github.com/CycloneDX/sbom-utility@v0.16.0/examples/cyclonedx/usecases/cdx-use-case-service-defn.json (about) 1 { 2 "bomFormat":"CycloneDX", 3 "specVersion":"1.4", 4 "serialNumber":"urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79", 5 "version":1, 6 "components":[ 7 { 8 "bom-ref":"pkg:npm/acme/component@1.0.0", 9 "type":"library", 10 "group":"com.acme", 11 "name":"stock-java-client", 12 "version":"1.0.12", 13 "purl":"pkg:maven/com.acme/stock-java-client@1.0.12" 14 } 15 ], 16 "services":[ 17 { 18 "bom-ref":"b2a46a4b-8367-4bae-9820-95557cfe03a8", 19 "provider":{ 20 "name":"Partner Org", 21 "url":[ 22 "https://partner.org" 23 ], 24 "contact":[ 25 { 26 "name":"Support", 27 "email":"support@partner", 28 "phone":"800-555-1212" 29 } 30 ] 31 }, 32 "group":"org.partner", 33 "name":"Stock ticker service", 34 "version":"2020-Q2", 35 "description":"Provides real-time stock information", 36 "endpoints":[ 37 "https://partner.org/api/v1/lookup", 38 "https://partner.org/api/v1/stock" 39 ], 40 "authenticated":true, 41 "x-trust-boundary":true, 42 "data":[ 43 { 44 "classification":"PII", 45 "flow":"inbound" 46 }, 47 { 48 "classification":"PIFI", 49 "flow":"outbound" 50 }, 51 { 52 "classification":"public", 53 "flow":"bi-directional" 54 } 55 ], 56 "licenses":[ 57 { 58 "license":{ 59 "name":"Partner license" 60 } 61 } 62 ], 63 "externalReferences":[ 64 { 65 "type":"website", 66 "url":"http://partner.org" 67 }, 68 { 69 "type":"documentation", 70 "url":"http://api.partner.org/swagger" 71 } 72 ] 73 } 74 ], 75 "dependencies":[ 76 { 77 "ref":"pkg:maven/com.acme/stock-java-client@1.0.12", 78 "dependsOn":[ 79 "b2a46a4b-8367-4bae-9820-95557cfe03a8" 80 ] 81 } 82 ] 83 }