<?xml version="1.0" encoding="UTF-8"?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.4" serialNumber="urn:uuid:c8894728-c156-4fc5-8f5d-3e397eede5a7" version="1">
  <metadata>
    <timestamp>2023-05-08T14:40:52-04:00</timestamp>
    <tools>
      <tool>
        <vendor>anchore</vendor>
        <name>syft</name>
        <version>v0.42.0-bogus</version>
      </tool>
    </tools>
    <component bom-ref="38160ebc2a6876e8" type="container">
      <name>user-image-input</name>
      <version>sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368</version>
    </component>
  </metadata>
  <components>
    <component bom-ref="ec2e0c93617507ef" type="library">
      <name>package-1</name>
      <version>1.0.1</version>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <cpe>cpe:2.3:*:some:package:1:*:*:*:*:*:*:*</cpe>
      <purl>a-purl-1</purl>
      <properties>
        <property name="syft:package:foundBy">the-cataloger-1</property>
        <property name="syft:package:language">python</property>
        <property name="syft:package:metadataType">PythonPackageMetadata</property>
        <property name="syft:package:type">python</property>
        <property name="syft:location:0:layerID">sha256:ab62016f9bec7286af65604081564cadeeb364a48faca2346c3f5a5a1f5ef777</property>
        <property name="syft:location:0:path">/somefile-1.txt</property>
      </properties>
    </component>
    <component bom-ref="pkg:deb/debian/package-2@2.0.1?package-id=958443e2d9304af4" type="library">
      <name>package-2</name>
      <version>2.0.1</version>
      <cpe>cpe:2.3:*:some:package:2:*:*:*:*:*:*:*</cpe>
      <purl>pkg:deb/debian/package-2@2.0.1</purl>
      <properties>
        <property name="syft:package:foundBy">the-cataloger-2</property>
        <property name="syft:package:metadataType">DpkgMetadata</property>
        <property name="syft:package:type">deb</property>
        <property name="syft:location:0:layerID">sha256:f1803845b6747d94d6e4ecce2331457e5f1c4fb97de5216f392a76f4582f63b2</property>
        <property name="syft:location:0:path">/somefile-2.txt</property>
        <property name="syft:metadata:installedSize">0</property>
      </properties>
    </component>
    <component type="operating-system">
      <name>debian</name>
      <version>1.2.3</version>
      <description>debian</description>
      <swid tagId="debian" name="debian" version="1.2.3"></swid>
      <properties>
        <property name="syft:distro:id">debian</property>
        <property name="syft:distro:idLike:0">like!</property>
        <property name="syft:distro:prettyName">debian</property>
        <property name="syft:distro:versionID">1.2.3</property>
      </properties>
    </component>
  </components>
</bom>