@cdxgen/cdxgen-plugins-bin-linux-arm 2.0.3 → 2.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/plugins/dosai/dosai-linux-arm +0 -0
- package/plugins/dosai/dosai-linux-arm.sha256 +1 -1
- package/plugins/plugins-manifest.json +196 -0
- package/plugins/sbom-postbuild.cdx.json +1 -1
- package/plugins/trivy/trivy-cdxgen-linux-arm +0 -0
- package/plugins/trivy/trivy-cdxgen-linux-arm.sha256 +1 -1
- package/plugins/trustinspector/sbom-trustinspector-postbuild.cdx.json +1 -0
- package/plugins/trustinspector/trustinspector-cdxgen-linux-arm +0 -0
- package/plugins/trustinspector/trustinspector-cdxgen-linux-arm.sha256 +1 -0
package/package.json
CHANGED
|
Binary file
|
|
@@ -1 +1 @@
|
|
|
1
|
-
|
|
1
|
+
5e8fe70ef25628be4c3cf5aa0de89c63a194f569036fa8a6cdec9f52dff38195 plugins/dosai/dosai-linux-arm
|
|
@@ -0,0 +1,196 @@
|
|
|
1
|
+
{
|
|
2
|
+
"generatedAt": "2026-05-20T18:26:04.006Z",
|
|
3
|
+
"package": {
|
|
4
|
+
"name": "@cdxgen/cdxgen-plugins-bin",
|
|
5
|
+
"version": "2.1.2",
|
|
6
|
+
"repository": "git+https://github.com/cdxgen/cdxgen-plugins-bin.git",
|
|
7
|
+
"homepage": "https://github.com/cdxgen/cdxgen-plugins-bin#readme"
|
|
8
|
+
},
|
|
9
|
+
"plugins": [
|
|
10
|
+
{
|
|
11
|
+
"name": "trivy",
|
|
12
|
+
"version": "v0.68.2",
|
|
13
|
+
"binaryPath": "plugins/trivy/trivy-cdxgen-linux-arm",
|
|
14
|
+
"sha256": "2ff26232c67129c1e84b472d3e0fe5efaff190c626a60bab33461b5b9565098c",
|
|
15
|
+
"sbomFile": "plugins/trivy/sbom-trivy-postbuild.cdx.json",
|
|
16
|
+
"component": {
|
|
17
|
+
"type": "application",
|
|
18
|
+
"name": "trivy",
|
|
19
|
+
"version": "v0.68.2",
|
|
20
|
+
"description": "Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more. This is a custom wrapper maintained by the cdxgen team.",
|
|
21
|
+
"purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trivy-cdxgen@v0.68.2",
|
|
22
|
+
"bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trivy-cdxgen@v0.68.2",
|
|
23
|
+
"licenses": [
|
|
24
|
+
{
|
|
25
|
+
"license": {
|
|
26
|
+
"id": "Apache-2.0"
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
],
|
|
30
|
+
"evidence": {
|
|
31
|
+
"identity": [
|
|
32
|
+
{
|
|
33
|
+
"field": "purl",
|
|
34
|
+
"confidence": 1,
|
|
35
|
+
"methods": [
|
|
36
|
+
{
|
|
37
|
+
"technique": "attestation",
|
|
38
|
+
"confidence": 1
|
|
39
|
+
}
|
|
40
|
+
]
|
|
41
|
+
}
|
|
42
|
+
]
|
|
43
|
+
},
|
|
44
|
+
"externalReferences": [
|
|
45
|
+
{
|
|
46
|
+
"url": "https://github.com/cdxgen/cdxgen-plugins-bin/tree/main/thirdparty/trivy",
|
|
47
|
+
"type": "vcs"
|
|
48
|
+
},
|
|
49
|
+
{
|
|
50
|
+
"url": "https://github.com/cdxgen/cdxgen/issues",
|
|
51
|
+
"type": "issue-tracker"
|
|
52
|
+
}
|
|
53
|
+
],
|
|
54
|
+
"properties": [
|
|
55
|
+
{
|
|
56
|
+
"name": "internal:binary_path",
|
|
57
|
+
"value": "plugins/trivy/trivy-cdxgen-linux-arm"
|
|
58
|
+
},
|
|
59
|
+
{
|
|
60
|
+
"name": "cdx:plugin:manifest:name",
|
|
61
|
+
"value": "trivy"
|
|
62
|
+
}
|
|
63
|
+
],
|
|
64
|
+
"hashes": [
|
|
65
|
+
{
|
|
66
|
+
"alg": "SHA-256",
|
|
67
|
+
"content": "2ff26232c67129c1e84b472d3e0fe5efaff190c626a60bab33461b5b9565098c"
|
|
68
|
+
}
|
|
69
|
+
]
|
|
70
|
+
}
|
|
71
|
+
},
|
|
72
|
+
{
|
|
73
|
+
"name": "dosai",
|
|
74
|
+
"version": "3.0.3",
|
|
75
|
+
"binaryPath": "plugins/dosai/dosai-linux-arm",
|
|
76
|
+
"sha256": "5e8fe70ef25628be4c3cf5aa0de89c63a194f569036fa8a6cdec9f52dff38195",
|
|
77
|
+
"component": {
|
|
78
|
+
"type": "application",
|
|
79
|
+
"name": "dosai",
|
|
80
|
+
"version": "3.0.3",
|
|
81
|
+
