mirror of
https://github.com/anchore/syft.git
synced 2025-11-19 17:33:18 +01:00
7cb8e1fc14
* Use SBOM descriptor version Signed-off-by: Jonas Xavier <jonasx@anchore.com> * Update tests Signed-off-by: Jonas Xavier <jonasx@anchore.com> * CycloneDX extract tools metadata in decoding stage Signed-off-by: Jonas Xavier <jonasx@anchore.com> * add descriptor to spdx tag-value test Signed-off-by: Jonas Xavier <jonasx@anchore.com> * remove comment Signed-off-by: Jonas Xavier <jonasx@anchore.com>
120 lines
2.6 KiB
Plaintext
120 lines
2.6 KiB
Plaintext
{
|
|
"bomFormat": "CycloneDX",
|
|
"specVersion": "1.4",
|
|
"serialNumber": "urn:uuid:3ea3363f-3945-4859-9ba1-9a395983d248",
|
|
"version": 1,
|
|
"metadata": {
|
|
"timestamp": "2022-05-23T12:05:00-07:00",
|
|
"tools": [
|
|
{
|
|
"vendor": "anchore",
|
|
"name": "syft",
|
|
"version": "v0.42.0-bogus"
|
|
}
|
|
],
|
|
"component": {
|
|
"bom-ref": "163686ac6e30c752",
|
|
"type": "file",
|
|
"name": "/some/path"
|
|
}
|
|
},
|
|
"components": [
|
|
{
|
|
"bom-ref": "b85dbb4e6ece5082",
|
|
"type": "library",
|
|
"name": "package-1",
|
|
"version": "1.0.1",
|
|
"licenses": [
|
|
{
|
|
"license": {
|
|
"id": "MIT"
|
|
}
|
|
}
|
|
],
|
|
"cpe": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*",
|
|
"purl": "a-purl-2",
|
|
"properties": [
|
|
{
|
|
"name": "syft:package:foundBy",
|
|
"value": "the-cataloger-1"
|
|
},
|
|
{
|
|
"name": "syft:package:language",
|
|
"value": "python"
|
|
},
|
|
{
|
|
"name": "syft:package:metadataType",
|
|
"value": "PythonPackageMetadata"
|
|
},
|
|
{
|
|
"name": "syft:package:type",
|
|
"value": "python"
|
|
},
|
|
{
|
|
"name": "syft:location:0:path",
|
|
"value": "/some/path/pkg1"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"bom-ref": "pkg:deb/debian/package-2@2.0.1?package-id=ceda99598967ae8d",
|
|
"type": "library",
|
|
"name": "package-2",
|
|
"version": "2.0.1",
|
|
"cpe": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*",
|
|
"purl": "pkg:deb/debian/package-2@2.0.1",
|
|
"properties": [
|
|
{
|
|
"name": "syft:package:foundBy",
|
|
"value": "the-cataloger-2"
|
|
},
|
|
{
|
|
"name": "syft:package:metadataType",
|
|
"value": "DpkgMetadata"
|
|
},
|
|
{
|
|
"name": "syft:package:type",
|
|
"value": "deb"
|
|
},
|
|
{
|
|
"name": "syft:location:0:path",
|
|
"value": "/some/path/pkg1"
|
|
},
|
|
{
|
|
"name": "syft:metadata:installedSize",
|
|
"value": "0"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"type": "operating-system",
|
|
"name": "debian",
|
|
"version": "1.2.3",
|
|
"description": "debian",
|
|
"swid": {
|
|
"tagId": "debian",
|
|
"name": "debian",
|
|
"version": "1.2.3"
|
|
},
|
|
"properties": [
|
|
{
|
|
"name": "syft:distro:id",
|
|
"value": "debian"
|
|
},
|
|
{
|
|
"name": "syft:distro:idLike:0",
|
|
"value": "like!"
|
|
},
|
|
{
|
|
"name": "syft:distro:prettyName",
|
|
"value": "debian"
|
|
},
|
|
{
|
|
"name": "syft:distro:versionID",
|
|
"value": "1.2.3"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|