github.com/CycloneDX/sbom-utility@v0.16.0/test/custom/cdx-1-4-test-custom-metadata-property-classification-invalid.json (about) 1 { 2 "bomFormat": "CycloneDX", 3 "specVersion": "1.4", 4 "version": 1, 5 "serialNumber": "urn:uuid:1a2b3c4d-1234-abcd-9876-a3b4c5d6e7e0", 6 "metadata": { 7 "timestamp": "2021-04-14T07:20:00.000Z", 8 "component": { 9 "type": "application", 10 "bom-ref": "pkg:app/sample@2.0.0", 11 "purl": "pkg:app/sample@2.0.0", 12 "name": "sample app", 13 "version": "2.0.0", 14 "description": "Sample application", 15 "hashes": [ 16 { 17 "alg": "SHA-1", 18 "content": "1111aaaa2222cccc3333dddd4444eeee5555ffff" 19 } 20 ] 21 }, 22 "properties": [ 23 { 24 "name": "urn:example.com:disclaimer", 25 "value": "This SBOM is current as of the date it was generated and is subject to change." 26 }, 27 { 28 "name": "urn:example.com:classification", 29 "value": "This SBOM is Confidential Information." 30 } 31 ], 32 "licenses": [ 33 { 34 "license": { 35 "id": "Apache-2.0" 36 } 37 } 38 ], 39 "tools": [ 40 { 41 "vendor": "Super Duper Security Inc.", 42 "name": "Super Duper Security Scanner", 43 "version": "1.2.3", 44 "hashes": [ 45 { 46 "alg": "SHA-1", 47 "content": "6666ffff7777eeee8888dddd9999cccc0000bbbb" 48 } 49 ] 50 } 51 ], 52 "manufacture": { 53 "name": "Example.com", 54 "url": [ 55 "https://example.com" 56 ], 57 "contact": [ 58 { 59 "email": "support@example.com" 60 } 61 ] 62 }, 63 "supplier": { 64 "name": "Example.com", 65 "url": [ 66 "https://example.com" 67 ], 68 "contact": [ 69 { 70 "email": "support@example.com" 71 } 72 ] 73 } 74 }, 75 "components": [ 76 { 77 "type": "library", 78 "bom-ref": "pkg:npm/libraryA@1.0.0", 79 "purl": "pkg:npm/libraryA@1.0.0", 80 "name": "Library A", 81 "version": "1.0.0", 82 "description": "Library A description" 83 }, 84 { 85 "type": "library", 86 "bom-ref": "pkg:npm/libraryB@1.0.0", 87 "purl": "pkg:npm/libraryB@1.0.0", 88 "name": "Library B", 89 "version": "1.0.0", 90 "description": "Library B description." 91 } 92 ] 93 }