github.com/anchore/syft@v1.38.2/syft/format/spdxjson/test-fixtures/snapshot/TestSPDXRelationshipOrder.golden (about)

     1  {
     2   "spdxVersion": "SPDX-2.3",
     3   "dataLicense": "CC0-1.0",
     4   "SPDXID": "SPDXRef-DOCUMENT",
     5   "name": "user-image-input",
     6   "documentNamespace":"redacted",
     7   "creationInfo": {
     8    "licenseListVersion":"redacted",
     9    "creators": [
    10     "Organization: Anchore, Inc",
    11     "Tool: syft-v0.42.0-bogus"
    12    ],
    13    "created":"redacted"
    14   },
    15   "packages": [
    16    {
    17     "name": "package-1",
    18     "SPDXID": "SPDXRef-Package-python-package-1-2f52f617f1548337",
    19     "versionInfo": "1.0.1",
    20     "supplier": "NOASSERTION",
    21     "downloadLocation": "NOASSERTION",
    22     "filesAnalyzed": false,
    23     "sourceInfo": "acquired package info from installed python package manifest file: /somefile-1.txt",
    24     "licenseConcluded": "NOASSERTION",
    25     "licenseDeclared": "MIT",
    26     "copyrightText": "NOASSERTION",
    27     "externalRefs": [
    28      {
    29       "referenceCategory": "SECURITY",
    30       "referenceType": "cpe23Type",
    31       "referenceLocator": "cpe:2.3:*:some:package:1:*:*:*:*:*:*:*"
    32      },
    33      {
    34       "referenceCategory": "PACKAGE-MANAGER",
    35       "referenceType": "purl",
    36       "referenceLocator": "a-purl-1"
    37      }
    38     ]
    39    },
    40    {
    41     "name": "package-2",
    42     "SPDXID": "SPDXRef-Package-deb-package-2-4b756c6f6fb127a3",
    43     "versionInfo": "2.0.1",
    44     "supplier": "NOASSERTION",
    45     "downloadLocation": "NOASSERTION",
    46     "filesAnalyzed": false,
    47     "sourceInfo": "acquired package info from DPKG DB: /somefile-2.txt",
    48     "licenseConcluded": "NOASSERTION",
    49     "licenseDeclared": "NOASSERTION",
    50     "copyrightText": "NOASSERTION",
    51     "externalRefs": [
    52      {
    53       "referenceCategory": "SECURITY",
    54       "referenceType": "cpe23Type",
    55       "referenceLocator": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*"
    56      },
    57      {
    58       "referenceCategory": "PACKAGE-MANAGER",
    59       "referenceType": "purl",
    60       "referenceLocator": "pkg:deb/debian/package-2@2.0.1"
    61      }
    62     ]
    63    },
    64    {
    65     "name": "user-image-input",
    66     "SPDXID": "SPDXRef-DocumentRoot-Image-user-image-input",
    67     "versionInfo": "sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368",
    68     "supplier": "NOASSERTION",
    69     "downloadLocation": "NOASSERTION",
    70     "filesAnalyzed": false,
    71     "checksums": [
    72      {
    73       "algorithm": "SHA256",
    74       "checksumValue": "2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368"
    75      }
    76     ],
    77     "licenseConcluded": "NOASSERTION",
    78     "licenseDeclared": "NOASSERTION",
    79     "copyrightText": "NOASSERTION",
    80     "externalRefs": [
    81      {
    82       "referenceCategory": "PACKAGE-MANAGER",
    83       "referenceType": "purl",
    84       "referenceLocator": "pkg:oci/user-image-input@sha256%3A2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368?arch="
    85      }
    86     ],
    87     "primaryPackagePurpose": "CONTAINER"
    88    }
    89   ],
    90   "files": [
    91    {
    92     "fileName": "a1/f6",
    93     "SPDXID": "SPDXRef-File-a1-f6-9c2f7510199b17f6",
    94     "fileTypes": [
    95      "OTHER"
    96     ],
    97     "checksums": [
    98      {
    99       "algorithm": "SHA1",
   100       "checksumValue": "0000000000000000000000000000000000000000"
   101      }
   102     ],
   103     "licenseConcluded": "NOASSERTION",
   104     "licenseInfoInFiles": [
   105      "NOASSERTION"
   106     ],
   107     "copyrightText": "NOASSERTION"
   108    },
   109    {
   110     "fileName": "d1/f3",
   111     "SPDXID": "SPDXRef-File-d1-f3-c6f5b29dca12661f",
   112     "fileTypes": [
   113      "OTHER"
   114     ],
   115     "checksums": [
   116      {
   117       "algorithm": "SHA1",
   118       "checksumValue": "0000000000000000000000000000000000000000"
