Who assigns and How is the supplierID assigned?

[santosomar]

As a follow up to #1 :

SupplierID assignment: The supplierID can be assigned by a central authority or registry responsible for maintaining a unique identifier for each supplier in the industry. Alternatively, it can be generated using a specific algorithm or process that ensures uniqueness and avoids conflicts. However, this is something that we will need to discuss in the industry, once we take the next steps and work with other industry peers soon.

Creating this issue to track this.

[tschmidtb51]

As a CSAF issuing party, you could use the value /document/publisher/namespace.