Skip to content

Commit

Permalink
add sbom
Browse files Browse the repository at this point in the history
  • Loading branch information
ajmalab committed Jul 11, 2023
1 parent b231dec commit ba5f2f8
Show file tree
Hide file tree
Showing 2 changed files with 126 additions and 0 deletions.
77 changes: 77 additions & 0 deletions sbom.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,77 @@
{
"bomFormat": "CycloneDX",
"specVersion": "1.4",
"serialNumber": "urn:uuid:6b603f2b-e786-4c43-b9b6-5693b232659d",
"version": 1,
"metadata": {
"timestamp": "2023-07-11T17:53:30.248Z",
"tools": [
{
"vendor": "cyclonedx",
"name": "cdxgen",
"version": "8.5.2"
}
],
"authors": [
{
"name": "Prabhu Subramanian",
"email": "prabhu@appthreat.com"
}
],
"component": {
"group": "",
"name": "nodejs-test",
"type": "application",
"bom-ref": "pkg:application/nodejs-test"
}
},
"components": [
{
"publisher": "",
"group": "",
"name": "lodash",
"version": "4.17.21",
"description": "",
"hashes": [
{
"alg": "SHA-512",
"content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
}
],
"licenses": [],
"purl": "pkg:npm/lodash@4.17.21",
"type": "library",
"bom-ref": "pkg:npm/lodash@4.17.21",
"properties": [
{
"name": "SrcFile",
"value": "/Users/Ajmal.Kottilingal/dev/nodejs-test/package-lock.json"
}
]
}
],
"dependencies": [
{
"ref": "pkg:application/nodejs-test",
"dependsOn": [
"pkg:npm/lodash@4.17.21"
]
},
{
"ref": "pkg:npm/lodash@4.17.21",
"dependsOn": []
}
],
"externalReferences": [
{
"type": "other",
"url": ".",
"comment": "Base path"
},
{
"type": "other",
"url": "/Users/Ajmal.Kottilingal/dev/nodejs-test/package-lock.json",
"comment": "Package file"
}
]
}
49 changes: 49 additions & 0 deletions sbom.xml
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
<?xml version="1.0" encoding="utf-8"?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.4" serialNumber="urn:uuid:6b603f2b-e786-4c43-b9b6-5693b232659d" version="1">
<metadata>
<timestamp>2023-07-11T17:53:30.264Z</timestamp>
<tools>
<tool>
<vendor>cyclonedx</vendor>
<name>cdxgen</name>
<version>8.5.2</version>
</tool>
</tools>
<authors>
<author>
<name>Prabhu Subramanian</name>
<email>prabhu@appthreat.com</email>
</author>
</authors>
</metadata>
<components>
<component type="library" bom-ref="pkg:npm/lodash@4.17.21">
<publisher/>
<group/>
<name>lodash</name>
<version>4.17.21</version>
<description/>
<hashes>
<hash alg="SHA-512">bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a</hash>
</hashes>
<licenses/>
<purl>pkg:npm/lodash@4.17.21</purl>
</component>
</components>
<externalReferences>
<reference type="other">
<url>.</url>
<comment>Base path</comment>
</reference>
<reference type="other">
<url>/Users/Ajmal.Kottilingal/dev/nodejs-test/package-lock.json</url>
<comment>Package file</comment>
</reference>
</externalReferences>
<dependencies>
<dependency ref="pkg:application/nodejs-test">
<dependency ref="pkg:npm/lodash@4.17.21"/>
</dependency>
<dependency ref="pkg:npm/lodash@4.17.21"/>
</dependencies>
</bom>

0 comments on commit ba5f2f8

Please sign in to comment.