argunix
☰

Software Bill of Materials

packages.x86_64-linux.default

← back to job

image
default
components
5
format
CycloneDX

Transcribed straight from the Nix dependency graph — every store path the image ships, with no scanner heuristics. This SBOM is also attached to the image in the registry as an OCI referrer (discover it with oras discover).

components

name version purl store path
glibc 2.42-61 pkg:nix/glibc@2.42-61 /nix/store/57iz36553175g3178pvxjij8z5rcsd4n-glibc-2.42-61
libidn2 2.3.8 pkg:nix/libidn2@2.3.8 /nix/store/6qa00czc79b3nb6ld0mdyacfp2p1k3jx-libidn2-2.3.8
libunistring 1.4.2 pkg:nix/libunistring@1.4.2 /nix/store/bf6wgamqnl3c91iamlb1branrfcwwy7x-libunistring-1.4.2
xgcc 15.2.0-libgcc pkg:nix/xgcc@15.2.0-libgcc /nix/store/g54b6ghpnn98hfdz4yqw87w10c3hx8bv-xgcc-15.2.0-libgcc
hello 2.12.3 pkg:nix/hello@2.12.3 /nix/store/zi2bj2hlavv8q743li2s9diqbcpmrf9b-hello-2.12.3
raw CycloneDX JSON 
{
  "bomFormat": "CycloneDX",
  "components": [
    {
      "bom-ref": "57iz36553175g3178pvxjij8z5rcsd4n-glibc-2.42-61",
      "name": "glibc",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/57iz36553175g3178pvxjij8z5rcsd4n-glibc-2.42-61"
        }
      ],
      "purl": "pkg:nix/glibc@2.42-61",
      "type": "library",
      "version": "2.42-61"
    },
    {
      "bom-ref": "6qa00czc79b3nb6ld0mdyacfp2p1k3jx-libidn2-2.3.8",
      "name": "libidn2",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/6qa00czc79b3nb6ld0mdyacfp2p1k3jx-libidn2-2.3.8"
        }
      ],
      "purl": "pkg:nix/libidn2@2.3.8",
      "type": "library",
      "version": "2.3.8"
    },
    {
      "bom-ref": "bf6wgamqnl3c91iamlb1branrfcwwy7x-libunistring-1.4.2",
      "name": "libunistring",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/bf6wgamqnl3c91iamlb1branrfcwwy7x-libunistring-1.4.2"
        }
      ],
      "purl": "pkg:nix/libunistring@1.4.2",
      "type": "library",
      "version": "1.4.2"
    },
    {
      "bom-ref": "g54b6ghpnn98hfdz4yqw87w10c3hx8bv-xgcc-15.2.0-libgcc",
      "name": "xgcc",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/g54b6ghpnn98hfdz4yqw87w10c3hx8bv-xgcc-15.2.0-libgcc"
        }
      ],
      "purl": "pkg:nix/xgcc@15.2.0-libgcc",
      "type": "library",
      "version": "15.2.0-libgcc"
    },
    {
      "bom-ref": "zi2bj2hlavv8q743li2s9diqbcpmrf9b-hello-2.12.3",
      "name": "hello",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/zi2bj2hlavv8q743li2s9diqbcpmrf9b-hello-2.12.3"
        }
      ],
      "purl": "pkg:nix/hello@2.12.3",
      "type": "library",
      "version": "2.12.3"
    }
  ],
  "metadata": {
    "component": {
      "bom-ref": "default",
      "name": "default",
      "type": "container"
    },
    "tools": [
      {
        "name": "argunix",
        "vendor": "applicative.systems"
      }
    ]
  },
  "specVersion": "1.5",
  "version": 1
}