scientific-computing-toolkit/tools/sbom-diff-and-risk/examples/sarif_after.json at main · stacknil/scientific-computing-toolkit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "components": [
    {
      "bom-ref": "pkg:pypi/requests@2.0.0",
      "type": "library",
      "name": "requests",
      "version": "2.0.0",
      "purl": "pkg:pypi/requests@2.0.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://pypi.org/project/requests/"
        }
      ]
    },
    {
      "bom-ref": "pkg:pypi/mystery-lib@0.1.0",
      "type": "library",
      "name": "mystery-lib",
      "version": "0.1.0",
      "purl": "pkg:pypi/mystery-lib@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://198.51.100.10/packages/mystery-lib-0.1.0.tar.gz"
        }
      ]
    }
  ]
}