github.com/CycloneDX/sbom-utility@v0.16.0/test/custom/cdx-1-4-test-custom-metadata-property-disclaimer-unique.json (about) 1 { 2 "bomFormat": "CycloneDX", 3 "specVersion": "1.4", 4 "version": 1, 5 "serialNumber": "urn:uuid:1a2b3c4d-1234-abcd-9876-a3b4c5d6e7e0", 6 "metadata": { 7 "timestamp": "2021-04-14T07:20:00.000Z", 8 "component": { 9 "type": "application", 10 "bom-ref": "pkg:app/sample@2.0.0", 11 "purl": "pkg:app/sample@2.0.0", 12 "name": "sample app", 13 "version": "2.0.0", 14 "description": "Sample application", 15 "hashes": [ 16 { 17 "alg": "SHA-1", 18 "content": "1111aaaa2222cccc3333dddd4444eeee5555ffff" 19 } 20 ] 21 }, 22 "properties": [ 23 { 24 "name": "urn:example.com:disclaimer", 25 "value": "This SBOM is current as of the date it was generated and is subject to change." 26 }, 27 { 28 "name": "urn:example.com:classification", 29 "value": "This SBOM is Confidential Information. Do not distribute." 30 }, 31 { 32 "name": "urn:example.com:disclaimer", 33 "value": "This SBOM is current as of the date it was generated and is subject to change." 34 } 35 ], 36 "licenses": [ 37 { 38 "license": { 39 "id": "Apache-2.0" 40 } 41 } 42 ], 43 "tools": [ 44 { 45 "vendor": "Super Duper Security Inc.", 46 "name": "Super Duper Security Scanner", 47 "version": "1.2.3", 48 "hashes": [ 49 { 50 "alg": "SHA-1", 51 "content": "6666ffff7777eeee8888dddd9999cccc0000bbbb" 52 } 53 ] 54 } 55 ], 56 "manufacture": { 57 "name": "Example.com", 58 "url": [ 59 "https://example.com" 60 ], 61 "contact": [ 62 { 63 "email": "support@example.com" 64 } 65 ] 66 }, 67 "supplier": { 68 "name": "Example.com", 69 "url": [ 70 "https://example.com" 71 ], 72 "contact": [ 73 { 74 "email": "support@example.com" 75 } 76 ] 77 } 78 }, 79 "components": [ 80 { 81 "type": "library", 82 "bom-ref": "pkg:npm/libraryA@1.0.0", 83 "purl": "pkg:npm/libraryA@1.0.0", 84 "name": "Library A", 85 "version": "1.0.0", 86 "description": "Library A description" 87 }, 88 { 89 "type": "library", 90 "bom-ref": "pkg:npm/libraryB@1.0.0", 91 "purl": "pkg:npm/libraryB@1.0.0", 92 "name": "Library B", 93 "version": "1.0.0", 94 "description": "Library B description." 95 } 96 ] 97 }