{"$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:6080e4be-74bf-46b2-bc6d-45f0e852bd9f", "version": 1, "metadata": {"timestamp": "2026-10-26T21:51:17+01:00", "tools": {"components": [{"type": "application", "author": "anchore", "name": "syft", "version": "1.54.1"}]}, "component": {"bom-ref": "pkg:rpm/evalgo/nginx@2:1.30.6-1.evalgo1.el10?arch=x86_64", "type": "application", "name": "nginx", "version": "2:1.30.6-1.evalgo1.el10", "purl": "pkg:rpm/evalgo/nginx@2:1.30.6-1.evalgo1.el10?arch=x86_64", "licenses": [{"license": {"name": "2-clause BSD-like license"}}], "hashes": [{"alg": "SHA-256", "content": "3e5b7ae85ef2e2354fe1eb55d7911ed4f1df0d4db3f55800634005324b373f4d"}], "properties": [{"name": "evalgo:repo", "value": "nginx-stable/el/10"}]}, "properties": [{"name": "evalgo:sbom-source", "value": "syft over the unpacked RPM payload + ci/catalog/rpm-extra.json"}]}, "components": [{"bom-ref": "pkg:generic/nginx@1.30.6?package-id=26a1191b08b35cbe", "type": "application", "name": "nginx", "version": "1.30.6", "cpe": "cpe:2.3:a:f5:nginx:1.30.6:*:*:*:*:*:*:*", "purl": "pkg:generic/nginx@1.30.6", "properties": [{"name": "syft:package:foundBy", "value": "binary-classifier-cataloger"}, {"name": "syft:package:type", "value": "binary"}, {"name": "syft:package:metadataType", "value": "binary-signature"}, {"name": "syft:cpe23", "value": "cpe:2.3:a:nginx:nginx:1.30.6:*:*:*:*:*:*:*"}, {"name": "syft:location:0:path", "value": "/usr/sbin/nginx"}]}, {"bom-ref": "1f7e353cf5afcb7f", "type": "file", "name": "/usr/sbin/nginx", "hashes": [{"alg": "SHA-1", "content": "cdabf821c0a489c7c9fc2723e60c0387d92ea50a"}, {"alg": "SHA-256", "content": "e5503eadd79437e56f3423c071c38cabf6689f144ed0c352b3ff69a793c651d7"}]}, {"bom-ref": "evalgo-extra:nginx@1.30.6", "type": "application", "name": "nginx", "version": "1.30.6", "purl": "pkg:generic/nginx@1.30.6", "properties": [{"name": "evalgo:note", "value": "upstream software packaged in nginx"}], "cpe": "cpe:2.3:a:f5:nginx:1.30.6:*:*:*:*:*:*:*"}, {"bom-ref": "evalgo-extra:ngx_http_substitutions_filter_module@e12e965ac183", "type": "library", "name": "ngx_http_substitutions_filter_module", "version": "e12e965ac183", "purl": "pkg:github/yaoweibin/ngx_http_substitutions_filter_module@e12e965ac183", "properties": [{"name": "evalgo:note", "value": "compiled in (pkg/nginx, patch-spec.sh)"}]}]}