Skip to content

Commit 23abdcc

Browse files
nishakmnishakm
committed
Updates to example7 binary sbom
- Recalculate hashes for ExternalMap - Remove Build element - Update relationships - Remove Build id from element list - Move all ExternalMap elements to SpdxDocument "imports" Signed-off-by: Nisha Kumar <nisha.kumar@oracle.com>
1 parent 97fc56b commit 23abdcc

1 file changed

Lines changed: 67 additions & 60 deletions

File tree

‎software/example7/spdx-3.0/example7-bin.spdx.json‎

Lines changed: 67 additions & 60 deletions
Original file line numberDiff line numberDiff line change
@@ -36,78 +36,24 @@
3636
],
3737
"software_primaryPurpose": "executable"
3838
},
39-
{
40-
"type": "ExternalMap",
41-
"externalSpdxId": "urn:uuid:a9f18ff3-17fa-419d-8966-abe4b992312b",
42-
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-golang.spdx.jsonld",
43-
"verifiedUsing": [
44-
{
45-
"type": "Hash",
46-
"algorithm": "sha256",
47-
"hashValue": "ffde414ff13e529e8ea834f92d0e6df9c56ebace6c359ef3fca9cb60ea6cbb63"
48-
}
49-
]
50-
},
51-
{
52-
"type": "ExternalMap",
53-
"externalSpdxId": "urn:uuid:e1877974-0aaa-48e6-931f-db4898c543f8",
54-
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-go-module.spdx.jsonld",
55-
"verifiedUsing": [
56-
{
57-
"type": "Hash",
58-
"algorithm": "sha256",
59-
"hashValue": "28c680a0232828f5ea550a10e02e9548316d4f8c1c618ae52bdf1d8e6f5a3c3c"
60-
}
61-
]
62-
},
63-
{
64-
"type": "ExternalMap",
65-
"externalSpdxId": "urn:uuid:4918b993-36f8-4e75-bf94-2f017575eae5",
66-
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-third-party-modules.spdx.jsonld",
67-
"verifiedUsing": [
68-
{
69-
"type": "Hash",
70-
"algorithm": "sha256",
71-
"hashValue": "9b34ebb21f3329351be6490733e17c0bd8b3cf4cc7321c0f3207c69844df133d"
72-
}
73-
]
74-
},
75-
{
76-
"type": "ExternalMap",
77-
"externalSpdxId": "urn:uuid:84e4231d-fc1d-4b4e-9609-05781f81fa73",
78-
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-third-party-modules.spdx.jsonld",
79-
"verifiedUsing": [
80-
{
81-
"type": "Hash",
82-
"algorithm": "sha256",
83-
"hashValue": "9b34ebb21f3329351be6490733e17c0bd8b3cf4cc7321c0f3207c69844df133d"
84-
}
85-
]
86-
},
87-
{
88-
"spdxId": "urn:uuid:128052d9-d307-43fc-a676-5d8791e12391",
89-
"type": "build_Build",
90-
"comment": "This element is used to express inputs and outputs of the go build"
91-
},
9239
{
9340
"type": "LifecycleScopedRelationship",
9441
"scope": "build",
9542
"spdxId": "urn:uuid:98dd3b3f-6b8f-49a1-88b6-628750516f1e",
9643
"creationInfo": "_:creationInfo",
97-
"relationshipType": "hasInputs",
98-
"from": "urn:uuid:128052d9-d307-43fc-a676-5d8791e12391",
44+
"relationshipType": "usesTool",
45+
"from": "urn:uuid:e1877974-0aaa-48e6-931f-db4898c543f8",
9946
"to": [
100-
"urn:uuid:a9f18ff3-17fa-419d-8966-abe4b992312b",
101-
"urn:uuid:e1877974-0aaa-48e6-931f-db4898c543f8"
47+
"urn:uuid:a9f18ff3-17fa-419d-8966-abe4b992312b"
10248
]
10349
},
10450
{
