{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:4ee3b7f1-5f4a-44fd-94c4-99ac9d7bab47","version":1,"metadata":{"timestamp":"2026-10-15T10:10:31+09:00","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.54.1"}]},"component":{"bom-ref":"50da83ed6c5fe0db","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/gradle-lock"}},"components":[{"bom-ref":"pkg:maven/org.gradle.wrapper.GradleWrapperMain/gradle-wrapper?package-id=3037d78a44627329","type":"library","name":"gradle-wrapper","version":"UNKNOWN","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:org.gradle.wrapper.GradleWrapperMain:GradleWrapperMain:*:*:*:*:*:*:*:*","purl":"pkg:maven/org.gradle.wrapper.GradleWrapperMain/gradle-wrapper","externalReferences":[{"url":"","hashes":[{"alg":"SHA-1","content":"acb0e15fdf618e7342f7fcf9306356c8e18b62ce"}],"type":"build-meta"}],"properties":[{"name":"syft:package:foundBy","value":"java-archive-cataloger"},{"name":"syft:package:language","value":"java"},{"name":"syft:package:type","value":"java-archive"},{"name":"syft:package:metadataType","value":"java-archive"},{"name":"syft:cpe23","value":"cpe:2.3:a:org.gradle.wrapper.GradleWrapperMain:gradle-wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:org.gradle.wrapper.GradleWrapperMain:gradle_wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:org.gradle.wrapper.GradleWrapperMain:wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:GradleWrapperMain:GradleWrapperMain:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:GradleWrapperMain:gradle-wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:GradleWrapperMain:gradle_wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle-wrapper:GradleWrapperMain:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle_wrapper:GradleWrapperMain:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle-wrapper:gradle-wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle-wrapper:gradle_wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle_wrapper:gradle-wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle_wrapper:gradle_wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:GradleWrapperMain:wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrapper:GradleWrapperMain:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle:GradleWrapperMain:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle-wrapper:wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle_wrapper:wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrapper:gradle-wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrapper:gradle_wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle:gradle-wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle:gradle_wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrapper:wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gradle:wrapper:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/gradle/wrapper/gradle-wrapper.jar"},{"name":"syft:metadata:virtualPath","value":"/gradle/wrapper/gradle-wrapper.jar"}]},{"bom-ref":"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.0?package-id=b63b5bc6e63d9a39","type":"library","name":"jackson-annotations","version":"2.13.0","cpe":"cpe:2.3:a:com.fasterxml.jackson.core:jackson-annotations:2.13.0:*:*:*:*:*:*:*","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.0","properties":[{"name":"syft:package:foundBy","value":"java-gradle-lockfile-cataloger"},{"name":"syft:package:language","value":"java"},{"name":"syft:package:type","value":"java-archive"},{"name":"syft:package:metadataType","value":"java-archive"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:jackson_annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-annotations:jackson-annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-annotations:jackson_annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_annotations:jackson-annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_annotations:jackson_annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson-annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson_annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-annotations:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson-annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson_annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_annotations:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson-annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson_annotations:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-annotations:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_annotations:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/gradle.lockfile"}]},{"bom-ref":"pkg:maven/com.fasterxml.jackson/jackson-bom@2.13.0?package-id=8a6e96043515eca1","type":"library","name":"jackson-bom","version":"2.13.0","cpe":"cpe:2.3:a:com.fasterxml.jackson:jackson-bom:2.13.0:*:*:*:*:*:*:*","purl":"pkg:maven/com.fasterxml.jackson/jackson-bom@2.13.0","properties":[{"name":"syft:package:foundBy","value":"java-gradle-lockfile-cataloger"},{"name":"syft:package:language","value":"java"},{"name":"syft:package:type","value":"java-archive"},{"name":"syft:package:metadataType","value":"java-archive"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson:jackson_bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-bom:jackson-bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-bom:jackson_bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_bom:jackson-bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_bom:jackson_bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson-bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson_bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-bom:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson-bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson_bom:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_bom:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/gradle.lockfile"}]},{"bom-ref":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.0?package-id=0aceaa5c1a3abe05","type":"library","name":"jackson-core","version":"2.13.0","cpe":"cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.13.0:*:*:*:*:*:*:*","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.0","properties":[{"name":"syft:package:foundBy","value":"java-gradle-lockfile-cataloger"},{"name":"syft:package:language","value":"java"},{"name":"syft:package:type","value":"java-archive"},{"name":"syft:package:metadataType","value":"java-archive"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-core:jackson-core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-core:jackson_core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_core:jackson-core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_core:jackson_core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson-core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson_core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-core:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson-core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson_core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_core:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson-core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson_core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-core:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_core:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/gradle.lockfile"}]},{"bom-ref":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.0?package-id=7d5046d935988ba0","type":"library","name":"jackson-databind","version":"2.13.0","cpe":"cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.0:*:*:*:*:*:*:*","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.0","properties":[{"name":"syft:package:foundBy","value":"java-gradle-lockfile-cataloger"},{"name":"syft:package:language","value":"java"},{"name":"syft:package:type","value":"java-archive"},{"name":"syft:package:metadataType","value":"java-archive"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-databind:jackson-databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-databind:jackson_databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_databind:jackson-databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_databind:jackson_databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:com.fasterxml.jackson.core:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson-databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson_databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-databind:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson-databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson_databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_databind:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson-databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson_databind:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson-databind:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson_databind:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fasterxml:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:jackson:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jackson:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:core:2.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/gradle.lockfile"}]},{"bom-ref":"ae17f439015eeabb","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/gradle-lock/gradle.lockfile","hashes":[{"alg":"SHA-1","content":"ab94a5df6527c69eee2cac2066e3e95d4365d7dd"},{"alg":"SHA-256","content":"a3798b0c5ab2a0f2ae4c03489e9f44c1ac3ef35fbe2bcc178f3d8ace4d45abc4"}]},{"bom-ref":"803860b7b0aaa5b6","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/gradle-lock/gradle/wrapper/gradle-wrapper.jar","hashes":[{"alg":"SHA-1","content":"acb0e15fdf618e7342f7fcf9306356c8e18b62ce"},{"alg":"SHA-256","content":"b3a875ddc1f044746e1b1a55f645584505f4a10438c1afea9f15e92a7c42ec13"}]}]}