Add SupportRelationship

model/Core/Classes/SupportRelationship.md

@@ -0,0 +1,37 @@
+SPDX-License-Identifier: Community-Spec-1.0
+
+# SupportRelationship
+
+## Summary
+
+Describes how an Agent Provides Support for an Element
+
+## Description
+
+Specifies how an Agent supports a given Element. The Relationship Type must be
+`providesSupportFor`. The `from` of the relationship is the `Agent` providing
+support, and the `to` are the `Artifact` for which support is being provided.
+
+`startTime` and `endTime` are mandatory when using this class.
+
+## Metadata
+
+- name: SupportRelationship
+- SubclassOf: Relationship
+- Instantiability: Concrete
+
+## Properties
+
+- supportLevel
+  - type: SupportType
+  - minCount: 1
+  - maxCount: 1
+
+## External properties restrictions
+
+- /Core/Relationship/startTime
+  - minCount: 1
+  - maxCount: 1
+- /Core/Relationship/endTime
+  - minCount: 1
+  - maxCount: 1

model/Core/Vocabularies/RelationshipType.md

@@ -76,6 +76,7 @@ name completes the sentence:
 - other: Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationhip types (this relationship is directionless).
 - packagedBy: Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).
 - patchedBy: Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).
+- providesSupportFor: The `from` Agent provides support for each `to` Artifact. Must be a `SupportRelationship` type.
 - publishedBy: Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.
 - reportedBy: Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.
 - republishedBy: Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.