From 01bcc56e51e4d792b545675452b393957ae41a35 Mon Sep 17 00:00:00 2001 From: Hank Donnay Date: Mon, 24 Aug 2026 13:53:05 -0500 Subject: [PATCH 01/11] java/bom: add support for java SBoMs This adds support for Red Hat-flavored, CycloneDX JSON format SBoMs. Signed-off-by: Hank Donnay Change-Id: I58d33321bf572021e436b9289ee5b0d16a6a6964 --- go.mod | 3 +- go.sum | 30 +- java/bom/bom.go | 186 + java/bom/bom_test.go | 41 + java/bom/gzip_test.go | 50 + java/bom/hash.go | 18 + java/bom/package.go | 50 + java/bom/testdata/sbom.cdx.json | 18587 ++++++++++++++++++++++++++++++ 8 files changed, 18950 insertions(+), 15 deletions(-) create mode 100644 java/bom/bom.go create mode 100644 java/bom/bom_test.go create mode 100644 java/bom/gzip_test.go create mode 100644 java/bom/hash.go create mode 100644 java/bom/package.go create mode 100644 java/bom/testdata/sbom.cdx.json diff --git a/go.mod b/go.mod index 5607995e6..a98fa1f75 100644 --- a/go.mod +++ b/go.mod @@ -3,6 +3,7 @@ module github.com/quay/claircore go 1.26.0 require ( + github.com/CycloneDX/cyclonedx-go v0.12.0 github.com/Masterminds/semver v1.5.0 github.com/cespare/xxhash/v2 v2.3.0 github.com/doug-martin/goqu/v8 v8.6.0 @@ -59,7 +60,7 @@ require ( github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect github.com/sirupsen/logrus v1.9.4 // indirect go.opentelemetry.io/auto/sdk v1.2.1 // indirect - go.yaml.in/yaml/v3 v3.0.4 // indirect + go.yaml.in/yaml/v3 v3.0.5 // indirect golang.org/x/exp v0.0.0-20240823005443-9b4947da3948 // indirect golang.org/x/mod v0.39.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20240826202546-f6391c0de4c7 // indirect diff --git a/go.sum b/go.sum index 88c556f9a..cdf476524 100644 --- a/go.sum +++ b/go.sum @@ -1,5 +1,7 @@ cel.dev/expr v0.25.1 h1:1KrZg61W6TWSxuNZ37Xy49ps13NUovb66QLprthtwi4= cel.dev/expr v0.25.1/go.mod h1:hrXvqGP6G6gyx8UAHSHJ5RGk//1Oj5nXQ2NI02Nrsg4= +github.com/CycloneDX/cyclonedx-go v0.12.0 h1:/7Jum36UA6V043tQZ/fE3jf+Nf9gn/qxUFfd7QReMy8= +github.com/CycloneDX/cyclonedx-go v0.12.0/go.mod h1:V2577HhxDDCDLYfkm55WJrz16nHTfyQZwcWUBSG7Z28= github.com/DATA-DOG/go-sqlmock v1.3.3 h1:CWUqKXe0s8A2z6qCgkP4Kru7wC11YoAnoupUKFDnH08= github.com/DATA-DOG/go-sqlmock v1.3.3/go.mod h1:f/Ixk793poVmq4qj/V1dPUg2JEAKC73Q5eFN3EC/SaM= github.com/Masterminds/semver v1.5.0 h1:H65muMkzWKEuNDnfl9d70GUjFniHKHRbFPGBuZ3QEww= @@ -10,6 +12,8 @@ github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYW github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw= github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM= github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw= +github.com/bradleyjkemp/cupaloy/v2 v2.8.0 h1:any4BmKE+jGIaMpnU8YgH/I2LPiLBufr6oMMlVBbn9M= +github.com/bradleyjkemp/cupaloy/v2 v2.8.0/go.mod h1:bm7JXdkRd4BHJk9HpwqAI8BoAY1lps46Enkdqw6aRX0= github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs= github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= @@ -55,10 +59,6 @@ github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f h1:GvCU5GX github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f/go.mod h1:q59u9px8b7UTj0nIjEjvmTWekazka6xIt6Uogz5Dm+8= github.com/knqyf263/go-deb-version v0.0.0-20190517075300-09fca494f03d h1:X4cedH4Kn3JPupAwwWuo4AzYp16P0OyLO9d7OnMZc/c= github.com/knqyf263/go-deb-version v0.0.0-20190517075300-09fca494f03d/go.mod h1:o8sgWoz3JADecfc/cTYD92/Et1yMqMy0utV1z+VaZao= -github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= -github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk= -github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= -github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= github.com/lib/pq v1.1.1/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo= @@ -95,8 +95,6 @@ github.com/regclient/regclient v0.11.5 h1:OHRsXO0F3qHGfa4HEUv+EkMH9NXNcCTBKjNzyC github.com/regclient/regclient v0.11.5/go.mod h1:DZUOfIT14WFTK2Pj4vjd93avy9O4Fdpjrf9ir23TbRE= github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE= github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo= -github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ= -github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc= github.com/sirupsen/logrus v1.9.4 h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w= github.com/sirupsen/logrus v1.9.4/go.mod h1:ftWc9WdOfJ0a92nsE2jF5u5ZwH8Bv2zdeOC42RjbV2g= github.com/spdx/tools-golang v0.5.7 h1:+sWcKGnhwp3vLdMqPcLdA6QK679vd86cK9hQWH3AwCg= @@ -106,12 +104,20 @@ github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+ github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA= github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= -github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U= -github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U= +github.com/stretchr/testify v1.12.1 h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWDWE= +github.com/stretchr/testify v1.12.1/go.mod h1:MDEgiDPPsNp5cuIrHPPCyornHKgEVbtFUmoNlxoYthg= github.com/sudo-bmitch/oci-digest v0.1.2 h1:are0qzWTsFZGZ3Uvdi9OSztJszSWaab6iqquMEEB7rw= github.com/sudo-bmitch/oci-digest v0.1.2/go.mod h1:SH6l5OIe0islKBZBedjiPOeET/0QwGL+/oYfQt51uQo= +github.com/terminalstatic/go-xsd-validate v0.1.8 h1:UVrTCy1j3DhwaYTTUF+QYO/Nan13S0tf+Jwi+p45Bf0= +github.com/terminalstatic/go-xsd-validate v0.1.8/go.mod h1:1kb47fi2c6onlf+B7UrrQ9VYraOhcYwFm3iG+J6F4Zo= github.com/ulikunitz/xz v0.5.15 h1:9DNdB5s+SgV3bQ2ApL10xRc35ck0DuIX/isZvIk+ubY= github.com/ulikunitz/xz v0.5.15/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14= +github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f h1:J9EGpcZtP0E/raorCMxlFGSTBrsSlaDGf3jU/qvAE2c= +github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU= +github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0= +github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ= +github.com/xeipuuv/gojsonschema v1.2.0 h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74= +github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQluxsYJ78Id3Y= go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64= go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y= go.opentelemetry.io/otel v1.45.0 h1:pdrWmLHofpubmArBv1LgFSv1Z0Ie/ppdZzu+kUN5EeU= @@ -126,8 +132,8 @@ go.uber.org/mock v0.6.0 h1:hyF9dfmbgIX5EfOdasqLsWD6xqpNZlXblLB/Dbnwv3Y= go.uber.org/mock v0.6.0/go.mod h1:KiVJ4BqZJaMj4svdfmHM0AUx4NJYO8ZNpPnZn1Z+BBU= go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ= go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ= -go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc= -go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= +go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw= +go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M= @@ -171,12 +177,8 @@ google.golang.org/genproto/googleapis/rpc v0.0.0-20240826202546-f6391c0de4c7/go. google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= -gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= -gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q= gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= -gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= -gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= modernc.org/cc/v4 v4.29.2 h1:h6+9ciCnPKutf4I03CvheAvDLX7+IHlqR6Iy6J+cgd8= modernc.org/cc/v4 v4.29.2/go.mod h1:OnovgIhbbMXMu1aISnJ0wvVD1KnW+cAUJkIrAWh+kVI= modernc.org/ccgo/v4 v4.35.0 h1:F+TUsmw09QxLzmi3aeYYGxjAXarmZaKgj3mKQHNaA8w= diff --git a/java/bom/bom.go b/java/bom/bom.go new file mode 100644 index 000000000..633a0f4dd --- /dev/null +++ b/java/bom/bom.go @@ -0,0 +1,186 @@ +// Package bom implements consuming Red Hat's java-flavored BOMs. +package bom + +import ( + "context" + "encoding/hex" + "errors" + "fmt" + "io" + "iter" + "log/slog" + "slices" + "strings" + "unique" + + "github.com/CycloneDX/cyclonedx-go" + "github.com/package-url/packageurl-go" + + "github.com/quay/claircore/internal/zreader" + "github.com/quay/claircore/toolkit/types/cpe" +) + +// ErrBadFormat is a sentinel error for Red Hat-flavor requirement checks. +var ErrBadFormat = errors.New("bad format") + +func formatError(format string, a ...any) error { + return &errorFormat{inner: fmt.Errorf(format, a...)} +} + +type errorFormat struct { + inner error +} + +func (e *errorFormat) Error() string { + return fmt.Sprintf("java/bom: bad format: %v", e.inner) +} + +func (e *errorFormat) Unwrap() error { + return e.inner +} + +func (e *errorFormat) Is(tgt error) bool { + return tgt == ErrBadFormat +} + +// LoadCDX loads the Red Hat-Java-flavored CycloneDX JSON SBoM. +// A compressed document is decompressed before parsing. +func LoadCDX(ctx context.Context, r io.ReaderAt) (iter.Seq2[Package, error], error) { + in, err := zreader.Reader(io.NewSectionReader(r, 0, -1)) + if err != nil { + return nil, fmt.Errorf("java/bom: loading CycloneDX: %w", err) + } + defer in.Close() + var doc cyclonedx.BOM + dec := cyclonedx.NewBOMDecoder(in, cyclonedx.BOMFileFormatJSON) + if err := dec.Decode(&doc); err != nil { + return nil, fmt.Errorf("java/bom: loading CycloneDX: %w", err) + } + root := doc.Metadata.Component + if root == nil { + return nil, formatError("no root component") + } + if doc.Components == nil || len(*doc.Components) == 0 { + return nil, formatError("no components") + } + if doc.Dependencies == nil || len(*doc.Dependencies) == 0 { + return nil, formatError("no dependencies") + } + wfn, err := cpe.Unbind(root.CPE) + if err != nil { + return nil, fmt.Errorf("java/bom: root component %q: %w", root.BOMRef, err) + } + cmps := *doc.Components + deps := *doc.Dependencies + + seq := func(yield func(Package, error) bool) { + var skip skipPurls + defer func() { + if skip.count == 0 { + return + } + slog.DebugContext(ctx, "skipped some purls", "skipped", &skip) + }() + c := make(map[string]*cyclonedx.Component, len(cmps)) + for i := range cmps { + r := &cmps[i] + c[r.BOMRef] = r + } + depidx := slices.IndexFunc(deps, func(d cyclonedx.Dependency) bool { + return d.Ref == root.BOMRef + }) + if depidx == -1 { + err := fmt.Errorf("java/bom: missing dependencies of root component %q", root.BOMRef) + yield(Package{}, err) + return + } + dep := &deps[depidx] + YieldPackages: + for _, ref := range *dep.Dependencies { + if !strings.HasPrefix(ref, `pkg:maven/`) { + skip.Add(ref) + continue + } + cm := c[ref] + purl, err := packageurl.FromString(cm.PackageURL) + if err != nil { + err := fmt.Errorf("java/bom: component %q: %w", cm.BOMRef, err) + if !yield(Package{}, err) { + return + } + continue + } + var hashes map[unique.Handle[string]][]byte + if cm.Hashes != nil { + hs := *cm.Hashes + hashes = make(map[unique.Handle[string]][]byte, len(hs)) + for _, h := range hs { + k, known := hashnames[h.Algorithm] + if !known { + continue + } + // Assume everything is encoded as hex: + v, err := hex.DecodeString(h.Value) + if err != nil { + err := fmt.Errorf("java/bom: component %q: %w", cm.BOMRef, err) + if !yield(Package{}, err) { + return + } + continue YieldPackages + } + hashes[k] = v + } + } + var loc string + if ev := cm.Evidence; ev != nil { + if ocs := ev.Occurrences; ocs != nil { + Occurrence: + for _, oc := range *ocs { + if oc.Location != "" { + loc = oc.Location + break Occurrence + } + } + } + } + + pkg := Package{ + CPE: &wfn, + PURL: purl, + Hashes: hashes, + Location: loc, + } + if !yield(pkg, nil) { + return + } + if err := ctx.Err(); err != nil { + yield(Package{}, context.Cause(ctx)) + return + } + } + } + + return seq, nil +} + +var _ slog.LogValuer = (*skipPurls)(nil) + +type skipPurls struct { + examples []string + count int +} + +func (s *skipPurls) Add(p string) { + if len(s.examples) < 16 { + s.examples = append(s.examples, p) + } + s.count++ +} + +// LogValue implements [slog.LogValuer]. +func (s *skipPurls) LogValue() slog.Value { + return slog.GroupValue( + slog.Int("count", s.count), + slog.Any("examples", s.examples), + ) +} diff --git a/java/bom/bom_test.go b/java/bom/bom_test.go new file mode 100644 index 000000000..21ebed95c --- /dev/null +++ b/java/bom/bom_test.go @@ -0,0 +1,41 @@ +package bom + +import ( + "os" + "slices" + "testing" + + "github.com/quay/claircore/test" +) + +func TestLoad(t *testing.T) { + ctx := test.Logging(t) + f, err := os.Open("testdata/sbom.cdx.json") + if err != nil { + t.Fatal(err) + } + defer f.Close() + + pkgs, err := LoadCDX(ctx, f) + if err != nil { + t.Error(err) + } + seq := func(yield func(Package) bool) { + for p, err := range pkgs { + if err != nil { + t.Error(err) + continue + } + if !yield(p) { + return + } + } + } + out := slices.Collect(seq) + got := len(out) + const want = 639 + t.Logf("got: %d, want: %d", got, want) + if got != want { + t.Error() + } +} diff --git a/java/bom/gzip_test.go b/java/bom/gzip_test.go new file mode 100644 index 000000000..7abadde83 --- /dev/null +++ b/java/bom/gzip_test.go @@ -0,0 +1,50 @@ +package bom + +import ( + "bytes" + "compress/gzip" + "testing" + + "github.com/quay/claircore/test" +) + +func TestLoadGzip(t *testing.T) { + ctx := test.Logging(t) + const doc = `{ + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": {"component": {"type": "application", "name": "app", "bom-ref": "app", "cpe": "cpe:/a:redhat:quarkus:3"}}, + "components": [ + {"type": "library", "bom-ref": "pkg:maven/a/b@1", "name": "b", "purl": "pkg:maven/a/b@1"} + ], + "dependencies": [ + {"ref": "app", "dependsOn": ["pkg:maven/a/b@1"]} + ] + }` + var buf bytes.Buffer + zw := gzip.NewWriter(&buf) + if _, err := zw.Write([]byte(doc)); err != nil { + t.Fatal(err) + } + if err := zw.Close(); err != nil { + t.Fatal(err) + } + seq, err := LoadCDX(ctx, bytes.NewReader(buf.Bytes())) + if err != nil { + t.Fatal(err) + } + var n int + for p, err := range seq { + if err != nil { + t.Fatal(err) + } + n++ + if p.PURL.Namespace+":"+p.PURL.Name != "a:b" { + t.Fatalf("package: %s:%s", p.PURL.Namespace, p.PURL.Name) + } + } + if n != 1 { + t.Fatalf("packages: got %d", n) + } +} diff --git a/java/bom/hash.go b/java/bom/hash.go new file mode 100644 index 000000000..ee5a8239d --- /dev/null +++ b/java/bom/hash.go @@ -0,0 +1,18 @@ +package bom + +import ( + "unique" + + "github.com/CycloneDX/cyclonedx-go" +) + +var hashnames = map[cyclonedx.HashAlgorithm]unique.Handle[string]{ + cyclonedx.HashAlgoSHA256: HashSHA256, + cyclonedx.HashAlgoSHA1: HashSHA1, +} + +// Known hash kinds. +var ( + HashSHA1 = unique.Make(`sha1`) + HashSHA256 = unique.Make(`sha256`) +) diff --git a/java/bom/package.go b/java/bom/package.go new file mode 100644 index 000000000..363c0c825 --- /dev/null +++ b/java/bom/package.go @@ -0,0 +1,50 @@ +package bom + +import ( + "fmt" + "net/url" + "path" + "slices" + "strings" + "unique" + + "github.com/package-url/packageurl-go" + + "github.com/quay/claircore" + "github.com/quay/claircore/toolkit/types" + "github.com/quay/claircore/toolkit/types/cpe" +) + +// Package is an extracted (CPE Name, purl) pair and relevant other metadata. +type Package struct { + CPE *cpe.WFN + PURL packageurl.PackageURL + Hashes map[unique.Handle[string]][]byte + Location string +} + +// PopulatePackage fills pkg from an SBOM component. +func PopulatePackage(pkg *claircore.Package, bp Package, sbomFile string) error { + dir := path.Dir(sbomFile) + n := path.Join(dir, bp.Location) + var vs []string + for k, b := range bp.Hashes { + vs = append(vs, fmt.Sprintf(`%s:%x`, k.Value(), b)) + } + slices.Sort(vs) + + group, artifact, ok := strings.Cut(bp.PURL.Name, "/") + if !ok { + pkg.Name = bp.PURL.Name + } else { + pkg.Name = group + ":" + artifact + } + pkg.Version = bp.PURL.Version + pkg.Kind = types.BinaryPackage + pkg.Filepath = n + pkg.CPE = *bp.CPE + pkg.RepositoryHint = (url.Values{"hash": vs}).Encode() + pkg.PackageDB = `sbom:` + sbomFile + + return nil +} diff --git a/java/bom/testdata/sbom.cdx.json b/java/bom/testdata/sbom.cdx.json new file mode 100644 index 000000000..dd1f38d78 --- /dev/null +++ b/java/bom/testdata/sbom.cdx.json @@ -0,0 +1,18587 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:cedbe489-526a-37f1-971c-fc11dc995cc7", + "version": 1, + "metadata": { + "timestamp": "2026-09-01T15:26:34Z", + "tools": { + "components": [ + { + "type": "application", + "group": "org.wildfly.galleon-plugins", + "name": "wildfly-galleon-plugins", + "version": "8.2.0.Final-SNAPSHOT", + "purl": "pkg:maven/org.wildfly.galleon-plugins/wildfly-galleon-plugins@8.2.0.Final-SNAPSHOT" + } + ] + }, + "component": { + "type": "application", + "bom-ref": "pkg:generic/jboss-eap@8.1-update-7.1", + "publisher": "JBoss by Red Hat", + "name": "JBoss EAP", + "version": "8.1 Update 7.1", + "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8.1", + "purl": "pkg:generic/jboss-eap@8.1-update-7.1" + } + }, + "components": [ + { + "type": "library", + "bom-ref": "pkg:generic/jboss-cli-client@8.1.1.GA-redhat-00019", + "name": "jboss-cli-client", + "version": "8.1.1.GA-redhat-00019", + "purl": "pkg:generic/jboss-cli-client@8.1.1.GA-redhat-00019", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/org.aesh/aesh@2.4.0.redhat-00001", + "group": "org.aesh", + "name": "aesh", + "version": "2.4.0.redhat-00001", + "purl": "pkg:maven/org.aesh/aesh@2.4.0.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.aesh/aesh-extensions@1.8.0.redhat-00001", + "group": "org.aesh", + "name": "aesh-extensions", + "version": "1.8.0.redhat-00001", + "purl": "pkg:maven/org.aesh/aesh-extensions@1.8.0.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.aesh/readline@2.4.0.redhat-00002", + "group": "org.aesh", + "name": "readline", + "version": "2.4.0.redhat-00002", + "purl": "pkg:maven/org.aesh/readline@2.4.0.redhat-00002", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.sshd/sshd-common@2.14.0.redhat-00003", + "group": "org.apache.sshd", + "name": "sshd-common", + "version": "2.14.0.redhat-00003", + "purl": "pkg:maven/org.apache.sshd/sshd-common@2.14.0.redhat-00003", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@2.4.1.redhat-00001", + "group": "org.fusesource.jansi", + "name": "jansi", + "version": "2.4.1.redhat-00001", + "purl": "pkg:maven/org.fusesource.jansi/jansi@2.4.1.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/jakarta.json@1.1.6.redhat-00003", + "group": "org.glassfish", + "name": "jakarta.json", + "version": "1.1.6.redhat-00003", + "purl": "pkg:maven/org.glassfish/jakarta.json@1.1.6.redhat-00003", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-dmr@1.7.0.Final-redhat-00001", + "group": "org.jboss", + "name": "jboss-dmr", + "version": "1.7.0.Final-redhat-00001", + "purl": "pkg:maven/org.jboss/jboss-dmr@1.7.0.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-vfs@3.3.2.Final-redhat-00001", + "group": "org.jboss", + "name": "jboss-vfs", + "version": "3.3.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss/jboss-vfs@3.3.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/staxmapper@1.5.0.Final-redhat-00001", + "group": "org.jboss", + "name": "staxmapper", + "version": "1.5.0.Final-redhat-00001", + "purl": "pkg:maven/org.jboss/staxmapper@1.5.0.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "group": "org.jboss.logging", + "name": "jboss-logging", + "version": "3.6.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager@2.1.19.Final-redhat-00001", + "group": "org.jboss.logmanager", + "name": "jboss-logmanager", + "version": "2.1.19.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.logmanager/jboss-logmanager@2.1.19.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.marshalling/jboss-marshalling@2.2.3.Final-redhat-00001", + "group": "org.jboss.marshalling", + "name": "jboss-marshalling", + "version": "2.2.3.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.marshalling/jboss-marshalling@2.2.3.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.marshalling/jboss-marshalling-river@2.2.3.Final-redhat-00001", + "group": "org.jboss.marshalling", + "name": "jboss-marshalling-river", + "version": "2.2.3.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.marshalling/jboss-marshalling-river@2.2.3.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.modules/jboss-modules@2.1.6.Final-redhat-00001", + "group": "org.jboss.modules", + "name": "jboss-modules", + "version": "2.1.6.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.modules/jboss-modules@2.1.6.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.remoting/jboss-remoting@5.0.31.Final-redhat-00001", + "group": "org.jboss.remoting", + "name": "jboss-remoting", + "version": "5.0.31.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.remoting/jboss-remoting@5.0.31.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.remotingjmx/remoting-jmx@3.1.0.Final-redhat-00002", + "group": "org.jboss.remotingjmx", + "name": "remoting-jmx", + "version": "3.1.0.Final-redhat-00002", + "purl": "pkg:maven/org.jboss.remotingjmx/remoting-jmx@3.1.0.Final-redhat-00002", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.stdio/jboss-stdio@1.1.0.Final-redhat-00001", + "group": "org.jboss.stdio", + "name": "jboss-stdio", + "version": "1.1.0.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.stdio/jboss-stdio@1.1.0.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@2.5.0.redhat-00001", + "group": "org.jboss.threads", + "name": "jboss-threads", + "version": "2.5.0.redhat-00001", + "purl": "pkg:maven/org.jboss.threads/jboss-threads@2.5.0.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final-redhat-00001", + "group": "org.jboss.xnio", + "name": "xnio-api", + "version": "3.8.16.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final-redhat-00001", + "group": "org.jboss.xnio", + "name": "xnio-nio", + "version": "3.8.16.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.17.redhat-00001", + "group": "org.slf4j", + "name": "slf4j-api", + "version": "2.0.17.redhat-00001", + "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.17.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final-redhat-00002", + "group": "org.wildfly.client", + "name": "wildfly-client-config", + "version": "1.0.1.Final-redhat-00002", + "purl": "pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final-redhat-00002", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final-redhat-00003", + "group": "org.wildfly.common", + "name": "wildfly-common", + "version": "1.7.0.Final-redhat-00003", + "purl": "pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final-redhat-00003", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-cli@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-cli", + "version": "27.1.12.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.core/wildfly-cli@27.1.12.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-controller-client@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-controller-client", + "version": "27.1.12.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.core/wildfly-controller-client@27.1.12.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-embedded@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-embedded", + "version": "27.1.12.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.core/wildfly-embedded@27.1.12.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-protocol@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-protocol", + "version": "27.1.12.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.core/wildfly-protocol@27.1.12.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-version@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-version", + "version": "27.1.12.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.core/wildfly-version@27.1.12.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-asn1@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-asn1", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-asn1@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-base@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-base", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-base@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-client@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-client", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-client@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-source-impl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential-source-impl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-source-impl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-store@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential-store", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-store@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-encryption@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-encryption", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-encryption@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-keystore@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-keystore", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-keystore@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-gssapi@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-gssapi", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-gssapi@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-password-impl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-password-impl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-password-impl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-permission@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-permission", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-permission@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-provider-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-provider-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-provider-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-realm", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-realm@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-anonymous@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-anonymous", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-anonymous@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-localuser@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-localuser", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-localuser@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-security-manager", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager-action@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-security-manager-action", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager-action@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-ssl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-ssl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-ssl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-cert", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-acme@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-cert-acme", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-acme@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-cert-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-util@2.6.9.Final-redhat-00001", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "bin/client/jboss-cli-client.