sbom-validator/bom.json at main · shiftleftcyber/sbom-validator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6a398469-2e75-4417-ba49-fec05605bbbd",
  "version": 1,
  "metadata": {
    "timestamp": "2025-10-28T15:05:34-04:00",
    "tools": [
      {
        "vendor": "CycloneDX",
        "name": "cyclonedx-gomod",
        "version": "v1.9.0",
        "hashes": [
          {
            "alg": "MD5",
            "content": "c6c5f03f799835bb36e362fc318060a9"
          },
          {
            "alg": "SHA-1",
            "content": "84d406d0f348af1a3aaac90337f339f8e466ec86"
          },
          {
            "alg": "SHA-256",
            "content": "71c1ce94e0e1888752379465ae4909192e8840fd72c012e612fc3bec581d1bfd"
          },
          {
            "alg": "SHA-384",
            "content": "30553a172ee678508a633d30b6c8dff7bf7460ebb953b13e5fb76fc7d99a0acaef0e39762047bd854855b1bf28cea3ea"
          },
          {
            "alg": "SHA-512",
            "content": "f8008743df4269ac6076ad68a303ecc24afac4d7bdc3fbbd8a7c3947a930d52c1e082f167049f67322e0c846a00c34615c68d2c989e461bbdf4c68215d5407ae"
          }
        ],
        "externalReferences": [
          {
            "url": "https://github.com/CycloneDX/cyclonedx-gomod",
            "type": "vcs"
          },
          {
            "url": "https://cyclonedx.org",
            "type": "website"
          }
        ]
      }
    ],
    "component": {
      "bom-ref": "pkg:golang/github.com/shiftleftcyber/sbom-validator@v1.2.1-0.20251024123216-7578fac172e4?type=module",
      "type": "application",
      "name": "github.com/shiftleftcyber/sbom-validator",
      "version": "v1.2.1-0.20251024123216-7578fac172e4",
      "purl": "pkg:golang/github.com/shiftleftcyber/sbom-validator@v1.2.1-0.20251024123216-7578fac172e4?type=module\u0026goos=darwin\u0026goarch=arm64",
      "externalReferences": [
        {
          "url": "https://github.com/shiftleftcyber/sbom-validator",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "MIT"
            }
          }
        ]
      }
    }
  },
  "components": [
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20180127040702-4e3ac2762d5f?type=module",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonpointer",
      "version": "v0.0.0-20180127040702-4e3ac2762d5f",
      "scope": "required",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20180127040702-4e3ac2762d5f?type=module\u0026goos=darwin\u0026goarch=arm64",
      "externalReferences": [
        {
          "url": "https://github.com/xeipuuv/gojsonpointer",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonreference",
      "version": "v0.0.0-20180127040603-bd5ef7bd5415",
      "scope": "required",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module\u0026goos=darwin\u0026goarch=arm64",
      "externalReferences": [
        {
          "url": "https://github.com/xeipuuv/gojsonreference",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      }
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?type=module",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonschema",
      "version": "v1.2.0",
      "scope": "required",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?type=module\u0026goos=darwin\u0026goarch=arm64",
      "externalReferences": [
        {
          "url": "https://github.com/xeipuuv/gojsonschema",
          "type": "vcs"
        }
      ],
      "evidence": {
        "licenses": [
          {
            "license": {
              "id": "Apache-2.0"
            }
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:golang/github.com/shiftleftcyber/sbom-validator@v1.2.1-0.20251024123216-7578fac172e4?type=module",
      "dependsOn": [
        "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20180127040702-4e3ac2762d5f?type=module",
        "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module",
        "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?type=module"
      ]
    },
    {
      "ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20180127040702-4e3ac2762d5f?type=module"
    },
    {
      "ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module"
    },
    {
      "ref": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?type=module",
      "dependsOn": [
        "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20180127040702-4e3ac2762d5f?type=module",
        "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module"
      ]
    }
  ]
}