feat: add CPE to component

[jblu42]

Setting CPE was missing for component, now it is possible to set CPE and output CPE for a component.

fixes #139

[jkowalleck]

Thank you for the PullRequest, @jblu42.
This looks like a very good idea.

Can you open an Issue Ticket to describe the feature/fix etc. that you are contributing please? It will help us (and the community) understand and track the change.

Could you fix the following functional points?:

1. JSON output is missing - XML output was done

Aside from the PR comments, there are a couple of other hygiene points to look at:

1. You need to sign your commits - please check CONTRIBUTING
2. Few code stlye analysis violations have been reported
3. add tests for the following scenario
   • CPE is set to None - test setter/getter/constructor
   • CPE is set to some non-None value - test setter/getter/constructor
   • test JSON output with a non-None value
   • test XML output with a non-None value

Thanks again and don't hesitate to ask any questions.

---

do you have any additional remarks, @madpah ?

[jblu42]

Sorry forgot some fixes in the last commit, now added.

I think for JSON output there are no changes required as it uses the JSON schema as reference and the CPE is included in there. At least in my tests the JSON output is working.

Are the tests required? There are no tests for the other optional attributes, but if you like I can add some, just need to look how the tests are defined.

[jkowalleck]

#138 (comment)

Sorry forgot some fixes in the last commit, now added.

I think for JSON output there are no changes required as it uses the JSON schema as reference and the CPE is included in there. At least in my tests the JSON output is working.

Are the tests required? There are no tests for the other optional attributes, but if you like I can add some, just need to look how the tests are defined.

If you can, please add a test for the JSON and for the XML output, that includes a non-None CPE value. that should be good enough for now.
If you think additional tests would support the feature you provide, feel free to add them, too.

[jkowalleck]

@jblu42 ,
Could you get a couple of formals sorted out?

• some commits are not signed. See the "DCO" test results for details.
• some test are failing. see the test results for details.

[jblu42]

Strange, I did run it through poetry tests before committing, will have a look at it again. The problem with the sign off is my first commit, who was not signed off, do you know how to correct that, I am not using git so often?

[jkowalleck]

Strange, I did run it through poetry tests before committing, will have a look at it again. The problem with the sign off is my first commit, who was not signed off, do you know how to correct that, I am not using git so often?

Hello @jblu42 ,
By following the steps DCO checker described in the "details" link in the test summary you should be all good.
See for example: https://github.com/CycloneDX/cyclonedx-python-lib/pull/138/checks?check_run_id=4893513908

[madpah]

This is looking great. Couple of very minor things in tests.

FYI @jkowalleck

[madpah]

Thanks again @jblu42 - we'll just wait for @jkowalleck to come back regarding positioning of the new cpe parameter - but this is looking great and we really really appreciate the contribution.

[jkowalleck]

PR looks solid. approval from my side.