10551
"type": "LifecycleScopedRelationship",
10652
"scope": "build",
10753
"spdxId": "urn:uuid:a7b65a78-8ed2-4b20-a91b-40f94ecdb81c",
10854
"creationInfo": "_:creationInfo",
109-
"relationshipType": "hasOutputs",
110-
"from": "urn:uuid:128052d9-d307-43fc-a676-5d8791e12391",
55+
"relationshipType": "generates",
56+
"from": "urn:uuid:3b2939bf-fcce-4617-a06f-115168870b95",
11157
"to": [
11258
"urn:uuid:3773937f-6db8-49f9-920f-7d1a6b0cfcbb"
11359
]
@@ -135,7 +81,6 @@
13581
"element": [
13682
"urn:uuid:6731cd26-926c-486b-8127-340c0f11a228",
13783
"urn:uuid:3773937f-6db8-49f9-920f-7d1a6b0cfcbb",
138-
"urn:uuid:128052d9-d307-43fc-a676-5d8791e12391",
13984
"urn:uuid:98dd3b3f-6b8f-49a1-88b6-628750516f1e",
14085
"urn:uuid:a7b65a78-8ed2-4b20-a91b-40f94ecdb81c",
14186
"urn:uuid:5524e7dd-5d2f-44fa-86b0-ccaa3cf6fa63"
@@ -153,6 +98,68 @@
15398
],
15499
"rootElement": [
155100
"urn:uuid:4c7ec5f3-875b-4f99-8c4c-f0a718da8c4f"
101+
],
102+
"imports": [
103+
{
104+
"type": "ExternalMap",
105+
"externalSpdxId": "urn:uuid:a9f18ff3-17fa-419d-8966-abe4b992312b",
106+
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-golang.spdx.jsonld",
107+
"verifiedUsing": [
108+
{
109+
"type": "Hash",
110+
"algorithm": "sha256",
111+
"hashValue": "15ed567c36a30fb37f7d19f0f471434b9453909bf62d925194efe713ede62086"
112+
}
113+
]
114+
},
115+
{
116+
"type": "ExternalMap",
117+
"externalSpdxId": "urn:uuid:3b2939bf-fcce-4617-a06f-115168870b95",
118+
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-golang.spdx.jsonld",
119+
"verifiedUsing": [
120+
{
121+
"type": "Hash",
122+
"algorithm": "sha256",
123+
"hashValue": "15ed567c36a30fb37f7d19f0f471434b9453909bf62d925194efe713ede62086"
124+
}
125+
]
126+
},
127+
{
128+
"type": "ExternalMap",
129+
"externalSpdxId": "urn:uuid:e1877974-0aaa-48e6-931f-db4898c543f8",
130+
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-go-module.spdx.jsonld",
131+
"verifiedUsing": [
132+
{
133+
"type": "Hash",
134+
"algorithm": "sha256",
135+
"hashValue": "7bb2343efdccb4a2a2947219c87747673854fc6b550b2f98518af342f8dded17"
136+
}
137+
]
138+
},
139+
{
140+
"type": "ExternalMap",
141+
"externalSpdxId": "urn:uuid:4918b993-36f8-4e75-bf94-2f017575eae5",
142+
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-third-party-modules.spdx.jsonld",
143+
"verifiedUsing": [
144+
{
145+
"type": "Hash",
146+
"algorithm": "sha256",
147+
"hashValue": "0e3532e0773d24d1a3a0a58592effd67daf22ac89282dc18805e1eef23f68dfe"
148+
}
149+
]
150+
},
151+
{
152+
"type": "ExternalMap",
153+
"externalSpdxId": "urn:uuid:84e4231d-fc1d-4b4e-9609-05781f81fa73",
154+
"locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-third-party-modules.spdx.jsonld",
155+
"verifiedUsing": [
156+
{
157+
"type": "Hash",
158+
"algorithm": "sha256",
159+
"hashValue": "0e3532e0773d24d1a3a0a58592effd67daf22ac89282dc18805e1eef23f68dfe"
160+
}
161+
]
162+
}
156163
]
157164
}
158165
]

0 commit comments

Comments
 (0)