mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 16:33:21 +01:00
706322f826
* add initial spdx support Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * expose FileOwner and use in SPDX presenter Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add initial json support for SPDX Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add remaining package fields Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add spdx license list generation + tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * keep fileOwner unexported from pkg Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * restore cli test util Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add external refs to spdx tag-value format Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add golang support to CPE generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * use tag-value format as default "spdx" format flavor Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add tests around spdx presenters + refactor presenter tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add bouncer exception for spdx tools-golang repo Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove spdx model questions Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
35 lines
905 B
XML
35 lines
905 B
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<bom xmlns="http://cyclonedx.org/schema/bom/1.2" version="1" serialNumber="urn:uuid:5404937f-72d6-44a2-8e9b-954305ecb4f6">
|
|
<metadata>
|
|
<timestamp>2021-06-23T13:40:33-04:00</timestamp>
|
|
<tools>
|
|
<tool>
|
|
<vendor>anchore</vendor>
|
|
<name>syft</name>
|
|
<version>[not provided]</version>
|
|
</tool>
|
|
</tools>
|
|
<component type="file">
|
|
<name>/some/path</name>
|
|
<version></version>
|
|
</component>
|
|
</metadata>
|
|
<components>
|
|
<component type="library">
|
|
<name>package-1</name>
|
|
<version>1.0.1</version>
|
|
<licenses>
|
|
<license>
|
|
<name>MIT</name>
|
|
</license>
|
|
</licenses>
|
|
<purl>a-purl-2</purl>
|
|
</component>
|
|
<component type="library">
|
|
<name>package-2</name>
|
|
<version>2.0.1</version>
|
|
<purl>a-purl-2</purl>
|
|
</component>
|
|
</components>
|
|
</bom>
|