github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/pkg/sbom/cyclonedx/testdata/happy/third-party-bom.json (about)

     1  {
     2    "bomFormat": "CycloneDX",
     3    "specVersion": "1.5",
     4    "serialNumber": "urn:uuid:c986ba94-e37d-49c8-9e30-96daccd0415b",
     5    "version": 1,
     6    "metadata": {
     7      "timestamp": "2022-05-28T10:20:03.79527Z",
     8      "component": {
     9        "bom-ref": "0f585d64-4815-4b72-92c5-97dae191fa4a",
    10        "type": "container",
    11        "name": "test-project"
    12      }
    13    },
    14    "components": [
    15      {
    16        "bom-ref": "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0",
    17        "type": "library",
    18        "name": "musl",
    19        "version": "1.2.3-r0",
    20        "licenses": [
    21          {
    22            "expression": "MIT"
    23          }
    24        ],
    25        "purl": "pkg:apk/alpine/musl@1.2.3-r0?distro=3.16.0"
    26      },
    27      {
    28        "bom-ref": "60e9f57b-d4a6-4f71-ad14-0893ac609182",
    29        "type": "operating-system",
    30        "name": "alpine",
    31        "version": "3.16.0"
    32      },
    33      {
    34        "bom-ref": "pkg:composer/pear/log@1.13.1",
    35        "type": "library",
    36        "name": "pear/log",
    37        "version": "1.13.1",
    38        "purl": "pkg:composer/pear/log@1.13.1"
    39      },
    40      {
    41        "bom-ref": "pkg:composer/pear/pear_exception@v1.0.0",
    42        "type": "library",
    43        "name": "pear/pear_exception",
    44        "version": "v1.0.0",
    45        "purl": "pkg:composer/pear/pear_exception@v1.0.0"
    46      }
    47    ],
    48    "vulnerabilities": []
    49  }