Include purls for parent images

RedHatProductSecurity · Sep 11, 2024 · ce4c2d6 · ce4c2d6
1 parent 9517689
commit ce4c2d6
Show file tree

Hide file tree

Showing 15 changed files with 1,492 additions and 1,336 deletions.
diff --git a/...ontainer_image/build/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json b/...ontainer_image/build/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json
diff --git a/...ontainer_image/build/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json b/...ontainer_image/build/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json
diff --git a/...tainer_image/build/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json b/...tainer_image/build/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json
diff --git a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json
@@ -55,7 +55,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234ce864d532a2ed306f1528139581c7402e736b47a61f3b5d8e09c3aa7"
+          "checksumValue": "abcd1234e226d80d55e0f94bd8edeb1e80b5b3959a6682d43a4264c4ed6da9a6"
         }
       ]
     },
@@ -77,7 +77,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd12342907b5d08b11148995448cae08018a1b5c98040212d203a74c964d22"
+          "checksumValue": "abcd1234d967a11b001bd5c63fd9582d69c467442d7dce233cb2eb1601e31889"
         }
       ]
     },
@@ -99,7 +99,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234bc1621aa42aeb891195c660279a4a07cc76a292565bde7af9bde3fed"
+          "checksumValue": "abcd1234a18c9193f7945e5c1f17f21ff1d2e344f5cf5ac33d1d13a089ae2cb5"
         }
       ]
     },
@@ -121,7 +121,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234610fd63534ef108815245b5293531779926181be46dc5a381d6684d2"
+          "checksumValue": "abcd12343605aeed4eda10a9feba9a946103c71daeb13e6a6b09ab4ed2624f86"
         }
       ]
     },
@@ -143,7 +143,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd12345ba41d0dbfddae1daa354e2cc9f381af5a3fa2de9042308a9827a8d6"
+          "checksumValue": "abcd1234df4ef5a3c649f0c9b2a3046d3ee81a5bcb7e04f081049ffc7c793b44"
         }
       ]
     },
@@ -165,7 +165,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd12346d2e055092e146f8cc32aad3e483cceb3110403146e82393a21d79aa"
+          "checksumValue": "abcd12347aa38f677c7ff73c6c9f58bd9fd34ca577b2406c30bbac38ab48b086"
         }
       ]
     },
@@ -187,7 +187,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd12349f35c19113831c136f8e2976905061a3994555f5256f445ab2791032"
+          "checksumValue": "abcd1234869f1ceeb9b8a8dec137f47cc7a3275570291d7c28a8e17f82b70232"
         }
       ]
     },
@@ -209,7 +209,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234b9c13ee2191f3a25ecd44f8706c3a5660b3e4d41e99e6d547e019d08"
+          "checksumValue": "abcd123486bea2fcf5225be3e4cb2ebe2690a88f8780f0e656e518d4b8f9ce27"
         }
       ]
     },
@@ -231,7 +231,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234a5f724ad24c5d7a2df1d3685f04657e3db14a2b98ba6a632c83c11da"
+          "checksumValue": "abcd1234651e921bee4b2fef2678f2d3747d2be047b98fa687458d4ab3144029"
         }
       ]
     },
@@ -253,7 +253,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234784518354862edf5a614966b27df8877e8d798bd99b7d0fd4b6f23c0"
+          "checksumValue": "abcd1234b8019af13127e650f1f2596372fb5d45c4baf0af8d77c0a88580021c"
         }
       ]
     },
@@ -275,7 +275,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234c4348c02fd3a0f6ada053b85f9adb6a132599a46d02e38101a10b3c5"
+          "checksumValue": "abcd123492307e3f2cd72d229017ff94ad279511387306a1c696d9e69fb6fa66"
         }
       ]
     },
@@ -297,7 +297,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234d7d296dcac6245babeb5e50f1262ab40ee26af13c0a1bbea777b9371"
+          "checksumValue": "abcd1234de0233ab0edc5b7b058f89b9eed91f7da44c4e2a7c2d3156d8d7c11e"
         }
       ]
     },
@@ -319,7 +319,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234097ceaa668a24db722d8f8ec8f7fe8fdbcc632ffb4867a6d3cc46a19"
+          "checksumValue": "abcd1234b9fcd919fd36f3bc54a01259d76f1bbec72f8e76565d6fb79a09c368"
         }
       ]
     },
@@ -341,7 +341,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd123422bb1c237fb43b862d16a3c4a5b4feae2b1cbc8dc84d7763da52b6c7"
+          "checksumValue": "abcd1234acf7f9c0d440c92c7b8839dc57eea764c2918414a35b597c61fab2b3"
         }
       ]
     },
@@ -363,7 +363,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234359b4d9159f389d0f1014742f251b9895444e054894090d65415db7e"
+          "checksumValue": "abcd12346259eb52b297c106fa7596c02cc627b3dc7891d87b885d7ab44feba4"
         }
       ]
     },
@@ -385,7 +385,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234600ab2d887200aac3d38988adb7ec64df9379d23e208d25bb668449a"
+          "checksumValue": "abcd123418f9839be3bf98d9e3ba3b7f658b4e8f61a88500c13b161693db3109"
         }
       ]
     },
@@ -407,7 +407,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234308bae215632bac29ba8afc0273b104e16eceb362ac969a8e9c43fea"
+          "checksumValue": "abcd1234adda3ef425041bae5bbf0a548445c6816d381b5d70c794d7ec512474"
         }
       ]
     },
@@ -429,7 +429,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd123489223cc53eb7326baee451af1f61edb1662c3e697061ab87838e84da"
+          "checksumValue": "abcd1234b854977cf9c63c4b9388533b59f5cd3ad0f752ecee07ab44e3ae7dae"
         }
       ]
     },
@@ -451,7 +451,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234841ef70c0f17e39a763b023b92c355d3d54befae2e4d62caef4c5d4e"
+          "checksumValue": "abcd1234b2fb1a3846fc398f0874631ee2f534dd893be21d642fe37fe8d1a800"
         }
       ]
     },
@@ -473,18 +473,24 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234eb8491debde55737a7c2311a18dbd540a7805dceba1c1e4b76e996e0"
+          "checksumValue": "abcd1234204dd7b178df6eeaec2c9be728f906ffed9e0f36b3364d8b015ad235"
         }
       ]
     },
     {
       "SPDXID": "SPDXRef-parent-image-0-amd64",
-      "name": "ubi9:9.4-947_amd64",
-      "versionInfo": "NOASSERTION",
+      "name": "ubi9_amd64",
+      "versionInfo": "9.4-947",
       "supplier": "Organization: Red Hat",
       "downloadLocation": "NOASSERTION",
       "licenseDeclared": "NOASSERTION",
-      "externalRefs": []
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:oci/ubi9@sha256:11d5b4a77bfc15341d4b6dffa3d6ed510189fec9583db77cfc107067b5f906c5"
+        }
+      ]
     }
   ],
   "relationships": [
@@ -494,9 +500,9 @@
       "relatedSpdxElement": "SPDXRef-ubi9-micro-container-amd64"
     },
     {
-      "spdxElementId": "SPDXRef-ubi9-micro-container-amd64",
-      "relationshipType": "DESCENDANT_OF",
-      "relatedSpdxElement": "SPDXRef-parent-image-0-amd64"
+      "spdxElementId": "SPDXRef-parent-image-0-amd64",
+      "relationshipType": "BUILD_TOOL_OF",
+      "relatedSpdxElement": "SPDXRef-ubi9-micro-container-amd64"
     },
     {
       "spdxElementId": "SPDXRef-ubi9-micro-container-amd64",