From f1a88dab0d9c5ddf604cefca9e4ddacea5f91d96 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Martin=20Prpi=C4=8D?= Date: Wed, 12 Jun 2024 20:41:51 -0400 Subject: [PATCH] Add container image sbom example generator Also add an example SBOM for the ubi9-micro container image. --- .github/workflows/schema.yml | 2 +- sbom/examples/container_image/from_catalog.py | 222 ++ ...micro-container-9.4-6.1716471860.spdx.json | 2251 +++++++++++++++++ 3 files changed, 2474 insertions(+), 1 deletion(-) create mode 100644 sbom/examples/container_image/from_catalog.py create mode 100644 sbom/examples/container_image/ubi9-micro-container-9.4-6.1716471860.spdx.json diff --git a/.github/workflows/schema.yml b/.github/workflows/schema.yml index c26a567..adc4e90 100644 --- a/.github/workflows/schema.yml +++ b/.github/workflows/schema.yml @@ -26,6 +26,6 @@ jobs: - name: check schema run: | sudo apt-get install -y python3-jsonschema - for example in $GITHUB_WORKSPACE/sbom/examples/rpm/*.json; do + for example in $GITHUB_WORKSPACE/sbom/examples/*/*.json; do jsonschema $GITHUB_WORKSPACE/sbom/spdx-schema.json -i $example done diff --git a/sbom/examples/container_image/from_catalog.py b/sbom/examples/container_image/from_catalog.py new file mode 100644 index 0000000..a0de256 --- /dev/null +++ b/sbom/examples/container_image/from_catalog.py @@ -0,0 +1,222 @@ +import json +import sys + +import requests + +# These container images (identified by their NVR) are known to contain only RPM packages and no +# other content type. +RPM_CONTAINER_IMAGES = ["ubi9-micro-container-9.4-6.1716471860"] + +catalog_url = "https://catalog.redhat.com/api/containers/v1/" +nvr_api = catalog_url + "images/nvr/" +rpm_manifest_api = catalog_url + "images/id/{catalog_image_id}/rpm-manifest" + +rpm_sbom_url = "https://access.redhat.com/security/data/sbom/v1/rpm/" + + +def get_image_data(image_nvr): + response = requests.get(nvr_api + image_nvr) + response.raise_for_status() + # This is a paged response, but we're assuming there are not 100+ images for a single + # container image NVR. + yield from response.json()["data"] + + +def get_rpms(image_id): + response = requests.get(rpm_manifest_api.format(catalog_image_id=image_id)) + response.raise_for_status() + yield from response.json()["rpms"] + + +def generate_sbom_for_image(image_nvr): + # Split to e.g. "ubi9-micro-container" and "9.4-6.1716471860" + image_nvr_name, *image_nvr_version = image_nvr.rsplit("-", maxsplit=2) + image_nvr_version = "-".join(image_nvr_version) + + packages = [] + relationships = [] + image_index_pkg_created = False + + for image in get_image_data(image_nvr): + catalog_image_id = image["_id"] + image_digest = image["image_id"] + content_sets = image["content_sets"] + + # A container image may be available through more than one repo; collect all repos, + # registries they are available from, and the most specific tag for each repo image. + repos = set() + image_index_digest = "" + for repo in image["repositories"]: + registry = repo["registry"] + repo_name = repo["repository"] + repo_namespace, _, repo_name = repo_name.rpartition("/") + if repo_namespace: + registry = f"{registry}/{repo_namespace}" + tags = list( + sorted( + [t for t in repo["tags"] if t["name"] != "latest"], + # Sort by the length of the tag, ignoring "latest"; this is a very dumb + # heuristic to find the most specific tag for a particular image. From tags + # such as "9.4", "latest", and "9.4-6.1716471860", it will select the last one. + key=lambda x: len(x["name"]), + reverse=True, + ) + ) + if not tags: + print(f"ERROR: no usable tag found for image ID: {catalog_image_id}") + sys.exit(1) + repos.add((repo_name, registry, tags[0]["name"])) + image_index_digest = repo["manifest_list_digest"].lstrip("sha256:") + + if not repos or not image_index_digest: + print("ERROR: No repos or image index digest found for image ID: {catalog_image_id}") + sys.exit(1) + + # Create an index image object, but since all arch-specific images are descendents of one + # and the same index image, we only have to create it once. + if not image_index_pkg_created: + image_index_pkg = { + "SPDXID": "SPDXRef-image-index", + "name": image_nvr_name, + "versionInfo": image_nvr_version, + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + # Should this be NONE? Are container images themselves ever licensed differently + # from the content they include? + "licenseConcluded": "NOASSERTION", + "externalRefs": [], + "checksums": [ + { + "algorithm": "SHA256", + "checksumValue": image_index_digest, + } + ], + } + for name, registry, tag in sorted(repos): + purl = ( + f"pkg:oci/{name}@sha256%3A{image_index_digest}?" + f"repository_url={registry}&tag={tag}" + ) + ref = { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": purl, + } + image_index_pkg["externalRefs"].append(ref) + + packages.append(image_index_pkg) + relationships.append( + { + "spdxElementId": "SPDXRef-DOCUMENT", + "relationshipType": "DESCRIBES", + "relatedSpdxElement": "SPDXRef-image-index", + } + ) + image_index_pkg_created = True + + # TODO: create arch-specific image element, but it needs to point to two repos? + spdx_image_id = f"SPDXRef-{image_nvr_name}-{image['architecture']}" + image_pkg = { + "SPDXID": spdx_image_id, + "name": f"{image_nvr_name}_{image['architecture']}", + "versionInfo": image_nvr_version, + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + # Should this be NONE? Are container images themselves ever licensed differently + # from the content they include? + "licenseConcluded": "NOASSERTION", + "externalRefs": [], + "checksums": [ + { + "algorithm": "SHA256", + "checksumValue": image_digest, + } + ], + } + for name, registry, tag in sorted(repos): + purl = ( + f"pkg:oci/{name}@sha256%3A{image_index_digest}?" + f"arch={image['architecture']}&repository_url={registry}&tag={tag}" + ) + ref = { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": purl, + } + image_pkg["externalRefs"].append(ref) + + packages.append(image_pkg) + relationships.append( + { + "spdxElementId": "SPDXRef-image-index", + "relationshipType": "CONTAINS", + "relatedSpdxElement": spdx_image_id, + } + ) + + for rpm in get_rpms(catalog_image_id): + purl = ( + f"pkg:rpm/redhat/{rpm['name']}@{rpm['version']}?" + # We don't have a way to find out which content set (RPM repo) an RPM came from, + # so we arbitrarily choose one here (assuming we have this mapping via RPM + # lockfiles or other means eventually). + f"arch={rpm['architecture']}&repository_url={content_sets[0]}" + ) + srpm = rpm["srpm_nevra"].rstrip(".src") + spdx_rpm_id = f"SPDXRef-{rpm['architecture']}-{rpm['name']}" + rpm_pkg = { + "SPDXID": spdx_rpm_id, + "name": rpm["name"], + "versionInfo": rpm["version"], + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": rpm["nvra"] + ".rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": purl, + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + # Or wherever else we host per-RPM SBOMs. + "referenceLocator": ( + f"https://access.redhat.com/security/data/sbom/v1/rpm/" + f"{srpm}.spdx.json.bz2" + ), + }, + ], + # We don't have data on a checksum for binary RPMs included in images; should we? + } + packages.append(rpm_pkg) + relationships.append( + { + "spdxElementId": spdx_image_id, + "relationshipType": "CONTAINS", + "relatedSpdxElement": spdx_rpm_id, + } + ) + + spdx = { + "spdxVersion": "SPDX-2.3", + "dataLicense": "CC0-1.0", + "SPDXID": "SPDXRef-DOCUMENT", + "creationInfo": { + "created": "2006-08-14T02:34:56-06:00", + "creators": [ + "example SPDX document only", + ], + }, + "name": image_nvr, + "packages": packages, + "relationships": relationships, + } + + with open(f"{image_nvr}.spdx.json", "w") as fp: + json.dump(spdx, fp, indent=2) + + +for rpm_image in RPM_CONTAINER_IMAGES: + generate_sbom_for_image(rpm_image) diff --git a/sbom/examples/container_image/ubi9-micro-container-9.4-6.1716471860.spdx.json b/sbom/examples/container_image/ubi9-micro-container-9.4-6.1716471860.spdx.json new file mode 100644 index 0000000..8066f1c --- /dev/null +++ b/sbom/examples/container_image/ubi9-micro-container-9.4-6.1716471860.spdx.json @@ -0,0 +1,2251 @@ +{ + "spdxVersion": "SPDX-2.3", + "dataLicense": "CC0-1.0", + "SPDXID": "SPDXRef-DOCUMENT", + "creationInfo": { + "created": "2006-08-14T02:34:56-06:00", + "creators": [ + "example SPDX document only" + ] + }, + "name": "ubi9-micro-container-9.4-6.1716471860", + "packages": [ + { + "SPDXID": "SPDXRef-image-index", + "name": "ubi9-micro-container", + "versionInfo": "9.4-6.1716471860", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?repository_url=registry.access.redhat.com/ubi9&tag=9.4-6.1716471860" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi9-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?repository_url=registry.access.redhat.com&tag=9.4-6.1716471860" + } + ], + "checksums": [ + { + "algorithm": "SHA256", + "checksumValue": "1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d" + } + ] + }, + { + "SPDXID": "SPDXRef-ubi9-micro-container-s390x", + "name": "ubi9-micro-container_s390x", + "versionInfo": "9.4-6.1716471860", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?arch=s390x&repository_url=registry.access.redhat.com/ubi9&tag=9.4-6.1716471860" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi9-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?arch=s390x&repository_url=registry.access.redhat.com&tag=9.4-6.1716471860" + } + ], + "checksums": [ + { + "algorithm": "SHA256", + "checksumValue": "sha256:2c9e70f4174747c6b53d253e879177c52731cc4bdc5fe9c6a2555412d849a952" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-libgcc", + "name": "libgcc", + "versionInfo": "11.4.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libgcc-11.4.1-3.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libgcc@11.4.1?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/gcc-0:11.4.1-3.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-tzdata", + "name": "tzdata", + "versionInfo": "2024a", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "tzdata-2024a-1.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/tzdata@2024a?arch=noarch&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/tzdata-0:2024a-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-redhat-release", + "name": "redhat-release", + "versionInfo": "9.4", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "redhat-release-9.4-0.4.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/redhat-release@9.4?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/redhat-release-0:9.4-0.4.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-setup", + "name": "setup", + "versionInfo": "2.13.7", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "setup-2.13.7-10.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/setup@2.13.7?arch=noarch&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/setup-0:2.13.7-10.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-filesystem", + "name": "filesystem", + "versionInfo": "3.16", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "filesystem-3.16-2.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/filesystem@3.16?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/filesystem-0:3.16-2.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-basesystem", + "name": "basesystem", + "versionInfo": "11", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "basesystem-11-13.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/basesystem@11?arch=noarch&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/basesystem-0:11-13.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-pcre2-syntax", + "name": "pcre2-syntax", + "versionInfo": "10.40", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "pcre2-syntax-10.40-5.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.40?arch=noarch&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/pcre2-0:10.40-5.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-ncurses-base", + "name": "ncurses-base", + "versionInfo": "6.2", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "ncurses-base-6.2-10.20210508.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.2?arch=noarch&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/ncurses-0:6.2-10.20210508.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-ncurses-libs", + "name": "ncurses-libs", + "versionInfo": "6.2", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "ncurses-libs-6.2-10.20210508.