Files
oniguruma/sbom.cdx.json
Richard Hughes 19aeea3ebc Add a SBOM template in CycloneDX format
Improve supply chain security by including a SBOM file with substituted values.

This will be used to construct a composite platform SBOM.

Signed-off-by: Richard Hughes <richard@hughsie.com>
2024-11-21 10:35:01 +00:00

45 lines
982 B
JSON

{
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"version": 1,
"metadata": {
"authors": [
{
"name": "@VCS_SBOM_AUTHORS@"
}
]
},
"components": [
{
"type": "library",
"bom-ref": "pkg:github/kkos/oniguruma@@VCS_TAG@",
"cpe": "cpe:2.3:a:kkos:oniguruma:@VCS_TAG@:*:*:*:*:*:*:*",
"name": "oniguruma",
"version": "@VCS_VERSION@",
"description": "A modern and flexible regular expressions library",
"authors": [
{
"name": "@VCS_AUTHORS@",
"url": "https://raw.githubusercontent.com/kkos/oniguruma/refs/heads/master/AUTHORS"
}
],
"supplier": {
"name": "oniguruma developers"
},
"licenses": [
{
"license": {
"id": "BSD-2-Clause"
}
}
],
"externalReferences": [
{
"type": "vcs",
"url": "https://github.com/kkos/oniguruma"
}
]
}
]
}