github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/pkg/fanal/artifact/sbom/testdata/bom.json (about)

     1  {
     2    "bomFormat": "CycloneDX",
     3    "specVersion": "1.5",
     4    "serialNumber": "urn:uuid:c986ba94-e37d-49c8-9e30-96daccd0415b",
     5    "version": 1,
     6    "metadata": {
     7      "timestamp": "2022-05-28T10:20:03.79527Z",
     8      "tools": [
     9        {
    10          "vendor": "aquasecurity",
    11          "name": "trivy",
    12          "version": "dev"
    13        }
    14      ],
    15      "component": {
    16        "bom-ref": "0f585d64-4815-4b72-92c5-97dae191fa4a",
    17        "type": "container",
    18        "name": "maven-test-project",
    19        "properties": [
    20          {
    21            "name": "aquasecurity:trivy:SchemaVersion",
    22            "value": "2"
    23          },
    24          {
    25            "name": "aquasecurity:trivy:ImageID",
    26            "value": "sha256:49193a2310dbad4c02382da87ac624a80a92387a4f7536235f9ba590e5bcd7b5"
    27          },
    28          {
    29            "name": "aquasecurity:trivy:DiffID",
    30            "value": "sha256:dd565ff850e7003356e2b252758f9bdc1ff2803f61e995e24c7844f6297f8fc3"
    31          },
    32          {
    33            "name": "aquasecurity:trivy:DiffID",
    34            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
    35          },
    36          {
    37            "name": "aquasecurity:trivy:RepoTag",
    38            "value": "maven-test-project:latest"
    39          }
    40        ]
    41      }
    42    },
    43    "components": [
    44      {
    45        "bom-ref": "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0",
    46        "type": "library",
    47        "name": "musl",
    48        "version": "1.2.3-r0",
    49        "licenses": [
    50          {
    51            "expression": "MIT"
    52          }
    53        ],
    54        "purl": "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0",
    55        "properties": [
    56          {
    57            "name": "aquasecurity:trivy:SrcName",
    58            "value": "musl"
    59          },
    60          {
    61            "name": "aquasecurity:trivy:SrcVersion",
    62            "value": "1.2.3-r0"
    63          },
    64          {
    65            "name": "aquasecurity:trivy:LayerDiffID",
    66            "value": "sha256:dd565ff850e7003356e2b252758f9bdc1ff2803f61e995e24c7844f6297f8fc3"
    67          }
    68        ]
    69      },
    70      {
    71        "bom-ref": "60e9f57b-d4a6-4f71-ad14-0893ac609182",
    72        "type": "operating-system",
    73        "name": "alpine",
    74        "version": "3.16.0",
    75        "properties": [
    76          {
    77            "name": "aquasecurity:trivy:Type",
    78            "value": "alpine"
    79          },
    80          {
    81            "name": "aquasecurity:trivy:Class",
    82            "value": "os-pkgs"
    83          }
    84        ]
    85      },
    86      {
    87        "bom-ref": "pkg:maven/org.codehaus.mojo/child-project@1.0?file_path=app%2Fmaven%2Ftarget%2Fchild-project-1.0.jar",
    88        "type": "library",
    89        "name": "org.codehaus.mojo:child-project",
    90        "version": "1.0",
    91        "purl": "pkg:maven/org.codehaus.mojo/child-project@1.0",
    92        "properties": [
    93          {
    94            "name": "aquasecurity:trivy:FilePath",
    95            "value": "app/maven/target/child-project-1.0.jar"
    96          },
    97          {
    98            "name": "aquasecurity:trivy:LayerDiffID",
    99            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   100          },
   101          {
   102            "name": "aquasecurity:trivy:Type",
   103            "value": "jar"
   104          }
   105        ]
   106      },
   107      {
   108        "bom-ref": "pkg:npm/bootstrap@5.0.2?file_path=app%2Fapp%2Fpackage.json",
   109        "type": "library",
   110        "name": "bootstrap",
   111        "version": "5.0.2",
   112        "licenses": [
   113          {
   114            "expression": "MIT"
   115          }
   116        ],
   117        "purl": "pkg:npm/bootstrap@5.0.2",
   118        "properties": [
   119          {
   120            "name": "aquasecurity:trivy:FilePath",
   121            "value": "app/app/package.json"
   122          },
   123          {
   124            "name": "aquasecurity:trivy:LayerDiffID",
   125            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   126          },
   127          {
   128            "name": "aquasecurity:trivy:Type",
   129            "value": "node-pkg"
   130          }
   131        ]
   132      },
   133      {
   134        "bom-ref": "pkg:composer/pear/log@1.13.1",
   135        "type": "library",
   136        "name": "pear/log",
   137        "version": "1.13.1",
   138        "purl": "pkg:composer/pear/log@1.13.1",
   139        "properties": [
   140          {
   141            "name": "aquasecurity:trivy:LayerDiffID",
   142            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   143          }
   144        ]
   145      },
   146      {
   147        "bom-ref": "pkg:composer/pear/pear_exception@v1.0.0",
   148        "type": "library",
   149        "name": "pear/pear_exception",
   150        "version": "v1.0.0",
   151        "purl": "pkg:composer/pear/pear_exception@v1.0.0",
   152        "properties": [
   153          {
   154            "name": "aquasecurity:trivy:LayerDiffID",
   155            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   156          }
   157        ]
   158      },
   159      {
   160        "bom-ref": "100925ff-7c0a-470f-a725-8fb973b40e7b",
   161        "type": "application",
   162        "name": "app/composer/composer.lock",
   163        "properties": [
   164          {
   165            "name": "aquasecurity:trivy:Type",
   166            "value": "composer"
   167          },
   168          {
   169            "name": "aquasecurity:trivy:Class",
   170            "value": "lang-pkgs"
   171          }
   172        ]
   173      },
   174      {
   175        "bom-ref": "pkg:golang/github.com/package-url/packageurl-go@v0.1.1-0.20220203205134-d70459300c8a",
   176        "type": "library",
   177        "name": "github.com/package-url/packageurl-go",
   178        "version": "v0.1.1-0.20220203205134-d70459300c8a",
   179        "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.1-0.20220203205134-d70459300c8a",
   180        "properties": [
   181          {
   182            "name": "aquasecurity:trivy:LayerDiffID",
   183            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   184          }
   185        ]
   186      },
   187      {
   188        "bom-ref": "1a111e6b-a682-470e-8b0e-aaa49d93cd39",
   189        "type": "application",
   190        "name": "app/gobinary/gobinary",
   191        "properties": [
   192          {
   193            "name": "aquasecurity:trivy:Type",
   194            "value": "gobinary"
   195          },
   196          {
   197            "name": "aquasecurity:trivy:Class",
   198            "value": "lang-pkgs"
   199          }
   200        ]
   201      }
   202    ],
   203    "dependencies": [
   204      {
   205        "ref": "60e9f57b-d4a6-4f71-ad14-0893ac609182",
   206        "dependsOn": [
   207          "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0"
   208        ]
   209      },
   210      {
   211        "ref": "100925ff-7c0a-470f-a725-8fb973b40e7b",
   212        "dependsOn": [
   213          "pkg:composer/pear/log@1.13.1",
   214          "pkg:composer/pear/pear_exception@v1.0.0"
   215        ]
   216      },
   217      {
   218        "ref": "1a111e6b-a682-470e-8b0e-aaa49d93cd39",
   219        "dependsOn": [
   220          "pkg:golang/github.com/package-url/packageurl-go@v0.1.1-0.20220203205134-d70459300c8a"
   221        ]
   222      },
   223      {
   224        "ref": "0f585d64-4815-4b72-92c5-97dae191fa4a",
   225        "dependsOn": [
   226          "60e9f57b-d4a6-4f71-ad14-0893ac609182",
   227          "pkg:maven/org.codehaus.mojo/child-project@1.0?file_path=app%2Fmaven%2Ftarget%2Fchild-project-1.0.jar",
   228          "pkg:npm/bootstrap@5.0.2?file_path=app%2Fapp%2Fpackage.json",
   229          "100925ff-7c0a-470f-a725-8fb973b40e7b",
   230          "1a111e6b-a682-470e-8b0e-aaa49d93cd39"
   231        ]
   232      }
   233    ],
   234    "vulnerabilities": []
   235  }