googletest/sbom.cdx.json
Richard Hughes 6b9664a984
Add a SBOM template in CycloneDX format
Improve supply chain security by including a SBOM file with substituted values.

This will be used to construct a composite platform SBOM.

Signed-off-by: Richard Hughes <rhughes@redhat.com>
2024-11-21 11:00:58 +00:00

49 lines
1.0 KiB
JSON

{
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"version": 1,
"metadata": {
"authors": [
{
"name": "@VCS_SBOM_AUTHORS@"
}
]
},
"components": [
{
"type": "library",
"bom-ref": "pkg:github/google/googletest@@VCS_TAG@",
"cpe": "cpe:2.3:a:google:googletest:@VCS_TAG@:*:*:*:*:*:*:*",
"name": "GoogleTest",
"version": "@VCS_VERSION@",
"description": "A xUnit test framework",
"authors": [
{
"name": "@VCS_AUTHORS@",
"url": "https://raw.githubusercontent.com/google/googletest/refs/heads/main/CONTRIBUTORS"
}
],
"supplier": {
"name": "Google"
},
"licenses": [
{
"license": {
"id": "BSD-3-Clause"
}
}
],
"externalReferences": [
{
"type": "website",
"url": "https://google.github.io/googletest/"
},
{
"type": "vcs",
"url": "https://github.com/google/googletest"
}
]
}
]
}