github.com/CycloneDX/sbom-utility@v0.16.0/examples/cyclonedx/VEX/bom.json (about)

     1  {
     2    "bomFormat" : "CycloneDX",
     3    "specVersion" : "1.3",
     4    "serialNumber" : "urn:uuid:5f0f0da9-c03d-47d8-b38d-009e6df67094",
     5    "version" : 1,
     6    "metadata" : {
     7      "timestamp" : "2022-01-11T02:55:27Z",
     8      "tools" : [
     9        {
    10          "vendor" : "CycloneDX",
    11          "name" : "CycloneDX Maven plugin",
    12          "version" : "2.5.3",
    13          "hashes" : [
    14            {
    15              "alg" : "MD5",
    16              "content" : "4f7d894200ad695fc9f0aad66d7da40a"
    17            },
    18            {
    19              "alg" : "SHA-1",
    20              "content" : "c044d9b726650cbea3adeb5cc1715c67d8356c0a"
    21            },
    22            {
    23              "alg" : "SHA-256",
    24              "content" : "b9a385e430e1f5efd9b835a084c195dde4d5e1bc79e469a8187ec58275c15313"
    25            },
    26            {
    27              "alg" : "SHA-384",
    28              "content" : "d96f68ef4b8830d70dc2eb5f2de5211d96b70dd1169da641f34474265c06a5321b63d2c80fe2d82d74c767391225e480"
    29            },
    30            {
    31              "alg" : "SHA-512",
    32              "content" : "1d7d1129cdc8604772b3c454d8dff98d936f85af705c95705e3263a038c0bb58fdd58c0b90efa3f56b4ce8ef9c84d3154b74b8451e0470f856f4d688489704b0"
    33            },
    34            {
    35              "alg" : "SHA3-256",
    36              "content" : "44231962fe0c1e5501ca38ad3320f9223ea5e8d62aa8aad170577818801ce349"
    37            },
    38            {
    39              "alg" : "SHA3-384",
    40              "content" : "99659ce3e58d8416f9e28d6b87c800442a79c4a5703fb657f6a9da87495d1d9d3b9788e06a3d6ea0e1b659a4681a4c92"
    41            },
    42            {
    43              "alg" : "SHA3-512",
    44              "content" : "8d5c3f0ee5a53cc714c4d829ccc07688f951a6b6655ad1e6435b8ab1c281bc38a78073b329bdaaf4887114b6843723ac8b5176a5f954581960a43662c688a95a"
    45            }
    46          ]
    47        }
    48      ],
    49      "component" : {
    50        "group" : "com.example",
    51        "name" : "example-app",
    52        "version" : "1.0.0",
    53        "licenses" : [
    54          {
    55            "license" : {
    56              "id" : "Apache-2.0",
    57              "url" : "http://www.apache.org/licenses/LICENSE-2.0"
    58            }
    59          }
    60        ],
    61        "purl" : "pkg:maven/com.example/example-app@1.0.0?type=jar",
    62        "type" : "library",
    63        "bom-ref" : "pkg:maven/com.example/example-app@1.0.0?type=jar"
    64      }
    65    },
    66    "components" : [
    67      {
    68        "publisher" : "FasterXML",
    69        "group" : "com.fasterxml.jackson.core",
    70        "name" : "jackson-databind",
    71        "version" : "2.10.0",
    72        "description" : "General data-binding functionality for Jackson: works on core streaming API",
    73        "scope" : "optional",
    74        "hashes" : [
    75          {
    76            "alg" : "MD5",
    77            "content" : "195bfa368ad502b05427d9fb0346735d"
    78          },
    79          {
    80            "alg" : "SHA-1",
    81            "content" : "1127c9cf62f2bb3121a3a2a0a1351d251a602117"
    82          },
    83          {
    84            "alg" : "SHA-256",
    85            "content" : "8e6c566c67fc61a96c5dfc4a71d430f2565765778ec9a6ef216c5460a9911b60"
    86          },
    87          {
    88            "alg" : "SHA-384",
    89            "content" : "213c54b716a7bee01af296a6b965e8fcad42ef26dc3ef9a514b9f88e3b2e8547391a07a95696cd74510f3c948c6b4a63"
    90          },
    91          {
    92            "alg" : "SHA-512",
    93            "content" : "64851a5f6cb9805bade8376046b02050bd3bd377346e8339bc7d3eb4310417e80029f073e873da1ec1e21017e7480683bdf969c680b870153a5e16bcb75b7815"
    94          },
    95          {
    96            "alg" : "SHA3-256",
    97            "content" : "a9b13e669b7d488b319187b9c7ce11928a026412e12dc46e572ade0c7a334a0a"
    98          },
    99          {
   100            "alg" : "SHA3-384",
   101            "content" : "12d4eb511d20959451f13c2659286bb00c7ad6d78a4fb412295781d144a2317da15f7908ec4cb97635161389c6205368"
   102          },
   103          {
   104            "alg" : "SHA3-512",
   105            "content" : "7938f4bdea72a5b9e13c221568094829f3cd904bcbb6319e1f2869760420c9646c4c97b511e31be93dfbc2559fc46ed0844e12a4c610e31e095dcf34651b40bd"
   106          }
   107        ],
   108        "licenses" : [
   109          {
   110            "license" : {
   111              "id" : "Apache-2.0"
   112            }
   113          }
   114        ],
   115        "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.0?type=jar",
   116        "externalReferences" : [
   117          {
   118            "type" : "vcs",
   119            "url" : "http://github.com/FasterXML/jackson-databind"
   120          },
   121          {
   122            "type" : "website",
   123            "url" : "http://fasterxml.com/"
   124          },
   125          {
   126            "type" : "distribution",
   127            "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
   128          }
   129        ],
   130        "type" : "library",