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:generic/jboss-client@8.1.1.GA-redhat-00019", + "name": "jboss-client", + "version": "8.1.1.GA-redhat-00019", + "purl": "pkg:generic/jboss-client@8.1.1.GA-redhat-00019", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3.redhat-00001", + "group": "com.google.guava", + "name": "failureaccess", + "version": "1.0.3.redhat-00001", + "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.guava/guava@33.0.0.jre-redhat-00004", + "group": "com.google.guava", + "name": "guava", + "version": "33.0.0.jre-redhat-00004", + "purl": "pkg:maven/com.google.guava/guava@33.0.0.jre-redhat-00004", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.11.0.redhat-00001", + "group": "commons-beanutils", + "name": "commons-beanutils", + "version": "1.11.0.redhat-00001", + "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.11.0.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2.redhat-2", + "group": "commons-collections", + "name": "commons-collections", + "version": "3.2.2.redhat-2", + "purl": "pkg:maven/commons-collections/commons-collections@3.2.2.redhat-2", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/de.dentrassi.crypto/pem-keystore@2.4.0.redhat-00001", + "group": "de.dentrassi.crypto", + "name": "pem-keystore", + "version": "2.4.0.redhat-00001", + "purl": "pkg:maven/de.dentrassi.crypto/pem-keystore@2.4.0.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-buffer", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-buffer@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-codec", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-codec@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-codec-http", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-codec-http@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-codec-socks", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-common@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-common", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-common@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-handler", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-handler@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-handler-proxy", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-resolver", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-resolver@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-transport", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-transport@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-transport-classes-epoll", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "group": "io.netty", + "name": "netty-transport-native-epoll", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-transport-native-unix-common", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "group": "io.netty", + "name": "netty-transport-native-unix-common", + "version": "4.1.135.Final-redhat-00001", + "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.undertow/undertow-core@2.3.24.SP3-redhat-00001", + "group": "io.undertow", + "name": "undertow-core", + "version": "2.3.24.SP3-redhat-00001", + "purl": "pkg:maven/io.undertow/undertow-core@2.3.24.SP3-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@4.0.1.redhat-00001", + "group": "jakarta.ejb", + "name": "jakarta.ejb-api", + "version": "4.0.1.redhat-00001", + "purl": "pkg:maven/jakarta.ejb/jakarta.ejb-api@4.0.1.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.jms/jakarta.jms-api@3.1.0.redhat-00003", + "group": "jakarta.jms", + "name": "jakarta.jms-api", + "version": "3.1.0.redhat-00003", + "purl": "pkg:maven/jakarta.jms/jakarta.jms-api@3.1.0.redhat-00003", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.resource/jakarta.resource-api@2.1.0.redhat-00001", + "group": "jakarta.resource", + "name": "jakarta.resource-api", + "version": "2.1.0.redhat-00001", + "purl": "pkg:maven/jakarta.resource/jakarta.resource-api@2.1.0.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1.redhat-00004", + "group": "jakarta.transaction", + "name": "jakarta.transaction-api", + "version": "2.0.1.redhat-00004", + "purl": "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1.redhat-00004", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-commons@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-commons", + "version": "2.40.0.redhat-00015", + "purl": "pkg:maven/org.apache.activemq/artemis-commons@2.40.0.redhat-00015", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-core-client@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-core-client", + "version": "2.40.0.redhat-00015", + "purl": "pkg:maven/org.apache.activemq/artemis-core-client@2.40.0.redhat-00015", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-hqclient-protocol@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-hqclient-protocol", + "version": "2.40.0.redhat-00015", + "purl": "pkg:maven/org.apache.activemq/artemis-hqclient-protocol@2.40.0.redhat-00015", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-jakarta-client@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-jakarta-client", + "version": "2.40.0.redhat-00015", + "purl": "pkg:maven/org.apache.activemq/artemis-jakarta-client@2.40.0.redhat-00015", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-selector@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-selector", + "version": "2.40.0.redhat-00015", + "purl": "pkg:maven/org.apache.activemq/artemis-selector@2.40.0.redhat-00015", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.sshd/sshd-common@2.14.0.redhat-00003", + "group": "org.apache.sshd", + "name": "sshd-common", + "version": "2.14.0.redhat-00003", + "purl": "pkg:maven/org.apache.sshd/sshd-common@2.14.0.redhat-00003", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-ejb-client@5.0.8.Final-redhat-00001", + "group": "org.jboss", + "name": "jboss-ejb-client", + "version": "5.0.8.Final-redhat-00001", + "purl": "pkg:maven/org.jboss/jboss-ejb-client@5.0.8.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-client-properties@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-client-properties", + "version": "8.1.1.GA-redhat-00019", + "purl": "pkg:maven/org.jboss.eap/wildfly-client-properties@8.1.1.GA-redhat-00019", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "group": "org.jboss.logging", + "name": "jboss-logging", + "version": "3.6.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.marshalling/jboss-marshalling@2.2.3.Final-redhat-00001", + "group": "org.jboss.marshalling", + "name": "jboss-marshalling", + "version": "2.2.3.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.marshalling/jboss-marshalling@2.2.3.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.marshalling/jboss-marshalling-river@2.2.3.Final-redhat-00001", + "group": "org.jboss.marshalling", + "name": "jboss-marshalling-river", + "version": "2.2.3.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.marshalling/jboss-marshalling-river@2.2.3.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.remoting/jboss-remoting@5.0.31.Final-redhat-00001", + "group": "org.jboss.remoting", + "name": "jboss-remoting", + "version": "5.0.31.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.remoting/jboss-remoting@5.0.31.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.remotingjmx/remoting-jmx@3.1.0.Final-redhat-00002", + "group": "org.jboss.remotingjmx", + "name": "remoting-jmx", + "version": "3.1.0.Final-redhat-00002", + "purl": "pkg:maven/org.jboss.remotingjmx/remoting-jmx@3.1.0.Final-redhat-00002", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@2.5.0.redhat-00001", + "group": "org.jboss.threads", + "name": "jboss-threads", + "version": "2.5.0.redhat-00001", + "purl": "pkg:maven/org.jboss.threads/jboss-threads@2.5.0.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final-redhat-00001", + "group": "org.jboss.xnio", + "name": "xnio-api", + "version": "3.8.16.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final-redhat-00001", + "group": "org.jboss.xnio", + "name": "xnio-nio", + "version": "3.8.16.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jgroups/jgroups@5.3.23.Final-redhat-00001", + "group": "org.jgroups", + "name": "jgroups", + "version": "5.3.23.Final-redhat-00001", + "purl": "pkg:maven/org.jgroups/jgroups@5.3.23.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17.redhat-00001", + "group": "org.slf4j", + "name": "jcl-over-slf4j", + "version": "2.0.17.redhat-00001", + "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.17.redhat-00001", + "group": "org.slf4j", + "name": "slf4j-api", + "version": "2.0.17.redhat-00001", + "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.17.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly/wildfly-naming-client@2.0.1.Final-redhat-00001", + "group": "org.wildfly", + "name": "wildfly-naming-client", + "version": "2.0.1.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly/wildfly-naming-client@2.0.1.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final-redhat-00002", + "group": "org.wildfly.client", + "name": "wildfly-client-config", + "version": "1.0.1.Final-redhat-00002", + "purl": "pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final-redhat-00002", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final-redhat-00003", + "group": "org.wildfly.common", + "name": "wildfly-common", + "version": "1.7.0.Final-redhat-00003", + "purl": "pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final-redhat-00003", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.discovery/wildfly-discovery-client@1.3.0.Final-redhat-00001", + "group": "org.wildfly.discovery", + "name": "wildfly-discovery-client", + "version": "1.3.0.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.discovery/wildfly-discovery-client@1.3.0.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-asn1@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-asn1", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-asn1@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-deprecated@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server-deprecated", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-deprecated@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-http@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server-http", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-http@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-sasl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server-sasl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-sasl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-base@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-base", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-base@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-client@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-client", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-client@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-source-impl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential-source-impl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-source-impl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-store@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential-store", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-store@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-digest@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-digest", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-digest@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-encryption@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-encryption", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-encryption@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-keystore@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-keystore", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-keystore@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-digest@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-digest", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-digest@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-gssapi@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-gssapi", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-gssapi@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-oauth2@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-oauth2", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-oauth2@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-scram@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-scram", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-scram@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-password-impl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-password-impl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-password-impl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-permission@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-permission", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-permission@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-provider-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-provider-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-provider-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-realm", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-realm@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-anonymous@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-anonymous", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-anonymous@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-auth-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-auth-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-auth-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-digest@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-digest", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-digest@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-entity@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-entity", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-entity@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-external@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-external", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-external@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gs2@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-gs2", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gs2@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gssapi@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-gssapi", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gssapi@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-localuser@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-localuser", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-localuser@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-oauth2@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-oauth2", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-oauth2@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-otp@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-otp", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-otp@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-plain@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-plain", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-plain@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-scram@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-scram", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-scram@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-security-manager", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager-action@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-security-manager-action", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager-action@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-ssh-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-ssh-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-ssh-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-ssl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-ssl", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-ssl@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-cert", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-cert-util", + "version": "2.6.9.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-util@2.6.9.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.transaction/wildfly-transaction-client@3.0.5.Final-redhat-00001", + "group": "org.wildfly.transaction", + "name": "wildfly-transaction-client", + "version": "3.0.5.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.transaction/wildfly-transaction-client@3.0.5.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-client-common@2.1.4.Final-redhat-00001", + "group": "org.wildfly.wildfly-http-client", + "name": "wildfly-http-client-common", + "version": "2.1.4.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-client-common@2.1.4.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-ejb-client@2.1.4.Final-redhat-00001", + "group": "org.wildfly.wildfly-http-client", + "name": "wildfly-http-ejb-client", + "version": "2.1.4.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-ejb-client@2.1.4.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-naming-client@2.1.4.Final-redhat-00001", + "group": "org.wildfly.wildfly-http-client", + "name": "wildfly-http-naming-client", + "version": "2.1.4.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-naming-client@2.1.4.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-transaction-client@2.1.4.Final-redhat-00001", + "group": "org.wildfly.wildfly-http-client", + "name": "wildfly-http-transaction-client", + "version": "2.1.4.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-transaction-client@2.1.4.Final-redhat-00001", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "bin/client/jboss-client.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:generic/wildfly-elytron-tool@8.1.1.GA-redhat-00019", + "name": "wildfly-elytron-tool", + "version": "8.1.1.GA-redhat-00019", + "purl": "pkg:generic/wildfly-elytron-tool@8.1.1.GA-redhat-00019", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "group": "org.jboss.logging", + "name": "jboss-logging", + "version": "3.6.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-elytron-tool-wrapper@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-elytron-tool-wrapper", + "version": "27.1.12.Final-redhat-00001", + "purl": "pkg:maven/org.wildfly.core/wildfly-elytron-tool-wrapper@27.1.12.Final-redhat-00001", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "bin/wildfly-elytron-tool.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.carrotsearch/hppc@0.10.0.redhat-00001", + "group": "com.carrotsearch", + "name": "hppc", + "version": "0.10.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ee10aece3093c5ccaab939c0f3a937ab7d4fa74ef1e0114072d4e6640b7525f5" + } + ], + "purl": "pkg:maven/com.carrotsearch/hppc@0.10.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/carrotsearch/hppc/main/hppc-0.10.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml/classmate@1.6.0.redhat-00001", + "group": "com.fasterxml", + "name": "classmate", + "version": "1.6.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "cd927615900119ef550de09ade70e3dba56b6d1d3090b28b2e804362df4a6667" + } + ], + "purl": "pkg:maven/com.fasterxml/classmate@1.6.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/classmate/main/classmate-1.6.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.core", + "name": "jackson-annotations", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "5f85c322ca3d577eb4c47615c6194a24126b23fc71dfd4f2e5f6dea77d6ed7e6" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/jackson-annotations-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.core", + "name": "jackson-core", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "80b16ac2564e2a5c36b604ca786f3d7a73927de70815c9fd9c56c4ce7639053f" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/jackson-core-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.core", + "name": "jackson-databind", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "d59b87d51aa4c3f96e376559855cd21215f08d92565f78de0d9d45a20bedf9f1" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/jackson-databind-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.dataformat", + "name": "jackson-dataformat-yaml", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "e3d3027b6d666764c2fab9456e67e0e0db9d33e9219f444f0366a10419327202" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/jackson-dataformat-yaml-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.datatype", + "name": "jackson-datatype-jdk8", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "3274370148a5b2d4e0ac255b335817cf1466faa1cf30fdfb5d4e7c3a8fa15ea0" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/jackson-datatype-jdk8-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.datatype", + "name": "jackson-datatype-jsr310", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "d79b99f924e97578899f21fdacffd3cc1490a5e3ca6944edb7f4d8bcb1b2a59f" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/jackson-datatype-jsr310-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.jakarta.rs", + "name": "jackson-jakarta-rs-base", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "fa23c3d3b90091bf52e6d1508032bd32bfaa5feb2f3cd0d4a9bf956f1de3caa3" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-jakarta-rs-base-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.jakarta.rs", + "name": "jackson-jakarta-rs-json-provider", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe6094571fc5c974210d76f3ff14751d5fdeef3f04b24c795920607f213945" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-jakarta-rs-json-provider-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.18.4.redhat-00002", + "group": "com.fasterxml.jackson.module", + "name": "jackson-module-jakarta-xmlbind-annotations", + "version": "2.18.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "94d8ed90f029e0291f2628749650d44ae983e007a6dd314695e432688655252e" + } + ], + "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.18.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-module-jakarta-xmlbind-annotations-2.18.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0.redhat-00002", + "group": "com.fasterxml.woodstox", + "name": "woodstox-core", + "version": "7.0.0.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "47e04256eebda4c5cf403dd6fecffcac883ba8d13691021d537a6ff64f7c4f88" + } + ], + "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0.redhat-00002", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621", + "group": "com.sun.xml.bind.jaxb", + "name": "isorelax", + "version": "20090621", + "purl": "pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.java.dev.msv/xsdlib@2022.7", + "group": "net.java.dev.msv", + "name": "xsdlib", + "version": "2022.7", + "purl": "pkg:maven/net.java.dev.msv/xsdlib@2022.7", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/codehaus/woodstox/main/woodstox-core-7.0.0.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8.redhat-00002", + "group": "com.github.ben-manes.caffeine", + "name": "caffeine", + "version": "3.1.8.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "1e04f06f8d86b417ddf64312eb0bdd56e4942ba0a8e8fb3db958f1de7f0281b3" + } + ], + "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/github/ben-manes/caffeine/main/caffeine-3.1.8.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.fge/btf@1.2.0.redhat-00007", + "group": "com.github.fge", + "name": "btf", + "version": "1.2.0.redhat-00007", + "hashes": [ + { + "alg": "SHA-256", + "content": "bc57bc0df590fe94558208527054c0fb638ee4b86b7c9b38e5a9556ca3d8ac5a" + } + ], + "purl": "pkg:maven/com.github.fge/btf@1.2.0.redhat-00007", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/github/fge/btf/main/btf-1.2.0.redhat-00007.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.fge/jackson-coreutils@1.8.0.redhat-00002", + "group": "com.github.fge", + "name": "jackson-coreutils", + "version": "1.8.0.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "782b1cb7ac72a401a8edb42a0f69e95792783d00b0b1fc45f211673f35c99308" + } + ], + "purl": "pkg:maven/com.github.fge/jackson-coreutils@1.8.0.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/github/fge/jackson-coreutils/main/jackson-coreutils-1.8.0.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.fge/json-patch@1.9.0.redhat-00002", + "group": "com.github.fge", + "name": "json-patch", + "version": "1.9.0.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "36cd1a9bcca31a783ff4347b493cb0537f9c742ccd0567ac44fdc24552871d39" + } + ], + "purl": "pkg:maven/com.github.fge/json-patch@1.9.0.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/github/fge/json-patch/main/json-patch-1.9.0.