Adding packages SBOM

Signed-off-by: Erika Heidi <[email protected]>
minicli · Jun 20, 2022 · bc239ee · bc239ee
1 parent 8c6285d
commit bc239ee
Showing 1 changed file with 64 additions and 0 deletions.
diff --git a/packages.sbom.json b/packages.sbom.json
@@ -0,0 +1,64 @@
+{
+ "SPDXID": "SPDXRef-DOCUMENT",
+ "name": ".",
+ "spdxVersion": "SPDX-2.2",
+ "creationInfo": {
+  "created": "2022-06-20T15:36:54.808657195Z",
+  "creators": [
+   "Organization: Anchore, Inc",
+   "Tool: syft-0.46.2"
+  ],
+  "licenseListVersion": "3.17"
+ },
+ "dataLicense": "CC0-1.0",
+ "documentNamespace": "https://anchore.com/syft/dir/f0402303-ef62-4eee-b9e4-4dfc5593d648",
+ "packages": [
+  {
+   "SPDXID": "SPDXRef-de075d1a84a8113f",
+   "name": "phar-io/version",
+   "licenseConcluded": "NONE",
+   "downloadLocation": "NOASSERTION",
+   "externalRefs": [
+    {
+     "referenceCategory": "SECURITY",
+     "referenceLocator": "cpe:2.3:a:phar-io\\/version:phar-io\\/version:3.0.1:*:*:*:*:*:*:*",
+     "referenceType": "cpe23Type"
+    },
+    {
+     "referenceCategory": "SECURITY",
+     "referenceLocator": "cpe:2.3:a:phar-io\\/version:phar_io\\/version:3.0.1:*:*:*:*:*:*:*",
+     "referenceType": "cpe23Type"
+    },
+    {
+     "referenceCategory": "SECURITY",
+     "referenceLocator": "cpe:2.3:a:phar_io\\/version:phar-io\\/version:3.0.1:*:*:*:*:*:*:*",
+     "referenceType": "cpe23Type"
+    },
+    {
+     "referenceCategory": "SECURITY",
+     "referenceLocator": "cpe:2.3:a:phar_io\\/version:phar_io\\/version:3.0.1:*:*:*:*:*:*:*",
+     "referenceType": "cpe23Type"
+    },
+    {
+     "referenceCategory": "SECURITY",
+     "referenceLocator": "cpe:2.3:a:phar:phar-io\\/version:3.0.1:*:*:*:*:*:*:*",
+     "referenceType": "cpe23Type"
+    },
+    {
+     "referenceCategory": "SECURITY",
+     "referenceLocator": "cpe:2.3:a:phar:phar_io\\/version:3.0.1:*:*:*:*:*:*:*",
+     "referenceType": "cpe23Type"
+    },
+    {
+     "referenceCategory": "PACKAGE_MANAGER",
+     "referenceLocator": "pkg:composer/phar-io/[email protected]",
+     "referenceType": "purl"
+    }
+   ],
+   "filesAnalyzed": false,
+   "licenseDeclared": "NONE",
+   "sourceInfo": "acquired package info from PHP composer manifest: vendor/phar-io/manifest/composer.lock",
+   "versionInfo": "3.0.1"
+  }
+ ]
+}