PURL type for Cloud services?

[pombredanne]

To support collecting advisories like in that PR:

• Add CloudVulnDB importer for issue #1511 aboutcode-org/vulnerablecode#2217 by @Tednoob17

... may be we need a PURL type for cloud services? Is this a decent idea or not?

[pombredanne]

An example data:

• https://github.com/wiz-sec/open-cvdb/blob/main/vulnerabilities/acsessed.yaml

[mjherzog]

Should this be a type for Cloud services or a more general type for services that would include API-defined services?
Does it make sense to create PURL types for services? I understand the appeal of extending PURL but the attributes for a service seem to be quite different from software (packages).

[VanL]

@pombredanne, @mjherzog: Does pkg:service fit this need? Is there anything in the vuln information that would not fit with the proposal?