"description": "Dotnet Source and Assembly Inspector (Dosai) is a tool to list details about the namespaces and methods from sources and assemblies.",
|
|
82
|
+
"purl": "pkg:github/owasp-dep-scan/dosai@3.0.3",
|
|
83
|
+
"bom-ref": "pkg:github/owasp-dep-scan/dosai@3.0.3",
|
|
84
|
+
"licenses": [
|
|
85
|
+
{
|
|
86
|
+
"license": {
|
|
87
|
+
"id": "MIT"
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
],
|
|
91
|
+
"evidence": {
|
|
92
|
+
"identity": [
|
|
93
|
+
{
|
|
94
|
+
"field": "purl",
|
|
95
|
+
"confidence": 1,
|
|
96
|
+
"methods": [
|
|
97
|
+
{
|
|
98
|
+
"technique": "attestation",
|
|
99
|
+
"confidence": 1
|
|
100
|
+
}
|
|
101
|
+
]
|
|
102
|
+
}
|
|
103
|
+
]
|
|
104
|
+
},
|
|
105
|
+
"externalReferences": [
|
|
106
|
+
{
|
|
107
|
+
"url": "https://github.com/owasp-dep-scan/dosai",
|
|
108
|
+
"type": "vcs"
|
|
109
|
+
},
|
|
110
|
+
{
|
|
111
|
+
"url": "https://github.com/owasp-dep-scan/dosai/releases",
|
|
112
|
+
"type": "distribution"
|
|
113
|
+
}
|
|
114
|
+
],
|
|
115
|
+
"properties": [
|
|
116
|
+
{
|
|
117
|
+
"name": "internal:binary_path",
|
|
118
|
+
"value": "plugins/dosai/dosai-linux-arm"
|
|
119
|
+
},
|
|
120
|
+
{
|
|
121
|
+
"name": "cdx:plugin:manifest:name",
|
|
122
|
+
"value": "dosai"
|
|
123
|
+
}
|
|
124
|
+
],
|
|
125
|
+
"hashes": [
|
|
126
|
+
{
|
|
127
|
+
"alg": "SHA-256",
|
|
128
|
+
"content": "5e8fe70ef25628be4c3cf5aa0de89c63a194f569036fa8a6cdec9f52dff38195"
|
|
129
|
+
}
|
|
130
|
+
]
|
|
131
|
+
}
|
|
132
|
+
},
|
|
133
|
+
{
|
|
134
|
+
"name": "trustinspector",
|
|
135
|
+
"version": "2.1.2",
|
|
136
|
+
"binaryPath": "plugins/trustinspector/trustinspector-cdxgen-linux-arm",
|
|
137
|
+
"sha256": "956e6f0b0dd400b5a0e36e76a5b38d0f2f6a3f767875fa55034b03313766305b",
|
|
138
|
+
"sbomFile": "plugins/trustinspector/sbom-trustinspector-postbuild.cdx.json",
|
|
139
|
+
"component": {
|
|
140
|
+
"type": "application",
|
|
141
|
+
"name": "trustinspector",
|
|
142
|
+
"version": "2.1.2",
|
|
143
|
+
"description": "cdxgen trust-material inspection helper for repository keys, certificate stores, macOS code-signing, notarization, and Windows trust policy inventory.",
|
|
144
|
+
"purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@2.1.2",
|
|
145
|
+
"bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@2.1.2",
|
|
146
|
+
"licenses": [
|
|
147
|
+
{
|
|
148
|
+
"license": {
|
|
149
|
+
"id": "Apache-2.0"
|
|
150
|
+
}
|
|
151
|
+
}
|
|
152
|
+
],
|
|
153
|
+
"evidence": {
|
|
154
|
+
"identity": [
|
|
155
|
+
{
|
|
156
|
+
"field": "purl",
|
|
157
|
+
"confidence": 1,
|
|
158
|
+
"methods": [
|
|
159
|
+
{
|
|
160
|
+
"technique": "attestation",
|
|
161
|
+
"confidence": 1
|
|
162
|
+
}
|
|
163
|
+
]
|
|
164
|
+
}
|
|
165
|
+
]
|
|
166
|
+
},
|
|
167
|
+
"externalReferences": [
|
|
168
|
+
{
|
|
169
|
+
"url": "https://github.com/cdxgen/cdxgen-plugins-bin/tree/main/thirdparty/trustinspector",
|
|
170
|
+
"type": "vcs"
|
|
171
|
+
},
|
|
172
|
+
{
|
|
173
|
+
"url": "https://github.com/cdxgen/cdxgen/issues",
|
|
174
|
+
"type": "issue-tracker"
|
|
175
|
+
}
|
|
176
|
+
],
|
|
177
|
+
"properties": [
|
|
178
|
+
{
|
|
179
|
+
"name": "internal:binary_path",
|
|
180
|
+
"value": "plugins/trustinspector/trustinspector-cdxgen-linux-arm"
|
|
181
|
+
},
|
|
182
|
+
{
|
|
183
|
+
"name": "cdx:plugin:manifest:name",
|
|
184
|
+
"value": "trustinspector"
|
|
185
|
+
}
|
|
186
|
+
],
|
|
187
|
+
"hashes": [
|
|
188
|
+
{
|
|
189
|
+
"alg": "SHA-256",
|
|
190
|
+
"content": "956e6f0b0dd400b5a0e36e76a5b38d0f2f6a3f767875fa55034b03313766305b"
|
|
191
|
+
}
|
|
192
|
+
]
|
|
193
|
+
}
|
|
194
|
+
}
|
|
195
|
+
]
|
|
196
|
+
}
|