sbom.cdx.json

Branch :

Show log
Commit
Author : Richard Hughes
Date : 2025-05-27 08:50:34
Hash : e9668c8c
Message : Add a SBOM template in CycloneDX format (#1224) Improve supply chain security by including a SBOM file with substituted values. This will be used to construct a composite platform SBOM. Signed-off-by: Richard Hughes <rhughes@redhat.com> Co-authored-by: Eugene Kliuchnikov <eustas.ru@gmail.com>

sbom.cdx.json

{
  "_comment": "See https://cyclonedx.org/ for more details",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "metadata": {
    "authors": [
      {
        "name": "@VCS_SBOM_AUTHORS@"
      }
    ]
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:github/google/brotli@@VCS_TAG@",
      "cpe": "cpe:2.3:a:google:brotli:@VCS_TAG@:*:*:*:*:*:*:*",
      "name": "Brotli",
      "version": "@VCS_VERSION@",
      "description": "A generic-purpose lossless compression algorithm",
      "authors": [
        {
          "name": "@VCS_AUTHORS@"
        }
      ],
      "supplier": {
        "name": "Brotli developers"
      },
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/google/brotli"
        }
      ]
    }
  ]
}

kc3-lang/brotli/sbom.cdx.json

Commit

kc3-lang/brotli /sbom.cdx.json