Updates to example7 binary sbom

- Recalculate hashes for ExternalMap - Remove Build element - Update relationships - Remove Build id from element list - Move all ExternalMap elements to SpdxDocument "imports" Signed-off-by: Nisha Kumar <[email protected]>
spdx · Aug 9, 2024 · 1ae83ba · 1ae83ba
1 parent a37b6b7
commit 1ae83ba
Showing 1 changed file with 67 additions and 60 deletions.
diff --git a/software/example7/spdx-3.0/example7-bin.spdx.json b/software/example7/spdx-3.0/example7-bin.spdx.json
@@ -36,78 +36,24 @@
       ],
       "software_primaryPurpose": "executable"
     },
-    {
-      "type": "ExternalMap",
-      "externalSpdxId": "urn:uuid:a9f18ff3-17fa-419d-8966-abe4b992312b",
-      "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-golang.spdx.jsonld",
-      "verifiedUsing": [
-        {
-          "type": "Hash",
-          "algorithm": "sha256",
-          "hashValue": "ffde414ff13e529e8ea834f92d0e6df9c56ebace6c359ef3fca9cb60ea6cbb63"
-        }
-      ]
-    },
-    {
-      "type": "ExternalMap",
-      "externalSpdxId": "urn:uuid:e1877974-0aaa-48e6-931f-db4898c543f8",
-      "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-go-module.spdx.jsonld",
-      "verifiedUsing": [
-        {
-          "type": "Hash",
-          "algorithm": "sha256",
-          "hashValue": "28c680a0232828f5ea550a10e02e9548316d4f8c1c618ae52bdf1d8e6f5a3c3c"
-        }
-      ]
-    },
-    {
-      "type": "ExternalMap",
-      "externalSpdxId": "urn:uuid:4918b993-36f8-4e75-bf94-2f017575eae5",
-      "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-third-party-modules.spdx.jsonld",
-      "verifiedUsing": [
-        {
-          "type": "Hash",
-          "algorithm": "sha256",
-          "hashValue": "9b34ebb21f3329351be6490733e17c0bd8b3cf4cc7321c0f3207c69844df133d"
-        }
-      ]
-    },
-    {
-      "type": "ExternalMap",
-      "externalSpdxId": "urn:uuid:84e4231d-fc1d-4b4e-9609-05781f81fa73",
-      "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-third-party-modules.spdx.jsonld",
-      "verifiedUsing": [
-        {
-          "type": "Hash",
-          "algorithm": "sha256",
-          "hashValue": "9b34ebb21f3329351be6490733e17c0bd8b3cf4cc7321c0f3207c69844df133d"
-        }
-      ]
-    },
-    {
-      "spdxId": "urn:uuid:128052d9-d307-43fc-a676-5d8791e12391",
-      "type": "build_Build",
-      "comment": "This element is used to express inputs and outputs of the go build"  
-    },
     {
       "type": "LifecycleScopedRelationship",
       "scope": "build",
       "spdxId": "urn:uuid:98dd3b3f-6b8f-49a1-88b6-628750516f1e",
       "creationInfo": "_:creationInfo",
-      "relationshipType": "hasInputs",
-      "from": "urn:uuid:128052d9-d307-43fc-a676-5d8791e12391",
+      "relationshipType": "usesTool",
+      "from": "urn:uuid:e1877974-0aaa-48e6-931f-db4898c543f8",
       "to": [
-        "urn:uuid:a9f18ff3-17fa-419d-8966-abe4b992312b",
-        "urn:uuid:e1877974-0aaa-48e6-931f-db4898c543f8"
+        "urn:uuid:a9f18ff3-17fa-419d-8966-abe4b992312b"
       ] 
     },
     {
       "type": "LifecycleScopedRelationship",
       "scope": "build",
       "spdxId": "urn:uuid:a7b65a78-8ed2-4b20-a91b-40f94ecdb81c",
       "creationInfo": "_:creationInfo",
-      "relationshipType": "hasOutputs",
-      "from": "urn:uuid:128052d9-d307-43fc-a676-5d8791e12391",
+      "relationshipType": "generates",
+      "from": "urn:uuid:3b2939bf-fcce-4617-a06f-115168870b95",
       "to": [
         "urn:uuid:3773937f-6db8-49f9-920f-7d1a6b0cfcbb"
       ] 
@@ -135,7 +81,6 @@
       "element": [
         "urn:uuid:6731cd26-926c-486b-8127-340c0f11a228",
         "urn:uuid:3773937f-6db8-49f9-920f-7d1a6b0cfcbb",
-        "urn:uuid:128052d9-d307-43fc-a676-5d8791e12391",
         "urn:uuid:98dd3b3f-6b8f-49a1-88b6-628750516f1e",
         "urn:uuid:a7b65a78-8ed2-4b20-a91b-40f94ecdb81c",
         "urn:uuid:5524e7dd-5d2f-44fa-86b0-ccaa3cf6fa63"
@@ -153,6 +98,68 @@
       ],
       "rootElement": [
         "urn:uuid:4c7ec5f3-875b-4f99-8c4c-f0a718da8c4f"
+      ],
+      "imports": [
+        {
+          "type": "ExternalMap",
+          "externalSpdxId": "urn:uuid:a9f18ff3-17fa-419d-8966-abe4b992312b",
+          "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-golang.spdx.jsonld",
+          "verifiedUsing": [
+            {
+              "type": "Hash",
+              "algorithm": "sha256",
+              "hashValue": "15ed567c36a30fb37f7d19f0f471434b9453909bf62d925194efe713ede62086"
+            }
+          ]
+        },
+        {
+          "type": "ExternalMap",
+          "externalSpdxId": "urn:uuid:3b2939bf-fcce-4617-a06f-115168870b95",
+          "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-golang.spdx.jsonld",
+          "verifiedUsing": [
+            {
+              "type": "Hash",
+              "algorithm": "sha256",
+              "hashValue": "15ed567c36a30fb37f7d19f0f471434b9453909bf62d925194efe713ede62086"
+            }
+          ]
+        },
+        {
+          "type": "ExternalMap",
+          "externalSpdxId": "urn:uuid:e1877974-0aaa-48e6-931f-db4898c543f8",
+          "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-go-module.spdx.jsonld",
+          "verifiedUsing": [
+            {
+              "type": "Hash",
+              "algorithm": "sha256",
+              "hashValue": "7bb2343efdccb4a2a2947219c87747673854fc6b550b2f98518af342f8dded17"
+            }
+          ]
+        },
+        {
+           "type": "ExternalMap",
+           "externalSpdxId": "urn:uuid:4918b993-36f8-4e75-bf94-2f017575eae5",
+           "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-third-party-modules.spdx.jsonld",
+           "verifiedUsing": [
+             {
+              "type": "Hash",
+              "algorithm": "sha256",
+              "hashValue": "0e3532e0773d24d1a3a0a58592effd67daf22ac89282dc18805e1eef23f68dfe"
+            }
+          ]
+        },
+        {
+          "type": "ExternalMap",
+          "externalSpdxId": "urn:uuid:84e4231d-fc1d-4b4e-9609-05781f81fa73",
+          "locationHint": "https://github.com/spdx/spdx-examples/software/example7/example7-third-party-modules.spdx.jsonld",
+          "verifiedUsing": [
+            {
+              "type": "Hash",
+              "algorithm": "sha256",
+              "hashValue": "0e3532e0773d24d1a3a0a58592effd67daf22ac89282dc18805e1eef23f68dfe"
+            }
+          ]
+        }
       ]
     }
   ]