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.2?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/ncurses-0:6.2-10.20210508.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-bash", + "name": "bash", + "versionInfo": "5.1.8", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "bash-5.1.8-9.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/bash@5.1.8?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/bash-0:5.1.8-9.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-glibc-common", + "name": "glibc-common", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-common-2.34-100.el9_4.2.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc-common@2.34?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-glibc-minimal-langpack", + "name": "glibc-minimal-langpack", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-minimal-langpack-2.34-100.el9_4.2.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.34?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-glibc", + "name": "glibc", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-2.34-100.el9_4.2.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc@2.34?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-libattr", + "name": "libattr", + "versionInfo": "2.5.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libattr-2.5.1-3.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libattr@2.5.1?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/attr-0:2.5.1-3.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-libacl", + "name": "libacl", + "versionInfo": "2.3.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libacl-2.3.1-4.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libacl@2.3.1?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/acl-0:2.3.1-4.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-libcap", + "name": "libcap", + "versionInfo": "2.48", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libcap-2.48-9.el9_2.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libcap@2.48?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libcap-0:2.48-9.el9_2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-libsepol", + "name": "libsepol", + "versionInfo": "3.6", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libsepol-3.6-1.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libsepol@3.6?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libsepol-0:3.6-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-pcre2", + "name": "pcre2", + "versionInfo": "10.40", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "pcre2-10.40-5.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/pcre2@10.40?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/pcre2-0:10.40-5.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-libselinux", + "name": "libselinux", + "versionInfo": "3.6", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libselinux-3.6-1.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libselinux@3.6?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libselinux-0:3.6-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-s390x-coreutils-single", + "name": "coreutils-single", + "versionInfo": "8.32", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "coreutils-single-8.32-35.el9.s390x.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/coreutils-single@8.32?arch=s390x&repository_url=rhel-9-for-s390x-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/coreutils-0:8.32-35.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ubi9-micro-container-ppc64le", + "name": "ubi9-micro-container_ppc64le", + "versionInfo": "9.4-6.1716471860", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?arch=ppc64le&repository_url=registry.access.redhat.com/ubi9&tag=9.4-6.1716471860" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi9-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?arch=ppc64le&repository_url=registry.access.redhat.com&tag=9.4-6.1716471860" + } + ], + "checksums": [ + { + "algorithm": "SHA256", + "checksumValue": "sha256:26f08722139c4da653b870272a192fac700960a3315baa1f79f83a4712a436d4" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-libgcc", + "name": "libgcc", + "versionInfo": "11.4.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libgcc-11.4.1-3.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libgcc@11.4.1?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/gcc-0:11.4.1-3.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-pcre2-syntax", + "name": "pcre2-syntax", + "versionInfo": "10.40", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "pcre2-syntax-10.40-5.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.40?arch=noarch&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/pcre2-0:10.40-5.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-tzdata", + "name": "tzdata", + "versionInfo": "2024a", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "tzdata-2024a-1.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/tzdata@2024a?arch=noarch&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/tzdata-0:2024a-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-redhat-release", + "name": "redhat-release", + "versionInfo": "9.4", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "redhat-release-9.4-0.4.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/redhat-release@9.4?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/redhat-release-0:9.4-0.4.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-setup", + "name": "setup", + "versionInfo": "2.13.7", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "setup-2.13.7-10.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/setup@2.13.7?arch=noarch&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/setup-0:2.13.7-10.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-filesystem", + "name": "filesystem", + "versionInfo": "3.16", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "filesystem-3.16-2.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/filesystem@3.16?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/filesystem-0:3.16-2.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-basesystem", + "name": "basesystem", + "versionInfo": "11", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "basesystem-11-13.