{ "bomFormat": "CycloneDX", "specVersion": "1.4", "serialNumber": "urn:uuid:c825402b-bbfa-4ad5-81b1-6a8332a6a8b6", "version": 1, "metadata": { "timestamp": "2022-05-23T12:05:01-07:00", "tools": [ { "vendor": "anchore", "name": "syft", "version": "v0.42.0-bogus" } ], "component": { "bom-ref": "e779c1ed804ba529", "type": "container", "name": "user-image-input", "version": "sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368" } }, "components": [ { "bom-ref": "2a46171f91c8d4bc", "type": "library", "name": "package-1", "version": "1.0.1", "licenses": [ { "license": { "id": "MIT" } } ], "cpe": "cpe:2.3:*:some:package:1:*:*:*:*:*:*:*", "purl": "a-purl-1", "properties": [ { "name": "syft:package:foundBy", "value": "the-cataloger-1" }, { "name": "syft:package:language", "value": "python" }, { "name": "syft:package:metadataType", "value": "PythonPackageMetadata" }, { "name": "syft:package:type", "value": "python" }, { "name": "syft:location:0:layerID", "value": "sha256:cd8f3884f1211d65c19ce5bbc5174bcd2ce8ba96b63e5b3693969a53279c4405" }, { "name": "syft:location:0:path", "value": "/somefile-1.txt" } ] }, { "bom-ref": "pkg:deb/debian/package-2@2.0.1?package-id=ae77680e9b1d087e", "type": "library", "name": "package-2", "version": "2.0.1", "cpe": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*", "purl": "pkg:deb/debian/package-2@2.0.1", "properties": [ { "name": "syft:package:foundBy", "value": "the-cataloger-2" }, { "name": "syft:package:metadataType", "value": "DpkgMetadata" }, { "name": "syft:package:type", "value": "deb" }, { "name": "syft:location:0:layerID", "value": "sha256:42d2ea51c688e6dc7be81a305acbe006d27a6ef0c26ae3888fd0d4ce44f69265" }, { "name": "syft:location:0:path", "value": "/somefile-2.txt" }, { "name": "syft:metadata:installedSize", "value": "0" } ] }, { "type": "operating-system", "name": "debian", "version": "1.2.3", "description": "debian", "swid": { "tagId": "debian", "name": "debian", "version": "1.2.3" }, "properties": [ { "name": "syft:distro:id", "value": "debian" }, { "name": "syft:distro:idLike:0", "value": "like!" }, { "name": "syft:distro:prettyName", "value": "debian" }, { "name": "syft:distro:versionID", "value": "1.2.3" } ] } ] }