{"$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:9658b891-585f-47a0-b512-3d6e8777fcba", "version": 1, "metadata": {"timestamp": "2026-10-26T21:51:12+01:00", "tools": {"components": [{"type": "application", "author": "anchore", "name": "syft", "version": "1.54.1"}]}, "component": {"bom-ref": "pkg:rpm/evalgo/nginx@2:1.31.8-1.evalgo1.el10?arch=x86_64", "type": "application", "name": "nginx", "version": "2:1.31.8-1.evalgo1.el10", "purl": "pkg:rpm/evalgo/nginx@2:1.31.8-1.evalgo1.el10?arch=x86_64", "licenses": [{"license": {"name": "2-clause BSD-like license"}}], "hashes": [{"alg": "SHA-256", "content": "d1fb72f38b6f1682f2ad49ce495ed0bc58eb796704c16dd98e47af81d7d9d42f"}], "properties": [{"name": "evalgo:repo", "value": "nginx-mainline/el/10"}]}, "properties": [{"name": "evalgo:sbom-source", "value": "syft over the unpacked RPM payload + ci/catalog/rpm-extra.json"}]}, "components": [{"bom-ref": "pkg:generic/nginx@1.31.8?package-id=c45ea2d6dbf62c04", "type": "application", "name": "nginx", "version": "1.31.8", "cpe": "cpe:2.3:a:f5:nginx:1.31.8:*:*:*:*:*:*:*", "purl": "pkg:generic/nginx@1.31.8", "properties": [{"name": "syft:package:foundBy", "value": "binary-classifier-cataloger"}, {"name": "syft:package:type", "value": "binary"}, {"name": "syft:package:metadataType", "value": "binary-signature"}, {"name": "syft:cpe23", "value": "cpe:2.3:a:nginx:nginx:1.31.8:*:*:*:*:*:*:*"}, {"name": "syft:location:0:path", "value": "/usr/sbin/nginx"}]}, {"bom-ref": "1f7e353cf5afcb7f", "type": "file", "name": "/usr/sbin/nginx", "hashes": [{"alg": "SHA-1", "content": "ce76752134606688509110ec1b6b401230194dde"}, {"alg": "SHA-256", "content": "db071ee97d751bed92dc308b3891a6c4f2f8949991431a2b7e971f4f312bca30"}]}, {"bom-ref": "evalgo-extra:nginx@1.31.8", "type": "application", "name": "nginx", "version": "1.31.8", "purl": "pkg:generic/nginx@1.31.8", "properties": [{"name": "evalgo:note", "value": "upstream software packaged in nginx"}], "cpe": "cpe:2.3:a:f5:nginx:1.31.8:*:*:*:*:*:*:*"}, {"bom-ref": "evalgo-extra:ngx_http_substitutions_filter_module@e12e965ac183", "type": "library", "name": "ngx_http_substitutions_filter_module", "version": "e12e965ac183", "purl": "pkg:github/yaoweibin/ngx_http_substitutions_filter_module@e12e965ac183", "properties": [{"name": "evalgo:note", "value": "compiled in (pkg/nginx, patch-spec.sh)"}]}]}