github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/pkg/sbom/cyclonedx/testdata/happy/third-party-bom-no-os.json (about)

     1  {
     2    "bomFormat": "CycloneDX",
     3    "specVersion": "1.5",
     4    "serialNumber": "urn:uuid:c986ba94-e37d-49c8-9e30-96daccd0415b",
     5    "version": 1,
     6    "metadata": {
     7      "timestamp": "2022-05-28T10:20:03.79527Z",
     8      "component": {
     9        "bom-ref": "0f585d64-4815-4b72-92c5-97dae191fa4a",
    10        "type": "container",
    11        "name": "test-project"
    12      }
    13    },
    14    "components": [
    15      {
    16        "bom-ref": "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0",
    17        "type": "library",
    18        "name": "musl",
    19        "version": "1.2.3-r0",
    20        "licenses": [
    21          {
    22            "expression": "MIT"
    23          }
    24        ],
    25        "purl": "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0"
    26      },
    27      {
    28        "bom-ref": "pkg:composer/pear/log@1.13.1",
    29        "type": "library",
    30        "name": "pear/log",
    31        "version": "1.13.1",
    32        "purl": "pkg:composer/pear/log@1.13.1"
    33      }
    34    ],
    35    "vulnerabilities": []
    36  }