-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathsbom.spdx.json
More file actions
40 lines (40 loc) · 1.67 KB
/
sbom.spdx.json
File metadata and controls
40 lines (40 loc) · 1.67 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
{
"SPDXID": "SPDXRef-DOCUMENT",
"spdxVersion": "SPDX-2.3",
"creationInfo": {
"created": "2026-04-14T00:00:00Z",
"creators": [
"Organization: airgap-devkit-teams",
"Tool: manual"
],
"comment": "Root SBOM for airgap-devkit-teams. This is a template/scaffold repo containing only shell scripts, JSON manifests, and documentation — no compiled binaries or vendored source archives. Forks that add vendored binaries or source archives should regenerate this SBOM."
},
"name": "airgap-devkit-teams",
"dataLicense": "CC0-1.0",
"documentNamespace": "https://airgap-devkit-teams.internal/sbom.spdx.json",
"documentDescribes": [
"SPDXRef-airgap-devkit-teams"
],
"packages": [
{
"SPDXID": "SPDXRef-airgap-devkit-teams",
"name": "airgap-devkit-teams",
"versionInfo": "1.0.0",
"supplier": "Organization: airgap-devkit-teams",
"downloadLocation": "https://github.com/NimaShafie/airgap-devkit-teams",
"filesAnalyzed": false,
"licenseConcluded": "NOASSERTION",
"licenseDeclared": "NOASSERTION",
"copyrightText": "Copyright (c) 2024-present Nima Shafie. All Rights Reserved.",
"primaryPackagePurpose": "APPLICATION",
"comment": "Forkable template repository. Teams fork this repo, add their own tools under tools/, profiles under profiles/, and configure devkit.config.json. No compiled binaries are included in the upstream template. Forks should update this SBOM when vendored archives or binaries are added."
}
],
"relationships": [
{
"spdxElementId": "SPDXRef-DOCUMENT",
"relationshipType": "DESCRIBES",
"relatedSpdxElement": "SPDXRef-airgap-devkit-teams"
}
]
}