blob: 60b24d0c610b577935beaeae6ca3be20a79bff40 [file] [log] [blame]
{
"bomFormat": "CycloneDX",
"specVersion": "1.5",
"serialNumber": "urn:uuid:2d7e604e-9bfe-4abf-999e-af7f5489f4ce",
"version": 1,
"metadata": {
"timestamp": "2023-11-14T17:20:13.471Z",
"tools": {
"components": [
{
"group": "@cyclonedx",
"name": "cdxgen",
"version": "9.9.3",
"purl": "pkg:npm/%40cyclonedx/cdxgen@9.9.3",
"type": "application",
"bom-ref": "pkg:npm/@cyclonedx/cdxgen@9.9.3",
"author": "OWASP Foundation",
"publisher": "OWASP Foundation"
}
]
},
"authors": [
{
"name": "OWASP Foundation"
}
],
"component": {
"group": "",
"name": "without-core",
"version": "latest",
"type": "application",
"bom-ref": "pkg:pypi/without-core@latest",
"purl": "pkg:pypi/without-core@latest",
"components": []
}
},
"components": [
{
"group": "",
"name": "arrow",
"version": "1.2.3",
"purl": "pkg:pypi/arrow@1.2.3",
"type": "library",
"bom-ref": "pkg:pypi/arrow@1.2.3",
"evidence": {
"identity": {
"field": "purl",
"confidence": 1,
"methods": [
{
"technique": "instrumentation",
"confidence": 1,
"value": "/tmp/cdxgen-venv-sEebDZ"
}
]
}
}
},
{
"group": "",
"name": "python-dateutil",
"version": "2.8.2",
"purl": "pkg:pypi/python-dateutil@2.8.2",
"type": "library",
"bom-ref": "pkg:pypi/python-dateutil@2.8.2",
"evidence": {
"identity": {
"field": "purl",
"confidence": 0.8,
"methods": [
{
"technique": "manifest-analysis",
"confidence": 0.8,
"value": "/app/provider_requirements/provider-plexus-1.0.0/python3.7/without-core/requirements.txt"
}
]
}
},
"properties": [
{
"name": "SrcFile",
"value": "/app/provider_requirements/provider-plexus-1.0.0/python3.7/without-core/requirements.txt"
}
]
},
{
"group": "",
"name": "six",
"version": "1.16.0",
"purl": "pkg:pypi/six@1.16.0",
"type": "library",
"bom-ref": "pkg:pypi/six@1.16.0",
"evidence": {
"identity": {
"field": "purl",
"confidence": 0.8,
"methods": [
{
"technique": "manifest-analysis",
"confidence": 0.8,
"value": "/app/provider_requirements/provider-plexus-1.0.0/python3.7/without-core/requirements.txt"
}
]
}
},
"properties": [
{
"name": "SrcFile",
"value": "/app/provider_requirements/provider-plexus-1.0.0/python3.7/without-core/requirements.txt"
}
]
}
],
"services": [],
"dependencies": [
{
"ref": "pkg:pypi/without-core@latest",
"dependsOn": []
},
{
"ref": "pkg:pypi/python-dateutil@2.8.2",
"dependsOn": [
"pkg:pypi/six@1.16.0"
]
},
{
"ref": "pkg:pypi/six@1.16.0",
"dependsOn": []
},
{
"ref": "pkg:pypi/arrow@1.2.3",
"dependsOn": [
"pkg:pypi/python-dateutil@2.8.2"
]
}
]
}