1{ 2 "spdxVersion": "SPDX-2.3", 3 "dataLicense": "CC0-1.0", 4 "SPDXID": "SPDXRef-DOCUMENT", 5 "name": "test doc", 6 "documentNamespace": "http://www.google.com/sbom/spdx/android", 7 "creationInfo": { 8 "creators": [ 9 "Organization: Google" 10 ], 11 "created": "2023-03-31T22:17:58Z" 12 }, 13 "externalDocumentRefs": [ 14 { 15 "externalDocumentId": "DocumentRef-external_doc_ref", 16 "spdxDocument": "external_doc_uri", 17 "checksum": { 18 "algorithm": "SHA1", 19 "checksumValue": "1234567890" 20 } 21 } 22 ], 23 "documentDescribes": [ 24 "SPDXRef-PRODUCT" 25 ], 26 "packages": [ 27 { 28 "name": "PRODUCT", 29 "SPDXID": "SPDXRef-PRODUCT", 30 "downloadLocation": "NONE", 31 "filesAnalyzed": true, 32 "versionInfo": "build_finger_print", 33 "supplier": "Organization: Google", 34 "packageVerificationCode": { 35 "packageVerificationCodeValue": "123456" 36 }, 37 "hasFiles": [ 38 "SPDXRef-file1", 39 "SPDXRef-file2", 40 "SPDXRef-file3" 41 ] 42 }, 43 { 44 "name": "PLATFORM", 45 "SPDXID": "SPDXRef-PLATFORM", 46 "downloadLocation": "NONE", 47 "filesAnalyzed": false, 48 "versionInfo": "build_finger_print", 49 "supplier": "Organization: Google" 50 }, 51 { 52 "name": "Prebuilt package1", 53 "SPDXID": "SPDXRef-PREBUILT-package1", 54 "downloadLocation": "NONE", 55 "filesAnalyzed": false, 56 "versionInfo": "build_finger_print", 57 "supplier": "Organization: Google" 58 }, 59 { 60 "name": "Source package1", 61 "SPDXID": "SPDXRef-SOURCE-package1", 62 "downloadLocation": "NONE", 63 "filesAnalyzed": false, 64 "versionInfo": "build_finger_print", 65 "supplier": "Organization: Google", 66 "externalRefs": [ 67 { 68 "referenceCategory": "SECURITY", 69 "referenceType": "cpe22Type", 70 "referenceLocator": "cpe:/a:jsoncpp_project:jsoncpp:1.9.4" 71 } 72 ] 73 }, 74 { 75 "name": "Upstream package1", 76 "SPDXID": "SPDXRef-UPSTREAM-package1", 77 "downloadLocation": "NOASSERTION", 78 "filesAnalyzed": false, 79 "versionInfo": "1.1", 80 "supplier": "Organization: upstream" 81 } 82 ], 83 "files": [ 84 { 85 "fileName": "/bin/file1", 86 "SPDXID": "SPDXRef-file1", 87 "checksums": [ 88 { 89 "algorithm": "SHA1", 90 "checksumValue": "11111" 91 } 92 ] 93 }, 94 { 95 "fileName": "/bin/file2", 96 "SPDXID": "SPDXRef-file2", 97 "checksums": [ 98 { 99 "algorithm": "SHA1", 100 "checksumValue": "22222" 101 } 102 ] 103 }, 104 { 105 "fileName": "/bin/file3", 106 "SPDXID": "SPDXRef-file3", 107 "checksums": [ 108 { 109 "algorithm": "SHA1", 110 "checksumValue": "33333" 111 } 112 ] 113 }, 114 { 115 "fileName": "file4.a", 116 "SPDXID": "SPDXRef-file4", 117 "checksums": [ 118 { 119 "algorithm": "SHA1", 120 "checksumValue": "44444" 121 } 122 ] 123 } 124 ], 125 "relationships": [ 126 { 127 "spdxElementId": "SPDXRef-file1", 128 "relatedSpdxElement": "SPDXRef-PLATFORM", 129 "relationshipType": "GENERATED_FROM" 130 }, 131 { 132 "spdxElementId": "SPDXRef-file2", 133 "relatedSpdxElement": "SPDXRef-PREBUILT-package1", 134 "relationshipType": "GENERATED_FROM" 135 }, 136 { 137 "spdxElementId": "SPDXRef-file3", 138 "relatedSpdxElement": "SPDXRef-SOURCE-package1", 139 "relationshipType": "GENERATED_FROM" 140 }, 141 { 142 "spdxElementId": "SPDXRef-file1", 143 "relatedSpdxElement": "SPDXRef-file4", 144 "relationshipType": "STATIC_LINK" 145 }, 146 { 147 "spdxElementId": "SPDXRef-SOURCE-package1", 148 "relatedSpdxElement": "SPDXRef-UPSTREAM-package1", 149 "relationshipType": "VARIANT_OF" 150 } 151 ] 152}