{"$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:9a530a97-2c4c-4dcd-907d-3b4d49e9f773", "version": 1, "metadata": {"timestamp": "2026-10-26T21:51:20+01:00", "tools": {"components": [{"type": "application", "author": "anchore", "name": "syft", "version": "1.54.1"}]}, "component": {"bom-ref": "pkg:rpm/evalgo/nginx@2:1.30.6-1.evalgo2.el10?arch=x86_64", "type": "application", "name": "nginx", "version": "2:1.30.6-1.evalgo2.el10", "purl": "pkg:rpm/evalgo/nginx@2:1.30.6-1.evalgo2.el10?arch=x86_64", "licenses": [{"license": {"name": "2-clause BSD-like license"}}], "hashes": [{"alg": "SHA-256", "content": "b549a4fe5f1e1c46e123a888dd102a6f9abd461a6bd2a6c8a3836e45b8a58619"}], "properties": [{"name": "evalgo:repo", "value": "nginx-stable/el/10"}]}, "properties": [{"name": "evalgo:sbom-source", "value": "syft over the unpacked RPM payload + ci/catalog/rpm-extra.json"}]}, "components": [{"bom-ref": "pkg:generic/nginx@1.30.6?package-id=26a1191b08b35cbe", "type": "application", "name": "nginx", "version": "1.30.6", "cpe": "cpe:2.3:a:f5:nginx:1.30.6:*:*:*:*:*:*:*", "purl": "pkg:generic/nginx@1.30.6", "properties": [{"name": "syft:package:foundBy", "value": "binary-classifier-cataloger"}, {"name": "syft:package:type", "value": "binary"}, {"name": "syft:package:metadataType", "value": "binary-signature"}, {"name": "syft:cpe23", "value": "cpe:2.3:a:nginx:nginx:1.30.6:*:*:*:*:*:*:*"}, {"name": "syft:location:0:path", "value": "/usr/sbin/nginx"}]}, {"bom-ref": "1f7e353cf5afcb7f", "type": "file", "name": "/usr/sbin/nginx", "hashes": [{"alg": "SHA-1", "content": "859b150b7e8397734ac067f7f4be834affec0271"}, {"alg": "SHA-256", "content": "bf1ebf3b288d0b0cba46e195ade3c2e18e97117ba9c610b76514a7914881668e"}]}, {"bom-ref": "evalgo-extra:nginx@1.30.6", "type": "application", "name": "nginx", "version": "1.30.6", "purl": "pkg:generic/nginx@1.30.6", "properties": [{"name": "evalgo:note", "value": "upstream software packaged in nginx"}], "cpe": "cpe:2.3:a:f5:nginx:1.30.6:*:*:*:*:*:*:*"}, {"bom-ref": "evalgo-extra:ngx_http_substitutions_filter_module@e12e965ac183", "type": "library", "name": "ngx_http_substitutions_filter_module", "version": "e12e965ac183", "purl": "pkg:github/yaoweibin/ngx_http_substitutions_filter_module@e12e965ac183", "properties": [{"name": "evalgo:note", "value": "compiled in (pkg/nginx, patch-spec.sh)"}]}]}