@@ -29,21 +29,27 @@ func main() {
29
29
bom .Metadata = & cdx.Metadata {
30
30
Timestamp : time .Now ().Format (time .RFC3339 ),
31
31
Component : & cdx.Component {
32
- BOMRef : "pkg:golang/acme-inc/acme-app@1 .0.0" ,
32
+ BOMRef : "pkg:golang/acme-inc/acme-app@v1 .0.0" ,
33
33
Type : cdx .ComponentTypeApplication ,
34
34
Name : "ACME Application" ,
35
- Version : "1.0.0" ,
35
+ Version : "v1.0.0" ,
36
+ },
37
+ Properties : & []cdx.Property {
38
+ {
39
+ Name : "internal-bom-identifier" ,
40
+ Value : "123456789" ,
41
+ },
36
42
},
37
43
}
38
44
bom .Components = & []cdx.Component {
39
45
{
40
- BOMRef : "pkg:golang/github.com/CycloneDX/cyclonedx-go@0.1 .0" ,
46
+ BOMRef : "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.3 .0" ,
41
47
Type : cdx .ComponentTypeLibrary ,
42
48
Author : "CycloneDX" ,
43
49
Name : "cyclonedx-go" ,
44
- Version : "0.1 .0" ,
50
+ Version : "v0.3 .0" ,
45
51
Description : "Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)" ,
46
- PackageURL : "pkg:golang/github.com/CycloneDX/cyclonedx-go@0.1 .0" ,
52
+ PackageURL : "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.3 .0" ,
47
53
ExternalReferences : & []cdx.ExternalReference {
48
54
{
49
55
Type : cdx .ERTypeIssueTracker ,
@@ -58,13 +64,24 @@ func main() {
58
64
}
59
65
bom .Dependencies = & []cdx.Dependency {
60
66
{
61
- Ref : "pkg:golang/acme-inc/acme-app@1 .0.0" ,
67
+ Ref : "pkg:golang/acme-inc/acme-app@v1 .0.0" ,
62
68
Dependencies : & []cdx.Dependency {
63
- {Ref : "pkg:golang/github.com/CycloneDX/cyclonedx-go@0.1 .0" },
69
+ {Ref : "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.3 .0" },
64
70
},
65
71
},
66
72
{
67
- Ref : "pkg:golang/github.com/CycloneDX/cyclonedx-go@0.1.0" ,
73
+ Ref : "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.3.0" ,
74
+ },
75
+ }
76
+ bom .Compositions = & []cdx.Composition {
77
+ {
78
+ Aggregate : cdx .CompositionAggregateComplete ,
79
+ Assemblies : & []cdx.BOMReference {
80
+ "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.3.0" ,
81
+ },
82
+ Dependencies : & []cdx.BOMReference {
83
+ "pkg:golang/acme-inc/acme-app@v1.0.0" ,
84
+ },
68
85
},
69
86
}
70
87
0 commit comments