Skip to content

Instantly share code, notes, and snippets.

@dirkmueller
Created December 20, 2022 09:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dirkmueller/5654e17d03fbd82b6a9c84fae700f890 to your computer and use it in GitHub Desktop.
Save dirkmueller/5654e17d03fbd82b6a9c84fae700f890 to your computer and use it in GitHub Desktop.
spdx example
SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: alpine:latest
DocumentNamespace: https://anchore.com/syft/image/alpine-latest-8e284dcb-71c0-4a33-b79a-d7d0641b99c9
LicenseListVersion: 3.19
Creator: Organization: Anchore, Inc
Creator: Tool: syft-0.63.0
Created: 2022-12-20T09:37:37Z
##### Unpackaged files
FileName: /etc/sysctl.conf
SPDXID: SPDXRef-111ee70376f63525
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/modprobe.d/aliases.conf
SPDXID: SPDXRef-16212920a3aa3f0
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub
SPDXID: SPDXRef-17634874eaec534a
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/ssl/misc/tsget.pl
SPDXID: SPDXRef-17c4cd361a21ed65
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/profile.d/README
SPDXID: SPDXRef-1949455873a628b0
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub
SPDXID: SPDXRef-1df9645b615c6f0b
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub
SPDXID: SPDXRef-1f7c9f03f1f38408
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/lib/engines-3/padlock.so
SPDXID: SPDXRef-1f8d614ecb5e42af
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /lib/libapk.so.3.12.0
SPDXID: SPDXRef-1fe6bda94c049269
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/securetty
SPDXID: SPDXRef-21c5db0890b2ee30
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub
SPDXID: SPDXRef-2789d612e7744068
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/nsswitch.conf
SPDXID: SPDXRef-3094ceee1ecfa6a4
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/lib/engines-3/afalg.so
SPDXID: SPDXRef-31d6c0fe986c6b19
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub
SPDXID: SPDXRef-31de9cc53148957a
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /bin/busybox
SPDXID: SPDXRef-45e180275126c237
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/udhcpd.conf
SPDXID: SPDXRef-49772dafcddb7d6
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/shadow
SPDXID: SPDXRef-4a664786168b2249
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /lib/libssl.so.3
SPDXID: SPDXRef-5156e2896fd3bffd
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub
SPDXID: SPDXRef-54cdcd0f9a9360ef
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/ssl/misc/CA.pl
SPDXID: SPDXRef-573bff1786dfc252
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/shells
SPDXID: SPDXRef-58fa2e90c63afb3a
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/ssl/ct_log_list.cnf.dist
SPDXID: SPDXRef-59a5c7473aa56801
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/lib/engines-3/capi.so
SPDXID: SPDXRef-5d55272338b7a7e1
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/modprobe.d/i386.conf
SPDXID: SPDXRef-609be614951eaa00
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub
SPDXID: SPDXRef-66323df00c9157e2
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/ssl/certs/ca-certificates.crt
SPDXID: SPDXRef-6fede8fa1634c59
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/passwd
SPDXID: SPDXRef-71204313a9d94cce
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub
SPDXID: SPDXRef-75d3d06b1047ec20
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/ssl/ct_log_list.cnf
SPDXID: SPDXRef-79865d9afe6f302f
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/inittab
SPDXID: SPDXRef-79bde4ce21f2d6d2
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/ssl/openssl.cnf
SPDXID: SPDXRef-87b59f9144dd81fb
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub
SPDXID: SPDXRef-8bc430e0b6742e90
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub
SPDXID: SPDXRef-8e734ba43e652e58
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /sbin/ldconfig
SPDXID: SPDXRef-936d08662fa1a975
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/bin/ssl_client
SPDXID: SPDXRef-974b71af5e241870
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub
SPDXID: SPDXRef-989af91b22c54f15
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/hosts
SPDXID: SPDXRef-997ca43adda17ab6
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/profile.d/color_prompt.sh.disabled
SPDXID: SPDXRef-9ad1b8f45eb9c2c3
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/crontabs/root
SPDXID: SPDXRef-9c35640b7261f6c0
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /lib/libz.so.1.2.13
SPDXID: SPDXRef-9f32ece93f41858b
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub
SPDXID: SPDXRef-9f8b874295a12723
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/bin/getconf
SPDXID: SPDXRef-a1d1806ecc9b65e9
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/profile.d/locale.sh
