github.com/anchore/syft@v1.38.2/cmd/syft/internal/test/integration/test-fixtures/image-sbom-metadata-component/test.cdx.json (about)

     1  {
     2    "bomFormat" : "CycloneDX",
     3    "specVersion" : "1.5",
     4    "serialNumber" : "urn:uuid:dc807d4b-0415-35ab-ba61-49b5d39bc2d9",
     5    "version" : 1,
     6    "metadata" : {
     7      "component" : {
     8        "name" : "main-component",
     9        "version" : "1.2.3",
    10        "purl" : "pkg:maven/org.example/main-component@1.2.3",
    11        "type" : "library",
    12        "bom-ref" : "pkg:maven/org.example/main-component@1.2.3"
    13      }
    14    },
    15    "components" : [
    16      {
    17        "name" : "first-subcomponent",
    18        "version" : "2.3.4",
    19        "purl" : "pkg:maven/org.example/first-subcomponent@2.3.4",
    20        "type" : "library",
    21        "bom-ref" : "pkg:maven/org.example/first-subcomponent@2.3.4"
    22      }
    23    ],
    24    "dependencies" : [
    25      {
    26        "ref" : "pkg:maven/org.example/main-component-assembly@1.2.3",
    27        "dependsOn" : [
    28          "pkg:maven/org.example/first-subcomponent@2.3.4"
    29        ]
    30      }
    31    ]
    32  }