diff --git a/docs/purl.md b/docs/purl.md index 03759a0..96b769a 100644 --- a/docs/purl.md +++ b/docs/purl.md @@ -40,22 +40,25 @@ to not only identify a particular package (the file name already does that) but package can be accessed. The emacs package example above can be represented using the following purl: ``` -pkg:rpm/redhat/emacs@27.2-9.el9?arch=x86_64&repository_id=rhel-9-for-x86_64-appstream-rpms +pkg:rpm/redhat/emacs@27.2-9.el9?arch=x86_64&repository_id=rhel-9-for-x86_64-appstream-rpms&checksum=sha256:abcd1234 ``` The namespace value of `redhat` signifies this as an RPM package produced and distributed by Red Hat. If a purl identifies a Source RPM (SRPM, a package containing source code files that are used to build one or more RPMs containing binary artifacts), the `arch` qualifier must use the special value `src`. In the NEVRA file name -pattern, SRPM packages use a `.src.rpm` suffix. Packages that are not architecture -specific must use the special `noarch` value in the arch qualifier. +pattern, SRPM packages use a `.src.rpm` suffix. Packages that are not architecture-specific must use the special +`noarch` value in the arch qualifier. + +The value in the `checksum` qualifier represents the checksum digest of a given RPM file identified by the purl +string. Note that unsigned and signed versions of these files will have different checksum values. An RPM package may also include an epoch number; if not present, it is assumed to be `0`. In a purl, epoch is not part of the version field, but instead is specified using the `epoch` qualifier (e.g. `epoch=1`). If the package version includes a non-zero epoch value, it must be specified using its own epoch qualifier: ``` -pkg:rpm/redhat/emacs@27.2-9.el9?epoch=1&arch=src&repository_id=rhel-9-for-x86_64-appstream-rpms +pkg:rpm/redhat/emacs@27.2-9.el9?epoch=1&arch=src&repository_id=rhel-9-for-x86_64-appstream-rpms&checksum=sha256:abcd1234 ``` The `rpm` purl type suggests the use of the `repository_url` qualifier to point to the base URL of the RPM diff --git a/sbom/examples/rpm/from-koji.py b/sbom/examples/rpm/from-koji.py index 3f95c8d..de1c849 100644 --- a/sbom/examples/rpm/from-koji.py +++ b/sbom/examples/rpm/from-koji.py @@ -7,10 +7,11 @@ import sys from tempfile import TemporaryDirectory +# Script requires these RPMs: brewkoji, rpmdevtools, rpm-build +# Run with: ./from-koji.py brew + source_re = re.compile(r"^(Source\d+):\s*((.*/)?(.*))$") -tarball_re = re.compile( - r"^([^0-9]*)-([0-9a-f\.-]*)[\.-][a-z]" -) # Obviously not universal +tarball_re = re.compile(r"^([^0-9]*)-([0-9a-f\.-]*)[\.-][a-z]") # Obviously not universal koji_profile = sys.argv[1] build_id = sys.argv[2] profile = koji.get_profile_module(koji_profile) @@ -71,11 +72,7 @@ def run_syft(builddir): continue # For the example data we only care about purl references - refs = [ - ref - for ref in pkg["externalRefs"] - if ref["referenceCategory"] == "PACKAGE-MANAGER" - ] + refs = [ref for ref in pkg["externalRefs"] if ref["referenceCategory"] == "PACKAGE-MANAGER"] if refs: pkg["externalRefs"] = refs else: @@ -299,6 +296,7 @@ def handle_srpm(filename, name): if not data: break sha256.update(data) + digest = sha256.hexdigest() license = get_license(filename) package = { @@ -313,13 +311,13 @@ def handle_srpm(filename, name): { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": f"pkg:rpm/redhat/{name}@{version}-{release}?arch={arch}", + "referenceLocator": f"pkg:rpm/redhat/{name}@{version}-{release}?arch={arch}&checksum=sha256:{digest}", } ], "checksums": [ { "algorithm": "SHA256", - "checksumValue": sha256.hexdigest(), + "checksumValue": digest, }, ], } @@ -364,5 +362,5 @@ def handle_srpm(filename, name): "relationships": relationships, } -with open(f"{build_id}-sbom.json", "w") as fp: +with open(f"{build_id}.spdx.json", "w") as fp: json.dump(spdx, fp, indent=2) diff --git a/sbom/examples/rpm/openshift-pipelines-client-1.14.3-11352.el8.spdx.json