SPDXID: SPDXRef-a612505b3b16058b
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/bin/ldd
SPDXID: SPDXRef-a61ac2747b342275
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/lib/ossl-modules/legacy.so
SPDXID: SPDXRef-a81ac27237330c9a
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/group
SPDXID: SPDXRef-ac56fcb4bc2b7257
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/protocols
SPDXID: SPDXRef-ade6164a43f8be51
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/bin/iconv
SPDXID: SPDXRef-b9d6cec6532d64a5
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/modprobe.d/kms.conf
SPDXID: SPDXRef-b9da6d0c6423545f
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub
SPDXID: SPDXRef-bb19e1977abff271
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/services
SPDXID: SPDXRef-bf499b70b232e4c2
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /sbin/apk
SPDXID: SPDXRef-c03f862705ab1b46
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/lib/engines-3/loader_attic.so
SPDXID: SPDXRef-c1e73a11fe23e85b
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/udhcpc/default.script
SPDXID: SPDXRef-c49a891f9a0bedcc
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/hostname
SPDXID: SPDXRef-c987374590a7d086
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub
SPDXID: SPDXRef-cee53a31edb0cb5e
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub
SPDXID: SPDXRef-d322e64cf0e83c18
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/ssl/openssl.cnf.dist
SPDXID: SPDXRef-d400a7c7a27d3b09
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/modules
SPDXID: SPDXRef-d533bd96d693f86e
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub
SPDXID: SPDXRef-dad76f415b494e1a
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/fstab
SPDXID: SPDXRef-dbb1d7a6be2920de
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/bin/scanelf
SPDXID: SPDXRef-dccc46eb1250458d
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/logrotate.d/acpid
SPDXID: SPDXRef-ddc9afbfe44a67cb
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/profile
SPDXID: SPDXRef-ddf259d58d41d03c
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /lib/sysctl.d/00-alpine.conf
SPDXID: SPDXRef-de5c4e1acbe1962e
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /lib/libcrypto.so.3
SPDXID: SPDXRef-df2a4caefd7f2808
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub
SPDXID: SPDXRef-e0812703f353217c
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/motd
SPDXID: SPDXRef-e3b7e6af5d580ea0
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/modprobe.d/blacklist.conf
SPDXID: SPDXRef-e4bafc6de9373073
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub
SPDXID: SPDXRef-e8e001549e9ea680
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub
SPDXID: SPDXRef-f33b1e57709d82f
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub
SPDXID: SPDXRef-f45a13601846dd9b
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/bin/getent
SPDXID: SPDXRef-f528514d300ba632
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub
SPDXID: SPDXRef-f5a04c41271c4c3f
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub
SPDXID: SPDXRef-f9b7199e302a0a2e
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /lib/ld-musl-x86_64.so.1
SPDXID: SPDXRef-fa9108ca3ddd517b
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
FileName: /etc/network/if-up.d/dad
SPDXID: SPDXRef-ff01017e002cca42
LicenseConcluded: NOASSERTION
FileComment: layerID: sha256:ded7a220bb058e28ee3254fbba04ca90b679070424424761a53a043b93b612bf
##### Package: alpine-baselayout
PackageName: alpine-baselayout
SPDXID: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d
PackageVersion: 3.4.0-r0
PackageOriginator: Person: Natanael Copa <ncopa@alpinelinux.org>
PackageDownloadLocation: https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: GPL-2.0-only
PackageLicenseDeclared: GPL-2.0-only
PackageCopyrightText: NOASSERTION
PackageDescription: Alpine base dir structure and init scripts
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine-baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine_baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine_baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.0
##### Package: alpine-baselayout-data
PackageName: alpine-baselayout-data
SPDXID: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f
PackageVersion: 3.4.0-r0
PackageOriginator: Person: Natanael Copa <ncopa@alpinelinux.org>
PackageDownloadLocation: https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: GPL-2.0-only
PackageLicenseDeclared: GPL-2.0-only
PackageCopyrightText: NOASSERTION
PackageDescription: Alpine base dir structure and init scripts