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.github.fge/msg-simple@1.1.0.redhat-00007", + "group": "com.github.fge", + "name": "msg-simple", + "version": "1.1.0.redhat-00007", + "hashes": [ + { + "alg": "SHA-256", + "content": "7250ecc68bfc93cee1ca3846b2b598c1924ef52f41a5d7dea858ee47e44012f7" + } + ], + "purl": "pkg:maven/com.github.fge/msg-simple@1.1.0.redhat-00007", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/github/fge/msg-simple/main/msg-simple-1.1.0.redhat-00007.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.code.gson/gson@2.10.1.redhat-00005", + "group": "com.google.code.gson", + "name": "gson", + "version": "2.10.1.redhat-00005", + "hashes": [ + { + "alg": "SHA-256", + "content": "8661b6d426ecd452602c70b6c21ceb9811c980d6c342f2ae746528159c111704" + } + ], + "purl": "pkg:maven/com.google.code.gson/gson@2.10.1.redhat-00005", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/google/code/gson/main/gson-2.10.1.redhat-00005.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3.redhat-00001", + "group": "com.google.guava", + "name": "failureaccess", + "version": "1.0.3.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "09d76c9eaffefd7228908997db3bf29a29e0b4a6764848900b1f8bf067180858" + } + ], + "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/google/guava/failureaccess/main/failureaccess-1.0.3.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.google.guava/guava@33.0.0.jre-redhat-00004", + "group": "com.google.guava", + "name": "guava", + "version": "33.0.0.jre-redhat-00004", + "hashes": [ + { + "alg": "SHA-256", + "content": "8bb98781a294dee47925c8680704663531d6dc88e66f4cc9c1fdb5bf2cff779b" + } + ], + "purl": "pkg:maven/com.google.guava/guava@33.0.0.jre-redhat-00004", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/google/guava/main/guava-33.0.0.jre-redhat-00004.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3.redhat-00002", + "group": "com.googlecode.javaewah", + "name": "JavaEWAH", + "version": "1.2.3.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "b3021952228319ee26e31b65dabc23d46c77958a4045de03ac6f9ef8edde8362" + } + ], + "purl": "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/googlecode/javaewah/main/JavaEWAH-1.2.3.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.h2database/h2@2.2.224.redhat-00003", + "group": "com.h2database", + "name": "h2", + "version": "2.2.224.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "91fbdff00fb979b7c1c5ceaf6757fe7095bbf6d92663179462c410acd7e6873e" + } + ], + "purl": "pkg:maven/com.h2database/h2@2.2.224.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/h2database/h2/main/h2-2.2.224.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0.redhat-00010", + "group": "com.ibm.async", + "name": "asyncutil", + "version": "0.1.0.redhat-00010", + "hashes": [ + { + "alg": "SHA-256", + "content": "d167c156cf1b8026e8338dc248c665c58905f1f55dcb1a07f180f8bc547224cf" + } + ], + "purl": "pkg:maven/com.ibm.async/asyncutil@0.1.0.redhat-00010", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/ibm/async/asyncutil/main/asyncutil-0.1.0.redhat-00010.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.microsoft.azure/azure-storage@8.6.6.redhat-00001", + "group": "com.microsoft.azure", + "name": "azure-storage", + "version": "8.6.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2ec58a2aaf3044029a8ccd6286db0979952421830076472c638d5a5ca441dc00" + } + ], + "purl": "pkg:maven/com.microsoft.azure/azure-storage@8.6.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/microsoft/azure/storage/main/azure-storage-8.6.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.3.redhat-00001", + "group": "com.nimbusds", + "name": "nimbus-jose-jwt", + "version": "9.37.3.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2bd8fbb224046d2dc0a09274387ffca77280456c5475a0254ed962dae775cb62" + } + ], + "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.3.redhat-00001", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/com.google.code.gson/gson@2.10.1.redhat-00004", + "group": "com.google.code.gson", + "name": "gson", + "version": "2.10.1.redhat-00004", + "purl": "pkg:maven/com.google.code.gson/gson@2.10.1.redhat-00004", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/nimbus-jose-jwt-9.37.3.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.redhat.insights/runtimes-java-api@1.1.3.redhat-00002", + "group": "com.redhat.insights", + "name": "runtimes-java-api", + "version": "1.1.3.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "2a8b419a627b40d427fbafc91894bda68ee4427e571751b1b3728d4c561f414e" + } + ], + "purl": "pkg:maven/com.redhat.insights/runtimes-java-api@1.1.3.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/redhat/insights/main/runtimes-java-api-1.1.3.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.redhat.insights/runtimes-java-core-runtime@1.1.3.redhat-00002", + "group": "com.redhat.insights", + "name": "runtimes-java-core-runtime", + "version": "1.1.3.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "742df32ca609798c26fad58e33e9134fb8de1051a179f248b91c46bb231b9bf7" + } + ], + "purl": "pkg:maven/com.redhat.insights/runtimes-java-core-runtime@1.1.3.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/redhat/insights/main/runtimes-java-core-runtime-1.1.3.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.squareup/protoparser@4.0.3.redhat-00001", + "group": "com.squareup", + "name": "protoparser", + "version": "4.0.3.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c534d1972b946f08551920280ca4f084b1d0e91fab3ef7ae6d8b013910626dca" + } + ], + "purl": "pkg:maven/com.squareup/protoparser@4.0.3.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/squareup/protoparser/main/protoparser-4.0.3.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2.redhat-00003", + "group": "com.sun.istack", + "name": "istack-commons-runtime", + "version": "4.1.2.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "2d2f2245633a1ce51b9ab8754ae6980a8a2cd9df62490ea3185625b8ecaaebfb" + } + ], + "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/istack-commons-runtime-4.1.2.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun.istack/istack-commons-tools@4.1.2.redhat-00003", + "group": "com.sun.istack", + "name": "istack-commons-tools", + "version": "4.1.2.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "bd1a17cb5ceef228330543df07b2696b31e0958d8cc2396ba807bef9adac671f" + } + ], + "purl": "pkg:maven/com.sun.istack/istack-commons-tools@4.1.2.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/istack-commons-tools-4.1.2.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@4.0.6.redhat-00001", + "group": "com.sun.xml.bind.external", + "name": "relaxng-datatype", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "994587b40be64b388698d50bcb59eb165d8b4d9f3e1b986ad389b639f6931999" + } + ], + "purl": "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/relaxng-datatype-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun.xml.bind.external/rngom@4.0.6.redhat-00001", + "group": "com.sun.xml.bind.external", + "name": "rngom", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2ed40858a89e216bd850f874310bdd94d06eb261305a58991dcfb174c3dcc7f1" + } + ], + "purl": "pkg:maven/com.sun.xml.bind.external/rngom@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/rngom-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1.redhat-00001", + "group": "com.sun.xml.fastinfoset", + "name": "FastInfoset", + "version": "2.1.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f018bb8fac60e081fba82dba812195dc43b7675e705fb7d20b6f7bd17a9d897c" + } + ], + "purl": "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/sun/xml/fastinfoset/main/FastInfoset-2.1.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@3.0.4.redhat-00002", + "group": "com.sun.xml.messaging.saaj", + "name": "saaj-impl", + "version": "3.0.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "ffb10131daf7028046e3d4ab77d2216f3ded208961ce312eed4807e8f56f59b0" + } + ], + "purl": "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@3.0.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/sun/xml/messaging/saaj/main/saaj-impl-3.0.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.11.0.redhat-00001", + "group": "commons-beanutils", + "name": "commons-beanutils", + "version": "1.11.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9b225d04f9775f599cb6d5cf41e3b4aea192728b0eb6ac97f0ab70cc28be41b0" + } + ], + "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.11.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/commons/beanutils/main/commons-beanutils-1.11.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-cli/commons-cli@1.9.0.redhat-00001", + "group": "commons-cli", + "name": "commons-cli", + "version": "1.9.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "af44bc3e543fc6d666d17f2eb683b572c723121770279ad9116f7c76f425d2b6" + } + ], + "purl": "pkg:maven/commons-cli/commons-cli@1.9.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/commons/cli/main/commons-cli-1.9.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-codec/commons-codec@1.17.2.redhat-00001", + "group": "commons-codec", + "name": "commons-codec", + "version": "1.17.2.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "40433f852879ee28d49db49e9a0c8abd893b3a5c50eb708bedef76d635393267" + } + ], + "purl": "pkg:maven/commons-codec/commons-codec@1.17.2.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/commons/codec/main/commons-codec-1.17.2.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2.redhat-2", + "group": "commons-collections", + "name": "commons-collections", + "version": "3.2.2.redhat-2", + "hashes": [ + { + "alg": "SHA-256", + "content": "2aca80114732a342884fc024d17ea23d97562b40bf8a0babf0151d76e2ac01c7" + } + ], + "purl": "pkg:maven/commons-collections/commons-collections@3.2.2.redhat-2", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/commons/collections/main/commons-collections-3.2.2.redhat-2.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/commons-io/commons-io@2.16.1.redhat-00002", + "group": "commons-io", + "name": "commons-io", + "version": "2.16.1.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "b1af1680226ba8c3c425618781b09ce331e2be5fb384e080a3f06fad102a3ac3" + } + ], + "purl": "pkg:maven/commons-io/commons-io@2.16.1.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/commons/io/main/commons-io-2.16.1.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/de.dentrassi.crypto/pem-keystore@2.4.0.redhat-00001", + "group": "de.dentrassi.crypto", + "name": "pem-keystore", + "version": "2.4.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6df8d2620034db2a7f7e221940ecce6dc962cecaac6a72db3a4738d73c885b90" + } + ], + "purl": "pkg:maven/de.dentrassi.crypto/pem-keystore@2.4.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/pem-keystore-2.4.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/gnu.getopt/java-getopt@1.0.13.redhat-5", + "group": "gnu.getopt", + "name": "java-getopt", + "version": "1.0.13.redhat-5", + "hashes": [ + { + "alg": "SHA-256", + "content": "caf8d411fe769b64257eb4d64b6c58f9b19521991ea895e69ed1f384d74b685f" + } + ], + "purl": "pkg:maven/gnu.getopt/java-getopt@1.0.13.redhat-5", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/gnu/getopt/main/java-getopt-1.0.13.redhat-5.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-api@2.3.0.redhat-00001", + "group": "io.agroal", + "name": "agroal-api", + "version": "2.3.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "e481941318b82f4b7ef68f85fe0e8bb60ba73d3657683a3b18e88813899f7335" + } + ], + "purl": "pkg:maven/io.agroal/agroal-api@2.3.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/agroal/main/agroal-api-2.3.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-narayana@2.3.0.redhat-00001", + "group": "io.agroal", + "name": "agroal-narayana", + "version": "2.3.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "96827f7b0eb3f36c76d3aa7802fcda13a726013f0b9f3df2b5521238bb334a7b" + } + ], + "purl": "pkg:maven/io.agroal/agroal-narayana@2.3.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/agroal/main/agroal-narayana-2.3.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-pool@2.3.0.redhat-00001", + "group": "io.agroal", + "name": "agroal-pool", + "version": "2.3.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "644b1eed6da65777387f99fda118db60360dcd559e77012a300fa85ae04a62af" + } + ], + "purl": "pkg:maven/io.agroal/agroal-pool@2.3.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/agroal/main/agroal-pool-2.3.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0.redhat-00001", + "group": "io.github.resilience4j", + "name": "resilience4j-core", + "version": "2.2.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a40e5afb6e2333213ae6fe03de70a933f97568e87ee2f3d7aad591b078f8d63d" + } + ], + "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/github/resilience4j/core/main/resilience4j-core-2.2.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0.redhat-00001", + "group": "io.github.resilience4j", + "name": "resilience4j-retry", + "version": "2.2.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a08863435781c876e71df801c116e3e47220fb9303e90ba269ab718ba839c841" + } + ], + "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/github/resilience4j/retry/main/resilience4j-retry-2.2.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-buffer", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "93cc3c2c005ec5b074de3c1be38168f3c570598554d40db9be1d7569059133b6" + } + ], + "purl": "pkg:maven/io.netty/netty-buffer@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-buffer/main/netty-buffer-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-codec", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "340f629f7d29b925030f46780f16927d7550ef0b103825f521067b4d2e61aba0" + } + ], + "purl": "pkg:maven/io.netty/netty-codec@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-codec/main/netty-codec-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-codec-dns", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2a8351ddd2bfb5fad7f77a3323d948ae6a5afbbbd5dea60c2fd7d0173a4185e0" + } + ], + "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-codec-dns/main/netty-codec-dns-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-codec-http", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b64a6f3ce0b892c2aea2df7071360f9d523dce882d6baa8a8366900e96ae459c" + } + ], + "purl": "pkg:maven/io.netty/netty-codec-http@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-codec-http/main/netty-codec-http-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-codec-socks", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "90c0de65bdb6ddfcd0f4401750ea23049e6acc67e4dabae62372229b289fe89b" + } + ], + "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-codec-socks/main/netty-codec-socks-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-common@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-common", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "88b00141630f1851dccd54d94ae946466fbd20d74a56805c9a1189b74cb008a1" + } + ], + "purl": "pkg:maven/io.netty/netty-common@4.1.135.Final-redhat-00001", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/org.jctools/jctools-core@4.0.5.redhat-00004", + "group": "org.jctools", + "name": "jctools-core", + "version": "4.0.5.redhat-00004", + "purl": "pkg:maven/org.jctools/jctools-core@4.0.5.redhat-00004", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-common/main/netty-common-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-handler", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "8bd7a5e956f56ff71e8141e663bbb5f7ccf1389b9390aa0b7a52ec216a4ff518" + } + ], + "purl": "pkg:maven/io.netty/netty-handler@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-handler/main/netty-handler-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-handler-proxy", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7329e8026329e2dc0527185e6480bcee9d872bb1fbff7d38a394dc73f6b80f7e" + } + ], + "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-handler-proxy/main/netty-handler-proxy-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-resolver", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "0f99eb4521e454c71f7dc933dd6c659ad3cb4cc0b7247268fee4c386159bc566" + } + ], + "purl": "pkg:maven/io.netty/netty-resolver@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-resolver/main/netty-resolver-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-resolver-dns", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "be052391216096a3029efc9e630bec3415069a2b4d613993e6f13eadf52fa8f8" + } + ], + "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-resolver-dns/main/netty-resolver-dns-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-transport", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a563c3bb8e31cf098ac219c59f0723ab905ba188f87887403ee30d8c4e113096" + } + ], + "purl": "pkg:maven/io.netty/netty-transport@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-transport/main/netty-transport-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final-redhat-00001", + "group": "io.netty", + "name": "netty-transport-classes-epoll", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ac8567830c0f832a484f2372ca73703163131270138b0679f51a3a112d9b2f8a" + } + ], + "purl": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-transport-native-epoll/main/netty-transport-classes-epoll-4.1.135.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "group": "io.netty", + "name": "netty-transport-native-epoll", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4a0a942edc1d747cbff068310e895e41187fc5a5c12204152db6e5c3831935b7" + } + ], + "purl": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "group": "io.netty", + "name": "netty-transport-native-unix-common", + "version": "4.1.135.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "69bdd9bd94fab1aac823268336554367fc563b8d517bf7f22bd0a05921f30eda" + } + ], + "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.135.Final-redhat-00001-linux-x86_64.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.reactivex.rxjava2/rxjava@2.2.21.redhat-00003", + "group": "io.reactivex.rxjava2", + "name": "rxjava", + "version": "2.2.21.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "0d046900efde38a424d52441c687e9b0e3726573859af4be18ddd71f3f801b9f" + } + ], + "purl": "pkg:maven/io.reactivex.rxjava2/rxjava@2.2.21.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/rxjava-2.2.21.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.reactivex.rxjava3/rxjava@3.1.12.redhat-00001", + "group": "io.reactivex.rxjava3", + "name": "rxjava", + "version": "3.1.12.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f1923751756a1422ca65e844c53b94fd9ea47ab155b8a17c235fff7375cea386" + } + ], + "purl": "pkg:maven/io.reactivex.rxjava3/rxjava@3.1.12.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/rxjava-3.1.12.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.smallrye/jandex@3.2.7.redhat-00001", + "group": "io.smallrye", + "name": "jandex", + "version": "3.2.7.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "dd3bdea355aa34481c68c2824b18d719e1dec1e2530c709299b54022d157480d" + } + ], + "purl": "pkg:maven/io.smallrye/jandex@3.2.7.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/smallrye/jandex/main/jandex-3.2.7.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.undertow/undertow-core@2.3.24.SP3-redhat-00001", + "group": "io.undertow", + "name": "undertow-core", + "version": "2.3.24.SP3-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5858dac730aaf4fa38a472760bf4fa2c5444ef15b7d9f1f8d1aecbe597b29545" + } + ], + "purl": "pkg:maven/io.undertow/undertow-core@2.3.24.SP3-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/undertow/core/main/undertow-core-2.3.24.SP3-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.undertow/undertow-servlet@2.3.24.SP3-redhat-00001", + "group": "io.undertow", + "name": "undertow-servlet", + "version": "2.3.24.SP3-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c90449b21152d54f9b18f09c142633336413a2f58213f20a14a9968797c78186" + } + ], + "purl": "pkg:maven/io.undertow/undertow-servlet@2.3.24.SP3-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/undertow/servlet/main/undertow-servlet-2.3.24.SP3-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.24.SP3-redhat-00001", + "group": "io.undertow", + "name": "undertow-websockets-jsr", + "version": "2.3.24.SP3-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "96b0e2c5dfea7b9605695a8a2971ae3dc27d103abe7caba919062dcc8d0dce27" + } + ], + "purl": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.24.SP3-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/undertow/websocket/main/undertow-websockets-jsr-2.3.24.SP3-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.undertow.jastow/jastow@2.2.9.SP1-redhat-00001", + "group": "io.undertow.jastow", + "name": "jastow", + "version": "2.2.9.SP1-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1def022d9014c165c1029e2b6f63b99d9880e2567d88718acf78c04666e1b0be" + } + ], + "purl": "pkg:maven/io.undertow.jastow/jastow@2.2.9.SP1-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/io/undertow/jsp/main/jastow-2.2.9.SP1-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4.redhat-00001", + "group": "jakarta.activation", + "name": "jakarta.activation-api", + "version": "2.1.4.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4d79ebafa029db2fb377176347757557ab23b986677d49a43e91831dc5b808e6" + } + ], + "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/activation/api/main/jakarta.activation-api-2.1.4.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1.redhat-00005", + "group": "jakarta.annotation", + "name": "jakarta.annotation-api", + "version": "2.1.1.redhat-00005", + "hashes": [ + { + "alg": "SHA-256", + "content": "17e16a886a83044d82aaebd4bfa089a216e6fedb7f842bc984c8740f73194967" + } + ], + "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1.redhat-00005", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/annotation/api/main/jakarta.annotation-api-2.1.1.redhat-00005.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.authentication/jakarta.authentication-api@3.0.0.redhat-00001", + "group": "jakarta.authentication", + "name": "jakarta.authentication-api", + "version": "3.0.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "e93b296cf277e02a2d0e1758f16b9de07a7e1423dd38202fb737bf588df58a06" + } + ], + "purl": "pkg:maven/jakarta.authentication/jakarta.authentication-api@3.0.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/security/auth/message/api/main/jakarta.authentication-api-3.0.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.authorization/jakarta.authorization-api@2.1.0.redhat-00001", + "group": "jakarta.authorization", + "name": "jakarta.authorization-api", + "version": "2.1.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f9eb76815f4b6be88305df7727ef0313703128359a18543c42f918fe6a491f2f" + } + ], + "purl": "pkg:maven/jakarta.authorization/jakarta.authorization-api@2.1.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/security/jacc/api/main/jakarta.authorization-api-2.1.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.batch/jakarta.batch-api@2.1.1.redhat-00003", + "group": "jakarta.batch", + "name": "jakarta.batch-api", + "version": "2.1.1.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "539e0f33702f259cb38d11057aff75155ea551d1b692aa15553e10401264af0a" + } + ], + "purl": "pkg:maven/jakarta.batch/jakarta.batch-api@2.1.1.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/batch/api/main/jakarta.batch-api-2.1.1.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@4.0.1.redhat-00001", + "group": "jakarta.ejb", + "name": "jakarta.ejb-api", + "version": "4.0.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2cea47b05b60dd6e4cd5c0531cf1d8376b3d0eb8d550383c41739b4b627cfee3" + } + ], + "purl": "pkg:maven/jakarta.ejb/jakarta.ejb-api@4.0.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/ejb/api/main/jakarta.ejb-api-4.0.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.1.redhat-00001", + "group": "jakarta.enterprise", + "name": "jakarta.enterprise.cdi-api", + "version": "4.0.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1f64476788c7b3d659fa7985a2fe7ddcfb238246a06142ddc4481f9fa3165a9c" + } + ], + "purl": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/enterprise/api/main/jakarta.enterprise.cdi-api-4.0.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.1.redhat-00001", + "group": "jakarta.enterprise", + "name": "jakarta.enterprise.lang-model", + "version": "4.0.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "24ecb8874b936876301efc8b00231e7ba7a2853411d19a0c6c0db5860d1c9ee0" + } + ], + "purl": "pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/enterprise/api/main/jakarta.enterprise.lang-model-4.0.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.enterprise.concurrent/jakarta.enterprise.concurrent-api@3.0.3.redhat-00001", + "group": "jakarta.enterprise.concurrent", + "name": "jakarta.enterprise.concurrent-api", + "version": "3.0.3.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "84a21310878e0a90682d2aeaa40e363ec48552ccf0a3c8c0c1702ee0f81d65fd" + } + ], + "purl": "pkg:maven/jakarta.enterprise.concurrent/jakarta.enterprise.concurrent-api@3.0.3.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/enterprise/concurrent/api/main/jakarta.enterprise.concurrent-api-3.0.3.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1.redhat-00007", + "group": "jakarta.inject", + "name": "jakarta.inject-api", + "version": "2.0.1.redhat-00007", + "hashes": [ + { + "alg": "SHA-256", + "content": "41310b0ccbe69b6e994618ac58f73f88f53e74e4ce754e0fee1e2df6e3fcafc3" + } + ], + "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1.redhat-00007", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/inject/api/main/jakarta.inject-api-2.0.1.redhat-00007.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0.redhat-00003", + "group": "jakarta.interceptor", + "name": "jakarta.interceptor-api", + "version": "2.1.0.