1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
<?xml version="1.0" ?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.3" serialNumber="urn:uuid:1441d33a-e0fc-45b5-af3b-61ee52a88bac" version="1">
<metadata>
<timestamp>2023-01-07T13:44:32.312678+00:00</timestamp>
<tools>
<tool>
<name>product-cbom-generator</name>
</tool>
</tools>
<component type="application" bom-ref="myApp">
<name>root-component</name>
<version/>
<licenses>
<license>
<id>MIT</id>
</license>
</licenses>
</component>
</metadata>
<components>
<component type="library" bom-ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz">
<author>Test Author</author>
<name>setuptools</name>
<version>50.3.2</version>
<licenses>
<license>
<id>MIT</id>
</license>
</licenses>
<purl>pkg:pypi/setuptools@50.3.2?extension=tar.gz</purl>
<evidence>
<licenses>
<license>
<id>MIT</id>
</license>
</licenses>
<copyright>
<text>Commercial</text>
<text>Commercial 2</text>
</copyright>
</evidence>
</component>
</components>
<dependencies>
<dependency ref="myApp">
<dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
</dependency>
<dependency ref="pkg:pypi/setuptools@50.3.2?extension=tar.gz"/>
</dependencies>
</bom>
|
