mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 08:23:15 +01:00
* Improve CycloneDX format output ## Additions to CycloneDX output * CPEs * Authors * Publishers * External References (Website, Distribution, VCS) * Description Signed-off-by: Sambhav Kothari <skothari44@bloomberg.net>
112 lines
2.4 KiB
Plaintext
112 lines
2.4 KiB
Plaintext
{
|
|
"bomFormat": "CycloneDX",
|
|
"specVersion": "1.3",
|
|
"serialNumber": "urn:uuid:8a84b1cf-e918-4842-a6a8-c7fdafc55bc0",
|
|
"version": 1,
|
|
"metadata": {
|
|
"timestamp": "2022-01-14T22:47:00Z",
|
|
"tools": [
|
|
{
|
|
"vendor": "anchore",
|
|
"name": "syft",
|
|
"version": "[not provided]"
|
|
}
|
|
],
|
|
"component": {
|
|
"type": "container",
|
|
"name": "user-image-input",
|
|
"version": "sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368"
|
|
}
|
|
},
|
|
"components": [
|
|
{
|
|
"type": "library",
|
|
"name": "package-1",
|
|
"version": "1.0.1",
|
|
"licenses": [
|
|
{
|
|
"license": {
|
|
"id": "MIT"
|
|
}
|
|
}
|
|
],
|
|
"cpe": "cpe:2.3:*:some:package:1:*:*:*:*:*:*:*",
|
|
"purl": "a-purl-1",
|
|
"properties": [
|
|
{
|
|
"name": "foundBy",
|
|
"value": "the-cataloger-1"
|
|
},
|
|
{
|
|
"name": "language",
|
|
"value": "python"
|
|
},
|
|
{
|
|
"name": "type",
|
|
"value": "python"
|
|
},
|
|
{
|
|
"name": "metadataType",
|
|
"value": "PythonPackageMetadata"
|
|
},
|
|
{
|
|
"name": "path",
|
|
"value": "/somefile-1.txt"
|
|
},
|
|
{
|
|
"name": "layerID",
|
|
"value": "sha256:16e64541f2ddf59a90391ce7bb8af90313f7d373f2105d88f3d3267b72e0ebab"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"type": "library",
|
|
"name": "package-2",
|
|
"version": "2.0.1",
|
|
"cpe": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*",
|
|
"purl": "a-purl-2",
|
|
"properties": [
|
|
{
|
|
"name": "foundBy",
|
|
"value": "the-cataloger-2"
|
|
},
|
|
{
|
|
"name": "type",
|
|
"value": "deb"
|
|
},
|
|
{
|
|
"name": "metadataType",
|
|
"value": "DpkgMetadata"
|
|
},
|
|
{
|
|
"name": "path",
|
|
"value": "/somefile-2.txt"
|
|
},
|
|
{
|
|
"name": "layerID",
|
|
"value": "sha256:de6c235f76ea24c8503ec08891445b5d6a8bdf8249117ed8d8b0b6fb3ebe4f67"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"type": "operating-system",
|
|
"name": "debian",
|
|
"version": "1.2.3",
|
|
"properties": [
|
|
{
|
|
"name": "prettyName",
|
|
"value": "debian"
|
|
},
|
|
{
|
|
"name": "id",
|
|
"value": "debian"
|
|
},
|
|
{
|
|
"name": "versionID",
|
|
"value": "1.2.3"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|