Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Find the following example of an SBOM file for JOC Cockpit release 2.5.3:

Code Block
languageyml
titleExtract of the SBOM example
linenumberstrue
collapsetrue
{
  "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.3"4",
  "version": 1,
  "serialNumber": "urn:uuid:725fd2047dab0542-c3cf3a28-4f2a4cb8-9e48af80-ee0cdfb17f2a5c9699ffb719",
  "version": 1,
  "metadata": {
    "timestamp": "2023-0104-02T0605T12:0846:3531.977Z277Z",
    "tools": [
      {
        "vendor": "CycloneDX@cyclonedx",
        "name": "Node.js modulecyclonedx-npm",
        "version": "31.10.6"
9.1",
        "externalReferences": [
          {
        }
    "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
     ],
       "type": "vcs",
            "componentcomment": "as detected from PackageJson property \"repository.url\""
          },
          {
            "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
            "type": "website",
            "comment": "as detected from PackageJson "library",
property \"homepage\""
          },
        "bom-ref  {
            "url": "pkg:npm/joc-cockpit@2.5.0https://github.com/CycloneDX/cyclonedx-node-npm/issues",
            "type": "issue-tracker",
            "comment": "as detected from PackageJson property \"bugs.url\""
          }
        ]
      },
      {
        "vendor": "@cyclonedx",
        "name": "joccyclonedx-cockpitlibrary",
        "version": "1.12.2.5.0",
",
        "externalReferences": [
          {
            "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
            "type": "vcs",
            "comment": "as detected from PackageJson property \"repository.url\""
          },
          {
            "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
            "type": "website",
            "descriptioncomment": "as detected "This project was generated with [Angular CLI](from PackageJson property \"homepage\""
          },
          {
            "url": "https://github.com/angular/angular-cli) version 14.1.1.CycloneDX/cyclonedx-javascript-library/issues",
            "type": "issue-tracker",
            "comment": "as detected from PackageJson property \"bugs.url\""
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "name": "joc-cockpit",
      "version": "2.5.3",
      "bom-ref": "joc-cockpit@2.5.3",
      "purl": "pkg:npm/joc-cockpit@2.5.0"
3",
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": ""
        },
        {
          "name": "cdx:npm:package:private",
          "value": "true"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "name": "__ngcc_entry_points__.json",
      "bom-ref": "pkg:npm/%40angular/animations@14.2.12-/__ngcc_entry_points__.json@-",
      "authorpurl": "angularpkg:npm/__ngcc_entry_points__.json",
      "groupproperties": "@angular", [
        {
          "name": "animationscdx:npm:package:path",
          "versionvalue": "14.2.12",node_modules/__ngcc_entry_points__.json"
        },
        {
          "descriptionname": "Angular - animations integration with web-animations",cdx:npm:package:extraneous",
          "value": "true"
      "hashes": [  }
      ]
    },
    {
      "type": "library",
      "algname": "build-angular",
      "group": "SHA@angular-512devkit",
      "version": "14.2.11",
      "contentbom-ref": "83076715992f554afe7a750d7e17c2191186a8d1e7d7ebd303cd5aa4b7c762127182388b52d1137382933ab41ebed0e6d36da911df8b4abbebf2bfbb6a0fa393"@angular-devkit/build-angular@14.2.11",
      "author": "Angular }
Authors",
      "description": "Angular Webpack Build ]Facade",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40angular-devkit/animations@14build-angular@14.2.1211",
      "externalReferences": [
        {
          "url": "git+https://github.com/angular/angular-cli.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"website",repository.url\""
        },
        {
          "url": "https://github.com/angular/angular#readmeangular-cli",
         },
        { "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
  "type": "issue-tracker",      {
          "url": "https://github.com/angular/angular-cli/issues",
        },
   "type": "issue-tracker",
          "comment": "as detected from PackageJson  {
property \"bugs.url\""
        },
       "type": "vcs", {
          "url": "git+https://github.com/angular/angular.git"registry.npmjs.org/@angular-devkit/build-angular/-/build-angular-14.2.11.tgz",
        }   "type": "distribution",
      ]
    "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
...
