github.com/ishita82/trivy-gitaction@v0.0.0-20240206054925-e937cc05f8e3/integration/testdata/conda-spdx.json.golden (about)

     1  {
     2    "spdxVersion": "SPDX-2.3",
     3    "dataLicense": "CC0-1.0",
     4    "SPDXID": "SPDXRef-DOCUMENT",
     5    "name": "testdata/fixtures/repo/conda",
     6    "documentNamespace": "http://aquasecurity.github.io/trivy/filesystem/testdata/fixtures/repo/conda-3ff14136-e09f-4df9-80ea-000000000001",
     7    "creationInfo": {
     8      "creators": [
     9        "Organization: aquasecurity",
    10        "Tool: trivy-dev"
    11      ],
    12      "created": "2021-08-25T12:20:30Z"
    13    },
    14    "packages": [
    15      {
    16        "name": "conda-pkg",
    17        "SPDXID": "SPDXRef-Application-ee5ef1aa4ac89125",
    18        "downloadLocation": "NONE",
    19        "filesAnalyzed": false,
    20        "sourceInfo": "Conda",
    21        "primaryPackagePurpose": "APPLICATION"
    22      },
    23      {
    24        "name": "openssl",
    25        "SPDXID": "SPDXRef-Package-20b95c21bfbf9fc4",
    26        "versionInfo": "1.1.1q",
    27        "supplier": "NOASSERTION",
    28        "downloadLocation": "NONE",
    29        "filesAnalyzed": true,
    30        "packageVerificationCode": {
    31          "packageVerificationCodeValue": "2a05c7ad4baa728c79bc1ee1adea9b837d0bf6c0"
    32        },
    33        "licenseConcluded": "OpenSSL",
    34        "licenseDeclared": "OpenSSL",
    35        "externalRefs": [
    36          {
    37            "referenceCategory": "PACKAGE-MANAGER",
    38            "referenceType": "purl",
    39            "referenceLocator": "pkg:conda/openssl@1.1.1q"
    40          }
    41        ],
    42        "primaryPackagePurpose": "LIBRARY"
    43      },
    44      {
    45        "name": "pip",
    46        "SPDXID": "SPDXRef-Package-11a429ec3bd01d80",
    47        "versionInfo": "22.2.2",
    48        "supplier": "NOASSERTION",
    49        "downloadLocation": "NONE",
    50        "filesAnalyzed": true,
    51        "packageVerificationCode": {
    52          "packageVerificationCodeValue": "8619446a1cd1118e82f1f984ce59116422a59151"
    53        },
    54        "licenseConcluded": "MIT",
    55        "licenseDeclared": "MIT",
    56        "externalRefs": [
    57          {
    58            "referenceCategory": "PACKAGE-MANAGER",
    59            "referenceType": "purl",
    60            "referenceLocator": "pkg:conda/pip@22.2.2"
    61          }
    62        ],
    63        "primaryPackagePurpose": "LIBRARY"
    64      },
    65      {
    66        "name": "testdata/fixtures/repo/conda",
    67        "SPDXID": "SPDXRef-Filesystem-2e2426fd0f2580ef",
    68        "downloadLocation": "NONE",
    69        "filesAnalyzed": false,
    70        "attributionTexts": [
    71          "SchemaVersion: 2"
    72        ],
    73        "primaryPackagePurpose": "SOURCE"
    74      }
    75    ],
    76    "files": [
    77      {
    78        "fileName": "miniconda3/envs/testenv/conda-meta/openssl-1.1.1q-h7f8727e_0.json",
    79        "SPDXID": "SPDXRef-File-600e5e0110a84891",
    80        "checksums": [
    81          {
    82            "algorithm": "SHA1",
    83            "checksumValue": "237db0da53131e4548cb1181337fa0f420299e1f"
    84          }
    85        ],
    86        "copyrightText": ""
    87      },
    88      {
    89        "fileName": "miniconda3/envs/testenv/conda-meta/pip-22.2.2-py38h06a4308_0.json",
    90        "SPDXID": "SPDXRef-File-7eb62e2a3edddc0a",
    91        "checksums": [
    92          {
    93            "algorithm": "SHA1",
    94            "checksumValue": "a6a2db7668f1ad541d704369fc66c96a4415aa24"
    95          }
    96        ],
    97        "copyrightText": ""
    98      }
    99    ],
   100    "relationships": [
   101      {
   102        "spdxElementId": "SPDXRef-DOCUMENT",
   103        "relatedSpdxElement": "SPDXRef-Filesystem-2e2426fd0f2580ef",
   104        "relationshipType": "DESCRIBES"
   105      },
   106      {
   107        "spdxElementId": "SPDXRef-Filesystem-2e2426fd0f2580ef",
   108        "relatedSpdxElement": "SPDXRef-Application-ee5ef1aa4ac89125",
   109        "relationshipType": "CONTAINS"
   110      },
   111      {
   112        "spdxElementId": "SPDXRef-Application-ee5ef1aa4ac89125",
   113        "relatedSpdxElement": "SPDXRef-Package-20b95c21bfbf9fc4",
   114        "relationshipType": "CONTAINS"
   115      },
   116      {
   117        "spdxElementId": "SPDXRef-Package-20b95c21bfbf9fc4",
   118        "relatedSpdxElement": "SPDXRef-File-600e5e0110a84891",
   119        "relationshipType": "CONTAINS"
   120      },
   121      {
   122        "spdxElementId": "SPDXRef-Application-ee5ef1aa4ac89125",
   123        "relatedSpdxElement": "SPDXRef-Package-11a429ec3bd01d80",
   124        "relationshipType": "CONTAINS"
   125      },
   126      {
   127        "spdxElementId": "SPDXRef-Package-11a429ec3bd01d80",
   128        "relatedSpdxElement": "SPDXRef-File-7eb62e2a3edddc0a",
   129        "relationshipType": "CONTAINS"
   130      }
   131    ]
   132  }