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine-baselayout-data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine_baselayout_data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine_baselayout_data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine-baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine-baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine_baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine_baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.0
##### Package: alpine-keys
PackageName: alpine-keys
SPDXID: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf
PackageVersion: 2.4-r1
PackageOriginator: Person: Natanael Copa <ncopa@alpinelinux.org>
PackageDownloadLocation: https://alpinelinux.org
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: MIT
PackageLicenseDeclared: MIT
PackageCopyrightText: NOASSERTION
PackageDescription: Public keys for Alpine Linux packages
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine-keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine_keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine_keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine:alpine-keys:2.4-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:alpine:alpine_keys:2.4-r1:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/alpine-keys@2.4-r1?arch=x86_64&upstream=alpine-keys&distro=alpine-3.17.0
##### Package: apk-tools
PackageName: apk-tools
SPDXID: SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc
PackageVersion: 2.12.10-r1
PackageOriginator: Person: Natanael Copa <ncopa@alpinelinux.org>
PackageDownloadLocation: https://gitlab.alpinelinux.org/alpine/apk-tools
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: GPL-2.0-only
PackageLicenseDeclared: GPL-2.0-only
PackageCopyrightText: NOASSERTION
PackageDescription: Alpine Package Keeper - package manager for alpine
ExternalRef: SECURITY cpe23Type cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:apk-tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:apk_tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:apk_tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:apk:apk-tools:2.12.10-r1:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:apk:apk_tools:2.12.10-r1:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/apk-tools@2.12.10-r1?arch=x86_64&upstream=apk-tools&distro=alpine-3.17.0
##### Package: busybox
PackageName: busybox
SPDXID: SPDXRef-Package-apk-busybox-623d53216342d45e
PackageVersion: 1.35.0-r29
PackageOriginator: Person: Sören Tempel <soeren+alpine@soeren-tempel.net>
PackageDownloadLocation: https://busybox.net/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: GPL-2.0-only
PackageLicenseDeclared: GPL-2.0-only
PackageCopyrightText: NOASSERTION
PackageDescription: Size optimized toolbox of many common UNIX utilities
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/busybox@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.0
##### Package: busybox-binsh
PackageName: busybox-binsh
SPDXID: SPDXRef-Package-apk-busybox-binsh-256fc96b4a8c4da8
PackageVersion: 1.35.0-r29
PackageOriginator: Person: Sören Tempel <soeren+alpine@soeren-tempel.net>
PackageDownloadLocation: https://busybox.net/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: GPL-2.0-only
PackageLicenseDeclared: GPL-2.0-only
PackageCopyrightText: NOASSERTION
PackageDescription: busybox ash /bin/sh
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox-binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox_binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox_binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.0
##### Package: ca-certificates-bundle
PackageName: ca-certificates-bundle
SPDXID: SPDXRef-Package-apk-ca-certificates-bundle-893d472df8998cbd
PackageVersion: 20220614-r2
PackageOriginator: Person: Natanael Copa <ncopa@alpinelinux.org>
PackageDownloadLocation: https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: MPL-2.0 AND MIT
PackageLicenseDeclared: MPL-2.0 AND MIT
PackageCopyrightText: NOASSERTION
PackageDescription: Pre generated bundle of Mozilla certificates
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca-certificates-bundle:ca_certificates_bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca_certificates_bundle:ca-certificates-bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca_certificates_bundle:ca_certificates_bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca-certificates:ca-certificates-bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca-certificates:ca_certificates_bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca_certificates:ca-certificates-bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca_certificates:ca_certificates_bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca:ca-certificates-bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ca:ca_certificates_bundle:20220614-r2:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/ca-certificates-bundle@20220614-r2?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.0