   131        "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.0?type=jar"
   132      },
   133      {
   134        "publisher" : "FasterXML",
   135        "group" : "com.fasterxml.jackson.core",
   136        "name" : "jackson-annotations",
   137        "version" : "2.10.0",
   138        "description" : "Core annotations used for value types, used by Jackson data binding package.",
   139        "hashes" : [
   140          {
   141            "alg" : "MD5",
   142            "content" : "138ada7579397b2a88e41b132b0b46a3"
   143          },
   144          {
   145            "alg" : "SHA-1",
   146            "content" : "e01cfd93b80d6773b3f757c78e756c9755b47b81"
   147          },
   148          {
   149            "alg" : "SHA-256",
   150            "content" : "77a0846219774a8269bc1b38cc00294908d34e77f8a9da34d97673982f75853d"
   151          },
   152          {
   153            "alg" : "SHA-384",
   154            "content" : "08eb9a859d3ab5467c944d6a4755d8042d0d1f3926283be1be6dce111fd0d5dcb110436aea0023ea5961754957302ba3"
   155          },
   156          {
   157            "alg" : "SHA-512",
   158            "content" : "13e612f06bfa448926161f0a122ca8aba19581fae50da1e970bc6121bdc608b402f19cb47bf12d0c3cd386df3f2dec40c58bb1eab1a7f200a0c06c66d3714088"
   159          },
   160          {
   161            "alg" : "SHA3-256",
   162            "content" : "e798bce506db7b9390c989011dc0f4adf2e52ca55aec3fa81f096b2efc76b7e2"
   163          },
   164          {
   165            "alg" : "SHA3-384",
   166            "content" : "68abab9a270aaa1a68bddb664a74cda05df68d52344a8dc6dbc932e10064b639e4c4ffc878c93485af2480ef90077e10"
   167          },
   168          {
   169            "alg" : "SHA3-512",
   170            "content" : "6795dee9f4844bd342a014771b7764eba8cfc543b82c52f75e799e110b3b4c2b57736d47dd35ee00186a318b8940bc6d30c493dc2050dff4642457166502724e"
   171          }
   172        ],
   173        "licenses" : [
   174          {
   175            "license" : {
   176              "id" : "Apache-2.0"
   177            }
   178          }
   179        ],
   180        "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.0?type=jar",
   181        "externalReferences" : [
   182          {
   183            "type" : "vcs",
   184            "url" : "http://github.com/FasterXML/jackson-annotations"
   185          },
   186          {
   187            "type" : "website",
   188            "url" : "http://fasterxml.com/"
   189          },
   190          {
   191            "type" : "distribution",
   192            "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
   193          }
   194        ],
   195        "type" : "library",
   196        "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.0?type=jar"
   197      },
   198      {
   199        "publisher" : "FasterXML",
   200        "group" : "com.fasterxml.jackson.core",
   201        "name" : "jackson-core",
   202        "version" : "2.10.0",
   203        "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
   204        "hashes" : [
   205          {
   206            "alg" : "MD5",
   207            "content" : "b109d8d9d0519111d5756389fa5bfd87"
   208          },
   209          {
   210            "alg" : "SHA-1",
   211            "content" : "4e2c5fa04648ec9772c63e2101c53af6504e624e"
   212          },
   213          {
   214            "alg" : "SHA-256",
   215            "content" : "69e7695b1e40834fa1242fc328a4010607911ced3706ab79abc769d451197513"
   216          },
   217          {
   218            "alg" : "SHA-384",
   219            "content" : "2c167693126621f418e03cdf81e7c3ab084fc7bafff983e1b0c8fcd743eae58a5322577c1476b2ca6d0c0afa9046f606"
   220          },
   221          {
   222            "alg" : "SHA-512",
   223            "content" : "67ca07f54feff7dcc1c098ae307ddb4c80f1e074ee8400a56b598b2b7b334594a042eb1e1f4ec3bda229f0eeedab9bf0938b1687439a0ea80984fbc61f8f13dd"
   224          },
   225          {
   226            "alg" : "SHA3-256",
   227            "content" : "cef9b850571dcfbdebf73bad6d20ee759335810e8d34927e2228378287d8a62c"
   228          },
   229          {
   230            "alg" : "SHA3-384",
   231            "content" : "2fea8fa51b292cd6b61796eed54c2719beb45fab2310c2c07876e30fe9cfb2c94ddae4281ca4952d49ef20a3ecf795fd"
   232          },
   233          {
   234            "alg" : "SHA3-512",
   235            "content" : "be3791a60692fc78a7f8de546d7c4f76e937b75ee088dde1eefb69c3555c61ad7ba25cb38c1daf507af737452e195508cfa4f7ec74cc59cfcd25e22ccd3ca949"
   236          }
   237        ],
   238        "licenses" : [
   239          {
   240            "license" : {
   241              "id" : "Apache-2.0"
   242            }
   243          }
   244        ],
   245        "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.0?type=jar",
   246        "externalReferences" : [
   247          {
   248            "type" : "vcs",
   249            "url" : "http://github.com/FasterXML/jackson-core"
   250          },
   251          {
   252            "type" : "website",
   253            "url" : "http://fasterxml.com/"
   254          },
   255          {
   256            "type" : "distribution",
   257            "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
   258          }
   259        ],
   260        "type" : "library",
   261        "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.0?type=jar"
   262      }
   263    ]
   264  }