{
 "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
 "bomFormat": "CycloneDX",
 "specVersion": "1.5",
 "serialNumber": "urn:uuid:d919f683-bfce-416e-80db-7ae1d18c4e17",
 "version": 1,
 "metadata": {
  "timestamp": "2026-08-17T18:04:43Z",
  "tools": {
   "components": [
    {
     "type": "application",
     "author": "anchore",
     "name": "syft",
     "version": "1.51.0"
    }
   ]
  },
  "component": {
   "bom-ref": "08405ef733993f5c",
   "type": "container",
   "name": "/w/image.tar",
   "version": "sha256:8353c13350f9da22d28f5a7a23191c9a740ec14cf5818a6e0dd3847319ff92f5"
  },
  "properties": [
   {
    "name": "syft:image:labels:io.buildah.version",
    "value": "1.43.1"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.description",
    "value": "Secure remote login, file transfer and key management over SSH"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.licenses",
    "value": "AGPL-3.0-only"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.source",
    "value": "https://index.boks.sh"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.title",
    "value": "openssh-keygen"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.vendor",
    "value": "boks"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.version",
    "value": "10.2p1"
   },
   {
    "name": "syft:image:labels:sh.boks.prefix",
    "value": "/boks/dist/openssh-keygen-10.2p1"
   },
   {
    "name": "syft:image:labels:sh.boks.project",
    "value": "openssh"
   },
   {
    "name": "syft:image:labels:sh.boks.source-url",
    "value": "https://www.openssh.com/"
   },
   {
    "name": "syft:image:labels:sh.boks.version",
    "value": "10.2p1"
   }
  ]
 },
 "components": [
  {
   "bom-ref": "pkg:deb/ubuntu/libselinux@3.9-4build1?distro=ubuntu&package-id=1e424a7408d609e5",
   "type": "library",
   "name": "libselinux",
   "version": "3.9-4build1",
   "cpe": "cpe:2.3:a:libselinux:libselinux:3.9-4build1:*:*:*:*:*:*:*",
   "purl": "pkg:deb/ubuntu/libselinux@3.9-4build1?distro=ubuntu-26.04",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "elf-binary-package-cataloger"
    },
    {
     "name": "syft:package:type",
     "value": "deb"
    },
    {
     "name": "syft:package:metadataType",
     "value": "elf-binary-package-note-json-payload"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:a9383af6c186de16e6bc412aa7a065ee6c0ef88a3f3878e4273cb00ee3e5b5e7"
    },
    {
     "name": "syft:location:0:path",
     "value": "/lib/libselinux.so.1"
    }
   ]
  },
  {
   "bom-ref": "pkg:deb/ubuntu/libzstd@1.5.7%2Bdfsg-3?distro=ubuntu&package-id=976ab10643309e63",
   "type": "library",
   "name": "libzstd",
   "version": "1.5.7+dfsg-3",
   "cpe": "cpe:2.3:a:libzstd:libzstd:1.5.7\\+dfsg-3:*:*:*:*:*:*:*",
   "purl": "pkg:deb/ubuntu/libzstd@1.5.7%2Bdfsg-3?distro=ubuntu-26.04",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "elf-binary-package-cataloger"
    },
    {
     "name": "syft:package:type",
     "value": "deb"
    },
    {
     "name": "syft:package:metadataType",
     "value": "elf-binary-package-note-json-payload"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:a9383af6c186de16e6bc412aa7a065ee6c0ef88a3f3878e4273cb00ee3e5b5e7"
    },
    {
     "name": "syft:location:0:path",
     "value": "/lib/libzstd.so.1"
    }
   ]
  },
  {
   "bom-ref": "pkg:deb/ubuntu/openssh@1%3A10.2p1-2ubuntu3.5?distro=ubuntu&package-id=e095a43f86722ca5",
   "type": "library",
   "name": "openssh",
   "version": "1:10.2p1-2ubuntu3.5",
   "cpe": "cpe:2.3:a:openssh:openssh:1\\:10.2p1-2ubuntu3.5:*:*:*:*:*:*:*",
   "purl": "pkg:deb/ubuntu/openssh@1%3A10.2p1-2ubuntu3.5?distro=ubuntu-26.04",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "elf-binary-package-cataloger"
    },
    {
     "name": "syft:package:type",
     "value": "deb"
    },
    {
     "name": "syft:package:metadataType",
     "value": "elf-binary-package-note-json-payload"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:a9383af6c186de16e6bc412aa7a065ee6c0ef88a3f3878e4273cb00ee3e5b5e7"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/ssh-keygen"
    },
    {
     "name": "syft:location:1:path",
     "value": "/share/man/man1/ssh-keygen.1.gz"
    }
   ]
  },
  {
   "bom-ref": "pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.3?distro=ubuntu&package-id=cf041387c381b752",
   "type": "library",
   "name": "openssl",
   "version": "3.5.5-1ubuntu3.3",
   "cpe": "cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.3:*:*:*:*:*:*:*",
   "purl": "pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.3?distro=ubuntu-26.04",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "elf-binary-package-cataloger"
    },
    {
     "name": "syft:package:type",
     "value": "deb"
    },
    {
     "name": "syft:package:metadataType",
     "value": "elf-binary-package-note-json-payload"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:a9383af6c186de16e6bc412aa7a065ee6c0ef88a3f3878e4273cb00ee3e5b5e7"
    },
    {
     "name": "syft:location:0:path",
     "value": "/lib/libcrypto.so.3"
    }
   ]
  },
  {
   "bom-ref": "pkg:deb/ubuntu/pcre2@10.46-1build1?distro=ubuntu&package-id=a41d437d911c2094",
   "type": "library",
   "name": "pcre2",
   "version": "10.46-1build1",
   "cpe": "cpe:2.3:a:pcre2:pcre2:10.46-1build1:*:*:*:*:*:*:*",
   "purl": "pkg:deb/ubuntu/pcre2@10.46-1build1?distro=ubuntu-26.04",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "elf-binary-package-cataloger"
    },
    {
     "name": "syft:package:type",
     "value": "deb"
    },
    {
     "name": "syft:package:metadataType",
     "value": "elf-binary-package-note-json-payload"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:a9383af6c186de16e6bc412aa7a065ee6c0ef88a3f3878e4273cb00ee3e5b5e7"
    },
    {
     "name": "syft:location:0:path",
     "value": "/lib/libpcre2-8.so.0"
    }
   ]
  },
  {
   "bom-ref": "pkg:deb/ubuntu/zlib@1%3A1.3.dfsg%2Breally1.3.1-1ubuntu3?distro=ubuntu&package-id=c50bf7b593148908",
   "type": "library",
   "name": "zlib",
   "version": "1:1.3.dfsg+really1.3.1-1ubuntu3",
   "cpe": "cpe:2.3:a:zlib:zlib:1\\:1.3.dfsg\\+really1.3.1-1ubuntu3:*:*:*:*:*:*:*",
   "purl": "pkg:deb/ubuntu/zlib@1%3A1.3.dfsg%2Breally1.3.1-1ubuntu3?distro=ubuntu-26.04",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "elf-binary-package-cataloger"
    },
    {
     "name": "syft:package:type",
     "value": "deb"
    },
    {
     "name": "syft:package:metadataType",
     "value": "elf-binary-package-note-json-payload"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:a9383af6c186de16e6bc412aa7a065ee6c0ef88a3f3878e4273cb00ee3e5b5e7"
    },
    {
     "name": "syft:location:0:path",
     "value": "/lib/libz.so.1"
    }
   ]
  }
 ]
}