Merge pull request #9777 from hughsie/hughsie/sbom

Add a SBOM file in CycloneDX format
This commit is contained in:
David Horstmann 2025-01-06 11:51:34 +00:00 committed by GitHub
commit 3dd86cd845
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

48
scripts/sbom.cdx.json Normal file
View File

@ -0,0 +1,48 @@
{
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"version": 1,
"metadata": {
"authors": [
{
"name": "@VCS_SBOM_AUTHORS@"
}
]
},
"components": [
{
"type": "library",
"bom-ref": "pkg:github/Mbed-TLS/mbedtls@@VCS_TAG@",
"cpe": "cpe:2.3:a:trustedfirmware:mbed_tls:@VCS_TAG@:*:*:*:*:*:*:*",
"name": "mbedtls",
"version": "@VCS_VERSION@",
"description": "Implements cryptographic primitives, X.509 certificate manipulation and SSL/TLS and DTLS protocols",
"authors": [
{
"name": "@VCS_AUTHORS@"
}
],
"supplier": {
"name": "Trusted Firmware"
},
"licenses": [
{
"license": {
"id": "Apache-2.0"
}
},
{
"license": {
"id": "GPL-2.0-or-later"
}
}
],
"externalReferences": [
{
"type": "vcs",
"url": "https://github.com/Mbed-TLS/mbedtls"
}
]
}
]
}