{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7295371c-8562-415c-be23-210d114e68bc",
  "version": 1,
  "metadata": {
    "timestamp": "2024-06-14T16:07:19-04:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "author": "anchore",
          "name": "grype",
          "version": "[not provided]"
        }
      ]
    }
  },
  "components": [
    {
      "bom-ref": "9baa2db122fea516",
      "type": "library",
      "name": "package-1",
      "version": "1.1.1",
      "cpe": "cpe:2.3:a:anchore:engine:0.9.2:*:*:python:*:*:*:*",
      "properties": [
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/foo/bar/somefile-1.txt"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "2"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "some-source-rpm"
        }
      ]
    },
    {
      "bom-ref": "7bb53d560434bc7f",
      "type": "library",
      "name": "package-2",
      "version": "2.2.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "cpe": "cpe:2.3:a:anchore:engine:2.2.2:*:*:python:*:*:*:*",
      "properties": [
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:location:0:path",
          "value": "/foo/bar/somefile-2.txt"
        }
      ]
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:4287f379-8a42-49f0-8abc-b618cfbec513",
      "id": "CVE-1999-0001",
      "source": {},
      "references": [
        {
          "id": "CVE-1999-0001",
          "source": {}
        }
      ],
      "ratings": [
        {
          "score": 4,
          "severity": "low",
          "method": "CVSSv3",
          "vector": "another vector"
        }
      ],
      "description": "1999-01 description",
      "advisories": [],
      "affects": [
        {
          "ref": "9baa2db122fea516"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afc64b43-24cb-4f55-a948-dfd9c6920061",
      "id": "CVE-1999-0002",
      "source": {},
      "references": [
        {
          "id": "CVE-1999-0002",
          "source": {}
        }
      ],
      "ratings": [
        {
          "score": 1,
          "severity": "critical",
          "method": "CVSSv2",
          "vector": "vector"
        }
      ],
      "description": "1999-02 description",
      "advisories": [],
      "affects": [
        {
          "ref": "7bb53d560434bc7f"
        }
      ]
    }
  ]
}