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "7944391c2efd35ba0a9e75f01120b4db4d1dce1f6b79b481ac5e6b16ceaee546" + } + ], + "purl": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/interceptor/api/main/jakarta.interceptor-api-2.1.0.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.jms/jakarta.jms-api@3.1.0.redhat-00003", + "group": "jakarta.jms", + "name": "jakarta.jms-api", + "version": "3.1.0.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "acdcd5677d343b48626507018e94c399a8d7e282388c1387c031b1d83b33f135" + } + ], + "purl": "pkg:maven/jakarta.jms/jakarta.jms-api@3.1.0.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/jms/api/main/jakarta.jms-api-3.1.0.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3.redhat-00002", + "group": "jakarta.json", + "name": "jakarta.json-api", + "version": "2.1.3.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "26d8b306fba7141e803552bf8404421018cd429d33627196f2aa098ff1be6fc0" + } + ], + "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/json/api/main/jakarta.json-api-2.1.3.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.1.redhat-00002", + "group": "jakarta.json.bind", + "name": "jakarta.json.bind-api", + "version": "3.0.1.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "8a770e87bdaea274e163108444d9b19e1ff265c0c940b91510ec2e76c00d7e46" + } + ], + "purl": "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.1.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/json/bind/api/main/jakarta.json.bind-api-3.0.1.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3.redhat-00003", + "group": "jakarta.mail", + "name": "jakarta.mail-api", + "version": "2.1.3.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "4f7e4e169f649763c22abc17b0f4151827ba645aa60fc888311a2ba5b4591cc4" + } + ], + "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/mail/api/main/jakarta.mail-api-2.1.3.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@3.1.0.redhat-00002", + "group": "jakarta.persistence", + "name": "jakarta.persistence-api", + "version": "3.1.0.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "a5d77f2aecd98da36c757240a70b21599743f029e9539e35f95648374a367627" + } + ], + "purl": "pkg:maven/jakarta.persistence/jakarta.persistence-api@3.1.0.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/persistence/api/main/jakarta.persistence-api-3.1.0.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.resource/jakarta.resource-api@2.1.0.redhat-00001", + "group": "jakarta.resource", + "name": "jakarta.resource-api", + "version": "2.1.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a5299d3960015fecaf10f6773f5108f4afa0054f4222fc5101ccc635e9badd4c" + } + ], + "purl": "pkg:maven/jakarta.resource/jakarta.resource-api@2.1.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/resource/api/main/jakarta.resource-api-2.1.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@3.0.0.redhat-00001", + "group": "jakarta.security.enterprise", + "name": "jakarta.security.enterprise-api", + "version": "3.0.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "960a0f75da3a6acd5e9eeda2724f268ad5dd6999303b4c9e072801c1fe546960" + } + ], + "purl": "pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@3.0.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/security/enterprise/api/main/jakarta.security.enterprise-api-3.0.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0.redhat-00007", + "group": "jakarta.servlet", + "name": "jakarta.servlet-api", + "version": "6.0.0.redhat-00007", + "hashes": [ + { + "alg": "SHA-256", + "content": "f7ff905c915181cb12f006c5c33034bf9cf6903ffc95c268ea8e56bc3865add4" + } + ], + "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0.redhat-00007", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/servlet/api/main/jakarta.servlet-api-6.0.0.redhat-00007.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@3.1.1.redhat-00001", + "group": "jakarta.servlet.jsp", + "name": "jakarta.servlet.jsp-api", + "version": "3.1.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ef50e16a6f5390c3d96e56a8ebc5884e14a878ee7b9f980a29d795d412608d7a" + } + ], + "purl": "pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@3.1.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/servlet/jsp/api/main/jakarta.servlet.jsp-api-3.1.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api@3.0.2.redhat-00001", + "group": "jakarta.servlet.jsp.jstl", + "name": "jakarta.servlet.jsp.jstl-api", + "version": "3.0.2.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "41108298d5b50a1781e650ffd4654fb68cf5b0a13b244204735442425ccf2682" + } + ], + "purl": "pkg:maven/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api@3.0.2.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/servlet/jstl/api/main/jakarta.servlet.jsp.jstl-api-3.0.2.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1.redhat-00004", + "group": "jakarta.transaction", + "name": "jakarta.transaction-api", + "version": "2.0.1.redhat-00004", + "hashes": [ + { + "alg": "SHA-256", + "content": "648ac5de6cf10b58c0aa1357d7e312c4fc5cceea5d62ded7fc9f587573cd9cbb" + } + ], + "purl": "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1.redhat-00004", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/transaction/api/main/jakarta.transaction-api-2.0.1.redhat-00004.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2.redhat-00006", + "group": "jakarta.validation", + "name": "jakarta.validation-api", + "version": "3.0.2.redhat-00006", + "hashes": [ + { + "alg": "SHA-256", + "content": "7d5fbb390fe83c7c4e1f9e4777a1dab1b4741d0e468749cf3c3d40ca9bc06c83" + } + ], + "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2.redhat-00006", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/validation/api/main/jakarta.validation-api-3.0.2.redhat-00006.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.websocket/jakarta.websocket-api@2.1.1.redhat-00001", + "group": "jakarta.websocket", + "name": "jakarta.websocket-api", + "version": "2.1.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "cf4ab968aa3a88e560d2e4607c406e5567a6812cfb7876da494f0f8cba2232b3" + } + ], + "purl": "pkg:maven/jakarta.websocket/jakarta.websocket-api@2.1.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/websocket/api/main/jakarta.websocket-api-2.1.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.websocket/jakarta.websocket-client-api@2.1.1.redhat-00001", + "group": "jakarta.websocket", + "name": "jakarta.websocket-client-api", + "version": "2.1.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5e9f22d701728094a8b3ce3831539d405ca5763ca27863aa2a1d8ac10ae021d6" + } + ], + "purl": "pkg:maven/jakarta.websocket/jakarta.websocket-client-api@2.1.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/websocket/api/main/jakarta.websocket-client-api-2.1.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0.redhat-00003", + "group": "jakarta.ws.rs", + "name": "jakarta.ws.rs-api", + "version": "3.1.0.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "e22bb746e06131eca6ae1ff06e9c3b6443c94d17c7d361b053a54ff850e80d3b" + } + ], + "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/ws/rs/api/main/jakarta.ws.rs-api-3.1.0.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4.redhat-00001", + "group": "jakarta.xml.bind", + "name": "jakarta.xml.bind-api", + "version": "4.0.4.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "23dfd839410429bc6a2bdb16f9134dce54d7ee06f4d74a81f44e8bb199d0c769" + } + ], + "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/xml/bind/api/main/jakarta.xml.bind-api-4.0.4.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/jboss.jaxbintros/jboss-jaxb-intros@2.0.1.redhat-00001", + "group": "jboss.jaxbintros", + "name": "jboss-jaxb-intros", + "version": "2.0.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "502eed718efecf61aa05b43174cfdffedcdbd217019e6afa015b301f58bb112d" + } + ], + "purl": "pkg:maven/jboss.jaxbintros/jboss-jaxb-intros@2.0.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/jaxbintros/main/jboss-jaxb-intros-2.0.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/joda-time/joda-time@2.12.7.redhat-00002", + "group": "joda-time", + "name": "joda-time", + "version": "2.12.7.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "d4a6ab0835c1302941a04c669bb4da749194b990087145c6a93b0b14ea9dfc04" + } + ], + "purl": "pkg:maven/joda-time/joda-time@2.12.7.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/joda/time/main/joda-time-2.12.7.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.14.18.redhat-00001", + "group": "net.bytebuddy", + "name": "byte-buddy", + "version": "1.14.18.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "488c6319a6eec9552cf5da9c557b80069a04aef3fa2949745ec360fadfa72cdf" + } + ], + "purl": "pkg:maven/net.bytebuddy/byte-buddy@1.14.18.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/net/bytebuddy/main/byte-buddy-1.14.18.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.jcip/jcip-annotations@1.0.0.redhat-00009", + "group": "net.jcip", + "name": "jcip-annotations", + "version": "1.0.0.redhat-00009", + "hashes": [ + { + "alg": "SHA-256", + "content": "ca216108274496bc6a97e42917173a9ab827daa47e2f19c6f5b86bf277e57498" + } + ], + "purl": "pkg:maven/net.jcip/jcip-annotations@1.0.0.redhat-00009", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/net/jcip/main/jcip-annotations-1.0.0.redhat-00009.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/net.shibboleth.utilities/java-support@8.0.0.redhat-00001", + "group": "net.shibboleth.utilities", + "name": "java-support", + "version": "8.0.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "845c833e2305c54381906c0157c86911b7076deb8c809b4f3dd80091f3aa18a0" + } + ], + "purl": "pkg:maven/net.shibboleth.utilities/java-support@8.0.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/java-support-8.0.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.aesh/aesh@2.4.0.redhat-00001", + "group": "org.aesh", + "name": "aesh", + "version": "2.4.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a2bcaad3466ec058becf7c41fa776553b42dd13721cd65fd5b106360b39eca9f" + } + ], + "purl": "pkg:maven/org.aesh/aesh@2.4.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/aesh/main/aesh-2.4.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.aesh/aesh-extensions@1.8.0.redhat-00001", + "group": "org.aesh", + "name": "aesh-extensions", + "version": "1.8.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "982918e1e1b2b44b98938eb079770a4c64dccfc0a3336d0410ccffe9a703ad47" + } + ], + "purl": "pkg:maven/org.aesh/aesh-extensions@1.8.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/aesh/main/aesh-extensions-1.8.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.aesh/readline@2.4.0.redhat-00002", + "group": "org.aesh", + "name": "readline", + "version": "2.4.0.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "4ce2b39073ce6794af527c3bf447fb189dbb3243cc4131e8d6eaddcff91198ce" + } + ], + "purl": "pkg:maven/org.aesh/readline@2.4.0.redhat-00002", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/org.aesh/terminal-api@2.4.0.redhat-00002", + "group": "org.aesh", + "name": "terminal-api", + "version": "2.4.0.redhat-00002", + "purl": "pkg:maven/org.aesh/terminal-api@2.4.0.redhat-00002", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/aesh/main/readline-2.4.0.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.antlr/antlr4@4.13.2.redhat-00001", + "group": "org.antlr", + "name": "antlr4", + "version": "4.13.2.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3cbe624f9ca89264516083a5614df99bb3548080cf39e653ec2fe49a6709a29d" + } + ], + "purl": "pkg:maven/org.antlr/antlr4@4.13.2.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/antlr/main/antlr4-4.13.2.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2.redhat-00001", + "group": "org.antlr", + "name": "antlr4-runtime", + "version": "4.13.2.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2edb70c1d32f3a76ecf5655f1348e2d12ce07c190c98cf1a1eb8c43e1c2d97b9" + } + ], + "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/antlr/main/antlr4-runtime-4.13.2.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/activemq-artemis-native@2.0.0.redhat-00005", + "group": "org.apache.activemq", + "name": "activemq-artemis-native", + "version": "2.0.0.redhat-00005", + "hashes": [ + { + "alg": "SHA-256", + "content": "2906b9cef57c830894b1615301e75c15e2edc905bc256c322cffa55f3b8136a4" + } + ], + "purl": "pkg:maven/org.apache.activemq/activemq-artemis-native@2.0.0.redhat-00005", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/journal/main/activemq-artemis-native-2.0.0.redhat-00005.jar" + }, + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/journal/main" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-cli@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-cli", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "251280f311b2473723f326fd9bc1cea1c2195ed9233659f84903e97da7fc63f9" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-cli@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/main/artemis-cli-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-commons@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-commons", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "2be2c1fd66ecf3a9194206933731fbfae49b45f9c9eb29ee67d90852b39e16ab" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-commons@2.40.0.redhat-00015", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@1.1.6.redhat-00003", + "group": "jakarta.json", + "name": "jakarta.json-api", + "version": "1.1.6.redhat-00003", + "purl": "pkg:maven/jakarta.json/jakarta.json-api@1.1.6.redhat-00003", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.johnzon/johnzon-core@1.2.21", + "group": "org.apache.johnzon", + "name": "johnzon-core", + "version": "1.2.21", + "purl": "pkg:maven/org.apache.johnzon/johnzon-core@1.2.21", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/commons/main/artemis-commons-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-core-client@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-core-client", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "f24156e3702900842e53d0e766335eda6f5add000d872bba1a213f1350dabbca" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-core-client@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-core-client-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-dto@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-dto", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "f667fa6b31e838522111c786bf64ddadf9a6a673a4bece3e83ba4aa77269ab57" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-dto@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/main/artemis-dto-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-hornetq-protocol@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-hornetq-protocol", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "bc95917e0bd96e0d446f07b44007b9ff42f4d686e77ef7d6f739eee69656a9d4" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-hornetq-protocol@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/artemis-hornetq-protocol-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-hqclient-protocol@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-hqclient-protocol", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "c4df674f13e5322db0352b8c156a98007b2bb30fbf3d09240427722d63ebbbe5" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-hqclient-protocol@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-hqclient-protocol-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-jakarta-client@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-jakarta-client", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "d297ced75997639ff55afd8e5f44ae9810b1d4bd49c916afbae18dde2954fbd6" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-jakarta-client@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-jakarta-client-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-jakarta-ra@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-jakarta-ra", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "07b2c820300a6bb4a047aee5560cf912e6d48d9c0cd479b2f8fed26a9f3f736c" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-jakarta-ra@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/ra/main/artemis-jakarta-ra-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-jakarta-server@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-jakarta-server", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "4a57e4723905f8cbea00fcd0ebbde83aeb26a862cb44c37781f7206200bee857" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-jakarta-server@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/main/artemis-jakarta-server-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-jakarta-service-extensions@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-jakarta-service-extensions", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "f25c523caa93df3c798a885328f54e302421c10637ec73d76a3d544244338b37" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-jakarta-service-extensions@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/artemis-jakarta-service-extensions-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-jdbc-store@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-jdbc-store", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "0fdb6d2ef62a37ba96dadf02246e7c9fe3f3126268fa6b4b836f63b4d76a5e48" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-jdbc-store@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/main/artemis-jdbc-store-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-journal@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-journal", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "c0b8956232a3b24f53209da268a08b58585da6cda7bed9218a82eb4a349f0038" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-journal@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/journal/main/artemis-journal-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-selector@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-selector", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "715723f7486d10bb9bf2a2cb6be34de7fcb5dd3afb23df82718c0cbf50cc3df2" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-selector@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-selector-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0.redhat-00015", + "group": "org.apache.activemq", + "name": "artemis-server", + "version": "2.40.0.redhat-00015", + "hashes": [ + { + "alg": "SHA-256", + "content": "1f6f902556a1325f8d61b3c6aa7056fd848b977cd84afc455cb25aff7673b472" + } + ], + "purl": "pkg:maven/org.apache.activemq/artemis-server@2.40.0.redhat-00015", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/activemq/artemis/main/artemis-server-2.40.0.redhat-00015.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.18.0.redhat-00003", + "group": "org.apache.commons", + "name": "commons-lang3", + "version": "3.18.0.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "0e21a872a16441fc9b841fd1f105d1eded10ed5e7ae71f8fc77b8f63ce704180" + } + ], + "purl": "pkg:maven/org.apache.commons/commons-lang3@3.18.0.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/commons/lang3/main/commons-lang3-3.18.0.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-core@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-core", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b2f86b8a059403e6a510e95630b7815c7ad86f118e991ca51aa42ab7d20b45ff" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-core@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/main/cxf-core-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-bindings-coloc", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7c54dc16dcfa7c3371b960589ba56ff0d01f05d98673826dc07451bc0534a24b" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-coloc-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-bindings-soap", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "85a1fc7e7f868cc89457418de2b7bffd0665b648f3998fb102a0bb9a3189bd3e" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-soap-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-bindings-xml", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f168ac020419742b889d46f5a9ff5352b4974e4471c2b5611b245116215c59f5" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-xml-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-databinding-aegis", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "30534734973c890e7698015074a5ae4e9745e249be5c220a514bef9c19a54779" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-databinding-aegis-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-databinding-jaxb", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "fe87b5079a1baaabbf8beaeeb41b757172ad1a247b66b861d207bbfc6e38a036" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-databinding-jaxb-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-features-clustering@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-features-clustering", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d537d6e02a972a19ed4d5e4f31abb7dbcf2503e4a5a286edffc07cf0d7f1909b" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-features-clustering@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-features-clustering-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-features-logging@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-features-logging", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9cbf46519181a0498ebbc23160019f1db04be100b1722a169de16d42142ce874" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-features-logging@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/main/cxf-rt-features-logging-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-features-throttling@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-features-throttling", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "fbdaff63dbc012d71cb90fc85f3a2207c1791b287f6acff9a28b27719cc8f91e" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-features-throttling@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-features-throttling-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-frontend-jaxws", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "85d2fce2d5d5ebc7536897e3326c722f407ad4f864e7c8963f79895ac986f4b3" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-frontend-jaxws-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-frontend-simple", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "91d2f8b63ed9535a5fedac8f8b1b17bfda27d29bffc41602502b5e67a9692dd4" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-frontend-simple-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-management@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-management", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "cc764181e908509be76584725642cddc79e92bdfdc71beddc8c75b7b5e06c639" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-management@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-management-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-security@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-security", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9f7b77265fcec5ca945d85a832a7a0f2894adb65e5f5125103d0f2bc49d88793" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-security@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-security-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-security-saml", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f675e88159b6b9725424f7a8cd396b03d25f94d117006ee69bf7c56f6711e00e" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-security-saml-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-transports-http", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d628e3513cb8d6602abeb659a0a541a87fa75a82b354631dd502d68530a1f45c" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-http-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-transports-http-hc@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-transports-http-hc", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "8024b63bb55aa33d4246cce487362d133269f5ab449ffa83885686b654505a5a" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-transports-http-hc@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-http-hc-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-transports-jms@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-transports-jms", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2f8177aa7aafa450fbc61416361ea1b55e90327fcca25eaae303f0da6f821a45" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-transports-jms@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-jms-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-transports-local@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-transports-local", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1c006da49e2bb5844b4235447249ea92ff7a9735fe9523277dbc0cb70864fd0e" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-transports-local@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-local-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-ws-addr", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "75ccc670ac8b1e10c024159521467608f69bb744ac6af7f6de2212a9e3ad2089" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-addr-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-ws-mex", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1fe60353186a77135ae01f02f9859df1eb82cf1c86e11be255feec3d7e318871" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-mex-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-ws-policy", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c4a882b3860b625a49e8d9d6f908cde64f7b4e4c0c9eb853f5ac59eeb0fe44f5" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-policy-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-ws-rm", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "89e53e25ef83a11253a2c3b8f424339bbfd66ab5a5de0ad44961d7ba8abde87a" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-rm-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-security@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-ws-security", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "00e0f23d93d0c3ce0f226957bd7d02c6599069823fb1d7051d7611ee0a6072f7" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-ws-security@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/ws-security/main/cxf-rt-ws-security-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-rt-wsdl", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ef9f18207a9fc438c82527b7720645e7589be825d1e07d9a3adde87607b704ad" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-wsdl-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-common@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-tools-common", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "96a3efb3a3d9b4034882451e8d29c536f34ccf14f701af0284fba78ed16e8ec5" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-tools-common@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-common-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-tools-java2ws", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9284efecb1bfe4a7996caf4e846c999ca7a9a5a55497db253dc027429b2008ed" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-java2ws-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-tools-validator", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4ab167c3df3c8040f2b2787593b21ea8c449b659e73e44fd077554e5b0a0f9d1" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-tools-validator@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-validator-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-tools-wsdlto-core", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "05bd2cf51157c10fcadf6ab6d3109b0dfee8f8bdcd8ba2f7eff6c2ab69696837" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-core-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-tools-wsdlto-databinding-jaxb", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "10db5afab13418b659ab3e222b380a77bbfbf203d6d27ba6030fb102326425c0" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-databinding-jaxb-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@4.0.10.redhat-00001", + "group": "org.apache.cxf", + "name": "cxf-tools-wsdlto-frontend-jaxws", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d4ff8ce9ebedfd7aaee41eaca0b59adeada235fcd9cb2ddd8b8f02508eed1008" + } + ], + "purl": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-frontend-jaxws-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf.services.sts/cxf-services-sts-core@4.0.10.redhat-00001", + "group": "org.apache.cxf.services.sts", + "name": "cxf-services-sts-core", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d2112e04925fced222e5ca9483d1ef2fbe5688e857d41a8cc05097db86bf3c53" + } + ], + "purl": "pkg:maven/org.apache.cxf.services.sts/cxf-services-sts-core@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/services-sts/main/cxf-services-sts-core-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@4.0.10.redhat-00001", + "group": "org.apache.cxf.services.ws-discovery", + "name": "cxf-services-ws-discovery-api", + "version": "4.0.10.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "862aa073550d1230fde35f1893d0361ed3e6a317668eb0cf423ab9ceec9f847f" + } + ], + "purl": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@4.0.10.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-services-ws-discovery-api-4.0.10.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@4.1.0.redhat-00001", + "group": "org.apache.cxf.xjc-utils", + "name": "cxf-xjc-runtime", + "version": "4.1.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "e71c55eff42adf5cfebc7f4fcef068ce2522e42f34f7ed65aed21e4e318a40df" + } + ], + "purl": "pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@4.1.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-runtime-4.1.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@4.1.0.redhat-00001", + "group": "org.apache.cxf.xjcplugins", + "name": "cxf-xjc-boolean", + "version": "4.1.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a259d30a398b9c8b276427664542d5d82c6aecc505101186f0f928384b0075f9" + } + ], + "purl": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@4.1.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-boolean-4.1.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug986@4.1.0.redhat-00001", + "group": "org.apache.cxf.xjcplugins", + "name": "cxf-xjc-bug986", + "version": "4.1.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "0f3a5604b36c5f08682a601d37da9c430516f7006f235bc9c0d89c3c648d3cd4" + } + ], + "purl": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug986@4.1.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-bug986-4.1.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@4.1.0.redhat-00001", + "group": "org.apache.cxf.xjcplugins", + "name": "cxf-xjc-dv", + "version": "4.1.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "252555cf11f0c9d75a1a18b334d50c44423d1653d236bed72fad9a7f50d022cb" + } + ], + "purl": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@4.1.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-dv-4.1.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@4.1.0.redhat-00001", + "group": "org.apache.cxf.xjcplugins", + "name": "cxf-xjc-ts", + "version": "4.1.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "80fa2f5a51f62b6c4d3584a19aeb6c58f7120ce7c334e8ff281572739fea2f81" + } + ], + "purl": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@4.1.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-ts-4.1.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5.redhat-00006", + "group": "org.apache.httpcomponents", + "name": "httpasyncclient", + "version": "4.1.5.redhat-00006", + "hashes": [ + { + "alg": "SHA-256", + "content": "f8ebb1c0ef6306aeb997b4ed490678df02fe3d91131bdc317df474b4d31ffba4" + } + ], + "purl": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5.redhat-00006", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/httpcomponents/main/httpasyncclient-4.1.5.redhat-00006.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14.redhat-00016", + "group": "org.apache.httpcomponents", + "name": "httpclient", + "version": "4.5.14.redhat-00016", + "hashes": [ + { + "alg": "SHA-256", + "content": "24f0ad1e02472032d87b73060fe311ce32d365dbb57b059d0c5b755d4e06dcf6" + } + ], + "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14.redhat-00016", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/httpcomponents/core/main/httpclient-4.5.14.redhat-00016.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16.redhat-00011", + "group": "org.apache.httpcomponents", + "name": "httpcore", + "version": "4.4.16.redhat-00011", + "hashes": [ + { + "alg": "SHA-256", + "content": "550051fb71159930a5d62477dab4cc4575900a27d7c78e37ec6e894d79292f79" + } + ], + "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16.redhat-00011", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/httpcomponents/core/main/httpcore-4.4.16.redhat-00011.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16.redhat-00011", + "group": "org.apache.httpcomponents", + "name": "httpcore-nio", + "version": "4.4.16.redhat-00011", + "hashes": [ + { + "alg": "SHA-256", + "content": "dfb0a3529cb5afeac54d0e01f129d19cdd8fdc52103a036b63d6d37e7a8c8e25" + } + ], + "purl": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16.redhat-00011", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/httpcomponents/main/httpcore-nio-4.4.16.redhat-00011.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14.redhat-00016", + "group": "org.apache.httpcomponents", + "name": "httpmime", + "version": "4.5.14.redhat-00016", + "hashes": [ + { + "alg": "SHA-256", + "content": "6cf061b4a900e61f585aa751156784332697b3da79ebec7f6939a0996a8369a3" + } + ], + "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14.redhat-00016", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/httpcomponents/main/httpmime-4.5.14.redhat-00016.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.12.redhat-00001", + "group": "org.apache.james", + "name": "apache-mime4j-core", + "version": "0.8.12.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "69823026dd16c7017fc311575106728828fa4413579d1f567ffc633d81e7c6c1" + } + ], + "purl": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.12.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-core-0.8.12.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.12.redhat-00001", + "group": "org.apache.james", + "name": "apache-mime4j-dom", + "version": "0.8.12.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "64a017c731e2ae93e5c6fabac4f51f1da9c0872ab3b29344018c80071f542918" + } + ], + "purl": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.12.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-dom-0.8.12.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.12.redhat-00001", + "group": "org.apache.james", + "name": "apache-mime4j-storage", + "version": "0.8.12.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1d3db8ef19734d4263f56d4cbebb045f5af6d95bcccbc7f8bb3bcf03591fdbb6" + } + ], + "purl": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.12.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-storage-0.8.12.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1.redhat-00002", + "group": "org.apache.logging.log4j", + "name": "log4j-api", + "version": "2.23.1.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "ac20f30acd881cffc7e1c519d0dceb18fcfe123842d8b81030c1ffec47c46be2" + } + ], + "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/logging/log4j/api/main/log4j-api-2.23.1.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.lucene/lucene-analysis-common@9.11.1.redhat-00001", + "group": "org.apache.lucene", + "name": "lucene-analysis-common", + "version": "9.11.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b300f6a0ed75405c6ac9e292d3950b789bb514868524a73095f4f651af12883c" + } + ], + "purl": "pkg:maven/org.apache.lucene/lucene-analysis-common@9.11.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/lucene/main/lucene-analysis-common-9.11.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.lucene/lucene-core@9.11.1.redhat-00001", + "group": "org.apache.lucene", + "name": "lucene-core", + "version": "9.11.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f70177b574d1a30fc80f266338ecfbc77317c68b323c3a7d61e5b1cb2b30d008" + } + ], + "purl": "pkg:maven/org.apache.lucene/lucene-core@9.11.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/lucene/main/lucene-core-9.11.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.lucene/lucene-facet@9.11.1.redhat-00001", + "group": "org.apache.lucene", + "name": "lucene-facet", + "version": "9.11.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "8432ec9f7ab20c3e843ea3f8aadc8da4cf29e099319e62375e8d213597d30fb6" + } + ], + "purl": "pkg:maven/org.apache.lucene/lucene-facet@9.11.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/lucene/main/lucene-facet-9.11.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.lucene/lucene-join@9.11.1.redhat-00001", + "group": "org.apache.lucene", + "name": "lucene-join", + "version": "9.11.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2903d05178e626b3e344a32c27bb08fe844796d41f4e0a1bf66dfc71da5215ee" + } + ], + "purl": "pkg:maven/org.apache.lucene/lucene-join@9.11.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/lucene/main/lucene-join-9.11.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.lucene/lucene-queries@9.11.1.redhat-00001", + "group": "org.apache.lucene", + "name": "lucene-queries", + "version": "9.11.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a1f059b6ab418184800bafddc82b658ee5fafde478704f74a2060ce495cc0494" + } + ], + "purl": "pkg:maven/org.apache.lucene/lucene-queries@9.11.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/lucene/main/lucene-queries-9.11.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.lucene/lucene-queryparser@9.11.1.redhat-00001", + "group": "org.apache.lucene", + "name": "lucene-queryparser", + "version": "9.11.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3b7a23aba9a7b50ffc40a518e83672baa37a28db145a9cf20b26a67c0e26b4d3" + } + ], + "purl": "pkg:maven/org.apache.lucene/lucene-queryparser@9.11.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/lucene/main/lucene-queryparser-9.11.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.neethi/neethi@3.2.1.redhat-00002", + "group": "org.apache.neethi", + "name": "neethi", + "version": "3.2.1.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "15a98bec35ee8aa38676acb5e0df30d7bbb6624aa42d252d8f97c71b93a84793" + } + ], + "purl": "pkg:maven/org.apache.neethi/neethi@3.2.1.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/neethi/main/neethi-3.2.1.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.santuario/xmlsec@3.0.5.redhat-00001", + "group": "org.apache.santuario", + "name": "xmlsec", + "version": "3.0.5.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "654965a33f8d0d8e8fb4c4fab2e627b16cfd79e36f5266eef5dbf84b07168fa5" + } + ], + "purl": "pkg:maven/org.apache.santuario/xmlsec@3.0.5.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/santuario/xmlsec/main/xmlsec-3.0.5.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.sshd/sshd-common@2.14.0.redhat-00003", + "group": "org.apache.sshd", + "name": "sshd-common", + "version": "2.14.0.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "3eabe39c7ee01f9b7939010d7ffc0b60fdc21131d35cc28bcb0430441b55099c" + } + ], + "purl": "pkg:maven/org.apache.sshd/sshd-common@2.14.0.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/sshd/main/sshd-common-2.14.0.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.sshd/sshd-core@2.14.0.redhat-00003", + "group": "org.apache.sshd", + "name": "sshd-core", + "version": "2.14.0.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "70437e9f95b169f9e75390c9bb48e7c2e8b416767c4d78e4005b9985e11ef60d" + } + ], + "purl": "pkg:maven/org.apache.sshd/sshd-core@2.14.0.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/sshd/main/sshd-core-2.14.0.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.velocity/velocity-engine-core@2.3.0.redhat-00010", + "group": "org.apache.velocity", + "name": "velocity-engine-core", + "version": "2.3.0.redhat-00010", + "hashes": [ + { + "alg": "SHA-256", + "content": "2358d554bda9ec60b7326c7e3e8edff24aee502176ad7c4374b21af16566e30c" + } + ], + "purl": "pkg:maven/org.apache.velocity/velocity-engine-core@2.3.0.redhat-00010", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/commons-io/commons-io@2.8.0.redhat-00001", + "group": "commons-io", + "name": "commons-io", + "version": "2.8.0.redhat-00001", + "purl": "pkg:maven/commons-io/commons-io@2.8.0.redhat-00001", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/velocity/main/velocity-engine-core-2.3.0.redhat-00010.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.0.redhat-00002", + "group": "org.apache.ws.xmlschema", + "name": "xmlschema-core", + "version": "2.3.0.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "ebab8b7d84002ec09c4ff0f2d6f41400f8198322cc09dd93ffae2d40814bc1e5" + } + ], + "purl": "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.0.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/ws/xmlschema/main/xmlschema-core-2.3.0.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.wss4j/wss4j-bindings@3.0.4.redhat-00002", + "group": "org.apache.wss4j", + "name": "wss4j-bindings", + "version": "3.0.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "eca226319b10c94b9a4921d2871af4c77a8188b51d8615e24b206b4a10861e2b" + } + ], + "purl": "pkg:maven/org.apache.wss4j/wss4j-bindings@3.0.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/ws/security/main/wss4j-bindings-3.0.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.wss4j/wss4j-policy@3.0.4.redhat-00002", + "group": "org.apache.wss4j", + "name": "wss4j-policy", + "version": "3.0.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "816dd04529216eb07f4efecd0bd7f046a43285de3a8e56684312d85d3000f465" + } + ], + "purl": "pkg:maven/org.apache.wss4j/wss4j-policy@3.0.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/ws/security/main/wss4j-policy-3.0.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@3.0.4.redhat-00002", + "group": "org.apache.wss4j", + "name": "wss4j-ws-security-common", + "version": "3.0.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "fdf148774e8c4d1b00ea7369c68d0cc1fe4a9681ed19dae32f6553cbb6502ff5" + } + ], + "purl": "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@3.0.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-common-3.0.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.4.redhat-00002", + "group": "org.apache.wss4j", + "name": "wss4j-ws-security-dom", + "version": "3.0.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "ed46c7a0160f16653c867bea3e0886ff256367b74f130d2c5926ed672fa78f4c" + } + ], + "purl": "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-dom-3.0.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@3.0.4.redhat-00002", + "group": "org.apache.wss4j", + "name": "wss4j-ws-security-policy-stax", + "version": "3.0.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "98ac56dc975e600f70ccd8661170da2b984944a76307f31f4bb1f62f34511754" + } + ], + "purl": "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@3.0.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-policy-stax-3.0.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@3.0.4.redhat-00002", + "group": "org.apache.wss4j", + "name": "wss4j-ws-security-stax", + "version": "3.0.4.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "a989c772b466f12bfd11eae51e87a85b49ded3244ecef2abaef40ec47a388521" + } + ], + "purl": "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@3.0.4.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-stax-3.0.4.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bitbucket.b_c/jose4j@0.9.6.redhat-00002", + "group": "org.bitbucket.b_c", + "name": "jose4j", + "version": "0.9.6.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "73bc9502431ca312739e0525e80e61deb49fc9e2d6ef1843b6c662d02a18e28b" + } + ], + "purl": "pkg:maven/org.bitbucket.b_c/jose4j@0.9.6.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/bitbucket/jose4j/main/jose4j-0.9.6.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle/bcjmail-jdk18on@1.84.0.redhat-00001", + "group": "org.bouncycastle", + "name": "bcjmail-jdk18on", + "version": "1.84.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "49c13efcfe355622370dbfcb34be75ae8b69b151b55bd6d54afc514cdef79e06" + } + ], + "purl": "pkg:maven/org.bouncycastle/bcjmail-jdk18on@1.84.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/bouncycastle/bcmail/main/bcjmail-jdk18on-1.84.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.84.0.redhat-00001", + "group": "org.bouncycastle", + "name": "bcpg-jdk18on", + "version": "1.84.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b59323d7b01344a6bb922989eb0b305e336e59f8f0c244663296907b3b9a3d8a" + } + ], + "purl": "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.84.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/bouncycastle/bcpg/main/bcpg-jdk18on-1.84.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.84.0.redhat-00001", + "group": "org.bouncycastle", + "name": "bcpkix-jdk18on", + "version": "1.84.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "86986997b02ba3f0afce50674f203a7d52289f9513c636dbe63ac54d898be1d1" + } + ], + "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.84.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/bouncycastle/bcpkix/main/bcpkix-jdk18on-1.84.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.84.0.redhat-00001", + "group": "org.bouncycastle", + "name": "bcprov-jdk18on", + "version": "1.84.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6b09d7a63c9e932f052e39598d8a05cb57efb93e28bf5b0446dba8a84a183318" + } + ], + "purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.84.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/bouncycastle/bcprov/main/bcprov-jdk18on-1.84.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.84.0.redhat-00001", + "group": "org.bouncycastle", + "name": "bcutil-jdk18on", + "version": "1.84.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4c532cf510cb9f8444e938d4ca4367608641651cf93731e325c9efeb1bc21576" + } + ], + "purl": "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.84.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/bouncycastle/bcutil/main/bcutil-jdk18on-1.84.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2.redhat-00003", + "group": "org.codehaus.woodstox", + "name": "stax2-api", + "version": "4.2.2.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "29cd62bbfcb390974c79f8861a5c646f9c37481b854c74020b901cafc4d3abdf" + } + ], + "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/codehaus/woodstox/main/stax2-api-4.2.2.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.cryptacular/cryptacular@1.2.5.redhat-00001", + "group": "org.cryptacular", + "name": "cryptacular", + "version": "1.2.5.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c00e4b180f2e2612df62db9c952d9ba61e6b26a098e22333750543a7752dce98" + } + ], + "purl": "pkg:maven/org.cryptacular/cryptacular@1.2.5.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/cryptacular-1.2.5.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse/yasson@3.0.4.redhat-00007", + "group": "org.eclipse", + "name": "yasson", + "version": "3.0.4.redhat-00007", + "hashes": [ + { + "alg": "SHA-256", + "content": "e6a35d9920755e879e8c092d8158cb472ce9d7162be9d2af6685898da7f5aaa8" + } + ], + "purl": "pkg:maven/org.eclipse/yasson@3.0.4.redhat-00007", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/eclipse/yasson/main/yasson-3.0.4.redhat-00007.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3.redhat-00001", + "group": "org.eclipse.angus", + "name": "angus-activation", + "version": "2.0.3.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "49dde7498bf85bd49ed04fb1bede21390e4a9bad1e7e2153efe915e1b7974e45" + } + ], + "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/eclipse/angus/activation/main/angus-activation-2.0.3.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5.redhat-00001", + "group": "org.eclipse.angus", + "name": "angus-mail", + "version": "2.0.5.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "cbd08e7ebd3179472a90f56b2534c2a4c042a7e3abd4f6491584220eea9890fc" + } + ], + "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5.redhat-00001", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.angus/angus-core@2.0.5.redhat-00001", + "group": "org.eclipse.angus", + "name": "angus-core", + "version": "2.0.5.redhat-00001", + "purl": "pkg:maven/org.eclipse.angus/angus-core@2.0.5.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.angus/imap@2.0.5.redhat-00001", + "group": "org.eclipse.angus", + "name": "imap", + "version": "2.0.5.redhat-00001", + "purl": "pkg:maven/org.eclipse.angus/imap@2.0.5.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.angus/logging-mailhandler@2.0.5.redhat-00001", + "group": "org.eclipse.angus", + "name": "logging-mailhandler", + "version": "2.0.5.redhat-00001", + "purl": "pkg:maven/org.eclipse.angus/logging-mailhandler@2.0.5.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.angus/pop3@2.0.5.redhat-00001", + "group": "org.eclipse.angus", + "name": "pop3", + "version": "2.0.5.redhat-00001", + "purl": "pkg:maven/org.eclipse.angus/pop3@2.0.5.redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.angus/smtp@2.0.5.redhat-00001", + "group": "org.eclipse.angus", + "name": "smtp", + "version": "2.0.5.redhat-00001", + "purl": "pkg:maven/org.eclipse.angus/smtp@2.0.5.redhat-00001", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/eclipse/angus/mail/main/angus-mail-2.0.5.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.jdt/ecj@3.33.0.redhat-00001", + "group": "org.eclipse.jdt", + "name": "ecj", + "version": "3.33.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4cd3d7dc3178004e47f85d0d15bd40ed0d57438d0430bfcb510bdd3b1ab5e8c9" + } + ], + "purl": "pkg:maven/org.eclipse.jdt/ecj@3.33.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/eclipse/jdt/ecj/main/ecj-3.33.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.1.202505221210-r-redhat-00002", + "group": "org.eclipse.jgit", + "name": "org.eclipse.jgit", + "version": "6.10.1.202505221210-r-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "92735fa2b644abbffe7bb32fd45aacea3afaf9dd257475dade9a195067cb77d6" + } + ], + "purl": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.1.202505221210-r-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/eclipse/jgit/main/org.eclipse.jgit-6.10.1.202505221210-r-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.10.1.202505221210-r-redhat-00002", + "group": "org.eclipse.jgit", + "name": "org.eclipse.jgit.ssh.apache", + "version": "6.10.1.202505221210-r-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "293572cf651b5f870d63a336452cfc74c597ae178431d1fd03519cd845098591" + } + ], + "purl": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.10.1.202505221210-r-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/eclipse/jgit/main/org.eclipse.jgit.ssh.apache-6.10.1.202505221210-r-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.eclipse.parsson/parsson@1.1.7.redhat-00003", + "group": "org.eclipse.parsson", + "name": "parsson", + "version": "1.1.7.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "7a86b7281e469ae237829b1cf9be0fae5f4613622ba503fb8edb061a906aecb6" + } + ], + "purl": "pkg:maven/org.eclipse.parsson/parsson@1.1.7.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/eclipse/parsson/main/parsson-1.1.7.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client@8.15.4.redhat-00003", + "group": "org.elasticsearch.client", + "name": "elasticsearch-rest-client", + "version": "8.15.4.