Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • the JS7 source code is publicly available from https://github.com/sos-berlin
  • the JS7 ships with a Software Bill of Materials (SBOM) that provides the information which 3rd-party componentsproducts, versions and licenses are included.
    Display feature availability
    StartingFromRelease2.5.23

JS7 - Package Management allows to enable and to disable software packages based on information from the SBOM.

...

Within limits users can operate the JS7 components products from different releases. This requires the sbom.json file to be available per component product and release.

Accessing the Controller SBOM

...

The SBOM ships from the sbom.json file that is available for download from the JOC Cockpit_HOME directory.

Example:

  • Unix: /opt/sos-berlin.com/js7/joc/sbom.json
  • Windows: C:\Program Files\sos-berlin.com\js7\joc\sbom.json

...

Find the following example of an SBOM file for JOC Cockpit JS7 Agent release 2.5.3:

Code Block
languageyml
titleExtract of the SBOM example
linenumberstrue
collapsetrue
{
  "$schemabomFormat": "http://cyclonedx.org/schema/bom-1.4.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion" : "1.4",
  "versionserialNumber": 1,
  "serialNumber": "urn:uuid:9de0c59626528067-7634d05b-4a444457-9338bec6-f1b658f6156759e72e50d80e",
  "metadataversion" : {1,
    ""metadata" : {
    "timestamp" : "2023-04-10T2011T12:1224:38.582Z08Z",
    "tools" : [
      {
        "vendor" : "@cyclonedxOWASP Foundation",
        "name" : "cyclonedx-npmCycloneDX Maven plugin",
        "version" : "12.97.1",
        "externalReferenceshashes" : [
          {
            "urlalg" : "git+https://github.com/CycloneDX/cyclonedx-node-npm.gitMD5",
            "typecontent" : "vcs538c878ebf89b372876e247d056a3fc5",
          },
  "comment": "as detected from PackageJson property \"repository.url\"       {
            "alg" : "SHA-1",
            "content" : "4561e50edb47e12a03712b1afce9b20cba32fd28"
          },
          {
            "urlalg" : "https://github.com/CycloneDX/cyclonedx-node-npm#readmeSHA-256",
            "typecontent" : "websitef0ea7b3bcf5c7ba649b8d9807e805385330501881677d47333aebce8305ef4d4",
          },
   "comment": "as detected from PackageJson property \"homepage\"       {
            "alg" : "SHA-512",
            "content" : "a35400ca6411692ae8964fe7030eaba2a83a2fa50e2883def3054191283c3b48e2dcdd68bf80f5a0ede3898cc6b7cb7b998aacd2c1e969320053c43b6ab8d873"
          },
          {
            "urlalg" : "https://github.com/CycloneDX/cyclonedx-node-npm/issuesSHA-384",
            "typecontent" : "issue-tracker",
75c0c03a03c69e82ad1f7b942d6d733da8261c4058174355d6b24ebd88cee34180f2e8484d2b0fedaf459078bdf6e927"
          },
          {
    "comment": "as detected from PackageJson property \"bugs.url\""        "alg" : "SHA3-384",
          }
  "content" : "98cd312d4dfc104a0a66d65023d0aade423f08951f2a9e0215e703f0c81c4f274d8e11a2db1abc30a558b820d65860c4"
    ]
      },
      {
     {
   "vendor": "@cyclonedx",
        "namealg" : "cyclonedxSHA3-library256",
            "versioncontent" : "1.12.20c5fd65013128de457b049a824c4ad11212d668b503613ce19a54d545e5cf82d",
        "externalReferences": [  },
          {
            "urlalg" : "git+https://github.com/CycloneDX/cyclonedx-javascript-library.gitSHA3-512",
            "typecontent" : "vcs72ea0ed8faa3cc4493db96d0223094842e7153890b091ff364040ad3ad89363157fc9d1bd852262124aec83134f0c19aa4fd0fa482031d38a76d74dfd36b7964",
          }
  "comment": "as detected from PackageJson property \"repository.url\"" ]
      }
    }],
    "component"  :    {
      "group" : "com.sos-berlin.setups",
      "urlname" : "https://github.com/CycloneDX/cyclonedx-javascript-library#readmeagent-sos-sbom",
            "typeversion" : "website2.5.3",
            "commentdescription" : "asA detectedpom fromthat PackageJsoncreates propertyall \"homepage\""setups.",
      "licenses" : [  }],
      "purl" : "pkg:maven/com.sos-berlin.setups/agent-sos-sbom@2.5.3?type=jar",
  {
    "externalReferences" : [
       "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
  {
           "type" : "issue-trackervcs",
            "commenturl" : "as detected from PackageJson property \"bugs.url\""https://github.com/sos-berlin/setup/jobscheduler/agent-sos-sbom"
          }
        ]
      }
    ],
    "component": {
      "type" : "applicationlibrary",
      "namebom-ref" : "js7-joc-cockpit",
      "version": "2.5.4",pkg:maven/com.sos-berlin.setups/agent-sos-sbom@2.5.3?type=jar"
    }
  },
  "components" : [
    {
      "bom-refpublisher" : "js7-joc-cockpit@2.5.4Software- und Organisations-Service GmbH, Berlin",
      "purlgroup" : "pkg:npm/js7-joc-cockpit@2.5.4com.sos-berlin.js7.engine",
      "propertiesname" : ["js7-agent_2.13",
      "version"  {: "2.5.3",
          "namedescription" : "cdx:npm:package:pathjs7-agent",
          "valuescope" : "optional",
      "hashes" : },[
        {
          "namealg" : "cdx:npm:package:private",
"MD5",
          "valuecontent" : "true9890f27abea81351d992f6233f5319d4"
        },
      ]  {
    }
    },
  "componentsalg" : ["SHA-1",
    {
      "typecontent" : "library"eb6e46e9d60555b97e19ec4e47466747d626121c"
        },
       "name": "__ngcc_entry_points__.json",
 {
       "bom-ref"   "alg" : "-/__ngcc_entry_points__.json@-SHA-256",
          "purlcontent" : "pkg:npm/__ngcc_entry_points__.json",9bce37ed1a7d72726f50868cfbc25c67b408040c6de08b1b6b92ef38ebfbef91"
      "properties": [  },
        {
          "namealg" : "cdx:npm:package:pathSHA-512",
          "valuecontent" : "node_modules/__ngcc_entry_points__.json182deb6603a92e68b63d2a8e9f222f3d6ebf6d0128c86c77d6f0ac0935fd9ceb749e41a0dc4899cde963f083a5491f1bee0d308f765862be7b7617407c1949eb"
        },
        {
          "namealg" : "cdx:npm:package:extraneousSHA-384",
          "valuecontent" : "true30e11a6173cebb1ada2d0997967f744593891e2c7fdae56cb6752ef0ee2d3b335949bb1b58913cbbb2b9c57b9cd4499e"
        },
      ]
    },{
    {
      "typealg" : "librarySHA3-384",
          "namecontent" : "build-angular"01469eed6af10deaaccc7d6553782811b3d50f266b374033f49c77a942a6fd864fb674eaf4f237e1197c23d33f0d4d43"
        },
      "group": "@angular-devkit",
  {
          "versionalg" : "14.2.11SHA3-256",
      "bom-ref": "@angular-devkit/build-angular@14.2.11",
      "authorcontent" : "Angular Authorse6ef3c6d8e6a11cf1011139e4e595a9228433a9ba97dcd8a8faa4624f095dfe3",
      "description": "Angular Webpack Build Facade",
      "licenses": [},
        {
          "licensealg" : {"SHA3-512",
            "idcontent" : "MIT0b83b3118ab0142dc010273f1da042f8ec6ee904e96af3aa0d5d7b679b2a0e32f23178798fa5bd9f864fc4c887393d72f8f81e79a3fe9ef970273b21c16ab760"
          }
        }],
      ],"licenses" : [
      "purl": "pkg:npm/%40angular-devkit/build-angular@14.2.11",
  {
          "externalReferenceslicense" : [{
            "name" : {"GPLv3",
            "url" : "git+https://githubwww.gnu.comorg/angularlicenses/angulargpl-cli3.0.gittxt",
          "type": "vcs",
  }
        }
      ],
  "comment": "as detected from PackageJson"purl" property: \"repository.url\"""pkg:maven/com.sos-berlin.js7.engine/js7-agent_2.13@2.5.3?type=jar",
      "externalReferences" : },[
        {
          "urltype" : "https://github.com/angular/angular-cli"website",
          "typeurl" : "website",https://js7.sh"
        },
  "comment": "as detected from PackageJson property \"homepage\"" {
        },
  "type"      {: "vcs",
          "url" : "https://github.com/angular/angularsos-cliberlin/issuesjs7",
        }
   "type": "issue-tracker"   ],
      "type" : "library",
  "comment": "as detected from PackageJson property \"bugs.url\""
    "bom-ref" : "pkg:maven/com.sos-berlin.js7.engine/js7-agent_2.13@2.5.3?type=jar"
    },
...
  "dependencies" : [
    {
      "ref"    "url": "https://registry.npmjs.org/@angular-devkit/build-angular/-/build-angular-14.2.11.tgz",
 : "pkg:maven/com.sos-berlin.setups/agent-sos-sbom@2.5.3?type=jar",
         "typedependsOn" : "distribution",[
          "comment": "as detected from npm-ls property \"resolved\""pkg:maven/com.sos-berlin.js7.engine/js7-agent_2.13@2.5.3?type=jar",
        }
      ],
"pkg:maven/com.sos-berlin.js7.engine/js7-agent-client_2.13@2.5.3?type=jar",
        "properties": [
        {
  pkg:maven/com.sos-berlin.js7.engine/js7-agent-data_2.13@2.5.3?type=jar",
        "name": "cdx:npm:package:path",
  pkg:maven/com.sos-berlin.js7.engine/js7-base_2.13@2.5.3?type=jar",
        "value": "node_modules/@angular-devkit/build-angular"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "rxjs",
          "version": "6.6.7",
          "bom-ref": "@angular-devkit/build-angular@14.2.11|rxjs@6.6.7",
          "author": "Ben Lesh",
          "description": "Reactive Extensions for modern JavaScript",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "purl": "pkg:npm/rxjs@6.6.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/reactivex/rxjs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ReactiveX/RxJS",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ReactiveX/RxJS/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/rxjs/-/rxjs-6.6.7.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@angular-devkit/build-angular/node_modules/rxjs"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "tslib",
              "version": "1.14.1",
              "bom-ref": "@angular-devkit/build-angular@14.2.11|rxjs@6.6.7|tslib@1.14.1",
              "author": "Microsoft Corp.",
              "description": "Runtime library for TypeScript helper functions",
              "licenses": [
                {
                  "license": {
                    "id": "0BSD"
                  }
                }
              ],
              "purl": "pkg:npm/tslib@1.14.1",
              "externalReferences": [
                {
                  "url": "git+https://github.com/Microsoft/tslib.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://www.typescriptlang.org/",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/Microsoft/TypeScript/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz",
                  "type": "distribution",
                  "comment": "as detected from npm-ls property \"resolved\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/@angular-devkit/build-angular/node_modules/rxjs/node_modules/tslib"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "tslib",
          "version": "2.4.0",
          "bom-ref": "@angular-devkit/build-angular@14.2.11|tslib@2.4.0",
          "author": "Microsoft Corp.",
          "description": "Runtime library for TypeScript helper functions",
          "licenses": [
            {
              "license": {
                "id": "0BSD"
              }
            }
          ],
          "purl": "pkg:npm/tslib@2.4.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/Microsoft/tslib.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://www.typescriptlang.org/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/Microsoft/TypeScript/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/tslib/-/tslib-2.4.0.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
   pkg:maven/com.sos-berlin.js7.engine/js7-cluster_2.13@2.5.3?type=jar",
           "value": "node_modules/@angular-devkit/build-angular/node_modules/tslib"
            }
          ]
        }pkg:maven/com.sos-berlin.js7.engine/js7-cluster-watch_2.13@2.5.3?type=jar",
      ]
    },
...
  "dependencies": [
    {
  "pkg:maven/com.sos-berlin.js7.engine/js7-cluster-watch-api_2.13@2.5.3?type=jar",
        "ref": "joc-cockpit@2.5.4pkg:maven/com.sos-berlin.js7.engine/js7-common_2.13@2.5.3?type=jar",
      "dependsOn": [  "pkg:maven/com.sos-berlin.js7.engine/js7-common-http_2.13@2.5.3?type=jar",
        "pkg:maven/com.sos-berlin.js7.engine/__ngcc_entry_points__.json@-js7-controller_2.13@2.5.3?type=jar",
        "@angular-devkit/build-angular@14.2.11pkg:maven/com.sos-berlin.js7.engine/js7-controller-client_2.13@2.5.3?type=jar",
        "@angular/animations@14.3.0",
        "@angular/cli@14.2.11",
        "@angular/common@14.3.0pkg:maven/com.sos-berlin.js7.engine/js7-core_2.13@2.5.3?type=jar",
        "@angular/compiler-cli@14.3.0pkg:maven/com.sos-berlin.js7.engine/js7-data_2.13@2.5.3?type=jar",
        "@angular/compiler@14.3.0",
        "@angular/core@14.3.0pkg:maven/com.sos-berlin.js7.engine/js7-data-for-java_2.13@2.5.3?type=jar",
        "@angular/forms@14.3.0pkg:maven/com.sos-berlin.js7.engine/js7-journal_2.13@2.5.3?type=jar",
        "@angular/platform-browser-dynamic@14.3.0",
        "@angular/platform-browser@14.3.0pkg:maven/com.sos-berlin.js7.engine/js7-launcher_2.13@2.5.3?type=jar",
        "@angular/router@14.3.0pkg:maven/com.sos-berlin.js7.engine/js7-launcher-for-java_2.13@2.5.3?type=jar",
        "@ctrl/ngx-codemirror@5.1.1pkg:maven/com.sos-berlin.js7.engine/js7-launcher-for-windows_2.13@2.5.3?type=jar",
        "@cyclonedx/cyclonedx-npm@1.9.1 "pkg:maven/com.sos-berlin.js7.engine/js7-license_2.13@2.5.3?type=jar",
        "@ngx-translate/core@14.0.0pkg:maven/com.sos-berlin.js7.engine/js7-proxy_2.13@2.5.3?type=jar",
        "@ngx-translate/http-loader@7.0.0pkg:maven/com.sos-berlin.js7.engine/js7-service-pgp_2.13@2.5.3?type=jar",
        "@types/jasmine@3.10.7",
        "@types/node@12.20.55pkg:maven/com.sos-berlin.js7.engine/js7-subagent_2.13@2.5.3?type=jar",
        "@types/underscore@1.11.4pkg:maven/com.sos-berlin/sos-commons-cli@2.5.3?type=jar",
        "@xmldom/xmldom@0.8.6pkg:maven/com.sos-berlin/sos-commons-credentialstore@2.5.3?type=jar",
        "ang-jsoneditor@1.10.5pkg:maven/com.sos-berlin/sos-commons-exception@2.5.3?type=jar",
        "angular-gridster2@14.1.5pkg:maven/com.sos-berlin/sos-commons-hibernate@2.5.3?type=jar",
        "chart.js@3.9.1",
        "chartjs-plugin-datalabels@2.2.0pkg:maven/com.sos-berlin/sos-commons-httpclient@2.5.3?type=jar",
        "codemirror@5.65.12pkg:maven/com.sos-berlin/sos-commons-mail@2.5.3?type=jar",
        "cross-env@7.0.3pkg:maven/com.sos-berlin/sos-commons-sign@2.5.3?type=jar",
        "crypto-js@4.1.1"pkg:maven/com.sos-berlin/sos-commons-util@2.5.3?type=jar",
        "d3-array@3.2.3pkg:maven/com.sos-berlin/sos-commons-vfs@2.5.3?type=jar",
        "d3-brush@3.0.0pkg:maven/com.sos-berlin/sos-commons-xml@2.5.3?type=jar",
        "d3-color@3.1.0pkg:maven/com.sos-berlin/sos-jitl-jobs@2.5.3?type=jar",
        "d3-format@3.1.0pkg:maven/com.sos-berlin/sos-js7-loganonymizer@2.5.3?type=jar",
        "d3-scale@4.0.2pkg:maven/com.sos-berlin/sos-webservices-json@2.5.3?type=jar",
        "d3-selection@3.0.0",pkg:maven/com.sos-berlin/sos-yade-commons@2.5.3?type=jar"
      ]
    },
    "d3-shape@3.2.0",{
      "ref" : "date-holidays@3.19.0pkg:maven/com.sos-berlin.js7.engine/js7-agent_2.13@2.5.3?type=jar",
      "dependsOn"  "file-saver@2.0.5",: [
        "font-awesome@4.7.0pkg:maven/org.scala-lang/scala-library@2.13.10?type=jar",
        "jasmine-core@4.0.1pkg:maven/com.sos-berlin.js7.engine/js7-subagent_2.13@2.5.3?type=jar",
        "jasmine-spec-reporter@5.0.2",
        "jsoneditor@9.10.0pkg:maven/com.sos-berlin.js7.engine/js7-agent-data_2.13@2.5.3?type=jar",
        "karma-chrome-launcher@3.1.1pkg:maven/com.sos-berlin.js7.engine/js7-launcher_2.13@2.5.3?type=jar",
        "karma-coverage@2.1.1pkg:maven/com.sos-berlin.js7.engine/js7-core_2.13@2.5.3?type=jar",
        "karma-jasmine-html-reporter@1.7.0pkg:maven/com.sos-berlin.js7.engine/js7-common_2.13@2.5.3?type=jar",
        "karma-jasmine@4.0.2pkg:maven/com.sos-berlin.js7.engine/js7-data_2.13@2.5.3?type=jar",
        "karma@6.3.20pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "moment-timezone@0.5.42pkg:maven/com.typesafe.akka/akka-actor_2.13@2.6.20?type=jar",
        "ng-zorro-antd@14.3.0pkg:maven/com.typesafe.akka/akka-stream_2.13@2.6.20?type=jar",
        "ng2-charts@3.1.2pkg:maven/com.typesafe.akka/akka-slf4j_2.13@2.6.20?type=jar",
        "ng2-file-upload@1.4.0pkg:maven/com.typesafe.akka/akka-http_2.13@10.2.10?type=jar",
        "ngx-clipboard@15.1.0pkg:maven/com.intellij/annotations@12.0?type=jar",
        "ngx-toastr@16pkg:maven/com.google.inject/guice@5.1.0?type=jar",
        "perfect-scrollbar@1.5.5",
        "replace-in-file@6.3.5pkg:maven/javax.inject/javax.inject@1?type=jar",
        "resize-observer-polyfill@1.5.1",
pkg:maven/com.google.guava/guava@31.1-jre?type=jar"
      ]
    "rxjs@7.8.0"},
    {
    "save-svg-as-png@1.4.17  "ref" : "pkg:maven/org.scala-lang/scala-library@2.13.10?type=jar",
      "dependsOn"  "stream@0.0.2",: [ ]
    },
    "svg-gauge@1.0.7",{
      "ref" : "tslib@2pkg:maven/com.sos-berlin.js7.engine/js7-subagent_2.13@2.5.03?type=jar",
      "dependsOn"  "typescript@4.6.4",: [
        "underscore@1pkg:maven/org.scala-lang/scala-library@2.13.610?type=jar",
        "xlsx@0.17.5pkg:maven/com.sos-berlin.js7.engine/js7-launcher_2.13@2.5.3?type=jar",
        "xml-formatter@2.6.1pkg:maven/com.sos-berlin.js7.engine/js7-common_2.13@2.5.3?type=jar",
        "xml-js@1.6.11",
        "xpath@0.0.32pkg:maven/com.sos-berlin.js7.engine/js7-data_2.13@2.5.3?type=jar",
        "zone.js@0.11.8pkg:maven/com.intellij/annotations@12.0?type=jar"
      ]
    },
    {
      "ref": "-/__ngcc_entry_points__.json@-"
    },
...