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/basesystem@11?arch=noarch&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/basesystem-0:11-13.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-ncurses-base", + "name": "ncurses-base", + "versionInfo": "6.2", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "ncurses-base-6.2-10.20210508.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.2?arch=noarch&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/ncurses-0:6.2-10.20210508.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-ncurses-libs", + "name": "ncurses-libs", + "versionInfo": "6.2", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "ncurses-libs-6.2-10.20210508.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.2?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/ncurses-0:6.2-10.20210508.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-bash", + "name": "bash", + "versionInfo": "5.1.8", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "bash-5.1.8-9.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/bash@5.1.8?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/bash-0:5.1.8-9.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-glibc-common", + "name": "glibc-common", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-common-2.34-100.el9_4.2.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc-common@2.34?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-glibc-minimal-langpack", + "name": "glibc-minimal-langpack", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-minimal-langpack-2.34-100.el9_4.2.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.34?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-glibc", + "name": "glibc", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-2.34-100.el9_4.2.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc@2.34?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-libattr", + "name": "libattr", + "versionInfo": "2.5.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libattr-2.5.1-3.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libattr@2.5.1?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/attr-0:2.5.1-3.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-libacl", + "name": "libacl", + "versionInfo": "2.3.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libacl-2.3.1-4.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libacl@2.3.1?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/acl-0:2.3.1-4.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-libcap", + "name": "libcap", + "versionInfo": "2.48", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libcap-2.48-9.el9_2.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libcap@2.48?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libcap-0:2.48-9.el9_2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-libsepol", + "name": "libsepol", + "versionInfo": "3.6", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libsepol-3.6-1.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libsepol@3.6?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libsepol-0:3.6-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-pcre2", + "name": "pcre2", + "versionInfo": "10.40", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "pcre2-10.40-5.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/pcre2@10.40?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/pcre2-0:10.40-5.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-libselinux", + "name": "libselinux", + "versionInfo": "3.6", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libselinux-3.6-1.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libselinux@3.6?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libselinux-0:3.6-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ppc64le-coreutils-single", + "name": "coreutils-single", + "versionInfo": "8.32", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "coreutils-single-8.32-35.el9.ppc64le.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/coreutils-single@8.32?arch=ppc64le&repository_url=rhel-9-for-ppc64le-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/coreutils-0:8.32-35.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ubi9-micro-container-arm64", + "name": "ubi9-micro-container_arm64", + "versionInfo": "9.4-6.1716471860", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?arch=arm64&repository_url=registry.access.redhat.com/ubi9&tag=9.4-6.1716471860" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi9-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?arch=arm64&repository_url=registry.access.redhat.com&tag=9.4-6.1716471860" + } + ], + "checksums": [ + { + "algorithm": "SHA256", + "checksumValue": "sha256:c72c705fe4e9de2e065a817be2fbf1b6406010610532243727fdc3042227c71b" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-libgcc", + "name": "libgcc", + "versionInfo": "11.4.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libgcc-11.4.1-3.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libgcc@11.4.1?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/gcc-0:11.4.1-3.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-pcre2-syntax", + "name": "pcre2-syntax", + "versionInfo": "10.40", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "pcre2-syntax-10.40-5.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.40?arch=noarch&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/pcre2-0:10.40-5.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-tzdata", + "name": "tzdata", + "versionInfo": "2024a", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "tzdata-2024a-1.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/tzdata@2024a?arch=noarch&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/tzdata-0:2024a-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-redhat-release", + "name": "redhat-release", + "versionInfo": "9.4", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "redhat-release-9.4-0.4.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/redhat-release@9.4?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/redhat-release-0:9.4-0.4.