Created
January 3, 2025 06:25
-
-
Save viveksahu26/16fa1c1b0fc0cf636088aa829585e41e to your computer and use it in GitHub Desktop.
sbomasm flat merge o/p
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
sbomasm assemble -c config.yaml -f sbomex-cdx.json sbomgr-cdx.json | |
{ | |
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", | |
"bomFormat": "CycloneDX", | |
"specVersion": "1.6", | |
"serialNumber": "urn:uuid:44f59852-907c-4986-9247-67316fbabdc3", | |
"version": 1, | |
"metadata": { | |
"timestamp": "2025-01-03T06:23:20Z", | |
"tools": { | |
"components": [ | |
{ | |
"type": "application", | |
"supplier": { | |
"name": "Interlynk", | |
"url": [ | |
"https://interlynk.io" | |
], | |
"contact": [ | |
{ | |
"email": "support@interlynk.io" | |
} | |
] | |
}, | |
"name": "sbomasm", | |
"version": "v0.1.9", | |
"description": "Assembler \u0026 Editor for your sboms", | |
"licenses": [ | |
{ | |
"license": { | |
"id": "Apache-2.0" | |
} | |
} | |
] | |
}, | |
{ | |
"type": "application", | |
"supplier": { | |
"name": "anchore" | |
}, | |
"name": "syft", | |
"version": "0.78.0" | |
} | |
] | |
}, | |
"authors": [ | |
{ | |
"name": "customer name", | |
"email": "hello@customer.com" | |
} | |
], | |
"component": { | |
"bom-ref": "lynk:6dc8dbf8-a455-4f0c-b24f-a34774902e43", | |
"type": "application", | |
"supplier": { | |
"name": "Interlynk", | |
"contact": [ | |
{ | |
"name": "Interlynk", | |
"email": "hello@interlynk.io" | |
} | |
] | |
}, | |
"author": "customer name", | |
"name": "Interlynk combined set", | |
"version": "v11.0.20", | |
"description": "set of binaries recv on May 04 2023" | |
}, | |
"supplier": { | |
"name": "Interlynk", | |
"contact": [ | |
{ | |
"name": "Interlynk", | |
"email": "hello@interlynk.io" | |
} | |
] | |
}, | |
"licenses": [ | |
{ | |
"license": { | |
"id": "CC-BY-1.0" | |
} | |
} | |
] | |
}, | |
"components": [ | |
{ | |
"bom-ref": "lynk:7f00b307-8fc3-4e4c-a41c-6b5379327a95", | |
"type": "file", | |
"name": "sbomex", | |
"version": "v1.0.9", | |
"components": [ | |
{ | |
"bom-ref": "lynk:ff86edd4-aea9-4c3c-80ca-77a464c46e17", | |
"type": "library", | |
"name": "github.com/google/uuid", | |
"version": "v1.3.0", | |
"cpe": "cpe:2.3:a:google:uuid:v1.3.0:*:*:*:*:*:*:*", | |
"purl": "pkg:golang/github.com/google/uuid@v1.3.0", | |
"properties": [ | |
{ | |
"name": "syft:package:foundBy", | |
"value": "go-module-binary-cataloger" | |
}, | |
{ | |
"name": "syft:package:language", | |
"value": "go" | |
}, | |
{ | |
"name": "syft:package:metadataType", | |
"value": "GolangBinMetadata" | |
}, | |
{ | |
"name": "syft:package:type", | |
"value": "go-module" | |
}, | |
{ | |
"name": "syft:location:0:path", | |
"value": "dist/sbomex-linux-amd64" | |
}, | |
{ | |
"name": "syft:metadata:architecture", | |
"value": "amd64" | |
}, | |
{ | |
"name": "syft:metadata:goCompiledVersion", | |
"value": "go1.20" | |
}, | |
{ | |
"name": "syft:metadata:h1Digest", | |
"value": "h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=" | |
}, | |
{ | |
"name": "syft:metadata:mainModule", | |
"value": "github.com/interlynk-io/sbomex" | |
} | |
] | |
}, | |
{ | |
"bom-ref": "lynk:0b05dae1-8ae2-4e68-a9bf-86ddf030cb82", | |
"type": "library", | |
"name": "github.com/inconshreveable/mousetrap", | |
"version": "v1.1.0", | |
"cpe": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*", | |
"purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0", | |
"properties": [ | |
{ | |
"name": "syft:package:foundBy", | |
"value": "go-module-binary-cataloger" | |
}, | |
{ | |
"name": "syft:package:language", | |
"value": "go" | |
}, | |
{ | |
"name": "syft:package:metadataType", | |
"value": "GolangBinMetadata" | |
}, | |
{ | |
"name": "syft:package:type", | |
"value": "go-module" | |
}, | |
{ | |
"name": "syft:location:0:path", | |
