github.com/google/osv-scalibr@v0.4.1/extractor/filesystem/sbom/cdx/testdata/sbom-with-nested-comps.cdx.json (about)

     1  {
     2    "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
     3    "bomFormat": "CycloneDX",
     4    "specVersion": "1.4",
     5    "version": 1,
     6    "components": [
     7      {
     8        "bom-ref": "openssl-1.1.1",
     9        "type": "library",
    10        "name": "openssl",
    11        "version": "1.1.1",
    12        "purl": "pkg:generic/openssl@1.1.1"
    13      },
    14      {
    15        "bom-ref": "nginx-1.21.1",
    16        "type": "application",
    17        "name": "Nginx",
    18        "version": "1.21.1",
    19        "cpe": "cpe:2.3:a:nginx:nginx:1.21.1",
    20        "components": [
    21          {
    22            "type": "library",
    23            "bom-ref": "rustls@0.23.13",
    24            "name": "rustls",
    25            "version": "0.23.13",
    26            "purl": "pkg:cargo/rustls@0.23.13"
    27          }
    28        ]
    29      }
    30    ]
    31  }