github.com/lineaje-labs/syft@v0.98.1-0.20231227153149-9e393f60ff1b/syft/format/spdxjson/test-fixtures/snapshot/TestSPDXRelationshipOrder.golden (about)

     1  {
     2   "spdxVersion": "SPDX-2.3",
     3   "dataLicense": "CC0-1.0",
     4   "SPDXID": "SPDXRef-DOCUMENT",
     5   "name": "user-image-input",
     6   "documentNamespace":"redacted",
     7   "creationInfo": {
     8    "licenseListVersion":"redacted",
     9    "creators": [
    10     "Organization: Anchore, Inc",
    11     "Tool: syft-v0.42.0-bogus"
    12    ],
    13    "created":"redacted"
    14   },
    15   "packages": [
    16    {
    17     "name": "package-1",
    18     "SPDXID": "SPDXRef-Package-python-package-1-80210ebcba92e632",
    19     "versionInfo": "1.0.1",
    20     "supplier": "NOASSERTION",
    21     "downloadLocation": "NOASSERTION",
    22     "filesAnalyzed": false,
    23     "sourceInfo": "acquired package info from installed python package manifest file: /somefile-1.txt",
    24     "licenseConcluded": "NOASSERTION",
    25     "licenseDeclared": "MIT",
    26     "copyrightText": "NOASSERTION",
    27     "externalRefs": [
    28      {
    29       "referenceCategory": "SECURITY",
    30       "referenceType": "cpe23Type",
    31       "referenceLocator": "cpe:2.3:*:some:package:1:*:*:*:*:*:*:*"
    32      },
    33      {
    34       "referenceCategory": "PACKAGE-MANAGER",
    35       "referenceType": "purl",
    36       "referenceLocator": "a-purl-1"
    37      }
    38     ]
    39    },
    40    {
    41     "name": "package-2",
    42     "SPDXID": "SPDXRef-Package-deb-package-2-4b756c6f6fb127a3",
    43     "versionInfo": "2.0.1",
    44     "supplier": "NOASSERTION",
    45     "downloadLocation": "NOASSERTION",
    46     "filesAnalyzed": false,
    47     "sourceInfo": "acquired package info from DPKG DB: /somefile-2.txt",
    48     "licenseConcluded": "NOASSERTION",
    49     "licenseDeclared": "NOASSERTION",
    50     "copyrightText": "NOASSERTION",
    51     "externalRefs": [
    52      {
    53       "referenceCategory": "SECURITY",
    54       "referenceType": "cpe23Type",
    55       "referenceLocator": "cpe:2.3:*:some:package:2:*:*:*:*:*:*:*"
    56      },
    57      {
    58       "referenceCategory": "PACKAGE-MANAGER",
    59       "referenceType": "purl",
    60       "referenceLocator": "pkg:deb/debian/package-2@2.0.1"
    61      }
    62     ]
    63    },
    64    {
    65     "name": "user-image-input",
    66     "SPDXID": "SPDXRef-DocumentRoot-Image-user-image-input",
    67     "versionInfo": "sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368",
    68     "supplier": "NOASSERTION",
    69     "downloadLocation": "NOASSERTION",
    70     "filesAnalyzed": false,
    71     "checksums": [
    72      {
    73       "algorithm": "SHA256",
    74       "checksumValue": "2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368"
    75      }
    76     ],
    77     "externalRefs": [
    78      {
    79       "referenceCategory": "PACKAGE-MANAGER",
    80       "referenceType": "purl",
    81       "referenceLocator": "pkg:oci/user-image-input@sha256:2731251dc34951c0e50fcc643b4c5f74922dad1a5d98f302b504cf46cd5d9368?arch="
    82      }
    83     ],
    84     "primaryPackagePurpose": "CONTAINER"
    85    }
    86   ],
    87   "files": [
    88    {
    89     "fileName": "/a1/f6",
    90     "SPDXID": "SPDXRef-File-a1-f6-9c2f7510199b17f6",
    91     "fileTypes": [
    92      "OTHER"
    93     ],
    94     "checksums": [
    95      {
    96       "algorithm": "SHA1",
    97       "checksumValue": "0000000000000000000000000000000000000000"
    98      }
    99     ],
   100     "licenseConcluded": "NOASSERTION",
   101     "copyrightText": ""
   102    },
   103    {
   104     "fileName": "/d1/f3",
   105     "SPDXID": "SPDXRef-File-d1-f3-c6f5b29dca12661f",
   106     "fileTypes": [
   107      "OTHER"
   108     ],
   109     "checksums": [
