mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 16:33:21 +01:00
560b05c2c9
* add new format pattern Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add syftjson format Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add internal formats helper Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add SBOM encode/decode to lib API Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove json presenter + update presenter tests to use common utils Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove presenter format enum type + add formats shim in presenter helper Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add MustCPE helper for tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update usage of format enum Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add test fixtures for encode/decode tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix integration test Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * migrate format detection to use reader Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * address review comments Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
80 lines
2.2 KiB
Plaintext
80 lines
2.2 KiB
Plaintext
{
|
|
"SPDXID": "SPDXRef-DOCUMENT",
|
|
"name": "/some/path",
|
|
"spdxVersion": "SPDX-2.2",
|
|
"creationInfo": {
|
|
"created": "2021-10-12T18:40:22.948394Z",
|
|
"creators": [
|
|
"Organization: Anchore, Inc",
|
|
"Tool: syft-[not provided]"
|
|
],
|
|
"licenseListVersion": "3.14"
|
|
},
|
|
"dataLicense": "CC0-1.0",
|
|
"documentNamespace": "https:/anchore.com/syft/dir/some/path-98ae71fb-f276-4c5c-acf7-25770bf7bca2",
|
|
"packages": [
|
|
{
|
|
"SPDXID": "SPDXRef-Package-python-package-1-1.0.1",
|
|
"name": "package-1",
|
|
"licenseConcluded": "MIT",
|
|
"downloadLocation": "NOASSERTION",
|
|
"externalRefs": [
|
|
{
|
|
"referenceCategory": "SECURITY",
|
|
"referenceLocator": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*",
|
|
"referenceType": "cpe23Type"
|
|
},
|
|
{
|
|
"referenceCategory": "PACKAGE_MANAGER",
|
|
"referenceLocator": "a-purl-2",
|
|
"referenceType": "purl"
|
|
}
|
|
],
|
|
"filesAnalyzed": false,
|
|
"hasFiles": [
|
|
"SPDXRef-File-package-1-efae7fecc76ca25da40f79d7ef5b8933510434914835832c7976f3e866aa756a"
|
|
],
|
|
"licenseDeclared": "MIT",
|
|
"sourceInfo": "acquired package info from installed python package manifest file: /some/path/pkg1",
|
|
"versionInfo": "1.0.1"
|
|
},
|
|
{
|
|
"SPDXID": "SPDXRef-Package-deb-package-2-2.0.1",
|
|
"name": "package-2",
|
|
"licenseConcluded": "NONE",
|
|
"downloadLocation": "NOASSERTION",
|
|
"externalRefs": [
|
|
{
|
|
"referenceCategory": "SECURITY",
|
|
"referenceLocator": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*",
|
|
"referenceType": "cpe23Type"
|
|
},
|
|
{
|
|
"referenceCategory": "PACKAGE_MANAGER",
|
|
"referenceLocator": "a-purl-2",
|
|
"referenceType": "purl"
|
|
}
|
|
],
|
|
"filesAnalyzed": false,
|
|
"licenseDeclared": "NONE",
|
|
"sourceInfo": "acquired package info from DPKG DB: /some/path/pkg1",
|
|
"versionInfo": "2.0.1"
|
|
}
|
|
],
|
|
"files": [
|
|
{
|
|
"SPDXID": "SPDXRef-File-package-1-efae7fecc76ca25da40f79d7ef5b8933510434914835832c7976f3e866aa756a",
|
|
"name": "foo",
|
|
"licenseConcluded": "",
|
|
"fileName": "/some/path/pkg1/dependencies/foo"
|
|
}
|
|
],
|
|
"relationships": [
|
|
{
|
|
"spdxElementId": "SPDXRef-Package-python-package-1-1.0.1",
|
|
"relationshipType": "CONTAINS",
|
|
"relatedSpdxElement": "SPDXRef-File-package-1-efae7fecc76ca25da40f79d7ef5b8933510434914835832c7976f3e866aa756a"
|
|
}
|
|
]
|
|
}
|