github.com/CycloneDX/sbom-utility@v0.16.0/examples/cyclonedx/usecases/cdx-use-case-security-advisories.json (about)

     1  {
     2        "bomFormat": "CycloneDX",
     3        "specVersion": "1.4",
     4        "serialNumber": "urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79",
     5        "version": 1,
     6        "components": [
     7            {
     8                "type": "library",
     9                "group": "org.example",
    10                "name": "mylibrary",
    11                "version": "1.0.0",
    12                "cpe": "cpe:/a:example:mylibrary:1.0.0",
    13                "purl": "pkg:maven/org.example/mylibrary@1.0.0",
    14                "externalReferences": [
    15                    {
    16                        "type": "advisories",
    17                        "url": "https://example.org/security/advisories.json"
    18                    }
    19                ]
    20            }
    21        ]
    22  }