{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:52ef4f55-eb3f-4d3d-914e-36dfb65eb875","version":1,"metadata":{"timestamp":"2026-10-15T10:07:59+09:00","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.54.1"}]},"component":{"bom-ref":"34197c699ad1d689","type":"file","name":"busybox","version":"sha256:6e123e7f3202a8c1e9b1f94d8941580a25135382b99e8d3e34fb858bba311348"}},"components":[{"bom-ref":"pkg:generic/busybox@1.35.0?package-id=317ed893e67837e0","type":"application","name":"busybox","version":"1.35.0","cpe":"cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:*","purl":"pkg:generic/busybox@1.35.0","properties":[{"name":"syft:package:foundBy","value":"binary-classifier-cataloger"},{"name":"syft:package:type","value":"binary"},{"name":"syft:package:metadataType","value":"binary-signature"},{"name":"syft:location:0:path","value":"/busybox"}]},{"bom-ref":"a787fa3d295dd378","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/binary-busybox/busybox","hashes":[{"alg":"SHA-1","content":"434b3b60c0514192558a00c8dc7542721ed7fe43"},{"alg":"SHA-256","content":"6e123e7f3202a8c1e9b1f94d8941580a25135382b99e8d3e34fb858bba311348"}]}]}