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-setup", + "name": "setup", + "versionInfo": "2.13.7", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "setup-2.13.7-10.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/setup@2.13.7?arch=noarch&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/setup-0:2.13.7-10.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-filesystem", + "name": "filesystem", + "versionInfo": "3.16", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "filesystem-3.16-2.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/filesystem@3.16?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/filesystem-0:3.16-2.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-basesystem", + "name": "basesystem", + "versionInfo": "11", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "basesystem-11-13.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/basesystem@11?arch=noarch&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/basesystem-0:11-13.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-ncurses-base", + "name": "ncurses-base", + "versionInfo": "6.2", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "ncurses-base-6.2-10.20210508.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.2?arch=noarch&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/ncurses-0:6.2-10.20210508.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-ncurses-libs", + "name": "ncurses-libs", + "versionInfo": "6.2", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "ncurses-libs-6.2-10.20210508.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.2?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/ncurses-0:6.2-10.20210508.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-bash", + "name": "bash", + "versionInfo": "5.1.8", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "bash-5.1.8-9.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/bash@5.1.8?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/bash-0:5.1.8-9.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-glibc-common", + "name": "glibc-common", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-common-2.34-100.el9_4.2.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc-common@2.34?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-glibc-minimal-langpack", + "name": "glibc-minimal-langpack", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-minimal-langpack-2.34-100.el9_4.2.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.34?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-glibc", + "name": "glibc", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-2.34-100.el9_4.2.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc@2.34?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-libattr", + "name": "libattr", + "versionInfo": "2.5.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libattr-2.5.1-3.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libattr@2.5.1?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/attr-0:2.5.1-3.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-libacl", + "name": "libacl", + "versionInfo": "2.3.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libacl-2.3.1-4.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libacl@2.3.1?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/acl-0:2.3.1-4.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-libcap", + "name": "libcap", + "versionInfo": "2.48", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libcap-2.48-9.el9_2.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libcap@2.48?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libcap-0:2.48-9.el9_2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-libsepol", + "name": "libsepol", + "versionInfo": "3.6", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libsepol-3.6-1.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libsepol@3.6?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libsepol-0:3.6-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-pcre2", + "name": "pcre2", + "versionInfo": "10.40", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "pcre2-10.40-5.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/pcre2@10.40?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/pcre2-0:10.40-5.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-libselinux", + "name": "libselinux", + "versionInfo": "3.6", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libselinux-3.6-1.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libselinux@3.6?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libselinux-0:3.6-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-aarch64-coreutils-single", + "name": "coreutils-single", + "versionInfo": "8.32", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "coreutils-single-8.32-35.el9.aarch64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/coreutils-single@8.32?arch=aarch64&repository_url=rhel-9-for-aarch64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/coreutils-0:8.32-35.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-ubi9-micro-container-amd64", + "name": "ubi9-micro-container_amd64", + "versionInfo": "9.4-6.1716471860", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?arch=amd64&repository_url=registry.access.redhat.com/ubi9&tag=9.4-6.1716471860" + }, + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:oci/ubi9-micro@sha256%3A1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d?arch=amd64&repository_url=registry.access.redhat.com&tag=9.4-6.1716471860" + } + ], + "checksums": [ + { + "algorithm": "SHA256", + "checksumValue": "sha256:213fd2a0116a76eaa274fee20c86eef4dfba9f311784e8fb7d7f5fc38b32f3ef" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-libgcc", + "name": "libgcc", + "versionInfo": "11.4.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libgcc-11.4.1-3.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libgcc@11.4.1?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/gcc-0:11.4.1-3.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-redhat-release", + "name": "redhat-release", + "versionInfo": "9.4", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "redhat-release-9.4-0.4.