{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:ce3fcd81-8e73-49ed-86a3-a8acc11abc40","version":1,"metadata":{"timestamp":"2026-10-15T10:08:00+09:00","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.54.1"}]},"component":{"bom-ref":"c996b1c256dcd786","type":"file","name":"app","version":"sha256:926071c23216776504ac7f2505242bc53e444ca045dcea2cc667e0aec5dc0c75"}},"components":[{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.8.0?package-id=60e0742d712df822","type":"library","name":"github.com/spf13/cobra","version":"v1.8.0","cpe":"cpe:2.3:a:spf13:cobra:v1.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-binary-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-buildinfo-entry"},{"name":"syft:location:0:path","value":"/app"},{"name":"syft:metadata:architecture","value":"arm64"},{"name":"syft:metadata:goCompiledVersion","value":"go1.25.5"},{"name":"syft:metadata:h1Digest","value":"h1:7aJaZx1B85qltLMc546zn58BxxfZdR/W22ej9CFoEf0="},{"name":"syft:metadata:mainModule","value":"scab-binary-go"}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=eb49fdb2ac5f1e6c","type":"library","name":"github.com/spf13/pflag","version":"v1.0.5","cpe":"cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-binary-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-buildinfo-entry"},{"name":"syft:location:0:path","value":"/app"},{"name":"syft:metadata:architecture","value":"arm64"},{"name":"syft:metadata:goCompiledVersion","value":"go1.25.5"},{"name":"syft:metadata:h1Digest","value":"h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA="},{"name":"syft:metadata:mainModule","value":"scab-binary-go"}]},{"bom-ref":"pkg:golang/scab-binary-go@v0.0.0-20260701150924-3c359d138227?package-id=3a36dd2001076abe","type":"library","name":"scab-binary-go","version":"v0.0.0-20260701150924-3c359d138227","purl":"pkg:golang/scab-binary-go@v0.0.0-20260701150924-3c359d138227","properties":[{"name":"syft:package:foundBy","value":"go-module-binary-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-buildinfo-entry"},{"name":"syft:location:0:path","value":"/app"},{"name":"syft:metadata:architecture","value":"arm64"},{"name":"syft:metadata:goCompiledVersion","value":"go1.25.5"},{"name":"syft:metadata:mainModule","value":"scab-binary-go"}]},{"bom-ref":"pkg:golang/stdlib@1.25.5?package-id=10047b98d8b2abfa","type":"library","name":"stdlib","version":"go1.25.5","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:go:1.25.5:-:*:*:*:*:*:*","purl":"pkg:golang/stdlib@1.25.5","properties":[{"name":"syft:package:foundBy","value":"go-module-binary-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-buildinfo-entry"},{"name":"syft:location:0:path","value":"/app"},{"name":"syft:metadata:goCompiledVersion","value":"go1.25.5"}]},{"bom-ref":"a837bfd943468ec8","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/binary-go/app","hashes":[{"alg":"SHA-1","content":"27c743816c58f82387af122ebf374a460b2e38c2"},{"alg":"SHA-256","content":"926071c23216776504ac7f2505242bc53e444ca045dcea2cc667e0aec5dc0c75"}]}],"dependencies":[{"ref":"pkg:golang/scab-binary-go@v0.0.0-20260701150924-3c359d138227?package-id=3a36dd2001076abe","dependsOn":["pkg:golang/github.com/spf13/cobra@v1.8.0?package-id=60e0742d712df822","pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=eb49fdb2ac5f1e6c","pkg:golang/stdlib@1.25.5?package-id=10047b98d8b2abfa"]}]}