| { |
| "bomFormat": "CycloneDX", |
| "specVersion": "1.5", |
| "serialNumber": "urn:uuid:88ce0ba6-17d8-4080-8e2f-31ccc20959bb", |
| "version": 1, |
| "metadata": { |
| "timestamp": "2023-11-14T19:33:35.685Z", |
| "tools": { |
| "components": [ |
| { |
| "group": "@cyclonedx", |
| "name": "cdxgen", |
| "version": "9.9.3", |
| "purl": "pkg:npm/%40cyclonedx/cdxgen@9.9.3", |
| "type": "application", |
| "bom-ref": "pkg:npm/@cyclonedx/cdxgen@9.9.3", |
| "author": "OWASP Foundation", |
| "publisher": "OWASP Foundation" |
| } |
| ] |
| }, |
| "authors": [ |
| { |
| "name": "OWASP Foundation" |
| } |
| ], |
| "component": { |
| "group": "", |
| "name": "without-core", |
| "version": "latest", |
| "type": "application", |
| "bom-ref": "pkg:pypi/without-core@latest", |
| "purl": "pkg:pypi/without-core@latest", |
| "components": [] |
| } |
| }, |
| "components": [ |
| { |
| "group": "", |
| "name": "watchtower", |
| "version": "0.7.3", |
| "purl": "pkg:pypi/watchtower@0.7.3", |
| "type": "library", |
| "bom-ref": "pkg:pypi/watchtower@0.7.3", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 1, |
| "methods": [ |
| { |
| "technique": "instrumentation", |
| "confidence": 1, |
| "value": "/tmp/cdxgen-venv-DGHffu" |
| } |
| ] |
| } |
| } |
| }, |
| { |
| "group": "", |
| "name": "boto3", |
| "version": "1.17.112", |
| "purl": "pkg:pypi/boto3@1.17.112", |
| "type": "framework", |
| "bom-ref": "pkg:pypi/boto3@1.17.112", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| }, |
| { |
| "group": "", |
| "name": "botocore", |
| "version": "1.20.112", |
| "purl": "pkg:pypi/botocore@1.20.112", |
| "type": "framework", |
| "bom-ref": "pkg:pypi/botocore@1.20.112", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| }, |
| { |
| "group": "", |
| "name": "urllib3", |
| "version": "1.26.18", |
| "purl": "pkg:pypi/urllib3@1.26.18", |
| "type": "library", |
| "bom-ref": "pkg:pypi/urllib3@1.26.18", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| }, |
| { |
| "group": "", |
| "name": "jmespath", |
| "version": "0.10.0", |
| "purl": "pkg:pypi/jmespath@0.10.0", |
| "type": "library", |
| "bom-ref": "pkg:pypi/jmespath@0.10.0", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| }, |
| { |
| "group": "", |
| "name": "python-dateutil", |
| "version": "2.8.2", |
| "purl": "pkg:pypi/python-dateutil@2.8.2", |
| "type": "library", |
| "bom-ref": "pkg:pypi/python-dateutil@2.8.2", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| }, |
| { |
| "group": "", |
| "name": "six", |
| "version": "1.16.0", |
| "purl": "pkg:pypi/six@1.16.0", |
| "type": "library", |
| "bom-ref": "pkg:pypi/six@1.16.0", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| }, |
| { |
| "group": "", |
| "name": "s3transfer", |
| "version": "0.4.2", |
| "purl": "pkg:pypi/s3transfer@0.4.2", |
| "type": "library", |
| "bom-ref": "pkg:pypi/s3transfer@0.4.2", |
| "evidence": { |
| "identity": { |
| "field": "purl", |
| "confidence": 0.8, |
| "methods": [ |
| { |
| "technique": "manifest-analysis", |
| "confidence": 0.8, |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| } |
| }, |
| "properties": [ |
| { |
| "name": "SrcFile", |
| "value": "/app/provider_requirements/provider-amazon-1.4.0/python3.8/without-core/requirements.txt" |
| } |
| ] |
| } |
| ], |
| "services": [], |
| "dependencies": [ |
| { |
| "ref": "pkg:pypi/without-core@latest", |
| "dependsOn": [] |
| }, |
| { |
| "ref": "pkg:pypi/boto3@1.17.112", |
| "dependsOn": [ |
| "pkg:pypi/botocore@1.20.112", |
| "pkg:pypi/jmespath@0.10.0", |
| "pkg:pypi/s3transfer@0.4.2" |
| ] |
| }, |
| { |
| "ref": "pkg:pypi/botocore@1.20.112", |
| "dependsOn": [ |
| "pkg:pypi/jmespath@0.10.0", |
| "pkg:pypi/python-dateutil@2.8.2", |
| "pkg:pypi/urllib3@1.26.18" |
| ] |
| }, |
| { |
| "ref": "pkg:pypi/urllib3@1.26.18", |
| "dependsOn": [] |
| }, |
| { |
| "ref": "pkg:pypi/jmespath@0.10.0", |
| "dependsOn": [] |
| }, |
| { |
| "ref": "pkg:pypi/python-dateutil@2.8.2", |
| "dependsOn": [ |
| "pkg:pypi/six@1.16.0" |
| ] |
| }, |
| { |
| "ref": "pkg:pypi/six@1.16.0", |
| "dependsOn": [] |
| }, |
| { |
| "ref": "pkg:pypi/s3transfer@0.4.2", |
| "dependsOn": [ |
| "pkg:pypi/botocore@1.20.112" |
| ] |
| }, |
| { |
| "ref": "pkg:pypi/watchtower@0.7.3", |
| "dependsOn": [ |
| "pkg:pypi/boto3@1.17.112" |
| ] |
| } |
| ] |
| } |