##### Package: libc-utils
PackageName: libc-utils
SPDXID: SPDXRef-Package-apk-libc-utils-8126b232e2d3c608
PackageVersion: 0.7.2-r3
PackageOriginator: Person: Natanael Copa <ncopa@alpinelinux.org>
PackageDownloadLocation: https://alpinelinux.org
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: BSD-2-Clause AND BSD-3-Clause
PackageLicenseDeclared: BSD-2-Clause AND BSD-3-Clause
PackageCopyrightText: NOASSERTION
PackageDescription: Meta package to pull in correct libc
ExternalRef: SECURITY cpe23Type cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:libc-utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:libc_utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:libc_utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:libc:libc-utils:0.7.2-r3:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:libc:libc_utils:0.7.2-r3:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.0
##### Package: libcrypto3
PackageName: libcrypto3
SPDXID: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13
PackageVersion: 3.0.7-r0
PackageOriginator: Person: Ariadne Conill <ariadne@dereferenced.org>
PackageDownloadLocation: https://www.openssl.org/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: Apache-2.0
PackageLicenseDeclared: Apache-2.0
PackageCopyrightText: NOASSERTION
PackageDescription: Crypto library from openssl
ExternalRef: SECURITY cpe23Type cpe:2.3:a:libcrypto3:libcrypto3:3.0.7-r0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/libcrypto3@3.0.7-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.0
##### Package: libssl3
PackageName: libssl3
SPDXID: SPDXRef-Package-apk-libssl3-7ae494d499484cc8
PackageVersion: 3.0.7-r0
PackageOriginator: Person: Ariadne Conill <ariadne@dereferenced.org>
PackageDownloadLocation: https://www.openssl.org/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: Apache-2.0
PackageLicenseDeclared: Apache-2.0
PackageCopyrightText: NOASSERTION
PackageDescription: SSL shared libraries
ExternalRef: SECURITY cpe23Type cpe:2.3:a:libssl3:libssl3:3.0.7-r0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/libssl3@3.0.7-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.0
##### Package: musl
PackageName: musl
SPDXID: SPDXRef-Package-apk-musl-d9700f02cf26e8b8
PackageVersion: 1.2.3-r4
PackageOriginator: Person: Timo Teräs <timo.teras@iki.fi>
PackageDownloadLocation: https://musl.libc.org/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: MIT
PackageLicenseDeclared: MIT
PackageCopyrightText: NOASSERTION
PackageDescription: the musl c library (libc) implementation
ExternalRef: SECURITY cpe23Type cpe:2.3:a:musl:musl:1.2.3-r4:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/musl@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.0
##### Package: musl-utils
PackageName: musl-utils
SPDXID: SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b
PackageVersion: 1.2.3-r4
PackageOriginator: Person: Timo Teräs <timo.teras@iki.fi>
PackageDownloadLocation: https://musl.libc.org/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: MIT AND BSD-2-Clause AND GPL-2.0-or-later
PackageLicenseDeclared: MIT AND BSD-2-Clause AND GPL-2.0-or-later
PackageCopyrightText: NOASSERTION
PackageDescription: the musl c library (libc) implementation
ExternalRef: SECURITY cpe23Type cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:musl-utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:musl_utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:musl_utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:musl:musl-utils:1.2.3-r4:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:musl:musl_utils:1.2.3-r4:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.0
##### Package: scanelf
PackageName: scanelf
SPDXID: SPDXRef-Package-apk-scanelf-e903138d19e85b80
PackageVersion: 1.3.5-r1
PackageOriginator: Person: Natanael Copa <ncopa@alpinelinux.org>
PackageDownloadLocation: https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: GPL-2.0-only
PackageLicenseDeclared: GPL-2.0-only
PackageCopyrightText: NOASSERTION
PackageDescription: Scan ELF binaries for stuff
ExternalRef: SECURITY cpe23Type cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.0
##### Package: ssl_client
PackageName: ssl_client
SPDXID: SPDXRef-Package-apk-ssl-client-b15247aafcd4a647
PackageVersion: 1.35.0-r29
PackageOriginator: Person: Sören Tempel <soeren+alpine@soeren-tempel.net>
PackageDownloadLocation: https://busybox.net/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: GPL-2.0-only
PackageLicenseDeclared: GPL-2.0-only
PackageCopyrightText: NOASSERTION
PackageDescription: EXternal ssl_client for busybox wget
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ssl-client:ssl_client:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ssl_client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ssl_client:ssl_client:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ssl:ssl-client:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ssl:ssl_client:1.35.0-r29:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.0
