github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/integration/testdata/fixtures/sbom/centos-7-spdx.json (about)

     1  {
     2  	"SPDXID": "SPDXRef-DOCUMENT",
     3  	"creationInfo": {
     4  		"created": "2022-09-13T13:27:55.874784Z",
     5  		"creators": [
     6  			"Tool: trivy-dev",
     7  			"Organization: aquasecurity"
     8  		]
     9  	},
    10  	"dataLicense": "CC0-1.0",
    11  	"documentNamespace": "http://aquasecurity.github.io/trivy/container_image/integration/testdata/fixtures/images/centos-7.tar.gz-2906855d-5098-4a22-9a72-4f7099ea3d66",
    12  	"name": "integration/testdata/fixtures/images/centos-7.tar.gz",
    13  	"packages": [
    14  		{
    15  			"SPDXID": "SPDXRef-ContainerImage-dd5cad897c6263",
    16  			"attributionTexts": [
    17  				"SchemaVersion: 2",
    18  				"ImageID: sha256:f1cb7c7d58b73eac859c395882eec49d50651244e342cd6c68a5c7809785f427",
    19  				"DiffID: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a"
    20  			],
    21  			"filesAnalyzed": false,
    22  			"name": "integration/testdata/fixtures/images/centos-7.tar.gz"
    23  		},
    24  		{
    25  			"SPDXID": "SPDXRef-OperatingSystem-2e91c856c499a371",
    26  			"filesAnalyzed": false,
    27  			"name": "centos",
    28  			"versionInfo": "7.6.1810"
    29  		},
    30  		{
    31  			"SPDXID": "SPDXRef-Package-5a18334f22149877",
    32  			"attributionTexts": [
    33  				"PkgID: bash@4.2.46-31.el7.x86_64",
    34  				"LayerDigest: sha256:ac9208207adaac3a48e54a4dc6b49c69e78c3072d2b3add7efdabf814db2133b",
    35  				"LayerDiffID: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a"
    36  			],
    37  			"externalRefs": [
    38  				{
    39  					"referenceCategory": "PACKAGE-MANAGER",
    40  					"referenceLocator": "pkg:rpm/centos/bash@4.2.46-31.el7?arch=x86_64\u0026distro=centos-7.6.1810",
    41  					"referenceType": "purl"
    42  				}
    43  			],
    44  			"filesAnalyzed": false,
    45  			"licenseConcluded": "GPLv3+",
    46  			"licenseDeclared": "GPLv3+",
    47  			"name": "bash",
    48  			"sourceInfo": "built package from: bash 4.2.46-31.el7",
    49  			"versionInfo": "4.2.46"
    50  		},
    51  		{
    52  			"SPDXID": "SPDXRef-Package-e16b1cbaa5186199",
    53  			"attributionTexts": [
    54  				"PkgID: openssl-libs@1.0.2k-16.el7.x86_64",
    55  				"LayerDigest: sha256:ac9208207adaac3a48e54a4dc6b49c69e78c3072d2b3add7efdabf814db2133b",
    56  				"LayerDiffID: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a"
    57  			],
    58  			"externalRefs": [
    59  				{
    60  					"referenceCategory": "PACKAGE-MANAGER",
    61  					"referenceLocator": "pkg:rpm/centos/openssl-libs@1.0.2k-16.el7?arch=x86_64\u0026epoch=1\u0026distro=centos-7.6.1810",
    62  					"referenceType": "purl"
    63  				}
    64  			],
    65  			"filesAnalyzed": false,
    66  			"licenseConcluded": "OpenSSL",
    67  			"licenseDeclared": "OpenSSL",
    68  			"name": "openssl-libs",
    69  			"sourceInfo": "built package from: openssl-libs 1:1.0.2k-16.el7",
    70  			"versionInfo": "1:1.0.2k-19.el7"
    71  		}
    72  	],
    73  	"relationships": [
    74  		{
    75  			"relatedSpdxElement": "SPDXRef-ContainerImage-dd5cad897c6263",
    76  			"relationshipType": "DESCRIBE",
    77  			"spdxElementId": "SPDXRef-DOCUMENT"
    78  		},
    79  		{
    80  			"relatedSpdxElement": "SPDXRef-OperatingSystem-2e91c856c499a371",
    81  			"relationshipType": "CONTAINS",
    82  			"spdxElementId": "SPDXRef-ContainerImage-dd5cad897c6263"
    83  		},
    84  		{
    85  			"relatedSpdxElement": "SPDXRef-Package-5a18334f22149877",
    86  			"relationshipType": "CONTAINS",
    87  			"spdxElementId": "SPDXRef-OperatingSystem-2e91c856c499a371"
    88  		},
    89  		{
    90  			"relatedSpdxElement": "SPDXRef-Package-e16b1cbaa5186199",
    91  			"relationshipType": "CONTAINS",
    92  			"spdxElementId": "SPDXRef-OperatingSystem-2e91c856c499a371"
    93  		}
    94  	],
    95  	"spdxVersion": "SPDX-2.2"
    96  }