   110      {
   111       "algorithm": "SHA1",
   112       "checksumValue": "0000000000000000000000000000000000000000"
   113      }
   114     ],
   115     "licenseConcluded": "NOASSERTION",
   116     "copyrightText": ""
   117    },
   118    {
   119     "fileName": "/d2/f4",
   120     "SPDXID": "SPDXRef-File-d2-f4-c641caa71518099f",
   121     "fileTypes": [
   122      "OTHER"
   123     ],
   124     "checksums": [
   125      {
   126       "algorithm": "SHA1",
   127       "checksumValue": "0000000000000000000000000000000000000000"
   128      }
   129     ],
   130     "licenseConcluded": "NOASSERTION",
   131     "copyrightText": ""
   132    },
   133    {
   134     "fileName": "/f1",
   135     "SPDXID": "SPDXRef-File-f1-5265a4dde3edbf7c",
   136     "fileTypes": [
   137      "OTHER"
   138     ],
   139     "checksums": [
   140      {
   141       "algorithm": "SHA1",
   142       "checksumValue": "0000000000000000000000000000000000000000"
   143      }
   144     ],
   145     "licenseConcluded": "NOASSERTION",
   146     "copyrightText": ""
   147    },
   148    {
   149     "fileName": "/f2",
   150     "SPDXID": "SPDXRef-File-f2-f9e49132a4b96ccd",
   151     "fileTypes": [
   152      "OTHER"
   153     ],
   154     "checksums": [
   155      {
   156       "algorithm": "SHA1",
   157       "checksumValue": "0000000000000000000000000000000000000000"
   158      }
   159     ],
   160     "licenseConcluded": "NOASSERTION",
   161     "copyrightText": ""
   162    },
   163    {
   164     "fileName": "/z1/f5",
   165     "SPDXID": "SPDXRef-File-z1-f5-839d99ee67d9d174",
   166     "fileTypes": [
   167      "OTHER"
   168     ],
   169     "checksums": [
   170      {
   171       "algorithm": "SHA1",
   172       "checksumValue": "0000000000000000000000000000000000000000"
   173      }
   174     ],
   175     "licenseConcluded": "NOASSERTION",
   176     "copyrightText": ""
   177    }
   178   ],
   179   "relationships": [
   180    {
   181     "spdxElementId": "SPDXRef-Package-python-package-1-80210ebcba92e632",
   182     "relatedSpdxElement": "SPDXRef-File-f1-5265a4dde3edbf7c",
   183     "relationshipType": "CONTAINS"
   184    },
   185    {
   186     "spdxElementId": "SPDXRef-Package-python-package-1-80210ebcba92e632",
   187     "relatedSpdxElement": "SPDXRef-File-z1-f5-839d99ee67d9d174",
   188     "relationshipType": "CONTAINS"
   189    },
   190    {
   191     "spdxElementId": "SPDXRef-Package-python-package-1-80210ebcba92e632",
   192     "relatedSpdxElement": "SPDXRef-File-a1-f6-9c2f7510199b17f6",
   193     "relationshipType": "CONTAINS"
   194    },
   195    {
   196     "spdxElementId": "SPDXRef-Package-python-package-1-80210ebcba92e632",
   197     "relatedSpdxElement": "SPDXRef-File-d2-f4-c641caa71518099f",
   198     "relationshipType": "CONTAINS"
   199    },
   200    {
   201     "spdxElementId": "SPDXRef-Package-python-package-1-80210ebcba92e632",
   202     "relatedSpdxElement": "SPDXRef-File-d1-f3-c6f5b29dca12661f",
   203     "relationshipType": "CONTAINS"
   204    },
   205    {
   206     "spdxElementId": "SPDXRef-Package-python-package-1-80210ebcba92e632",
   207     "relatedSpdxElement": "SPDXRef-File-f2-f9e49132a4b96ccd",
   208     "relationshipType": "CONTAINS"
   209    },
   210    {
   211     "spdxElementId": "SPDXRef-DocumentRoot-Image-user-image-input",
   212     "relatedSpdxElement": "SPDXRef-Package-python-package-1-80210ebcba92e632",
   213     "relationshipType": "CONTAINS"
   214    },
   215    {
   216     "spdxElementId": "SPDXRef-DocumentRoot-Image-user-image-input",
   217     "relatedSpdxElement": "SPDXRef-Package-deb-package-2-4b756c6f6fb127a3",
   218     "relationshipType": "CONTAINS"
   219    },
   220    {
   221     "spdxElementId": "SPDXRef-DOCUMENT",
   222     "relatedSpdxElement": "SPDXRef-DocumentRoot-Image-user-image-input",
   223     "relationshipType": "DESCRIBES"
   224    }
   225   ]
   226  }