d263695cd4
Bug: 280852724 Test: CIs Test: lunch aosp_cf_x86_64_phone-userdebug && m sbom Change-Id: Ie2365d79ba24910b7ace132b578589be10a17d78
152 lines
No EOL
4.5 KiB
JSON
152 lines
No EOL
4.5 KiB
JSON
{
|
|
"spdxVersion": "SPDX-2.3",
|
|
"dataLicense": "CC0-1.0",
|
|
"SPDXID": "SPDXRef-DOCUMENT",
|
|
"name": "test doc",
|
|
"documentNamespace": "http://www.google.com/sbom/spdx/android",
|
|
"creationInfo": {
|
|
"creators": [
|
|
"Organization: Google"
|
|
],
|
|
"created": "2023-03-31T22:17:58Z"
|
|
},
|
|
"externalDocumentRefs": [
|
|
{
|
|
"externalDocumentId": "DocumentRef-external_doc_ref",
|
|
"spdxDocument": "external_doc_uri",
|
|
"checksum": {
|
|
"algorithm": "SHA1",
|
|
"checksumValue": "1234567890"
|
|
}
|
|
}
|
|
],
|
|
"documentDescribes": [
|
|
"SPDXRef-PRODUCT"
|
|
],
|
|
"packages": [
|
|
{
|
|
"name": "PRODUCT",
|
|
"SPDXID": "SPDXRef-PRODUCT",
|
|
"downloadLocation": "NONE",
|
|
"filesAnalyzed": true,
|
|
"versionInfo": "build_finger_print",
|
|
"supplier": "Organization: Google",
|
|
"packageVerificationCode": {
|
|
"packageVerificationCodeValue": "123456"
|
|
},
|
|
"hasFiles": [
|
|
"SPDXRef-file1",
|
|
"SPDXRef-file2",
|
|
"SPDXRef-file3"
|
|
]
|
|
},
|
|
{
|
|
"name": "PLATFORM",
|
|
"SPDXID": "SPDXRef-PLATFORM",
|
|
"downloadLocation": "NONE",
|
|
"filesAnalyzed": false,
|
|
"versionInfo": "build_finger_print",
|
|
"supplier": "Organization: Google"
|
|
},
|
|
{
|
|
"name": "Prebuilt package1",
|
|
"SPDXID": "SPDXRef-PREBUILT-package1",
|
|
"downloadLocation": "NONE",
|
|
"filesAnalyzed": false,
|
|
"versionInfo": "build_finger_print",
|
|
"supplier": "Organization: Google"
|
|
},
|
|
{
|
|
"name": "Source package1",
|
|
"SPDXID": "SPDXRef-SOURCE-package1",
|
|
"downloadLocation": "NONE",
|
|
"filesAnalyzed": false,
|
|
"versionInfo": "build_finger_print",
|
|
"supplier": "Organization: Google",
|
|
"externalRefs": [
|
|
{
|
|
"referenceCategory": "SECURITY",
|
|
"referenceType": "cpe22Type",
|
|
"referenceLocator": "cpe:/a:jsoncpp_project:jsoncpp:1.9.4"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "Upstream package1",
|
|
"SPDXID": "SPDXRef-UPSTREAM-package1",
|
|
"downloadLocation": "NOASSERTION",
|
|
"filesAnalyzed": false,
|
|
"versionInfo": "1.1",
|
|
"supplier": "Organization: upstream"
|
|
}
|
|
],
|
|
"files": [
|
|
{
|
|
"fileName": "/bin/file1",
|
|
"SPDXID": "SPDXRef-file1",
|
|
"checksums": [
|
|
{
|
|
"algorithm": "SHA1",
|
|
"checksumValue": "11111"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"fileName": "/bin/file2",
|
|
"SPDXID": "SPDXRef-file2",
|
|
"checksums": [
|
|
{
|
|
"algorithm": "SHA1",
|
|
"checksumValue": "22222"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"fileName": "/bin/file3",
|
|
"SPDXID": "SPDXRef-file3",
|
|
"checksums": [
|
|
{
|
|
"algorithm": "SHA1",
|
|
"checksumValue": "33333"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"fileName": "file4.a",
|
|
"SPDXID": "SPDXRef-file4",
|
|
"checksums": [
|
|
{
|
|
"algorithm": "SHA1",
|
|
"checksumValue": "44444"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"relationships": [
|
|
{
|
|
"spdxElementId": "SPDXRef-file1",
|
|
"relatedSpdxElement": "SPDXRef-PLATFORM",
|
|
"relationshipType": "GENERATED_FROM"
|
|
},
|
|
{
|
|
"spdxElementId": "SPDXRef-file2",
|
|
"relatedSpdxElement": "SPDXRef-PREBUILT-package1",
|
|
"relationshipType": "GENERATED_FROM"
|
|
},
|
|
{
|
|
"spdxElementId": "SPDXRef-file3",
|
|
"relatedSpdxElement": "SPDXRef-SOURCE-package1",
|
|
"relationshipType": "GENERATED_FROM"
|
|
},
|
|
{
|
|
"spdxElementId": "SPDXRef-file1",
|
|
"relatedSpdxElement": "SPDXRef-file4",
|
|
"relationshipType": "STATIC_LINK"
|
|
},
|
|
{
|
|
"spdxElementId": "SPDXRef-SOURCE-package1",
|
|
"relatedSpdxElement": "SPDXRef-UPSTREAM-package1",
|
|
"relationshipType": "VARIANT_OF"
|
|
}
|
|
]
|
|
} |