github.com/google/osv-scalibr@v0.4.1/extractor/filesystem/sbom/cdx/testdata/minimal.cdx.json (about) 1 { 2 "bomFormat": "CycloneDX", 3 "specVersion": "1.6", 4 "version": 1, 5 "metadata": { 6 "timestamp": "2025-03-24T18:02:51Z", 7 "tools": { 8 "components": [ 9 { 10 "type": "application", 11 "author": "CycloneDX", 12 "name": "cyclonedx-gradle-plugin", 13 "version": "2.2.0" 14 } 15 ], 16 "services": [] 17 }, 18 "component": { 19 "type": "library", 20 "bom-ref": "pkg:maven/com.example.group/fooBar@1.2.3?project_path=%3A", 21 "group": "com.example.group", 22 "name": "fooBar", 23 "version": "1.2.3", 24 "purl": "pkg:maven/com.example.group/fooBar@1.2.3?project_path=%3A", 25 "modified": false, 26 "externalReferences": [ 27 { 28 "type": "vcs", 29 "url": "https://github.com/znsio/specmatic-gradle-plugin.git" 30 } 31 ] 32 }, 33 "licenses": [] 34 }, 35 "dependencies": [ 36 { 37 "ref": "pkg:maven/com.example.group/fooBar@1.2.3?project_path=%3A", 38 "dependsOn": [] 39 } 40 ] 41 }