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/redhat-release@9.4?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/redhat-release-0:9.4-0.4.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-setup", + "name": "setup", + "versionInfo": "2.13.7", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "setup-2.13.7-10.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/setup@2.13.7?arch=noarch&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/setup-0:2.13.7-10.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-filesystem", + "name": "filesystem", + "versionInfo": "3.16", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "filesystem-3.16-2.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/filesystem@3.16?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/filesystem-0:3.16-2.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-basesystem", + "name": "basesystem", + "versionInfo": "11", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "basesystem-11-13.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/basesystem@11?arch=noarch&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/basesystem-0:11-13.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-pcre2-syntax", + "name": "pcre2-syntax", + "versionInfo": "10.40", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "pcre2-syntax-10.40-5.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.40?arch=noarch&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/pcre2-0:10.40-5.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-tzdata", + "name": "tzdata", + "versionInfo": "2024a", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "tzdata-2024a-1.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/tzdata@2024a?arch=noarch&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/tzdata-0:2024a-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-noarch-ncurses-base", + "name": "ncurses-base", + "versionInfo": "6.2", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "ncurses-base-6.2-10.20210508.el9.noarch.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.2?arch=noarch&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/ncurses-0:6.2-10.20210508.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-ncurses-libs", + "name": "ncurses-libs", + "versionInfo": "6.2", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "ncurses-libs-6.2-10.20210508.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.2?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/ncurses-0:6.2-10.20210508.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-bash", + "name": "bash", + "versionInfo": "5.1.8", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "bash-5.1.8-9.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/bash@5.1.8?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/bash-0:5.1.8-9.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-glibc-common", + "name": "glibc-common", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-common-2.34-100.el9_4.2.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc-common@2.34?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-glibc-minimal-langpack", + "name": "glibc-minimal-langpack", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-minimal-langpack-2.34-100.el9_4.2.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.34?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-glibc", + "name": "glibc", + "versionInfo": "2.34", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "glibc-2.34-100.el9_4.2.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/glibc@2.34?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/glibc-0:2.34-100.el9_4.2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-libattr", + "name": "libattr", + "versionInfo": "2.5.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libattr-2.5.1-3.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libattr@2.5.1?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/attr-0:2.5.1-3.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-libacl", + "name": "libacl", + "versionInfo": "2.3.1", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libacl-2.3.1-4.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libacl@2.3.1?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/acl-0:2.3.1-4.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-libcap", + "name": "libcap", + "versionInfo": "2.48", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libcap-2.48-9.el9_2.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libcap@2.48?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libcap-0:2.48-9.el9_2.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-libsepol", + "name": "libsepol", + "versionInfo": "3.6", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libsepol-3.6-1.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libsepol@3.6?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libsepol-0:3.6-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-pcre2", + "name": "pcre2", + "versionInfo": "10.40", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "pcre2-10.40-5.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/pcre2@10.40?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/pcre2-0:10.40-5.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-libselinux", + "name": "libselinux", + "versionInfo": "3.6", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "libselinux-3.6-1.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/libselinux@3.6?