##### Package: zlib
PackageName: zlib
SPDXID: SPDXRef-Package-apk-zlib-94014313cfcd2b71
PackageVersion: 1.2.13-r0
PackageOriginator: Person: Natanael Copa <ncopa@alpinelinux.org>
PackageDownloadLocation: https://zlib.net/
FilesAnalyzed: false
PackageSourceInfo: acquired package info from APK DB: /lib/apk/db/installed
PackageLicenseConcluded: Zlib
PackageLicenseDeclared: Zlib
PackageCopyrightText: NOASSERTION
PackageDescription: A compression/decompression Library
ExternalRef: SECURITY cpe23Type cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:alpine/zlib@1.2.13-r0?arch=x86_64&upstream=zlib&distro=alpine-3.17.0
##### Package: busybox
PackageName: busybox
SPDXID: SPDXRef-Package-binary-busybox-d49bb0510b7c7ca7
PackageVersion: 1.35.0
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageSourceInfo: acquired package info from the following paths: /bin/busybox
PackageLicenseConcluded: NONE
PackageLicenseDeclared: NONE
PackageCopyrightText: NOASSERTION
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*
##### Relationships
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-17c4cd361a21ed65
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-1f8d614ecb5e42af
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-31d6c0fe986c6b19
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-573bff1786dfc252
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-59a5c7473aa56801
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-5d55272338b7a7e1
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-79865d9afe6f302f
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 DEPENDENCY_OF SPDXRef-Package-apk-libssl3-7ae494d499484cc8
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-87b59f9144dd81fb
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-a81ac27237330c9a
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 DEPENDENCY_OF SPDXRef-Package-apk-ssl-client-b15247aafcd4a647
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-c1e73a11fe23e85b
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-d400a7c7a27d3b09
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 CONTAINS SPDXRef-df2a4caefd7f2808
Relationship: SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13 DEPENDENCY_OF SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc
Relationship: SPDXRef-Package-apk-busybox-binsh-256fc96b4a8c4da8 CONTAINS SPDXRef-45e180275126c237
Relationship: SPDXRef-Package-apk-busybox-binsh-256fc96b4a8c4da8 DEPENDENCY_OF SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-111ee70376f63525
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-3094ceee1ecfa6a4
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-4a664786168b2249
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-58fa2e90c63afb3a
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-71204313a9d94cce
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-79bde4ce21f2d6d2
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f DEPENDENCY_OF SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-997ca43adda17ab6
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-ac56fcb4bc2b7257
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-ade6164a43f8be51
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-bf499b70b232e4c2
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-c987374590a7d086
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-d533bd96d693f86e
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-dbb1d7a6be2920de
Relationship: SPDXRef-Package-apk-alpine-baselayout-data-291d1267b40d636f CONTAINS SPDXRef-ddf259d58d41d03c
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-17634874eaec534a
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-1df9645b615c6f0b
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-1f7c9f03f1f38408
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-2789d612e7744068
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-31de9cc53148957a
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-54cdcd0f9a9360ef
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-66323df00c9157e2
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-75d3d06b1047ec20
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-8bc430e0b6742e90
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-8e734ba43e652e58
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-989af91b22c54f15
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-9f8b874295a12723
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-bb19e1977abff271
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-cee53a31edb0cb5e
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-d322e64cf0e83c18
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-dad76f415b494e1a
