{"$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:d1a78675-21bd-446b-b08b-e72476f386f1", "version": 1, "metadata": {"timestamp": "2026-10-26T21:51:15+01:00", "tools": {"components": [{"type": "application", "author": "anchore", "name": "syft", "version": "1.54.1"}]}, "component": {"bom-ref": "pkg:rpm/evalgo/nginx@2:1.31.8-1.evalgo2.el10?arch=x86_64", "type": "application", "name": "nginx", "version": "2:1.31.8-1.evalgo2.el10", "purl": "pkg:rpm/evalgo/nginx@2:1.31.8-1.evalgo2.el10?arch=x86_64", "licenses": [{"license": {"name": "2-clause BSD-like license"}}], "hashes": [{"alg": "SHA-256", "content": "e05d715aec60828a882741a0079c275374017a5e2ce543993c858990e5953e38"}], "properties": [{"name": "evalgo:repo", "value": "nginx-mainline/el/10"}]}, "properties": [{"name": "evalgo:sbom-source", "value": "syft over the unpacked RPM payload + ci/catalog/rpm-extra.json"}]}, "components": [{"bom-ref": "pkg:generic/nginx@1.31.8?package-id=c45ea2d6dbf62c04", "type": "application", "name": "nginx", "version": "1.31.8", "cpe": "cpe:2.3:a:f5:nginx:1.31.8:*:*:*:*:*:*:*", "purl": "pkg:generic/nginx@1.31.8", "properties": [{"name": "syft:package:foundBy", "value": "binary-classifier-cataloger"}, {"name": "syft:package:type", "value": "binary"}, {"name": "syft:package:metadataType", "value": "binary-signature"}, {"name": "syft:cpe23", "value": "cpe:2.3:a:nginx:nginx:1.31.8:*:*:*:*:*:*:*"}, {"name": "syft:location:0:path", "value": "/usr/sbin/nginx"}]}, {"bom-ref": "1f7e353cf5afcb7f", "type": "file", "name": "/usr/sbin/nginx", "hashes": [{"alg": "SHA-1", "content": "d79e8c7b2859da0b927105a0c104e585b7cfc4d5"}, {"alg": "SHA-256", "content": "9a80cc195d801476cf86cdd331e84266100a5e25f3f73a6418328d56416d6f1c"}]}, {"bom-ref": "evalgo-extra:nginx@1.31.8", "type": "application", "name": "nginx", "version": "1.31.8", "purl": "pkg:generic/nginx@1.31.8", "properties": [{"name": "evalgo:note", "value": "upstream software packaged in nginx"}], "cpe": "cpe:2.3:a:f5:nginx:1.31.8:*:*:*:*:*:*:*"}, {"bom-ref": "evalgo-extra:ngx_http_substitutions_filter_module@e12e965ac183", "type": "library", "name": "ngx_http_substitutions_filter_module", "version": "e12e965ac183", "purl": "pkg:github/yaoweibin/ngx_http_substitutions_filter_module@e12e965ac183", "properties": [{"name": "evalgo:note", "value": "compiled in (pkg/nginx, patch-spec.sh)"}]}]}