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/libselinux-0:3.6-1.el9.spdx.json.bz2" + } + ] + }, + { + "SPDXID": "SPDXRef-x86_64-coreutils-single", + "name": "coreutils-single", + "versionInfo": "8.32", + "supplier": "Organization: Red Hat", + "downloadLocation": "NOASSERTION", + "packageFileName": "coreutils-single-8.32-35.el9.x86_64.rpm", + "licenseConcluded": "NOASSERTION", + "externalRefs": [ + { + "referenceCategory": "PACKAGE-MANAGER", + "referenceType": "purl", + "referenceLocator": "pkg:rpm/redhat/coreutils-single@8.32?arch=x86_64&repository_url=rhel-9-for-x86_64-baseos-rpms" + }, + { + "referenceCategory": "OTHER", + "referenceType": "sbom_ref", + "referenceLocator": "https://access.redhat.com/security/data/sbom/v1/rpm/coreutils-0:8.32-35.el9.spdx.json.bz2" + } + ] + } + ], + "relationships": [ + { + "spdxElementId": "SPDXRef-DOCUMENT", + "relationshipType": "DESCRIBES", + "relatedSpdxElement": "SPDXRef-image-index" + }, + { + "spdxElementId": "SPDXRef-image-index", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ubi9-micro-container-s390x" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-libgcc" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-tzdata" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-redhat-release" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-setup" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-filesystem" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-basesystem" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-pcre2-syntax" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-ncurses-base" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-ncurses-libs" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-bash" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-glibc-common" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-glibc-minimal-langpack" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-glibc" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-libattr" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-libacl" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-libcap" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-libsepol" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-pcre2" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-libselinux" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-s390x", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-s390x-coreutils-single" + }, + { + "spdxElementId": "SPDXRef-image-index", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ubi9-micro-container-ppc64le" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-libgcc" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-pcre2-syntax" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-tzdata" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-redhat-release" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-setup" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-filesystem" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-basesystem" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-ncurses-base" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-ncurses-libs" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-bash" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-glibc-common" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-glibc-minimal-langpack" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-glibc" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-libattr" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-libacl" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-libcap" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-libsepol" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-pcre2" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-libselinux" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-ppc64le", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ppc64le-coreutils-single" + }, + { + "spdxElementId": "SPDXRef-image-index", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ubi9-micro-container-arm64" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-libgcc" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-pcre2-syntax" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-tzdata" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-redhat-release" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-setup" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-filesystem" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-basesystem" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-ncurses-base" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-ncurses-libs" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-bash" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-glibc-common" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-glibc-minimal-langpack" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-glibc" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-libattr" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-libacl" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-libcap" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-libsepol" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-pcre2" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-libselinux" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-arm64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-aarch64-coreutils-single" + }, + { + "spdxElementId": "SPDXRef-image-index", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-ubi9-micro-container-amd64" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-libgcc" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-redhat-release" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-setup" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-filesystem" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-basesystem" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-pcre2-syntax" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-tzdata" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-noarch-ncurses-base" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-ncurses-libs" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-bash" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-glibc-common" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-glibc-minimal-langpack" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-glibc" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-libattr" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-libacl" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-libcap" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-libsepol" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-pcre2" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-libselinux" + }, + { + "spdxElementId": "SPDXRef-ubi9-micro-container-amd64", + "relationshipType": "CONTAINS", + "relatedSpdxElement": "SPDXRef-x86_64-coreutils-single" + } + ] +} \ No newline at end of file