"value": "dist/sbomex-windows-amd64.exe" | |
}, | |
{ | |
"name": "syft:metadata:architecture", | |
"value": "amd64" | |
}, | |
{ | |
"name": "syft:metadata:goCompiledVersion", | |
"value": "go1.20" | |
}, | |
{ | |
"name": "syft:metadata:h1Digest", | |
"value": "h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=" | |
}, | |
{ | |
"name": "syft:metadata:mainModule", | |
"value": "github.com/interlynk-io/sbomex" | |
} | |
] | |
} | |
] | |
}, | |
{ | |
"bom-ref": "lynk:5e873593-492b-41ba-94fd-d8555c80182b", | |
"type": "file", | |
"name": "sbomgr", | |
"version": "v2.1.9", | |
"components": [ | |
{ | |
"bom-ref": "lynk:e856f4c7-061d-4de6-86b5-0a60bc1a458d", | |
"type": "library", | |
"name": "billiard", | |
"version": "3.6.0.0", | |
"cpe": "cpe:2.3:a:python-billiard:python-billiard:3.6.0.0:*:*:*:*:*:*:*", | |
"purl": "pkg:pypi/billiard@3.6.0.0", | |
"properties": [ | |
{ | |
"name": "syft:package:foundBy", | |
"value": "sbom-cataloger" | |
}, | |
{ | |
"name": "syft:package:language", | |
"value": "python" | |
}, | |
{ | |
"name": "syft:package:type", | |
"value": "python" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python-billiard:python_billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python_billiard:python-billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python_billiard:python_billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:billiard:python-billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:billiard:python_billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python-billiard:billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python_billiard:billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python:python-billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python:python_billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:billiard:billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python:billiard:3.6.0.0:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:location:0:path", | |
"value": "samples/trivy-trivy-ci-test.cdx.json" | |
} | |
] | |
}, | |
{ | |
"bom-ref": "lynk:c1b73b53-38ca-4d19-b62e-957156f0024d", | |
"type": "library", | |
"name": "botocore", | |
"version": "1.12.130", | |
"cpe": "cpe:2.3:a:python-botocore:python-botocore:1.12.130:*:*:*:*:*:*:*", | |
"purl": "pkg:pypi/botocore@1.12.130", | |
"properties": [ | |
{ | |
"name": "syft:package:foundBy", | |
"value": "sbom-cataloger" | |
}, | |
{ | |
"name": "syft:package:language", | |
"value": "python" | |
}, | |
{ | |
"name": "syft:package:type", | |
"value": "python" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python-botocore:python_botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python_botocore:python-botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python_botocore:python_botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:botocore:python-botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:botocore:python_botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python-botocore:botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python_botocore:botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python:python-botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python:python_botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:botocore:botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:cpe23", | |
"value": "cpe:2.3:a:python:botocore:1.12.130:*:*:*:*:*:*:*" | |
}, | |
{ | |
"name": "syft:location:0:path", | |
"value": "samples/trivy-trivy-ci-test.cdx.json" | |
} | |
] | |
} | |
] | |
} | |
], | |
"dependencies": [ | |
{ | |
"ref": "lynk:6dc8dbf8-a455-4f0c-b24f-a34774902e43", | |
"dependsOn": [ | |
"lynk:7f00b307-8fc3-4e4c-a41c-6b5379327a95", | |
"lynk:5e873593-492b-41ba-94fd-d8555c80182b" | |
] | |
} | |
] | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment