Files
brotli/sbom.cdx.json
Richard Hughes e9668c8cb0 Add a SBOM template in CycloneDX format (#1224)
Improve supply chain security by including a SBOM file with substituted values.

This will be used to construct a composite platform SBOM.

Signed-off-by: Richard Hughes <rhughes@redhat.com>
Co-authored-by: Eugene Kliuchnikov <eustas.ru@gmail.com>
2025-05-27 09:50:34 +02:00

45 lines
929 B
JSON

{
"_comment": "See https://cyclonedx.org/ for more details",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"version": 1,
"metadata": {
"authors": [
{
"name": "@VCS_SBOM_AUTHORS@"
}
]
},
"components": [
{
"type": "library",
"bom-ref": "pkg:github/google/brotli@@VCS_TAG@",
"cpe": "cpe:2.3:a:google:brotli:@VCS_TAG@:*:*:*:*:*:*:*",
"name": "Brotli",
"version": "@VCS_VERSION@",
"description": "A generic-purpose lossless compression algorithm",
"authors": [
{
"name": "@VCS_AUTHORS@"
}
],
"supplier": {
"name": "Brotli developers"
},
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"externalReferences": [
{
"type": "vcs",
"url": "https://github.com/google/brotli"
}
]
}
]
}