create another markdown document that is linked from the README.

[jspeed-meyers]

@bact: Does PR #233 adequately address the above?

[bact]

I think it's enough