   119      }
   120     ],
   121     "licenseConcluded": "NOASSERTION",
   122     "licenseInfoInFiles": [
   123      "NOASSERTION"
   124     ],
   125     "copyrightText": "NOASSERTION"
   126    },
   127    {
   128     "fileName": "d2/f4",
   129     "SPDXID": "SPDXRef-File-d2-f4-c641caa71518099f",
   130     "fileTypes": [
   131      "OTHER"
   132     ],
   133     "checksums": [
   134      {
   135       "algorithm": "SHA1",
   136       "checksumValue": "0000000000000000000000000000000000000000"
   137      }
   138     ],
   139     "licenseConcluded": "NOASSERTION",
   140     "licenseInfoInFiles": [
   141      "NOASSERTION"
   142     ],
   143     "copyrightText": "NOASSERTION"
   144    },
   145    {
   146     "fileName": "f1",
   147     "SPDXID": "SPDXRef-File-f1-5265a4dde3edbf7c",
   148     "fileTypes": [
   149      "OTHER"
   150     ],
   151     "checksums": [
   152      {
   153       "algorithm": "SHA1",
   154       "checksumValue": "0000000000000000000000000000000000000000"
   155      }
   156     ],
   157     "licenseConcluded": "NOASSERTION",
   158     "licenseInfoInFiles": [
   159      "NOASSERTION"
   160     ],
   161     "copyrightText": "NOASSERTION"
   162    },
   163    {
   164     "fileName": "f2",
   165     "SPDXID": "SPDXRef-File-f2-f9e49132a4b96ccd",
   166     "fileTypes": [
   167      "OTHER"
   168     ],
   169     "checksums": [
   170      {
   171       "algorithm": "SHA1",
   172       "checksumValue": "0000000000000000000000000000000000000000"
   173      }
   174     ],
   175     "licenseConcluded": "NOASSERTION",
   176     "licenseInfoInFiles": [
   177      "NOASSERTION"
   178     ],
   179     "copyrightText": "NOASSERTION"
   180    },
   181    {
   182     "fileName": "z1/f5",
   183     "SPDXID": "SPDXRef-File-z1-f5-839d99ee67d9d174",
   184     "fileTypes": [
   185      "OTHER"
   186     ],
   187     "checksums": [
   188      {
   189       "algorithm": "SHA1",
   190       "checksumValue": "0000000000000000000000000000000000000000"
   191      }
   192     ],
   193     "licenseConcluded": "NOASSERTION",
   194     "licenseInfoInFiles": [
   195      "NOASSERTION"
   196     ],
   197     "copyrightText": "NOASSERTION"
   198    }
   199   ],
   200   "relationships": [
   201    {
   202     "spdxElementId": "SPDXRef-Package-python-package-1-2f52f617f1548337",
   203     "relatedSpdxElement": "SPDXRef-File-f1-5265a4dde3edbf7c",
   204     "relationshipType": "CONTAINS"
   205    },
   206    {
   207     "spdxElementId": "SPDXRef-Package-python-package-1-2f52f617f1548337",
   208     "relatedSpdxElement": "SPDXRef-File-z1-f5-839d99ee67d9d174",
   209     "relationshipType": "CONTAINS"
   210    },
   211    {
   212     "spdxElementId": "SPDXRef-Package-python-package-1-2f52f617f1548337",
   213     "relatedSpdxElement": "SPDXRef-File-a1-f6-9c2f7510199b17f6",
   214     "relationshipType": "CONTAINS"
   215    },
   216    {
   217     "spdxElementId": "SPDXRef-Package-python-package-1-2f52f617f1548337",
   218     "relatedSpdxElement": "SPDXRef-File-d2-f4-c641caa71518099f",
   219     "relationshipType": "CONTAINS"
   220    },
   221    {
   222     "spdxElementId": "SPDXRef-Package-python-package-1-2f52f617f1548337",
   223     "relatedSpdxElement": "SPDXRef-File-d1-f3-c6f5b29dca12661f",
   224     "relationshipType": "CONTAINS"
   225    },
   226    {
   227     "spdxElementId": "SPDXRef-Package-python-package-1-2f52f617f1548337",
   228     "relatedSpdxElement": "SPDXRef-File-f2-f9e49132a4b96ccd",
   229     "relationshipType": "CONTAINS"
   230    },
   231    {
   232     "spdxElementId": "SPDXRef-DocumentRoot-Image-user-image-input",
   233     "relatedSpdxElement": "SPDXRef-Package-python-package-1-2f52f617f1548337",
   234     "relationshipType": "CONTAINS"
   235    },
   236    {
   237     "spdxElementId": "SPDXRef-DocumentRoot-Image-user-image-input",
   238     "relatedSpdxElement": "SPDXRef-Package-deb-package-2-4b756c6f6fb127a3",
   239     "relationshipType": "CONTAINS"
   240    },
   241    {
   242     "spdxElementId": "SPDXRef-DOCUMENT",
   243     "relatedSpdxElement": "SPDXRef-DocumentRoot-Image-user-image-input",
   244     "relationshipType": "DESCRIBES"
   245    }
   246   ]
   247  }