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "56be4761e16fe615a60db17924047524965d705bc412d410eba888255fe38f95" + } + ], + "purl": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client@8.15.4.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/elasticsearch/client/rest-client/main/elasticsearch-rest-client-8.15.4.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client-sniffer@8.15.4.redhat-00003", + "group": "org.elasticsearch.client", + "name": "elasticsearch-rest-client-sniffer", + "version": "8.15.4.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "aa84cab64c13900866b69e1a561c16cb3e8f243774d32c8c612bbaafc0097543" + } + ], + "purl": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client-sniffer@8.15.4.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/elasticsearch/client/rest-client/main/elasticsearch-rest-client-sniffer-8.15.4.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@2.4.1.redhat-00001", + "group": "org.fusesource.jansi", + "name": "jansi", + "version": "2.4.1.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6172bc34ca74c17e0121e0a8d7deb8f5aaa9a8ea8d3000c35937b3d1ffa5e19f" + } + ], + "purl": "pkg:maven/org.fusesource.jansi/jansi@2.4.1.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/fusesource/jansi/main/jansi-2.4.1.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/jakarta.enterprise.concurrent@3.0.2.redhat-00001", + "group": "org.glassfish", + "name": "jakarta.enterprise.concurrent", + "version": "3.0.2.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "499efafc882c3b49c4b6c6100cb35189da4913b458bee5c13ad0e4aa504c6afc" + } + ], + "purl": "pkg:maven/org.glassfish/jakarta.enterprise.concurrent@3.0.2.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/jakarta.enterprise.concurrent-3.0.2.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/jakarta.faces@4.0.11.redhat-00001", + "group": "org.glassfish", + "name": "jakarta.faces", + "version": "4.0.11.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "85a45dde5dd10bdc37ec68a90b7e3d68d051e21ee4c96310fc719d284ddb86ad" + } + ], + "purl": "pkg:maven/org.glassfish/jakarta.faces@4.0.11.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/faces/impl/main/jakarta.faces-4.0.11.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish/jakarta.json@1.1.6.redhat-00003", + "group": "org.glassfish", + "name": "jakarta.json", + "version": "1.1.6.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "24cf7c3187df26c789abb70f0ca7b8e80f23df6a8a995c847bdc24b53f523429" + } + ], + "purl": "pkg:maven/org.glassfish/jakarta.json@1.1.6.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/internal/javax/json/api/ee8/main/jakarta.json-1.1.6.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0.redhat-00001", + "group": "org.glassfish.expressly", + "name": "expressly", + "version": "5.0.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "937f3ea2f7f7803729cefecf5216a23c20db588f50e70e1b2ed67719d459de18" + } + ], + "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/expressly/main/expressly-5.0.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/codemodel@4.0.6.redhat-00001", + "group": "org.glassfish.jaxb", + "name": "codemodel", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d65a3ada70f260fc1c8ba7d831d74f080dfa926317e10d859461f65aac38fead" + } + ], + "purl": "pkg:maven/org.glassfish.jaxb/codemodel@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/codemodel-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6.redhat-00001", + "group": "org.glassfish.jaxb", + "name": "jaxb-core", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ac4774b48c19ad0486bc22ef982c6bb4d70216d7d84fd05391abf401105415ac" + } + ], + "purl": "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/jaxb-core-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-jxc@4.0.6.redhat-00001", + "group": "org.glassfish.jaxb", + "name": "jaxb-jxc", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "aedcc33c1316f9511dd87ea49b02c152387f74657f2b92a54f0a6b7b2d2f0929" + } + ], + "purl": "pkg:maven/org.glassfish.jaxb/jaxb-jxc@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/jaxb-jxc-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6.redhat-00001", + "group": "org.glassfish.jaxb", + "name": "jaxb-runtime", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2b6700c5f2d18a507a9ca37cb1039e0bdac3be9249348bea9be7c8c571ccd411" + } + ], + "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/jaxb-runtime-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-xjc@4.0.6.redhat-00001", + "group": "org.glassfish.jaxb", + "name": "jaxb-xjc", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d3c5aa362e5523173431d1edd29a14b409118236c9a6d176e28cb018a68c15ec" + } + ], + "purl": "pkg:maven/org.glassfish.jaxb/jaxb-xjc@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/jaxb-xjc-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@4.0.6.redhat-00001", + "group": "org.glassfish.jaxb", + "name": "txw2", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "20fc9bb54b9d5101065a42c2f7ab6978992f0bc1c79244d6460b49d4bca7f781" + } + ], + "purl": "pkg:maven/org.glassfish.jaxb/txw2@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/txw2-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/xsom@4.0.6.redhat-00001", + "group": "org.glassfish.jaxb", + "name": "xsom", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b9cadc17ccf7d5fc437aa1355aaf64cf66b82f58f03f034a15ed1d702ab36c57" + } + ], + "purl": "pkg:maven/org.glassfish.jaxb/xsom@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/jaxb/main/xsom-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.soteria/jakarta.security.enterprise@3.0.3.redhat-00001", + "group": "org.glassfish.soteria", + "name": "jakarta.security.enterprise", + "version": "3.0.3.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "8e5068c6c0b2b8c2f57f7231bfc3ac9a664dff7fdcfec98d101a6cad42381fd2" + } + ], + "purl": "pkg:maven/org.glassfish.soteria/jakarta.security.enterprise@3.0.3.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/soteria/main/jakarta.security.enterprise-3.0.3.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.soteria/soteria.spi.bean.decorator.weld@3.0.3.redhat-00001", + "group": "org.glassfish.soteria", + "name": "soteria.spi.bean.decorator.weld", + "version": "3.0.3.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "30cff5a03e852fbd545d1c9fad271d7f268da6b90626fb31f1caa86c4c72c85a" + } + ], + "purl": "pkg:maven/org.glassfish.soteria/soteria.spi.bean.decorator.weld@3.0.3.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/glassfish/soteria/main/soteria.spi.bean.decorator.weld-3.0.3.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@3.0.2.redhat-00001", + "group": "org.glassfish.web", + "name": "jakarta.servlet.jsp.jstl", + "version": "3.0.2.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5a1013ac8c12173c084cf8d3920e3ad2f056eb8f2696fc62b15b049b2777bf92" + } + ], + "purl": "pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@3.0.2.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/servlet/jstl/api/main/jakarta.servlet.jsp.jstl-3.0.2.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@7.0.3.Final-redhat-00002", + "group": "org.hibernate.common", + "name": "hibernate-commons-annotations", + "version": "7.0.3.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "8d71a6e983b3152391fe9dbc4a3dfcac986a864c774bd2167d81099422edac83" + } + ], + "purl": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@7.0.3.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/commons-annotations/main/hibernate-commons-annotations-7.0.3.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.orm/hibernate-core@6.6.50.Final-redhat-00001", + "group": "org.hibernate.orm", + "name": "hibernate-core", + "version": "6.6.50.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6ce6a75954092660b2df74882c845eab387c0aafe5f5df0ea4a3ca636c580ee1" + } + ], + "purl": "pkg:maven/org.hibernate.orm/hibernate-core@6.6.50.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/main/hibernate-core-6.6.50.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.orm/hibernate-envers@6.6.50.Final-redhat-00001", + "group": "org.hibernate.orm", + "name": "hibernate-envers", + "version": "6.6.50.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f35c61730bf65aef6ee631650f46e69f316de66d47e35b818e5bdd2c625e5bc3" + } + ], + "purl": "pkg:maven/org.hibernate.orm/hibernate-envers@6.6.50.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/main/hibernate-envers-6.6.50.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.search/hibernate-search-backend-elasticsearch@7.2.6.Final-redhat-00001", + "group": "org.hibernate.search", + "name": "hibernate-search-backend-elasticsearch", + "version": "7.2.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "10e0f7797f422b6601f62385238833bd179c6de1ab5707d2825eb5f9c6267551" + } + ], + "purl": "pkg:maven/org.hibernate.search/hibernate-search-backend-elasticsearch@7.2.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/hibernate-search-backend-elasticsearch-7.2.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.search/hibernate-search-backend-lucene@7.2.6.Final-redhat-00001", + "group": "org.hibernate.search", + "name": "hibernate-search-backend-lucene", + "version": "7.2.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "04a2ac663d0b8783b4245d1d1147145fee2775312cba8068cf86e5e4c2c4f66e" + } + ], + "purl": "pkg:maven/org.hibernate.search/hibernate-search-backend-lucene@7.2.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/search/backend/lucene/main/hibernate-search-backend-lucene-7.2.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.search/hibernate-search-engine@7.2.6.Final-redhat-00001", + "group": "org.hibernate.search", + "name": "hibernate-search-engine", + "version": "7.2.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9f9168d4436d374a39c32fb68ba9fdde0a564627c244a6be04b1649dbfd1a1a9" + } + ], + "purl": "pkg:maven/org.hibernate.search/hibernate-search-engine@7.2.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/search/engine/main/hibernate-search-engine-7.2.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.search/hibernate-search-mapper-orm@7.2.6.Final-redhat-00001", + "group": "org.hibernate.search", + "name": "hibernate-search-mapper-orm", + "version": "7.2.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5910688f924f21cc6c28e63f6b29b4f22cb73fadabe612b0b72b916a6949dae8" + } + ], + "purl": "pkg:maven/org.hibernate.search/hibernate-search-mapper-orm@7.2.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/search/mapper/orm/main/hibernate-search-mapper-orm-7.2.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.search/hibernate-search-mapper-pojo-base@7.2.6.Final-redhat-00001", + "group": "org.hibernate.search", + "name": "hibernate-search-mapper-pojo-base", + "version": "7.2.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9f997c7224b9b854bcee7c34c051dfee07fcb4cab3988811976e3a24af4f0de2" + } + ], + "purl": "pkg:maven/org.hibernate.search/hibernate-search-mapper-pojo-base@7.2.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/search/mapper/pojo/main/hibernate-search-mapper-pojo-base-7.2.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.search/hibernate-search-util-common@7.2.6.Final-redhat-00001", + "group": "org.hibernate.search", + "name": "hibernate-search-util-common", + "version": "7.2.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6f2d5d223388654c1aedfc9317be9f254530c66c1f66feb447b6a8e9c51e9d2b" + } + ], + "purl": "pkg:maven/org.hibernate.search/hibernate-search-util-common@7.2.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/search/engine/main/hibernate-search-util-common-7.2.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final-redhat-00001", + "group": "org.hibernate.validator", + "name": "hibernate-validator", + "version": "8.0.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "04e7f35ae5d9131e49b23b2d6a4837a903f161dca39e6d4ea73e2c09081092c2" + } + ], + "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/validator/main/hibernate-validator-8.0.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@8.0.2.Final-redhat-00001", + "group": "org.hibernate.validator", + "name": "hibernate-validator-cdi", + "version": "8.0.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b3cba8a82b00914da30c2d74bf219b09f1e0975bc095333a8d055592d9caf0a9" + } + ], + "purl": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@8.0.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/validator/cdi/main/hibernate-validator-cdi-8.0.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hornetq/hornetq-commons@2.4.11.Final-redhat-00001", + "group": "org.hornetq", + "name": "hornetq-commons", + "version": "2.4.11.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4e7d5f663b8d611f892e8d7e31cd216586bdabba6771594a6f7b7f792653c386" + } + ], + "purl": "pkg:maven/org.hornetq/hornetq-commons@2.4.11.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hornetq/client/main/hornetq-commons-2.4.11.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hornetq/hornetq-core-client@2.4.11.Final-redhat-00001", + "group": "org.hornetq", + "name": "hornetq-core-client", + "version": "2.4.11.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "007a3284d50b7b06b408fe3e3907f1a254d5c50d5c7ac12c746789956a255b14" + } + ], + "purl": "pkg:maven/org.hornetq/hornetq-core-client@2.4.11.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hornetq/client/main/hornetq-core-client-2.4.11.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.hornetq/hornetq-jakarta-client@2.4.11.Final-redhat-00001", + "group": "org.hornetq", + "name": "hornetq-jakarta-client", + "version": "2.4.11.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "05215b6e44264ae94784e4843d48e71e51dd41e8af1688d7e9f07113d21ea374" + } + ], + "purl": "pkg:maven/org.hornetq/hornetq-jakarta-client@2.4.11.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hornetq/client/main/hornetq-jakarta-client-2.4.11.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-cachestore-jdbc@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-cachestore-jdbc", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "05ef2b65ed604bac4cd4764cbaa18fea0df444a0bf1986588ccb823d56ed88fc" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-cachestore-jdbc@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/persistence/jdbc/main/infinispan-cachestore-jdbc-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-cachestore-jdbc-common@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-cachestore-jdbc-common", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "7c9459dbf398b9ab7a322e38dab015c28881bee449237d0a1dd8d6d59f7cd098" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-cachestore-jdbc-common@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/persistence/jdbc/main/infinispan-cachestore-jdbc-common-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-cachestore-remote@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-cachestore-remote", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "9468b11b02015214156943051900b16493e40326e5e1985f7f1f669bc86a41c5" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-cachestore-remote@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/persistence/remote/main/infinispan-cachestore-remote-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-cdi-common@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-cdi-common", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "33acb467b469ce1d59036d1eff0239a0e6ecb4b076d94077849be0128bd90792" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-cdi-common@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/cdi/common/main/infinispan-cdi-common-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-cdi-embedded@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-cdi-embedded", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "5299424b58d7b4d74df614b82a3b6ccee50df62e20fba8470c1c73640c07996e" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-cdi-embedded@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/cdi/embedded/main/infinispan-cdi-embedded-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-cdi-remote@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-cdi-remote", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "ad0e2de6fb3a85da2b437c1f969d36efb59482b321fcd78e3da17ab8b02abaf5" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-cdi-remote@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/cdi/remote/main/infinispan-cdi-remote-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-client-hotrod@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-client-hotrod", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "29ea9d53c31bca2b50863d80a481f4035ed90a904e572de8faf9fac6bec18229" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-client-hotrod@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/client/hotrod/main/infinispan-client-hotrod-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-clustered-counter@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-clustered-counter", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "73798f5b7b68a15dea496ca0a930ee3169af9478674da621e1aa9293c673fe5f" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-clustered-counter@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/counter/main/infinispan-clustered-counter-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-clustered-lock@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-clustered-lock", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "5f9fffe63432ad582d553900d8d4900c81676a7324c7248859104b7d05280608" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-clustered-lock@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/lock/main/infinispan-clustered-lock-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-commons@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-commons", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "2db9fbc6d805bd5ede6966fcab066a04096bb6b205971c12e085a2859f06caa6" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-commons@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/commons/main/infinispan-commons-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-core@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-core", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "1693a45d6b4599bd46e1255738d72f5dd9384aaf45ac6ef17d3b1f885feb2c44" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-core@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/core/main/infinispan-core-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-hibernate-cache-commons@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-hibernate-cache-commons", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "393ee7b548b8860558c775a933aa520d5d684d7ebb0f5e5f9b8a3d6f203892ac" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-hibernate-cache-commons@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-commons-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-hibernate-cache-spi@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-hibernate-cache-spi", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "6dd241c07f62cc0bd701abb553907361d9e9a9cd3ccf41a34fcb5beec7e2d60d" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-hibernate-cache-spi@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-spi-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-hibernate-cache-v62@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-hibernate-cache-v62", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "b336fac3caf833435c90fe312a7544c7c0aa422d1cc89324143bce0afdda64db" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-hibernate-cache-v62@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-v62-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-objectfilter@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-objectfilter", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "05eb62792103ffccd6038ff097a6a18b2f9ffce19532ff60ed09093a18b32848" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-objectfilter@15.0.21.Final-redhat-00002", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/org.antlr/antlr-runtime@3.5.3.redhat-00001", + "group": "org.antlr", + "name": "antlr-runtime", + "version": "3.5.3.redhat-00001", + "purl": "pkg:maven/org.antlr/antlr-runtime@3.5.3.redhat-00001", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/objectfilter/main/infinispan-objectfilter-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-query@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-query", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "316288cd0f479a870e693f797c81d1c593545a9b269851c6ec0cca4b20f7a66c" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-query@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/query/main/infinispan-query-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-query-core@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-query-core", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "9f7ba3ec7a68b832edaf870439eed0c73242810f79ebaaa82e34c3d256c08b4e" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-query-core@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/query/core/main/infinispan-query-core-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-query-dsl@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-query-dsl", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "36394aba4a5298447ec794756dc3f5b84e91f17ff3736babafd4ab006ea5146e" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-query-dsl@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/query/dsl/main/infinispan-query-dsl-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan/infinispan-remote-query-client@15.0.21.Final-redhat-00002", + "group": "org.infinispan", + "name": "infinispan-remote-query-client", + "version": "15.0.21.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "8b35ceb8358525b92d57de385878ea9996e8b3e098cd5e8ad86c6be06c9925b0" + } + ], + "purl": "pkg:maven/org.infinispan/infinispan-remote-query-client@15.0.21.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/query/client/main/infinispan-remote-query-client-15.0.21.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan.protostream/protostream@5.0.14.Final-redhat-00002", + "group": "org.infinispan.protostream", + "name": "protostream", + "version": "5.0.14.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "5087f67250376e1199e512efdc562c30a9ac6b0b5c0955684beeba516ed71339" + } + ], + "purl": "pkg:maven/org.infinispan.protostream/protostream@5.0.14.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/protostream/main/protostream-5.0.14.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.infinispan.protostream/protostream-types@5.0.14.Final-redhat-00002", + "group": "org.infinispan.protostream", + "name": "protostream-types", + "version": "5.0.14.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "f70a37d2b7d5dfbebb90612009adf4b04a5379219d7c01cc66f82a6db4aa79b7" + } + ], + "purl": "pkg:maven/org.infinispan.protostream/protostream-types@5.0.14.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/infinispan/protostream/types/main/protostream-types-5.0.14.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jasypt/jasypt@1.9.3.redhat-00004", + "group": "org.jasypt", + "name": "jasypt", + "version": "1.9.3.redhat-00004", + "hashes": [ + { + "alg": "SHA-256", + "content": "d2207cd89585afc0e2da0e6928af73dbb7d49c51b560930454512bf9cd7a2ef0" + } + ], + "purl": "pkg:maven/org.jasypt/jasypt@1.9.3.redhat-00004", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jasypt/main/jasypt-1.9.3.redhat-00004.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jberet/jberet-core@3.1.0.Final-redhat-00001", + "group": "org.jberet", + "name": "jberet-core", + "version": "3.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5d869a22d097295728cb673308c7b96a89475e7cc6365178ef047d67a84f5bb7" + } + ], + "purl": "pkg:maven/org.jberet/jberet-core@3.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jberet/jberet-core/main/jberet-core-3.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-dmr@1.7.0.Final-redhat-00001", + "group": "org.jboss", + "name": "jboss-dmr", + "version": "1.7.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f9ada356b933158d4e8e60d3dfb2845262a0e7bfa033a41bbe69aa0feceafeda" + } + ], + "purl": "pkg:maven/org.jboss/jboss-dmr@1.7.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/dmr/main/jboss-dmr-1.7.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-ejb-client@5.0.8.Final-redhat-00001", + "group": "org.jboss", + "name": "jboss-ejb-client", + "version": "5.0.8.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f793f5ab8fc195f65e2c001fd3cbd18b8f7ce0666fdbdf10413b6928165af3dd" + } + ], + "purl": "pkg:maven/org.jboss/jboss-ejb-client@5.0.8.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ejb-client/main/jboss-ejb-client-5.0.8.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-iiop-client@2.0.1.Final-redhat-00001", + "group": "org.jboss", + "name": "jboss-iiop-client", + "version": "2.0.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "69aa604443adc93494611e8be2d1a16aaa90576625a5223a24be5f1ec422184b" + } + ], + "purl": "pkg:maven/org.jboss/jboss-iiop-client@2.0.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/iiop-client/main/jboss-iiop-client-2.0.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@8.0.0.Final-redhat-00001", + "group": "org.jboss", + "name": "jboss-transaction-spi", + "version": "8.0.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "39eb6d218c8fee55a73e28c3983fb03666bc0a479aecbeb9e2863505c1d7eb8f" + } + ], + "purl": "pkg:maven/org.jboss/jboss-transaction-spi@8.0.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/jboss-transaction-spi/main/jboss-transaction-spi-8.0.