mirror of
https://github.com/zeux/pugixml.git
synced 2024-12-26 21:04:25 +08:00
752afbf4df
Improve supply chain security by including a SBOM file with substituted values. This will be used to construct a composite platform SBOM. Signed-off-by: Richard Hughes <richard@hughsie.com>
48 lines
946 B
JSON
48 lines
946 B
JSON
{
|
|
"bomFormat": "CycloneDX",
|
|
"specVersion": "1.6",
|
|
"version": 1,
|
|
"metadata": {
|
|
"authors": [
|
|
{
|
|
"name": "@VCS_SBOM_AUTHORS@"
|
|
}
|
|
]
|
|
},
|
|
"components": [
|
|
{
|
|
"type": "library",
|
|
"bom-ref": "pkg:github/zeux/pugixml@@VCS_TAG@",
|
|
"cpe": "cpe:2.3:a:pugixml_project:pugixml:@VCS_TAG@:*:*:*:*:*:*:*",
|
|
"name": "pugixml",
|
|
"version": "@VCS_VERSION@",
|
|
"description": "C++ XML processing library",
|
|
"supplier": {
|
|
"name": "pugixml developers"
|
|
},
|
|
"authors": [
|
|
{
|
|
"name": "@VCS_AUTHORS@"
|
|
}
|
|
],
|
|
"licenses": [
|
|
{
|
|
"license": {
|
|
"id": "MIT"
|
|
}
|
|
}
|
|
],
|
|
"externalReferences": [
|
|
{
|
|
"type": "website",
|
|
"url": "https://pugixml.org/"
|
|
},
|
|
{
|
|
"type": "vcs",
|
|
"url": "https://github.com/zeux/pugixml"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|