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-e0812703f353217c
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-e8e001549e9ea680
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-f33b1e57709d82f
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-f45a13601846dd9b
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-f5a04c41271c4c3f
Relationship: SPDXRef-Package-apk-alpine-keys-2b5e23d349b556cf CONTAINS SPDXRef-f9b7199e302a0a2e
Relationship: SPDXRef-Package-apk-busybox-623d53216342d45e CONTAINS SPDXRef-21c5db0890b2ee30
Relationship: SPDXRef-Package-apk-busybox-623d53216342d45e DEPENDENCY_OF SPDXRef-Package-apk-busybox-binsh-256fc96b4a8c4da8
Relationship: SPDXRef-Package-apk-busybox-623d53216342d45e CONTAINS SPDXRef-45e180275126c237
Relationship: SPDXRef-Package-apk-busybox-623d53216342d45e CONTAINS SPDXRef-49772dafcddb7d6
Relationship: SPDXRef-Package-apk-busybox-623d53216342d45e CONTAINS SPDXRef-c49a891f9a0bedcc
Relationship: SPDXRef-Package-apk-busybox-623d53216342d45e OTHER SPDXRef-Package-binary-busybox-d49bb0510b7c7ca7
RelationshipComment: ownership-by-file-overlap: indicates that the parent package claims ownership of a child package since the parent metadata indicates overlap with a location that a cataloger found the child package by
Relationship: SPDXRef-Package-apk-busybox-623d53216342d45e CONTAINS SPDXRef-ddc9afbfe44a67cb
Relationship: SPDXRef-Package-apk-busybox-623d53216342d45e CONTAINS SPDXRef-ff01017e002cca42
Relationship: SPDXRef-Package-apk-libssl3-7ae494d499484cc8 CONTAINS SPDXRef-5156e2896fd3bffd
Relationship: SPDXRef-Package-apk-libssl3-7ae494d499484cc8 DEPENDENCY_OF SPDXRef-Package-apk-ssl-client-b15247aafcd4a647
Relationship: SPDXRef-Package-apk-libssl3-7ae494d499484cc8 DEPENDENCY_OF SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc
Relationship: SPDXRef-Package-apk-ca-certificates-bundle-893d472df8998cbd CONTAINS SPDXRef-6fede8fa1634c59
Relationship: SPDXRef-Package-apk-ca-certificates-bundle-893d472df8998cbd DEPENDENCY_OF SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-16212920a3aa3f0
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-1949455873a628b0
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-609be614951eaa00
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-9ad1b8f45eb9c2c3
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-9c35640b7261f6c0
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-a612505b3b16058b
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-b9da6d0c6423545f
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-de5c4e1acbe1962e
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-e3b7e6af5d580ea0
Relationship: SPDXRef-Package-apk-alpine-baselayout-92b19c7750fb559d CONTAINS SPDXRef-e4bafc6de9373073
Relationship: SPDXRef-Package-apk-zlib-94014313cfcd2b71 CONTAINS SPDXRef-9f32ece93f41858b
Relationship: SPDXRef-Package-apk-zlib-94014313cfcd2b71 DEPENDENCY_OF SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc
Relationship: SPDXRef-Package-apk-ssl-client-b15247aafcd4a647 CONTAINS SPDXRef-974b71af5e241870
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-libcrypto3-20fd21bab4a9be13
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-busybox-623d53216342d45e
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-libssl3-7ae494d499484cc8
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-zlib-94014313cfcd2b71
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-ssl-client-b15247aafcd4a647
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-scanelf-e903138d19e85b80
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 DEPENDENCY_OF SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b
Relationship: SPDXRef-Package-apk-musl-d9700f02cf26e8b8 CONTAINS SPDXRef-fa9108ca3ddd517b
Relationship: SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc CONTAINS SPDXRef-1fe6bda94c049269
Relationship: SPDXRef-Package-apk-apk-tools-e5f757b0df1f62bc CONTAINS SPDXRef-c03f862705ab1b46
Relationship: SPDXRef-Package-apk-scanelf-e903138d19e85b80 CONTAINS SPDXRef-dccc46eb1250458d
Relationship: SPDXRef-Package-apk-scanelf-e903138d19e85b80 DEPENDENCY_OF SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b
Relationship: SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b DEPENDENCY_OF SPDXRef-Package-apk-libc-utils-8126b232e2d3c608
Relationship: SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b CONTAINS SPDXRef-936d08662fa1a975
Relationship: SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b CONTAINS SPDXRef-a1d1806ecc9b65e9
Relationship: SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b CONTAINS SPDXRef-a61ac2747b342275
Relationship: SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b CONTAINS SPDXRef-b9d6cec6532d64a5
Relationship: SPDXRef-Package-apk-musl-utils-f71ecf5267e6c37b CONTAINS SPDXRef-f528514d300ba632
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment