github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/pkg/sbom/cyclonedx/testdata/happy/bom.json (about)

     1  {
     2    "bomFormat": "CycloneDX",
     3    "specVersion": "1.5",
     4    "serialNumber": "urn:uuid:c986ba94-e37d-49c8-9e30-96daccd0415b",
     5    "version": 1,
     6    "metadata": {
     7      "timestamp": "2022-05-28T10:20:03.79527Z",
     8      "tools": [
     9        {
    10          "vendor": "aquasecurity",
    11          "name": "trivy",
    12          "version": "dev"
    13        }
    14      ],
    15      "component": {
    16        "bom-ref": "0f585d64-4815-4b72-92c5-97dae191fa4a",
    17        "type": "container",
    18        "name": "maven-test-project",
    19        "properties": [
    20          {
    21            "name": "aquasecurity:trivy:SchemaVersion",
    22            "value": "2"
    23          },
    24          {
    25            "name": "aquasecurity:trivy:ImageID",
    26            "value": "sha256:49193a2310dbad4c02382da87ac624a80a92387a4f7536235f9ba590e5bcd7b5"
    27          },
    28          {
    29            "name": "aquasecurity:trivy:DiffID",
    30            "value": "sha256:dd565ff850e7003356e2b252758f9bdc1ff2803f61e995e24c7844f6297f8fc3"
    31          },
    32          {
    33            "name": "aquasecurity:trivy:DiffID",
    34            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
    35          },
    36          {
    37            "name": "aquasecurity:trivy:RepoTag",
    38            "value": "maven-test-project:latest"
    39          }
    40        ]
    41      }
    42    },
    43    "components": [
    44      {
    45        "bom-ref": "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0",
    46        "type": "library",
    47        "name": "musl",
    48        "version": "1.2.3-r0",
    49        "licenses": [
    50          {
    51            "expression": "MIT"
    52          }
    53        ],
    54        "purl": "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0",
    55        "properties": [
    56          {
    57            "name": "aquasecurity:trivy:SrcName",
    58            "value": "musl"
    59          },
    60          {
    61            "name": "aquasecurity:trivy:SrcVersion",
    62            "value": "1.2.3-r0"
    63          },
    64          {
    65            "name": "aquasecurity:trivy:LayerDiffID",
    66            "value": "sha256:dd565ff850e7003356e2b252758f9bdc1ff2803f61e995e24c7844f6297f8fc3"
    67          }
    68        ]
    69      },
    70      {
    71        "bom-ref": "60e9f57b-d4a6-4f71-ad14-0893ac609182",
    72        "type": "operating-system",
    73        "name": "alpine",
    74        "version": "3.16.0",
    75        "properties": [
    76          {
    77            "name": "aquasecurity:trivy:Type",
    78            "value": "alpine"
    79          },
    80          {
    81            "name": "aquasecurity:trivy:Class",
    82            "value": "os-pkgs"
    83          }
    84        ]
    85      },
    86      {
    87        "bom-ref": "pkg:maven/org.codehaus.mojo/child-project@1.0?file_path=app%2Fmaven%2Ftarget%2Fchild-project-1.0.jar",
    88        "type": "library",
    89        "name": "child-project",
    90        "group": "org.codehaus.mojo",
    91        "version": "1.0",
    92        "purl": "pkg:maven/org.codehaus.mojo/child-project@1.0",
    93        "properties": [
    94          {
    95            "name": "aquasecurity:trivy:FilePath",
    96            "value": "app/maven/target/child-project-1.0.jar"
    97          },
    98          {
    99            "name": "aquasecurity:trivy:LayerDiffID",
   100            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   101          },
   102          {
   103            "name": "aquasecurity:trivy:Type",
   104            "value": "jar"
   105          }
   106        ]
   107      },
   108      {
   109        "bom-ref": "pkg:maven/com.example/example@0.0.1",
   110        "type": "library",
   111        "name": "com.example:example",
   112        "version": "0.0.1",
   113        "purl": "pkg:maven/com.example/example@0.0.1",
   114        "properties": [
   115          {
   116            "name": "aquasecurity:trivy:LayerDiffID",
   117            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   118          }
   119        ]
   120      },
   121      {
   122        "bom-ref": "pkg:npm/bootstrap@5.0.2?file_path=app%2Fapp%2Fpackage.json",
   123        "type": "library",
   124        "name": "bootstrap",
   125        "version": "5.0.2",
   126        "licenses": [
   127          {
   128            "expression": "MIT"
   129          }
   130        ],
   131        "purl": "pkg:npm/bootstrap@5.0.2",
   132        "properties": [
   133          {
   134            "name": "aquasecurity:trivy:FilePath",
   135            "value": "app/app/package.json"
   136          },
   137          {
   138            "name": "aquasecurity:trivy:LayerDiffID",
   139            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   140          },
   141          {
   142            "name": "aquasecurity:trivy:Type",
   143            "value": "node-pkg"
   144          }
   145        ]
   146      },
   147      {
   148        "bom-ref": "pkg:composer/pear/log@1.13.1",
   149        "type": "library",
   150        "name": "pear/log",
   151        "version": "1.13.1",
   152        "purl": "pkg:composer/pear/log@1.13.1",
   153        "properties": [
   154          {
   155            "name": "aquasecurity:trivy:LayerDiffID",
   156            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   157          }
   158        ]
   159      },
   160      {
   161        "bom-ref": "pkg:composer/pear/pear_exception@v1.0.0",
   162        "type": "library",
   163        "name": "pear/pear_exception",
   164        "version": "v1.0.0",
   165        "purl": "pkg:composer/pear/pear_exception@v1.0.0",
   166        "properties": [
   167          {
   168            "name": "aquasecurity:trivy:LayerDiffID",
   169            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   170          }
   171        ]
   172      },
   173      {
   174        "bom-ref": "100925ff-7c0a-470f-a725-8fb973b40e7b",
   175        "type": "application",
   176        "name": "app/composer/composer.lock",
   177        "properties": [
   178          {
   179            "name": "aquasecurity:trivy:Type",
   180            "value": "composer"
   181          },
   182          {
   183            "name": "aquasecurity:trivy:Class",
   184            "value": "lang-pkgs"
   185          }
   186        ]
   187      },
   188      {
   189        "bom-ref": "pkg:golang/github.com/package-url/packageurl-go@v0.1.1-0.20220203205134-d70459300c8a",
   190        "type": "library",
   191        "name": "github.com/package-url/packageurl-go",
   192        "version": "v0.1.1-0.20220203205134-d70459300c8a",
   193        "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.1-0.20220203205134-d70459300c8a",
   194        "properties": [
   195          {
   196            "name": "aquasecurity:trivy:LayerDiffID",
   197            "value": "sha256:3c79e832b1b4891a1cb4a326ef8524e0bd14a2537150ac0e203a5677176c1ca1"
   198          }
   199        ]
   200      },
   201      {
   202        "bom-ref": "1a111e6b-a682-470e-8b0e-aaa49d93cd39",
   203        "type": "application",
   204        "name": "app/gobinary/gobinary",
   205        "properties": [
   206          {
   207            "name": "aquasecurity:trivy:Type",
   208            "value": "gobinary"
   209          },
   210          {
   211            "name": "aquasecurity:trivy:Class",
   212            "value": "lang-pkgs"
   213          }
   214        ]
   215      },
   216      {
   217        "bom-ref": "43b87f73-4b96-25ab-845b-489321cea146",
   218        "type": "application",
   219        "name": "app/gradle/target/gradle.lockfile",
   220        "properties": [
   221          {
   222            "name": "aquasecurity:trivy:Type",
   223            "value": "gradle"
   224          },
   225          {
   226            "name": "aquasecurity:trivy:Class",
   227            "value": "lang-pkgs"
   228          }
   229        ]
   230      }
   231    ],
   232    "dependencies": [
   233      {
   234        "ref": "60e9f57b-d4a6-4f71-ad14-0893ac609182",
   235        "dependsOn": [
   236          "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0"
   237        ]
   238      },
   239      {
   240        "ref": "100925ff-7c0a-470f-a725-8fb973b40e7b",
   241        "dependsOn": [
   242          "pkg:composer/pear/log@1.13.1",
   243          "pkg:composer/pear/pear_exception@v1.0.0"
   244        ]
   245      },
   246      {
   247        "ref": "1a111e6b-a682-470e-8b0e-aaa49d93cd39",
   248        "dependsOn": [
   249          "pkg:golang/github.com/package-url/packageurl-go@v0.1.1-0.20220203205134-d70459300c8a"
   250        ]
   251      },
   252      {
   253        "ref": "43b87f73-4b96-25ab-845b-489321cea146",
   254        "dependsOn": [
   255          "pkg:maven/com.example/example@0.0.1"
   256        ]
   257      },
   258      {
   259        "ref": "0f585d64-4815-4b72-92c5-97dae191fa4a",
   260        "dependsOn": [
   261          "60e9f57b-d4a6-4f71-ad14-0893ac609182",
   262          "pkg:maven/org.codehaus.mojo/child-project@1.0?file_path=app%2Fmaven%2Ftarget%2Fchild-project-1.0.jar",
   263          "pkg:maven/com.example/example@0.0.1",
   264          "pkg:npm/bootstrap@5.0.2?file_path=app%2Fapp%2Fpackage.json",
   265          "100925ff-7c0a-470f-a725-8fb973b40e7b",
   266          "1a111e6b-a682-470e-8b0e-aaa49d93cd39"
   267        ]
   268      }
   269    ],
   270    "vulnerabilities": []
   271  }