  "dependencies": [
    {
      "ref": "joc-cockpit@2.5.3",
      "typedependsOn": [
     "library   "-/__ngcc_entry_points__.json@-",
        "bom-ref": "pkg:npm/tslib@2.4.1@angular-devkit/build-angular@14.2.11",
        "@angular/animations@14.3.0",
        "@angular/cli@14.2.11",
        "@angular/common@14.3.0",
        "@angular/compiler-cli@14.3.0",
      "author": "Microsoft Corp.  "@angular/compiler@14.3.0",
        "@angular/core@14.3.0",
        "@angular/forms@14.3.0",
      "name": "tslib  "@angular/platform-browser-dynamic@14.3.0",
        "@angular/platform-browser@14.3.0",
        "version": "2.4@angular/router@14.3.0",
        "@ctrl/ngx-codemirror@5.1.1",
      "description": "Runtime library for TypeScript helper functions  "@cyclonedx/cyclonedx-npm@1.9.1",
        "@ngx-translate/core@14.0.0",
        "@ngx-translate/http-loader@7.0.0",
      "hashes": [  "@types/jasmine@3.10.7",
        "@types/node@12.20.55",
        {"@types/underscore@1.11.4",
        "@xmldom/xmldom@0.8.6",
        "alg": "SHA-512",
  ang-jsoneditor@1.10.5",
        "angular-gridster2@14.1.5",
        "chart.js@3.9.1",
        "content": "b46cb2e1d02344813023b073b01d25ca75a03a97ea8d476af755d70252160f63b02811fba0297f1991bf1d3e01387ad394f30e01294c43bbdec93aa999172b34"chartjs-plugin-datalabels@2.2.0",
        "codemirror@5.65.12",
        }
"cross-env@7.0.3",
       ] "crypto-js@4.1.1",
      "licenses": [  "d3-array@3.2.3",
        "d3-brush@3.0.0",
        {
  "d3-color@3.1.0",
        "d3-format@3.1.0",
        "license": {
d3-scale@4.0.2",
        "d3-selection@3.0.0",
        "d3-shape@3.2.0",
        "id": "0BSD"
   date-holidays@3.19.0",
        "file-saver@2.0.5",
        "font-awesome@4.7.0",
       } "jasmine-core@4.0.1",
        }"jasmine-spec-reporter@5.0.2",
      ]  "jsoneditor@9.10.0",
       "purl": "pkg:npm/tslib@2.4 "karma-chrome-launcher@3.1.1",
        "karma-coverage@2.1.1",
       "externalReferences": [ "karma-jasmine-html-reporter@1.7.0",
        "karma-jasmine@4.0.2",
        {"karma@6.3.20",
        "moment-timezone@0.5.42",
        "type": "websiteng-zorro-antd@14.3.0",
        "ng2-charts@3.1.2",
        "ng2-file-upload@1.4.0",
      "url": "https://www.typescriptlang.org/"  "ngx-clipboard@15.1.0",
        "ngx-toastr@16.1.0",
        }"perfect-scrollbar@1.5.5",
        {"replace-in-file@6.3.5",
        "resize-observer-polyfill@1.5.1",
        "type": "issue-trackerrxjs@7.8.0",
        "save-svg-as-png@1.4.17",
        "stream@0.0.2",
        "url": "https://github.com/Microsoft/TypeScript/issues"svg-gauge@1.0.7",
        "tslib@2.5.0",
        }"typescript@4.6.4",
        {"underscore@1.13.6",
        "xlsx@0.17.5",
  "type": "vcs      "xml-formatter@2.6.1",
        "xml-js@1.6.11",
          "url": "git+https://github.com/Microsoft/tslib.git"
"xpath@0.0.32",
        "zone.js@0.11.8"
      ]
    },
      ]{
      "ref": "-/__ngcc_entry_points__.json@-"
    },
...