github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/integration/testdata/fixtures/sbom/centos-7-spdx.txt (about)

     1  SPDXVersion: SPDX-2.2
     2  DataLicense: CC0-1.0
     3  SPDXID: SPDXRef-DOCUMENT
     4  DocumentName: integration/testdata/fixtures/images/centos-7.tar.gz
     5  DocumentNamespace: http://aquasecurity.github.io/trivy/container_image/integration/testdata/fixtures/images/centos-7.tar.gz-6a2c050f-bc12-46dc-b2df-1f4e3e0b5e1d
     6  Creator: Organization: aquasecurity
     7  Creator: Tool: trivy-dev
     8  Created: 2022-09-13T13:24:58.796907Z
     9  
    10  ##### Package: integration/testdata/fixtures/images/centos-7.tar.gz
    11  
    12  PackageName: integration/testdata/fixtures/images/centos-7.tar.gz
    13  SPDXID: SPDXRef-ContainerImage-dd5cad897c6263
    14  FilesAnalyzed: false
    15  PackageAttributionText: SchemaVersion: 2
    16  PackageAttributionText: ImageID: sha256:f1cb7c7d58b73eac859c395882eec49d50651244e342cd6c68a5c7809785f427
    17  PackageAttributionText: DiffID: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a
    18  
    19  ##### Package: centos
    20  
    21  PackageName: centos
    22  SPDXID: SPDXRef-OperatingSystem-2e91c856c499a371
    23  PackageVersion: 7.6.1810
    24  FilesAnalyzed: false
    25  
    26  ##### Package: bash
    27  
    28  PackageName: bash
    29  SPDXID: SPDXRef-Package-5a18334f22149877
    30  PackageVersion: 4.2.46
    31  FilesAnalyzed: false
    32  PackageSourceInfo: built package from: bash 4.2.46-31.el7
    33  PackageLicenseConcluded: GPLv3+
    34  PackageLicenseDeclared: GPLv3+
    35  ExternalRef: PACKAGE-MANAGER purl pkg:rpm/centos/bash@4.2.46-31.el7?arch=x86_64&distro=centos-7.6.1810
    36  PackageAttributionText: PkgID: bash@4.2.46-31.el7.x86_64
    37  PackageAttributionText: LayerDigest: sha256:ac9208207adaac3a48e54a4dc6b49c69e78c3072d2b3add7efdabf814db2133b
    38  PackageAttributionText: LayerDiffID: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a
    39  
    40  ##### Package: openssl-libs
    41  
    42  PackageName: openssl-libs
    43  SPDXID: SPDXRef-Package-e16b1cbaa5186199
    44  PackageVersion: 1.0.2k
    45  FilesAnalyzed: false
    46  PackageSourceInfo: built package from: openssl-libs 1:1.0.2k-16.el7
    47  PackageLicenseConcluded: OpenSSL
    48  PackageLicenseDeclared: OpenSSL
    49  ExternalRef: PACKAGE-MANAGER purl pkg:rpm/centos/openssl-libs@1.0.2k-16.el7?arch=x86_64&epoch=1&distro=centos-7.6.1810
    50  PackageAttributionText: PkgID: openssl-libs@1.0.2k-16.el7.x86_64
    51  PackageAttributionText: LayerDigest: sha256:ac9208207adaac3a48e54a4dc6b49c69e78c3072d2b3add7efdabf814db2133b
    52  PackageAttributionText: LayerDiffID: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a
    53  
    54  ##### Relationships
    55  
    56  Relationship: SPDXRef-DOCUMENT DESCRIBE SPDXRef-ContainerImage-dd5cad897c6263
    57  Relationship: SPDXRef-ContainerImage-dd5cad897c6263 CONTAINS SPDXRef-OperatingSystem-2e91c856c499a371
    58  Relationship: SPDXRef-OperatingSystem-2e91c856c499a371 DEPENDS_ON SPDXRef-Package-5a18334f22149877
    59  Relationship: SPDXRef-OperatingSystem-2e91c856c499a371 DEPENDS_ON SPDXRef-Package-e16b1cbaa5186199