Skip to content

Instantly share code, notes, and snippets.

@viveksahu26
Created January 3, 2025 06:25
Show Gist options
  • Save viveksahu26/16fa1c1b0fc0cf636088aa829585e41e to your computer and use it in GitHub Desktop.
Save viveksahu26/16fa1c1b0fc0cf636088aa829585e41e to your computer and use it in GitHub Desktop.
sbomasm flat merge o/p
sbomasm assemble -c config.yaml -f sbomex-cdx.json sbomgr-cdx.json
{
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"serialNumber": "urn:uuid:44f59852-907c-4986-9247-67316fbabdc3",
"version": 1,
"metadata": {
"timestamp": "2025-01-03T06:23:20Z",
"tools": {
"components": [
{
"type": "application",
"supplier": {
"name": "Interlynk",
"url": [
"https://interlynk.io"
],
"contact": [
{
"email": "support@interlynk.io"
}
]
},
"name": "sbomasm",
"version": "v0.1.9",
"description": "Assembler \u0026 Editor for your sboms",
"licenses": [
{
"license": {
"id": "Apache-2.0"
}
}
]
},
{
"type": "application",
"supplier": {
"name": "anchore"
},
"name": "syft",
"version": "0.78.0"
}
]
},
"authors": [
{
"name": "customer name",
"email": "hello@customer.com"
}
],
"component": {
"bom-ref": "lynk:6dc8dbf8-a455-4f0c-b24f-a34774902e43",
"type": "application",
"supplier": {
"name": "Interlynk",
"contact": [
{
"name": "Interlynk",
"email": "hello@interlynk.io"
}
]
},
"author": "customer name",
"name": "Interlynk combined set",
"version": "v11.0.20",
"description": "set of binaries recv on May 04 2023"
},
"supplier": {
"name": "Interlynk",
"contact": [
{
"name": "Interlynk",
"email": "hello@interlynk.io"
}
]
},
"licenses": [
{
"license": {
"id": "CC-BY-1.0"
}
}
]
},
"components": [
{
"bom-ref": "lynk:7f00b307-8fc3-4e4c-a41c-6b5379327a95",
"type": "file",
"name": "sbomex",
"version": "v1.0.9",
"components": [
{
"bom-ref": "lynk:ff86edd4-aea9-4c3c-80ca-77a464c46e17",
"type": "library",
"name": "github.com/google/uuid",
"version": "v1.3.0",
"cpe": "cpe:2.3:a:google:uuid:v1.3.0:*:*:*:*:*:*:*",
"purl": "pkg:golang/github.com/google/uuid@v1.3.0",
"properties": [
{
"name": "syft:package:foundBy",
"value": "go-module-binary-cataloger"
},
{
"name": "syft:package:language",
"value": "go"
},
{
"name": "syft:package:metadataType",
"value": "GolangBinMetadata"
},
{
"name": "syft:package:type",
"value": "go-module"
},
{
"name": "syft:location:0:path",
"value": "dist/sbomex-linux-amd64"
},
{
"name": "syft:metadata:architecture",
"value": "amd64"
},
{
"name": "syft:metadata:goCompiledVersion",
"value": "go1.20"
},
{
"name": "syft:metadata:h1Digest",
"value": "h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I="
},
{
"name": "syft:metadata:mainModule",
"value": "github.com/interlynk-io/sbomex"
}
]
},
{
"bom-ref": "lynk:0b05dae1-8ae2-4e68-a9bf-86ddf030cb82",
"type": "library",
"name": "github.com/inconshreveable/mousetrap",
"version": "v1.1.0",
"cpe": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*",
"purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
"properties": [
{
"name": "syft:package:foundBy",
"value": "go-module-binary-cataloger"
},
{
"name": "syft:package:language",
"value": "go"
},
{
"name": "syft:package:metadataType",
"value": "GolangBinMetadata"
},
{
"name": "syft:package:type",
"value": "go-module"
},
{
"name": "syft:location:0:path",
"value": "dist/sbomex-windows-amd64.exe"
},
{
"name": "syft:metadata:architecture",
"value": "amd64"
},
{
"name": "syft:metadata:goCompiledVersion",
"value": "go1.20"
},
{
"name": "syft:metadata:h1Digest",
"value": "h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="
},
{
"name": "syft:metadata:mainModule",
"value": "github.com/interlynk-io/sbomex"
}
]
}
]
},
{
"bom-ref": "lynk:5e873593-492b-41ba-94fd-d8555c80182b",
"type": "file",
"name": "sbomgr",
"version": "v2.1.9",
"components": [
{
"bom-ref": "lynk:e856f4c7-061d-4de6-86b5-0a60bc1a458d",
"type": "library",
"name": "billiard",
"version": "3.6.0.0",
"cpe": "cpe:2.3:a:python-billiard:python-billiard:3.6.0.0:*:*:*:*:*:*:*",
"purl": "pkg:pypi/billiard@3.6.0.0",
"properties": [
{
"name": "syft:package:foundBy",
"value": "sbom-cataloger"
},
{
"name": "syft:package:language",
"value": "python"
},
{
"name": "syft:package:type",
"value": "python"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python-billiard:python_billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python_billiard:python-billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python_billiard:python_billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:billiard:python-billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:billiard:python_billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python-billiard:billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python_billiard:billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python:python-billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python:python_billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:billiard:billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python:billiard:3.6.0.0:*:*:*:*:*:*:*"
},
{
"name": "syft:location:0:path",
"value": "samples/trivy-trivy-ci-test.cdx.json"
}
]
},
{
"bom-ref": "lynk:c1b73b53-38ca-4d19-b62e-957156f0024d",
"type": "library",
"name": "botocore",
"version": "1.12.130",
"cpe": "cpe:2.3:a:python-botocore:python-botocore:1.12.130:*:*:*:*:*:*:*",
"purl": "pkg:pypi/botocore@1.12.130",
"properties": [
{
"name": "syft:package:foundBy",
"value": "sbom-cataloger"
},
{
"name": "syft:package:language",
"value": "python"
},
{
"name": "syft:package:type",
"value": "python"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python-botocore:python_botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python_botocore:python-botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python_botocore:python_botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:botocore:python-botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:botocore:python_botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python-botocore:botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python_botocore:botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python:python-botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python:python_botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:botocore:botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:python:botocore:1.12.130:*:*:*:*:*:*:*"
},
{
"name": "syft:location:0:path",
"value": "samples/trivy-trivy-ci-test.cdx.json"
}
]
}
]
}
],
"dependencies": [
{
"ref": "lynk:6dc8dbf8-a455-4f0c-b24f-a34774902e43",
"dependsOn": [
"lynk:7f00b307-8fc3-4e4c-a41c-6b5379327a95",
"lynk:5e873593-492b-41ba-94fd-d8555c80182b"
]
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment