mirror of
https://github.com/anchore/syft.git
synced 2026-11-03 16:06:36 +01:00
Alex Goodman
d7a51a69dd
* remove centralize pURL generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * port java cataloger to new generic cataloger pattern Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove common.GenericCataloger Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update format test fixtures to reflect ID updates Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix package sort instability for encode-decode-encode cycles Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
64 lines
2.7 KiB
XML
64 lines
2.7 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<bom xmlns="http://cyclonedx.org/schema/bom/1.4" serialNumber="urn:uuid:2896b5ce-2016-49e8-a422-239d662846c7" version="1">
|
|
<metadata>
|
|
<timestamp>2022-11-07T09:11:06-05:00</timestamp>
|
|
<tools>
|
|
<tool>
|
|
<vendor>anchore</vendor>
|
|
<name>syft</name>
|
|
<version>v0.42.0-bogus</version>
|
|
</tool>
|
|
</tools>
|
|
<component bom-ref="522dc6b135a55bb4" type="container">
|
|
<name>user-image-input</name>
|
|
<version>sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368</version>
|
|
</component>
|
|
</metadata>
|
|
<components>
|
|
<component bom-ref="66ba429119b8bec6" type="library">
|
|
<name>package-1</name>
|
|
<version>1.0.1</version>
|
|
<licenses>
|
|
<license>
|
|
<id>MIT</id>
|
|
</license>
|
|
</licenses>
|
|
<cpe>cpe:2.3:*:some:package:1:*:*:*:*:*:*:*</cpe>
|
|
<purl>a-purl-1</purl>
|
|
<properties>
|
|
<property name="syft:package:foundBy">the-cataloger-1</property>
|
|
<property name="syft:package:language">python</property>
|
|
<property name="syft:package:metadataType">PythonPackageMetadata</property>
|
|
<property name="syft:package:type">python</property>
|
|
<property name="syft:location:0:layerID">sha256:fb6beecb75b39f4bb813dbf177e501edd5ddb3e69bb45cedeb78c676ee1b7a59</property>
|
|
<property name="syft:location:0:path">/somefile-1.txt</property>
|
|
</properties>
|
|
</component>
|
|
<component bom-ref="pkg:deb/debian/package-2@2.0.1?package-id=958443e2d9304af4" type="library">
|
|
<name>package-2</name>
|
|
<version>2.0.1</version>
|
|
<cpe>cpe:2.3:*:some:package:2:*:*:*:*:*:*:*</cpe>
|
|
<purl>pkg:deb/debian/package-2@2.0.1</purl>
|
|
<properties>
|
|
<property name="syft:package:foundBy">the-cataloger-2</property>
|
|
<property name="syft:package:metadataType">DpkgMetadata</property>
|
|
<property name="syft:package:type">deb</property>
|
|
<property name="syft:location:0:layerID">sha256:319b588ce64253a87b533c8ed01cf0025e0eac98e7b516e12532957e1244fdec</property>
|
|
<property name="syft:location:0:path">/somefile-2.txt</property>
|
|
<property name="syft:metadata:installedSize">0</property>
|
|
</properties>
|
|
</component>
|
|
<component type="operating-system">
|
|
<name>debian</name>
|
|
<version>1.2.3</version>
|
|
<description>debian</description>
|
|
<swid tagId="debian" name="debian" version="1.2.3"></swid>
|
|
<properties>
|
|
<property name="syft:distro:id">debian</property>
|
|
<property name="syft:distro:idLike:0">like!</property>
|
|
<property name="syft:distro:prettyName">debian</property>
|
|
<property name="syft:distro:versionID">1.2.3</property>
|
|
</properties>
|
|
</component>
|
|
</components>
|
|
</bom> |