mirror of
https://github.com/anchore/syft.git
synced 2026-11-02 23:46:35 +01:00
Alex Goodman
d7a51a69dd
* remove centralize pURL generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * port java cataloger to new generic cataloger pattern Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove common.GenericCataloger Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update format test fixtures to reflect ID updates Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix package sort instability for encode-decode-encode cycles Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
129 lines
3.1 KiB
Plaintext
129 lines
3.1 KiB
Plaintext
{
|
|
"bomFormat": "CycloneDX",
|
|
"specVersion": "1.4",
|
|
"serialNumber": "urn:uuid:ced49687-6384-48fa-a930-ef83a258bf77",
|
|
"version": 1,
|
|
"metadata": {
|
|
"timestamp": "2022-11-07T09:11:21-05:00",
|
|
"tools": [
|
|
{
|
|
"vendor": "anchore",
|
|
"name": "syft",
|
|
"version": "v0.42.0-bogus"
|
|
}
|
|
],
|
|
"component": {
|
|
"bom-ref": "522dc6b135a55bb4",
|
|
"type": "container",
|
|
"name": "user-image-input",
|
|
"version": "sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368"
|
|
}
|
|
},
|
|
"components": [
|
|
{
|
|
"bom-ref": "66ba429119b8bec6",
|
|
"type": "library",
|
|
"name": "package-1",
|
|
"version": "1.0.1",
|
|
"licenses": [
|
|
{
|
|
"license": {
|
|
"id": "MIT"
|
|
}
|
|
}
|
|
],
|
|
"cpe": "cpe:2.3:*:some:package:1:*:*:*:*:*:*:*",
|
|
"purl": "a-purl-1",
|
|
"properties": [
|
|
{
|
|
"name": "syft:package:foundBy",
|
|
"value": "the-cataloger-1"
|
|
},
|
|
{
|
|
"name": "syft:package:language",
|
|
"value": "python"
|
|
},
|
|
{
|
|
"name": "syft:package:metadataType",
|
|
"value": "PythonPackageMetadata"
|
|
},
|
|
{
|
|
"name": "syft:package:type",
|
|
"value": "python"
|
|
},
|
|
{
|
|
"name": "syft:location:0:layerID",
|
|
"value": "sha256:fb6beecb75b39f4bb813dbf177e501edd5ddb3e69bb45cedeb78c676ee1b7a59"
|
|
},
|
|
{
|
|
"name": "syft:location:0:path",
|
|
"value": "/somefile-1.txt"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"bom-ref": "pkg:deb/debian/package-2@2.0.1?package-id=958443e2d9304af4",
|
|
"type": "library",
|
|
"name": "package-2",
|
|
"version": "2.0.1",
|
|
"cpe": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*",
|
|
"purl": "pkg:deb/debian/package-2@2.0.1",
|
|
"properties": [
|
|
{
|
|
"name": "syft:package:foundBy",
|
|
"value": "the-cataloger-2"
|
|
},
|
|
{
|
|
"name": "syft:package:metadataType",
|
|
"value": "DpkgMetadata"
|
|
},
|
|
{
|
|
"name": "syft:package:type",
|
|
"value": "deb"
|
|
},
|
|
{
|
|
"name": "syft:location:0:layerID",
|
|
"value": "sha256:319b588ce64253a87b533c8ed01cf0025e0eac98e7b516e12532957e1244fdec"
|
|
},
|
|
{
|
|
"name": "syft:location:0:path",
|
|
"value": "/somefile-2.txt"
|
|
},
|
|
{
|
|
"name": "syft:metadata:installedSize",
|
|
"value": "0"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"type": "operating-system",
|
|
"name": "debian",
|
|
"version": "1.2.3",
|
|
"description": "debian",
|
|
"swid": {
|
|
"tagId": "debian",
|
|
"name": "debian",
|
|
"version": "1.2.3"
|
|
},
|
|
"properties": [
|
|
{
|
|
"name": "syft:distro:id",
|
|
"value": "debian"
|
|
},
|
|
{
|
|
"name": "syft:distro:idLike:0",
|
|
"value": "like!"
|
|
},
|
|
{
|
|
"name": "syft:distro:prettyName",
|
|
"value": "debian"
|
|
},
|
|
{
|
|
"name": "syft:distro:versionID",
|
|
"value": "1.2.3"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|