b/sbom/examples/rpm/openshift-pipelines-client-1.14.3-11352.el8.spdx.json index 8ccd2f5..99e130f 100644 --- a/sbom/examples/rpm/openshift-pipelines-client-1.14.3-11352.el8.spdx.json +++ b/sbom/examples/rpm/openshift-pipelines-client-1.14.3-11352.el8.spdx.json @@ -18692,7 +18692,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=src" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=src&checksum=f260ee743e4d1e3a989657c6c5ad854affa200fb91b0cca3594160a17b4fe384" } ], "checksums": [ @@ -18753,7 +18753,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=x86_64&checksum=baa0c6523d91d99dbab8043f97790c1393b73fbbc711e9b07bd83f49ad91a800" } ], "checksums": [ @@ -18775,7 +18775,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client-redistributable@1.14.3-11352.el8?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client-redistributable@1.14.3-11352.el8?arch=x86_64&checksum=e7f74f4ced31a2bd3e329e64f9c3d0a09eef34c32d44799086443f7a56e8029e" } ], "checksums": [ @@ -18797,7 +18797,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=s390x&checksum=c401f381568196437007f5b7ad4c28c1926954c3331f51e944f46857e46d262c" } ], "checksums": [ @@ -18819,7 +18819,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client-redistributable@1.14.3-11352.el8?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client-redistributable@1.14.3-11352.el8?arch=s390x&checksum=e9d93086f6388d46323996c5ae312c579e333e4bc7b6749d1a67ac052a274052" } ], "checksums": [ @@ -18841,7 +18841,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=ppc64le&checksum=3fd37914601456f58e41482489e3a78d895b005b761f9f6ec90253c4f734bc12" } ], "checksums": [ @@ -18863,7 +18863,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client-redistributable@1.14.3-11352.el8?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client-redistributable@1.14.3-11352.el8?arch=ppc64le&checksum=816732946439dc442cdfb846be1b807b90dac7bd5c2384b1f1b825240150ed5d" } ], "checksums": [ @@ -18885,7 +18885,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client@1.14.3-11352.el8?arch=aarch64&checksum=18281527bfcdc8b81153062bcece92f4ba293d343af07ff0b8dc11a3a8584d02" } ], "checksums": [ @@ -18907,7 +18907,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client-redistributable@1.14.3-11352.el8?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/openshift-pipelines-client-redistributable@1.14.3-11352.el8?arch=aarch64&checksum=2c0043a7de4302e7406cdea88e7c3289c188babd1dc2742e57109d282b0f08a6" } ], "checksums": [ diff --git a/sbom/examples/rpm/openssl-3.0.7-18.el9_2.spdx.json b/sbom/examples/rpm/openssl-3.0.7-18.el9_2.spdx.json index 62f8004..cc4e827 100644 --- a/sbom/examples/rpm/openssl-3.0.7-18.el9_2.spdx.json +++ b/sbom/examples/rpm/openssl-3.0.7-18.el9_2.spdx.json @@ -23,7 +23,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=src" + "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=src&checksum=9215c64e7289a058248728089e4d98ed1cc392bb5eb9b8fcbe661d57e8145bbd" } ], "checksums": [ @@ -85,7 +85,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=aarch64&checksum=fbdd94bb6ce796441e4d4b9b04a960b41f6f7577e51c764e2befe9226e71da4b" } ], "checksums": [ @@ -107,7 +107,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=aarch64&checksum=832757f9bcb231e954fb390b835fb833b9046594aa3c6387eeaadd9af592f40f" } ], "checksums": [ @@ -129,7 +129,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=aarch64&checksum=9538011195d4997d7be4bba8cd01473abbf50e397dea06b6545d1d5fbd04817d" } ], "checksums": [ @@ -151,7 +151,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=aarch64&checksum=af7342cf0b04d24e8055f364d67afd705fbb94c7ec2460999a59cacfdf554920" } ], "checksums": [ @@ -173,7 +173,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=ppc64le&checksum=bf63da42704f9da1e9eeefab808900f521a357b9a07433c0973965a02a2bb915" } ], "checksums": [ @@ -195,7 +195,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=ppc64le&checksum=71cb34e11fa6bda16512f0dbb314ac761348cf907b3e49fa54c7576305ed6afb" } ], "checksums": [ @@ -217,7 +217,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=ppc64le&checksum=36d11f2f192aef3abf391e4cf6699a24a303f09d68b2477595bb12af82b26e48" } ], "checksums": [ @@ -239,7 +239,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=ppc64le&checksum=c96d6029cfa0e6a01c4419c154cbf98c08ab9bb69cc756d81350ab77b4d1f44c" } ], "checksums": [ @@ -261,7 +261,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=i686" + "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=i686&checksum=69e098aceca261b8cdd127b78c90868d40d39c3cb94e37b07703b3f7a85f832f" } ], "checksums": [ @@ -283,7 +283,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=i686" + "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=i686&checksum=689777a4cc483b0cbb3757da0e3274b49d6e697f8174405df415e0018cef7646" } ], "checksums": [ @@ -305,7 +305,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=i686" + "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=i686&checksum=9b529f697702037b712e81778fa4e222d385568e4b3be167e6e42431a3270bfd" } ], "checksums": [ @@ -327,7 +327,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=i686" + "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=i686&checksum=0bc733036256ec160b8ca5ed6bc1082e4d4c15f84cf6ff141f02d8e45d73b4b8" } ], "checksums": [ @@ -349,7 +349,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=x86_64&checksum=b2fe5b3a9230446e6e8119cd24eef1bee107b8d5ac37d2c5442d524bf5745a4e" } ], "checksums": [ @@ -371,7 +371,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=x86_64&checksum=0cb4cd2487dcbc2c0d97ded42f7998ff5f27c6e38ad40b204cce1e22c9966148" } ], "checksums": [ @@ -393,7 +393,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=x86_64&checksum=82b40f3403399fc808bd26f1a91edb7855e8f10087b925651001c17cb17a38ed" } ], "checksums": [ @@ -415,7 +415,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=x86_64&checksum=0af316c88f24a4a3df742376b8875c89137acec5df2b40717dcc3d81789f52f0" } ], "checksums": [ @@ -437,7 +437,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=s390x&checksum=3a92cded871cffdb2290d078fe4cf300bc9d74fd0af612a607898d9b6c7967fd" } ], "checksums": [ @@ -459,7 +459,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=s390x&checksum=1c4e7f767b47e9dd36f00c1c213328ab84f0c1516d17b17f068eadefd5cc706d" } ], "checksums": [ @@ -481,7 +481,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=s390x&checksum=c99bf4a5bf29434baca2e30e40fc9f6c7152ec9c372a48b79dbc9294d08a7774" } ], "checksums": [ @@ -503,7 +503,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=s390x&checksum=fe1ef3b6550b1f4153ac2d280f84d46bb36bb63a11ddaec7f76ff7fc0770d2db" } ], "checksums": [ diff --git a/sbom/examples/rpm/poppler-21.01.0-19.el9.spdx.json b/sbom/examples/rpm/poppler-21.01.0-19.el9.spdx.json index f18e30a..8d4ef26 100644 --- a/sbom/examples/rpm/poppler-21.01.0-19.el9.spdx.json +++ b/sbom/examples/rpm/poppler-21.01.0-19.el9.spdx.json @@ -23,7 +23,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=src" + "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=src&checksum=801331801a5d8209b5aaf0cc28f8cdc1f94a4bb349ef2f9a4300c4889bb06e3a" } ], "checksums": [ @@ -78,7 +78,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=aarch64&checksum=3b7a10adf732d18370dc83c19c451e2e27243bed232284640debbf0f488345dc" } ], "checksums": [ @@ -100,7 +100,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=aarch64&checksum=bdf34012ab575b7a1fb63e158e3257250db952b9f47f275b550992eb7d72ed78" } ], "checksums": [ @@ -122,7 +122,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=aarch64&checksum=5022c7069d1996090689e47b8dd2615b5b653db852ba073ca0a94347c293d241" } ], "checksums": [ @@ -144,7 +144,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=aarch64&checksum=ffc8ac32d519b8a55c5fdaf2bcf185eb52e73790844abd4abc8b5aeb8eb99631" } ], "checksums": [ @@ -166,7 +166,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=aarch64&checksum=8e787b3f263cde1a7ef453a87c1f96041387f522f7bc4baae9a383d769881842" } ], "checksums": [ @@ -188,7 +188,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=aarch64&checksum=9acc25304d5302ba68b3b0a401c651ce0e08454f26def121a8cfec3f593631e0" } ], "checksums": [ @@ -210,7 +210,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=aarch64&checksum=648122fa2138386263db7b0440eeb61c832bbfd4c75ca913c33a76428d182025" } ], "checksums": [ @@ -232,7 +232,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=aarch64&checksum=8ec63f76dc5fd358056ed3365760eaa90daf91189d5c5be5fecbf7415605808e" } ], "checksums": [ @@ -254,7 +254,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=aarch64" + "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=aarch64&checksum=0663fcd9ecd6c11e560337ca2b5401e1a39dbd5a56a519f835b0f67d123425f5" } ], "checksums": [ @@ -276,7 +276,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib-doc@21.01.0-19.el9?arch=noarch" + "referenceLocator": "pkg:rpm/redhat/poppler-glib-doc@21.01.0-19.el9?arch=noarch&checksum=2b0955db79eac3277a675a162484cb3b019d507aff292a8e85d9492b01d14d6d" } ], "checksums": [ @@ -298,7 +298,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=ppc64le&checksum=6a968f10b19e150d3501447bc498bc1c59c7560e5372ab40018b0fe3a047c62f" } ], "checksums": [ @@ -320,7 +320,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=ppc64le&checksum=6966f07bc7d6f3080d50f1a8ecb371451c33c075a103b301fb5e0bf1b27b9bb1" } ], "checksums": [ @@ -342,7 +342,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=ppc64le&checksum=574c219d781b8b3fc9f4f2b688d70e020d7fd2079532fc6c5935f63487c1451e" } ], "checksums": [ @@ -364,7 +364,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=ppc64le&checksum=96b3d4cd21e6f1f6f11866e66753c53aea716d14dea5f3d6b04b34fdf3a31001" } ], "checksums": [ @@ -386,7 +386,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=ppc64le&checksum=c0ed7c54f998e1636d40535b352a917884989b1468d2897ed4dd9770e03d17c6" } ], "checksums": [ @@ -408,7 +408,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=ppc64le&checksum=555b12c027ddf3d2dca2e0ec788c5500d5bbf10036c910eeb1c115822327f264" } ], "checksums": [ @@ -430,7 +430,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=ppc64le&checksum=fdd49706864108a96ece4761f3975bc1de0b2bc424c85efb07d76f912885d968" } ], "checksums": [ @@ -452,7 +452,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=ppc64le&checksum=dc47734f0ff549c164a86bf990948f872c320e0ceee7d90f030dea8f02ce1c71" } ], "checksums": [ @@ -474,7 +474,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=ppc64le" + "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=ppc64le&checksum=a0889808f54eb83c5decf2abc0e21fe8b2d5b1e038e4e6c1d2876eeb31b015be" } ], "checksums": [ @@ -496,7 +496,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=i686&checksum=a09da9e825f9ae9201c3db560675f0f86bbf537418e95f149b7fbac25c5e0cf4" } ], "checksums": [ @@ -518,7 +518,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=i686&checksum=2466cb8912235bd5c1ca5adc79e14d1f226856b275909f0353e785b9b1b624a4" } ], "checksums": [ @@ -540,7 +540,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=i686&checksum=08763a255485c842609b9fa821ba3bba84f476176b4f56d68d7f5d78cf81261e" } ], "checksums": [ @@ -562,7 +562,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=i686&checksum=8f68cb95de70c97f305ccdd79ea856f36821761eba73a7ae31843b48695fd01f" } ], "checksums": [ @@ -584,7 +584,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=i686&checksum=104fd60de9602d01c564be1d5d22eca4264567d78fd9d51824e6592bb1490b30" } ], "checksums": [ @@ -606,7 +606,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=i686&checksum=a69f97a3e7f863ee930c8a25e8d7747c17e70d4baa1273e91ec1faa182804491" } ], "checksums": [ @@ -628,7 +628,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=i686&checksum=9e11de701852f4ef57c62503b003730a58bb189fd819f810fc772aa9088b7a47" } ], "checksums": [ @@ -650,7 +650,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=i686&checksum=c054d46477a7d7c05ebb3cfa3cf1583f75c01d2cfb1296883a1b995e8191dc7b" } ], "checksums": [ @@ -672,7 +672,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=i686" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=i686&checksum=b90ea4034966737d915a71d2b57f6e6010f306ea3ab749aeac0976913c5df40f" } ], "checksums": [ @@ -694,7 +694,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=x86_64&checksum=794688b5bd303e888a95154ea081b8025ff774702115f52a17061658f41696fa" } ], "checksums": [ @@ -716,7 +716,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=x86_64&checksum=26c91ac5f1eaf247d93dc1740dcbef7b00a7c7f7bbea95bc3dbe62eb183bd719" } ], "checksums": [ @@ -738,7 +738,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=x86_64&checksum=c52a3281e5b80e2a6a7ad0c8c60ba28d975a5c8f36851e760628c2ec2ba55e86" } ], "checksums": [ @@ -760,7 +760,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=x86_64&checksum=24ef4d20be39234724d5e40e4e144db983a859612be85929619626988094386a" } ], "checksums": [ @@ -782,7 +782,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=x86_64&checksum=bb17518c4144c176de3f7980a14b25db1d62b04cdd1ffba658272f0112ebfd63" } ], "checksums": [ @@ -804,7 +804,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=x86_64&checksum=98694a86fdb3d06fab8e2d1ab60040449e1a5c3b625a49a9e4f0a02d84a4f717" } ], "checksums": [ @@ -826,7 +826,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=x86_64&checksum=0769a5a3e63056a99292539ed87f5eaa70038ddfa44a37a3e042232c0dbce1e6" } ], "checksums": [ @@ -848,7 +848,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=x86_64&checksum=4d1a54b08657b2f0d9f35277101cc8f2fe8a721593117048ac391d1a83679b66" } ], "checksums": [ @@ -870,7 +870,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=x86_64" + "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=x86_64&checksum=729ce4a72b9b9ff7dbf0782a9ea7cf991cbd015a0c8ab01d0ef3184735bac0dd" } ], "checksums": [ @@ -892,7 +892,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler-glib-devel@21.01.0-19.el9?arch=s390x&checksum=550ad08d5448627cd06b653aaabd59cf0811a0f1fc6af64526388d47a74e750a" } ], "checksums": [ @@ -914,7 +914,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5@21.01.0-19.el9?arch=s390x&checksum=3c503e85c0a789673c40794dd6000628ad11b3dd4656c686095a4b33f26799a1" } ], "checksums": [ @@ -936,7 +936,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler@21.01.0-19.el9?arch=s390x&checksum=57b9e7cd8552dc0329da54c06a77844c16f42a906ce6675f085ab44d9e03630b" } ], "checksums": [ @@ -958,7 +958,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler-qt5-devel@21.01.0-19.el9?arch=s390x&checksum=b0f9f9787f20e88876b4f69b9b39807142ca5188c950643c0580ff8192e055a6" } ], "checksums": [ @@ -980,7 +980,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler-utils@21.01.0-19.el9?arch=s390x&checksum=437d4867510988184567cc3f6e751b752efc209c9d2fe21670da4d827e16da1f" } ], "checksums": [ @@ -1002,7 +1002,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp@21.01.0-19.el9?arch=s390x&checksum=ba8bde6851373a8fe0e8a5622063b17f494c99a5d9e2a0738fdce98d99068756" } ], "checksums": [ @@ -1024,7 +1024,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler-cpp-devel@21.01.0-19.el9?arch=s390x&checksum=d5db40831cef871b3214b21b4cdb612ea5e6230054ba7f033cbec478763b7e68" } ], "checksums": [ @@ -1046,7 +1046,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler-devel@21.01.0-19.el9?arch=s390x&checksum=5fcd5d62a6d8f638e74e1d464d4f01efc0f9d0dd538fa7115d7ab8ccf98f565f" } ], "checksums": [ @@ -1068,7 +1068,7 @@ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", - "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=s390x" + "referenceLocator": "pkg:rpm/redhat/poppler-glib@21.01.0-19.el9?arch=s390x&checksum=ecb5f1187773e3e0501a62715f6e7244a21164c1318ae95bc0aa8a6a0712b868" } ], "checksums": [