{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:77276524-9ffd-450b-a094-9cf816b7ba35",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-21T17:54:49Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "author": "anchore",
          "name": "syft",
          "version": "1.51.0"
        }
      ]
    },
    "component": {
      "bom-ref": "c6ad4db17523b68b",
      "type": "container",
      "name": "/w/image.tar",
      "version": "sha256:fb04ad0f94cfefc180ad4931f33df462875b3a5d3840732996995cd454fb331c"
    },
    "properties": [
      {
        "name": "syft:image:labels:io.buildah.version",
        "value": "1.43.2"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.description",
        "value": "GNU Bourne Again SHell, the default interactive shell on most Linux systems"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.licenses",
        "value": "AGPL-3.0-only"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.source",
        "value": "https://index.boks.sh"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.title",
        "value": "bash"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.vendor",
        "value": "boks"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.version",
        "value": "5.3"
      },
      {
        "name": "syft:image:labels:sh.boks.farm-aliases",
        "value": "sh:bin/sh"
      },
      {
        "name": "syft:image:labels:sh.boks.prefix",
        "value": "/boks/dist/bash-5.3"
      },
      {
        "name": "syft:image:labels:sh.boks.project",
        "value": "bash"
      },
      {
        "name": "syft:image:labels:sh.boks.source-url",
        "value": "https://www.gnu.org/software/bash/"
      },
      {
        "name": "syft:image:labels:sh.boks.version",
        "value": "5.3"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:deb/ubuntu/bash@5.3-2ubuntu1?distro=ubuntu&package-id=f8c8f81beae87ae1",
      "type": "library",
      "name": "bash",
      "version": "5.3-2ubuntu1",
      "cpe": "cpe:2.3:a:bash:bash:5.3-2ubuntu1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/ubuntu/bash@5.3-2ubuntu1?distro=ubuntu-26.04",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "elf-binary-package-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "elf-binary-package-note-json-payload"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f5bd45b33d7f0996a3eb3ccdc53005e2d1295784940627d878f3df5e5f328ee2"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/bash"
        },
        {
          "name": "syft:location:1:path",
          "value": "/bin/sh"
        },
        {
          "name": "syft:location:2:path",
          "value": "/share/man/man1/bash.1.gz"
        },
        {
          "name": "syft:location:3:path",
          "value": "/share/man/man1/sh.1.gz"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/ubuntu/ncurses@6.6%2B20251231-1?distro=ubuntu&package-id=d96150aacc704eff",
      "type": "library",
      "name": "ncurses",
      "version": "6.6+20251231-1",
      "cpe": "cpe:2.3:a:ncurses:ncurses:6.6\\+20251231-1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/ubuntu/ncurses@6.6%2B20251231-1?distro=ubuntu-26.04",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "elf-binary-package-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "elf-binary-package-note-json-payload"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f5bd45b33d7f0996a3eb3ccdc53005e2d1295784940627d878f3df5e5f328ee2"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/libtinfo.so.6"
        }
      ]
    }
  ]
}