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-vfs@3.3.2.Final-redhat-00001", + "group": "org.jboss", + "name": "jboss-vfs", + "version": "3.3.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "00a4b0fe267a0bce13c3e539f57274960bb0e31602a6e818588e9fc09b54d5ad" + } + ], + "purl": "pkg:maven/org.jboss/jboss-vfs@3.3.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/vfs/main/jboss-vfs-3.3.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss/staxmapper@1.5.0.Final-redhat-00001", + "group": "org.jboss", + "name": "staxmapper", + "version": "1.5.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5ade1114807f89fe156bf5617d97a6afd5271777223079484e92e632d5fb099f" + } + ], + "purl": "pkg:maven/org.jboss/staxmapper@1.5.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/staxmapper/main/staxmapper-1.5.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.activemq.artemis.integration/artemis-wildfly-integration@2.0.4.Final-redhat-00001", + "group": "org.jboss.activemq.artemis.integration", + "name": "artemis-wildfly-integration", + "version": "2.0.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a6c1f15a11cf7b0912346546b0345afcb50293c2745a63a99bde4534c62bf1f1" + } + ], + "purl": "pkg:maven/org.jboss.activemq.artemis.integration/artemis-wildfly-integration@2.0.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/artemis-wildfly-integration-2.0.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.classfilewriter/jboss-classfilewriter@1.3.1.Final-redhat-00001", + "group": "org.jboss.classfilewriter", + "name": "jboss-classfilewriter", + "version": "1.3.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7affbc036915fddca9d9385559fe706994aef37229159db2103315fcbdf878ec" + } + ], + "purl": "pkg:maven/org.jboss.classfilewriter/jboss-classfilewriter@1.3.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/classfilewriter/main/jboss-classfilewriter-1.3.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.common/jboss-common-beans@2.0.1.Final-redhat-00001", + "group": "org.jboss.common", + "name": "jboss-common-beans", + "version": "2.0.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "fe8348f3b0d2823e2e1f3c0ec57bba70acfb5d5e8115e53f4e96618513e563a2" + } + ], + "purl": "pkg:maven/org.jboss.common/jboss-common-beans@2.0.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/common-beans/main/jboss-common-beans-2.0.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/jboss-insights@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "jboss-insights", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "b3b03709e504759f0d7ddfbaf9daf17136c6f4cd8a7aaface462c4da1d163e4c" + } + ], + "purl": "pkg:maven/org.jboss.eap/jboss-insights@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/redhat/insights/main/jboss-insights-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/jipijapa-eclipselink@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "jipijapa-eclipselink", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "5e69cc78f77d5776638d8702bd5e77488abe9c16f77b09d1137e50afd636e19f" + } + ], + "purl": "pkg:maven/org.jboss.eap/jipijapa-eclipselink@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/eclipse/persistence/main/jipijapa-eclipselink-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/jipijapa-hibernate6@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "jipijapa-hibernate6", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "a6392a563d68082026393792a34374c41445e9cce089a72df98f71dddbf972c2" + } + ], + "purl": "pkg:maven/org.jboss.eap/jipijapa-hibernate6@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/jipijapa-hibernate6-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/jipijapa-hibernatesearch@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "jipijapa-hibernatesearch", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "376678caf2685c50441543c33328238aa29818af51f7f7eeca3b1fa5fc41a352" + } + ], + "purl": "pkg:maven/org.jboss.eap/jipijapa-hibernatesearch@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/jipijapa-hibernatesearch-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/jipijapa-spi@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "jipijapa-spi", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "50300d096904846f50e793715da8e6bfea87d7c2b9b094c11390f976ed75fed9" + } + ], + "purl": "pkg:maven/org.jboss.eap/jipijapa-spi@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jpa/spi/main/jipijapa-spi-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-appclient@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-appclient", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "32aeb4623c4e6f43eb098efbbcfc0a5af188ff857f373315dab879ae6b5e5df9" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-appclient@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/appclient/main/wildfly-appclient-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-batch-jberet@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-batch-jberet", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "e9df519f60a59e9cb34ee51a67dbbca46337634c9693d22ed3702ca1f3e07eaf" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-batch-jberet@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/batch/jberet/main/wildfly-batch-jberet-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-bean-validation@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-bean-validation", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "59c880d43b9bdfb3620edd24d9f402ac4ca685a9ccc44f787de81b97ffdc6b02" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-bean-validation@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/bean-validation/main/wildfly-bean-validation-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-common@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-common", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "a16c77b9a5c019c476bc58bbb48ada3262ac989b5a822579c4f246e94447d37b" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-common@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/clustering/common/main/wildfly-clustering-common-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-cache@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-ejb-cache", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "643ba35ad6a06490d4c18c545c7c711dd7f65d1e96c0bcd720e89aa45a467afa" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-cache@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/wildfly-clustering-ejb-cache-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-client@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-ejb-client", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "5990fbf0501168842c9e6a21d46d9e0b892f6bdab6a7fceaff8045bc0d5f7ad4" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-client@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/ejb/client/main/wildfly-clustering-ejb-client-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-extension@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-ejb-extension", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "3d5bef30020e0f13bb33b4e14f68ad60a0260e8eaddea5be6046636dc9e06f69" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-extension@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/wildfly-clustering-ejb-extension-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-infinispan@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-ejb-infinispan", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "197df42ab22b7e32ad6ed95b01151cad88345231532e5071f6dc82de8e54d356" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-infinispan@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/wildfly-clustering-ejb-infinispan-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-spi@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-ejb-spi", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "774bf2319ae1e67c21edf590acf7f9b46ade43adb4dc4b00e25e78b3aeaa7584" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-spi@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/wildfly-clustering-ejb-spi-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-el-expressly@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-el-expressly", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "f2e65d9ebc34a5b9a7fa6755f538c2e62fcc54a8c30933bd1c1c0c10d57958a4" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-el-expressly@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/el/expressly/main/wildfly-clustering-el-expressly-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-faces-api@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-faces-api", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "ede35e332d5dc74c8b0b916b5f70165a95f4fae20915fb68ca78e35ca4aab1b2" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-faces-api@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/faces/api/main/wildfly-clustering-faces-api-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-faces-mojarra@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-faces-mojarra", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "44e9df712a12e5e898b407ea441906a081dfb0a57b473527a7e189d9d8905bb7" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-faces-mojarra@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/wildfly-clustering-faces-mojarra-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-client-api@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-infinispan-client-api", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "985732adda25aaece585f29250bf76a1d7fcfeb3d59d6b9b368b9ea988b5c609" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-client-api@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/wildfly-clustering-infinispan-client-api-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-client-service@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-infinispan-client-service", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "93102972e83e32f5da65ca88f6de7a3a9c1a7a29760b946800cb9db2cd0fdbc3" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-client-service@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/wildfly-clustering-infinispan-client-service-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-embedded-service@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-infinispan-embedded-service", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "32dc51f9544f9c6973f7350616a76c9f7c4c3b21f9d6d17f369ea83514b34781" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-embedded-service@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/wildfly-clustering-infinispan-embedded-service-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-extension@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-infinispan-extension", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "cb5391fe94caa610640cbddac34009df00ea89a3c1cfde876c707b7411a85496" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-extension@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/clustering/infinispan/main/wildfly-clustering-infinispan-extension-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-api@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-jgroups-api", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "1bfc86f1cc6ae8ab4fded98d45deb1055066511a1216e480bdcc1946aa39b677" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-api@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/wildfly-clustering-jgroups-api-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-extension@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-jgroups-extension", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "df63fbe09c12704b21f682e954420c1727d041469127cf4c866c11559b96600d" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-extension@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/clustering/jgroups/main/wildfly-clustering-jgroups-extension-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-spi@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-jgroups-spi", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "5b2014eb54ca2b92bde3037b515099ab21ebf6a60c674fae947c5eaf8350270e" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-spi@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/wildfly-clustering-jgroups-spi-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-api@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-marshalling-api", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "2e632c62438b7e0fac80f7ac1a4ade15b1d7a772dcb70375890f0c0c01dbe880" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-api@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/wildfly-clustering-marshalling-api-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-jboss@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-marshalling-jboss", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "57acdfc08fdacb989cd2e0e344d623d7e3aa0d17575fd15c9b6b10c1ed3274b3" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-jboss@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/wildfly-clustering-marshalling-jboss-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-protostream@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-marshalling-protostream", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "d6d541d5aacb8610af09660a94720fc6e1ad90c78de527b4a7e5c49dd78d9570" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-protostream@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/wildfly-clustering-marshalling-protostream-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-server-api@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-server-api", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "2691003ddad38bb20630572670202848e4cb91f4909ef06af3bdc5c03925591f" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-server-api@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/server/api/main/wildfly-clustering-server-api-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-server-extension@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-server-extension", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "4a6ea123ddc8e394cac976cc71fed0da36dc7269ffa25077ecc7b7a71d1270ec" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-server-extension@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/clustering/server/main/wildfly-clustering-server-extension-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-server-service@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-server-service", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "1d7883e368069b9172d407bad2caf7d82988ca2f1f23506cbded6e8a1fe13b59" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-server-service@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/server/service/main/wildfly-clustering-server-service-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-service@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-service", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "8b8144d262c2606cd082ea1a79874337e96aa92e678c0409a05a66b90488bf23" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-service@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/service/main/wildfly-clustering-service-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-api@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-singleton-api", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "4a09791e965704e35931f1d08a1ba1b69e1ce1cc15838b2f2f911b9787cbb77d" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-api@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/singleton/api/main/wildfly-clustering-singleton-api-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-compat@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-singleton-compat", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "8bdf21e7a46dddbf296fc544c32cbb4f5397ba1be22badef2b41acc05508d6c0" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-compat@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/wildfly-clustering-singleton-compat-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-extension@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-singleton-extension", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "12d67f68c9657894a1305ea8e2aa24c1c44eef115dbb874ce9d32fccd3bb24e7" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-extension@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/wildfly-clustering-singleton-extension-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-server@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-singleton-server", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "a74998020839f1e82595ca33f3f79d73afb3097e9cce0ceba57f5058c66086aa" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-server@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/singleton/server/main/wildfly-clustering-singleton-server-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-api@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-web-api", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "403a40bc0312bb8686fec1208a49cc37ecfc7370103bd5805aafc85345cc755e" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-web-api@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/web/api/main/wildfly-clustering-web-api-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-container@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-web-container", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "742b444aa5e458c519062a2e691765f418e96853fe000bbec9544157a5a29a5b" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-web-container@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/web/container/main/wildfly-clustering-web-container-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-extension@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-web-extension", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "7cd3bba5fb63f6f9c968408e4faa7fd9be4c3894b6e8c64ccc2b0e5eb5380a48" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-web-extension@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/clustering/web/main/wildfly-clustering-web-extension-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-service@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-web-service", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "ebd375ca8979bd9554c965c68e5ae6038dcf2576d9403d2d0d25b62aab17e2bc" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-web-service@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/web/service/main/wildfly-clustering-web-service-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-undertow@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-web-undertow", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "1824c9c3c86169943be853773dc99ef76543514c4ca02b6b2f91f76e327dd66f" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-web-undertow@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/web/undertow/main/wildfly-clustering-web-undertow-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-core@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-weld-core", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "495e48516d22983fcf91a10930d6ec13f4c9ed83eada42bea395bbcb4a10961e" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-core@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/weld/core/main/wildfly-clustering-weld-core-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-ejb@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-weld-ejb", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "c16ff6c1bd0aaf53fd29043ee2da83016e9a1c02896d370419eb177e0007477e" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-ejb@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/wildfly-clustering-weld-ejb-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-web@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-clustering-weld-web", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "1dfa8ae372fb41998062b1b5e19e1639aee1c63710da7baf0d9edbb351ad6c6d" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-web@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/weld/web/main/wildfly-clustering-weld-web-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-concurrency-impl-30@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-concurrency-impl-30", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "1a4412e33943aada4f987559f570b9769d00c75eedeea720dd1652537732840d" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-concurrency-impl-30@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/concurrency/main/wildfly-concurrency-impl-30-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-concurrency-spi@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-concurrency-spi", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "ad00a6d46d8b4992564fb6e583856a1f3d7e6326b8f7a41b31c438e29928a96b" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-concurrency-spi@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/concurrency/main/wildfly-concurrency-spi-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-connector@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-connector", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "72f24438faafa2aa2a9070b323fa328c62b32f84c30ea621438f15c6796c2b6b" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-connector@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/connector/main/wildfly-connector-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-datasources-agroal@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-datasources-agroal", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "c62a3525e6b9f295dbbc4d3c92cf0c0364f78243f760feab01f2387e00f1816b" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-datasources-agroal@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/wildfly-datasources-agroal-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-ee@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-ee", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "0457def95de1ae9c7c61eff8c47a80dccc6016f692c42565b60bd745c23edf4e" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-ee@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/ee/main/wildfly-ee-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-ee-feature-pack-product-conf@801.7.1.GA-redhat-00001", + "group": "org.jboss.eap", + "name": "wildfly-ee-feature-pack-product-conf", + "version": "801.7.1.GA-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "65413654e442e5f9518243df60db66f8f2c477904e45d8b2a5f093584cee8d3a" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-ee-feature-pack-product-conf@801.7.1.GA-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/product/main/wildfly-ee-feature-pack-product-conf-801.7.1.GA-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-ee-feature-pack-product-conf@801.7.1.GA-redhat-00001?classifier=version&type=txt", + "group": "org.jboss.eap", + "name": "wildfly-ee-feature-pack-product-conf", + "version": "801.7.1.GA-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "adb0b6af03ddb398850dddd25c2ecd7477c87813aa12d7509ac1b3b888b75efe" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-ee-feature-pack-product-conf@801.7.1.GA-redhat-00001?classifier=version&type=txt", + "evidence": { + "occurrences": [ + { + "location": "version.txt" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-ee-security@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-ee-security", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "7d30b06afb11bdd3d31694ed142321550146429df5c7bab2e3908519c43459d6" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-ee-security@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/ee-security/main/wildfly-ee-security-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-ejb3@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-ejb3", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "d7b84da24aa9355ea278ffaaf1d1a04196de58c9bdd00033f0f788650432ba92" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-ejb3@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/ejb3/main/wildfly-ejb3-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-elytron-oidc-client-subsystem@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-elytron-oidc-client-subsystem", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "08b730ea5ffa73cf600fbfd6a1d6bf837dc4b0952b6114b02fc431a70ecf3c23" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-elytron-oidc-client-subsystem@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/wildfly-elytron-oidc-client-subsystem-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-health@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-health", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "bfaa7fb00d3459657f8d3684d6e41356dcee35cc4eb23bc03ec2649774fc3242" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-health@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/health/main/wildfly-health-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-iiop-openjdk@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-iiop-openjdk", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "71aff421b54287d0c2f742fd08a0cd3844d6495bc32ed43ab3af686068ea6b15" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-iiop-openjdk@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/iiop-openjdk/main/wildfly-iiop-openjdk-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-jaxrs@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-jaxrs", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "6d2124905f986c7044f6684b7243a28de34021e36cea107a07947cbafdb1a24f" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-jaxrs@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jaxrs/main/wildfly-jaxrs-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-jdr@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-jdr", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "d554c68e9b06f5dd2e53c90ed3a9df0ac71f5b8d217b282a960b11437960324a" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-jdr@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jdr/main/wildfly-jdr-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-jpa@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-jpa", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "b81ebfd2a5d79c6ca295fb918f78493424248a510a820dfc8a91d92e70861b09" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-jpa@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jpa/main/wildfly-jpa-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-jsf@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-jsf", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "63dd7f8d6ebd3ab86e0a0577d6967c2ad20b14915521cf3d5fee6bfb1d1589c9" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-jsf@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jsf/main/wildfly-jsf-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-jsf-injection@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-jsf-injection", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "46847f36b65988450aca5612769c66ecd81d1c16b7c7dffb1fa60fcd735c4a58" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-jsf-injection@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jsf-injection/main/wildfly-jsf-injection-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-jsr77@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-jsr77", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "475fc4cc7ea92c6688400358b11ea5c7c5663455a3292baa75e9546a493e4e6d" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-jsr77@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jsr77/main/wildfly-jsr77-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-keycloak@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-keycloak", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "8bb0273620fbb062a8b60e953ea264753d13121f7c79f47632f139f38dd8fcb5" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-keycloak@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/wildfly-keycloak-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-mail@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-mail", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "d21bfd2d683274a7760032d4ab501f68828c86be51a52f0db63502326eb69c4c" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-mail@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/mail/main/wildfly-mail-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-messaging-activemq-injection@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-messaging-activemq-injection", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "96f67fb9b2b323934583dcbf2375484df58f557a84e8bcdc37c4bc539572640f" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-messaging-activemq-injection@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/wildfly-messaging-activemq-injection-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-messaging-activemq-subsystem@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-messaging-activemq-subsystem", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "e52faace9fc5a51b804c8768043468d7d0900aded2775da2b423b85806a56cba" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-messaging-activemq-subsystem@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/wildfly-messaging-activemq-subsystem-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-metrics@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-metrics", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "33fa884c587c538ee89069a8ed7530ebd18d024bfce9e75b1cb8b156b5735838" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-metrics@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/metrics/main/wildfly-metrics-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-mod_cluster-extension@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-mod_cluster-extension", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "127a9fb795a3fb31e99963c3eb28baa4697a9ac924b8100b433b6b78c9cba9e2" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-mod_cluster-extension@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/mod_cluster/main/wildfly-mod_cluster-extension-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-mod_cluster-undertow@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-mod_cluster-undertow", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "99d2dbf73a4c822e7d6b2fd5e4548a2e935ab56fa68daad184e963238a776533" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-mod_cluster-undertow@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/wildfly-mod_cluster-undertow-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-naming@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-naming", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "851d305174ff50b6e86915d9930fd31b5d3d15d1f528e8b72f387aaa514ec929" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-naming@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/naming/main/wildfly-naming-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-picketlink@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-picketlink", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "1f2c7a2f848e202b0576c43523d357d9bf65746e62690ce27994c3210e78bc4c" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-picketlink@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/picketlink/main/wildfly-picketlink-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-pojo@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-pojo", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "f059cb4265621077068adc9d1990d86ac838c82b7a1ab4020a4d2772c64b397d" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-pojo@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/pojo/main/wildfly-pojo-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-rts@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-rts", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "0349461a5cc8be4ae5b9202caffdb3819931a9908ac2579e0ffb293e20389db2" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-rts@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/rts/main/wildfly-rts-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-sar@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-sar", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "da999f437c0fb7966d31b561747f7ed987e12c56bf5ce2a0315556681ede96f1" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-sar@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/sar/main/wildfly-sar-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-security@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-security", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "32c299f832cd1c5f6081ada5dd5723bbd8467b6e7d29384755ba6bd70af22841" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-security@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/security/main/wildfly-security-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-system-jmx@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-system-jmx", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "63bf115ed49444e4d369ccda8273fa681cc288b8f8998c57ea7dee1113780a17" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-system-jmx@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/system-jmx/main/wildfly-system-jmx-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-transactions@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-transactions", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "849614cfc8aa6da46838d4076d4f9e92f4f0eba0353fc6f596010c0bce34fd20" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-transactions@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/transactions/main/wildfly-transactions-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-undertow@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-undertow", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "483e8a503219bd0d621d4931289068756130d713a5fc062eac30af5367b6b7f5" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-undertow@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/undertow/main/wildfly-undertow-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-web-common@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-web-common", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "ddc443fd6d84aa7f612328b5175f4f6f1df534421e5a487e94b93e05ae90554a" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-web-common@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/web-common/main/wildfly-web-common-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-webservices-opensaml-sysconfig@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-webservices-opensaml-sysconfig", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "7e1c90c7a39ba12f7818a1183aff610092e9badd98277beac656342804c94d4a" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-webservices-opensaml-sysconfig@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/cxf/sts/main/wildfly-webservices-opensaml-sysconfig-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-webservices-server-integration@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-webservices-server-integration", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "abfb8fbfbcb7e446763f559c984f24b88e1060aff8f7c9be20868c931c8d304b" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-webservices-server-integration@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/webservices/main/wildfly-webservices-server-integration-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-weld@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-weld", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "7dbf30edece8e58b803cb077f84062c91bf90b60612c2192082eab3fc2f14dd5" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-weld@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/weld/main/wildfly-weld-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-weld-bean-validation@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-weld-bean-validation", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "c4f1b6691b5af57ccd7ef231a09804516f504bcd2ad628504236d9ef23e2f510" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-weld-bean-validation@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/wildfly-weld-bean-validation-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-weld-common@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-weld-common", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "5ce77dcc8653e071f32956ad44dccde4045812fcf28212894b107c86ece9a49a" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-weld-common@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/weld/common/main/wildfly-weld-common-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-weld-ejb@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-weld-ejb", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "4069086ac681934d567c12c2c39ad66a4db73e6578b60e3216d8148924abd69d" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-weld-ejb@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/weld/ejb/main/wildfly-weld-ejb-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-weld-jpa@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-weld-jpa", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "ea9b036befba4c134a954d646e316a983c5b07958aa636c7680c69026cd560da" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-weld-jpa@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/weld/jpa/main/wildfly-weld-jpa-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-weld-spi@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-weld-spi", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "832b47bdc7d3efb51aff1cf56583874c55759aac5002c31eb5547b5d39edb985" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-weld-spi@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/weld/spi/main/wildfly-weld-spi-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-weld-transactions@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-weld-transactions", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "b177437a2305b44f18a1140f943a119c52670d203d662959038a283a9d820337" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-weld-transactions@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/weld/transactions/main/wildfly-weld-transactions-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-weld-webservices@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-weld-webservices", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "08f1d9bc9a7023c66dbcd8cdba8fe3397770ee73197bc1a0b5931193e22a4a38" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-weld-webservices@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/weld/webservices/main/wildfly-weld-webservices-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.eap/wildfly-xts@8.1.1.GA-redhat-00019", + "group": "org.jboss.eap", + "name": "wildfly-xts", + "version": "8.1.1.GA-redhat-00019", + "hashes": [ + { + "alg": "SHA-256", + "content": "ddd19e32ccde9bab3f6427f8446e88a7d5c24b9e094e7c7df2c7dd7e543f0618" + } + ], + "purl": "pkg:maven/org.jboss.eap/wildfly-xts@8.1.1.GA-redhat-00019", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/xts/main/wildfly-xts-8.1.1.GA-redhat-00019.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ejb3/jboss-ejb3-ext-api@2.4.0.Final-redhat-00001", + "group": "org.jboss.ejb3", + "name": "jboss-ejb3-ext-api", + "version": "2.4.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6142ed2bf6c9ab0d1c45f238f28d9013a7d16d886e45fb00ef6314005641f482" + } + ], + "purl": "pkg:maven/org.jboss.ejb3/jboss-ejb3-ext-api@2.4.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ejb3/main/jboss-ejb3-ext-api-2.4.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.genericjms/generic-jms-ra-jar@3.0.0.Final-redhat-00001", + "group": "org.jboss.genericjms", + "name": "generic-jms-ra-jar", + "version": "3.0.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "07dad85e8e17b8613f1f64eb841853ec33e92c0e3c0c491a7c4c872507b70d17" + } + ], + "purl": "pkg:maven/org.jboss.genericjms/generic-jms-ra-jar@3.0.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/genericjms/main/generic-jms-ra-jar-3.0.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.hal/hal-console@3.7.19.Final-redhat-00001?classifier=resources", + "group": "org.jboss.hal", + "name": "hal-console", + "version": "3.7.19.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9f36fa657562341749062a2f21e3c122b08391438c6c13c2015153ddf7c1ff26" + } + ], + "purl": "pkg:maven/org.jboss.hal/hal-console@3.7.19.Final-redhat-00001?classifier=resources", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/console/main/hal-console-3.7.19.Final-redhat-00001-resources.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.invocation/jboss-invocation@2.0.1.Final-redhat-00001", + "group": "org.jboss.invocation", + "name": "jboss-invocation", + "version": "2.0.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3f53a9a451ec3589633c9f5f40bc213083a76e4f53c948d5b48b3a2c07089ade" + } + ], + "purl": "pkg:maven/org.jboss.invocation/jboss-invocation@2.0.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/invocation/main/jboss-invocation-2.0.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-api@3.0.18.Final-redhat-00001", + "group": "org.jboss.ironjacamar", + "name": "ironjacamar-common-api", + "version": "3.0.18.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a227afbc4bd72dfe7f384bdded1dbc4e9591b21e01e415bd5b175e77f49e96d9" + } + ], + "purl": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-api@3.0.18.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-common-api-3.0.18.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-impl@3.0.18.Final-redhat-00001", + "group": "org.jboss.ironjacamar", + "name": "ironjacamar-common-impl", + "version": "3.0.18.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4b29d42ce7a0364da834b33aebe4a93c12fc3faa9025b83fe837e80843721598" + } + ], + "purl": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-impl@3.0.18.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-common-impl-3.0.18.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-spi@3.0.18.Final-redhat-00001", + "group": "org.jboss.ironjacamar", + "name": "ironjacamar-common-spi", + "version": "3.0.18.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "05a02f57756eca7f134a9e8f6ac35c36030515e0dc8cba13dcd0ff299cff3557" + } + ], + "purl": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-spi@3.0.18.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-common-spi-3.0.18.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-core-api@3.0.18.Final-redhat-00001", + "group": "org.jboss.ironjacamar", + "name": "ironjacamar-core-api", + "version": "3.0.18.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ff04ea46a8bbef9313747ca83c7bba69a0cd358375eb599582feba9501ccf39e" + } + ], + "purl": "pkg:maven/org.jboss.ironjacamar/ironjacamar-core-api@3.0.18.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-core-api-3.0.18.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-core-impl@3.0.18.Final-redhat-00001", + "group": "org.jboss.ironjacamar", + "name": "ironjacamar-core-impl", + "version": "3.0.18.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7437d7c4c552b515254336302e0c502197316610cd9e6ee5feb6d4ada66f50a8" + } + ], + "purl": "pkg:maven/org.jboss.ironjacamar/ironjacamar-core-impl@3.0.18.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-core-impl-3.0.18.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-deployers-common@3.0.18.Final-redhat-00001", + "group": "org.jboss.ironjacamar", + "name": "ironjacamar-deployers-common", + "version": "3.0.18.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3a5516bb63846a5aa659b2c68238f2e379f4e1d52fcce6cc0e71a8ad3a971c72" + } + ], + "purl": "pkg:maven/org.jboss.ironjacamar/ironjacamar-deployers-common@3.0.18.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-deployers-common-3.0.18.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-jdbc@3.0.18.Final-redhat-00001", + "group": "org.jboss.ironjacamar", + "name": "ironjacamar-jdbc", + "version": "3.0.18.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "858a1749487e7556aa6ed8cffc465b10423d03b843cc683987fff3c8c0d5ece6" + } + ], + "purl": "pkg:maven/org.jboss.ironjacamar/ironjacamar-jdbc@3.0.18.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/ironjacamar-jdbc-3.0.18.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-validator@3.0.18.Final-redhat-00001", + "group": "org.jboss.ironjacamar", + "name": "ironjacamar-validator", + "version": "3.0.18.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3272e045187571eddf1227e893f64dec15856a0f42ba2327f8e01b361b165034" + } + ], + "purl": "pkg:maven/org.jboss.ironjacamar/ironjacamar-validator@3.0.18.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-validator-3.0.18.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final-redhat-1", + "group": "org.jboss.logging", + "name": "commons-logging-jboss-logging", + "version": "1.0.0.Final-redhat-1", + "hashes": [ + { + "alg": "SHA-256", + "content": "ff8f89916e522afe5aca7fb465ef6ab540b02b0227aee82b7356b5cc3f4b3221" + } + ], + "purl": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final-redhat-1", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/logging/commons/logging/main/commons-logging-jboss-logging-1.0.0.Final-redhat-1.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "group": "org.jboss.logging", + "name": "jboss-logging", + "version": "3.6.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "282b80b15dd4eb0d5722cdfcd3f52708331a301f754195b4a0c024c42bdbe00f" + } + ], + "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.6.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jul-to-slf4j-stub@1.0.1.Final-redhat-3", + "group": "org.jboss.logging", + "name": "jul-to-slf4j-stub", + "version": "1.0.1.Final-redhat-3", + "hashes": [ + { + "alg": "SHA-256", + "content": "55d5d091653216244b54fd003d03462ea93e911db05d1fc650fd56de68b2aabf" + } + ], + "purl": "pkg:maven/org.jboss.logging/jul-to-slf4j-stub@1.0.1.Final-redhat-3", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/jul-to-slf4j-stub-1.0.1.Final-redhat-3.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager@2.1.19.Final-redhat-00001", + "group": "org.jboss.logmanager", + "name": "jboss-logmanager", + "version": "2.1.19.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9d34085faf675aa282123b7200d7814a1f7b1c0b5d2b0bf60869b47d1ff14e90" + } + ], + "purl": "pkg:maven/org.jboss.logmanager/jboss-logmanager@2.1.19.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-2.1.19.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.logmanager/log4j2-jboss-logmanager@2.0.1.Final-redhat-00001", + "group": "org.jboss.logmanager", + "name": "log4j2-jboss-logmanager", + "version": "2.0.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "e3cc09c6dc5d3914b53959a931d320ecbb06992a0b402b0034ba849b9f8e5e02" + } + ], + "purl": "pkg:maven/org.jboss.logmanager/log4j2-jboss-logmanager@2.0.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/logmanager/log4j2/main/log4j2-jboss-logmanager-2.0.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.marshalling/jboss-marshalling@2.2.3.Final-redhat-00001", + "group": "org.jboss.marshalling", + "name": "jboss-marshalling", + "version": "2.2.3.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "46530118bfbe112fd86885d069b534b900996e0f2125e53c60da4d6673514411" + } + ], + "purl": "pkg:maven/org.jboss.marshalling/jboss-marshalling@2.2.3.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/marshalling/main/jboss-marshalling-2.2.3.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.marshalling/jboss-marshalling-river@2.2.3.Final-redhat-00001", + "group": "org.jboss.marshalling", + "name": "jboss-marshalling-river", + "version": "2.2.3.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "17903e25c8465bf678b8231dd1fe0843a7bf03343097fb028e4f003f5bcec392" + } + ], + "purl": "pkg:maven/org.jboss.marshalling/jboss-marshalling-river@2.2.3.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/marshalling/river/main/jboss-marshalling-river-2.2.3.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.metadata/jboss-metadata-appclient@16.1.0.Final-redhat-00001", + "group": "org.jboss.metadata", + "name": "jboss-metadata-appclient", + "version": "16.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c143a4c4d1360ef982f1e3d34302a3847f1d56bf6a84f5e5371b1a9849213c1f" + } + ], + "purl": "pkg:maven/org.jboss.metadata/jboss-metadata-appclient@16.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/metadata/appclient/main/jboss-metadata-appclient-16.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.metadata/jboss-metadata-common@16.1.0.Final-redhat-00001", + "group": "org.jboss.metadata", + "name": "jboss-metadata-common", + "version": "16.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "db68334ce8ae4915155c4d7f6258144e0561246d8ff92b65615b9b1617098b32" + } + ], + "purl": "pkg:maven/org.jboss.metadata/jboss-metadata-common@16.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/metadata/common/main/jboss-metadata-common-16.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.metadata/jboss-metadata-ear@16.1.0.Final-redhat-00001", + "group": "org.jboss.metadata", + "name": "jboss-metadata-ear", + "version": "16.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "04d05b79d76d294ed9446f06f27ccdefdb2fe9af64932bc5e9edc9a24f113415" + } + ], + "purl": "pkg:maven/org.jboss.metadata/jboss-metadata-ear@16.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/metadata/ear/main/jboss-metadata-ear-16.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.metadata/jboss-metadata-ejb@16.1.0.Final-redhat-00001", + "group": "org.jboss.metadata", + "name": "jboss-metadata-ejb", + "version": "16.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1de3bfc3c8f1a46a7e020ca51ce3810561deaf4ef5058a10a3b0e3ddc2084a9d" + } + ], + "purl": "pkg:maven/org.jboss.metadata/jboss-metadata-ejb@16.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/metadata/ejb/main/jboss-metadata-ejb-16.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.metadata/jboss-metadata-web@16.1.0.Final-redhat-00001", + "group": "org.jboss.metadata", + "name": "jboss-metadata-web", + "version": "16.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d87e7d10a30685a5201f43c7bd5087192b933bd850dd52986bdacccee7288be3" + } + ], + "purl": "pkg:maven/org.jboss.metadata/jboss-metadata-web@16.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/metadata/web/main/jboss-metadata-web-16.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.mod_cluster/mod_cluster-container-spi@2.1.0.Final-redhat-00001", + "group": "org.jboss.mod_cluster", + "name": "mod_cluster-container-spi", + "version": "2.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "68a3eb0441fcbe5ea1f9fb940ed1973eacef709bfd52793a1139d6410f3c34bc" + } + ], + "purl": "pkg:maven/org.jboss.mod_cluster/mod_cluster-container-spi@2.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/mod_cluster-container-spi-2.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.mod_cluster/mod_cluster-core@2.1.0.Final-redhat-00001", + "group": "org.jboss.mod_cluster", + "name": "mod_cluster-core", + "version": "2.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b784d073c4dd43753475239171fc6ec01f0b299e6c889c6fb08f73b71f805280" + } + ], + "purl": "pkg:maven/org.jboss.mod_cluster/mod_cluster-core@2.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/mod_cluster/core/main/mod_cluster-core-2.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.mod_cluster/mod_cluster-load-spi@2.1.0.Final-redhat-00001", + "group": "org.jboss.mod_cluster", + "name": "mod_cluster-load-spi", + "version": "2.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3da28b81ee90ca9be81f6bbd4822df608be8c9cf02567a0cb9d8e9d35e756b48" + } + ], + "purl": "pkg:maven/org.jboss.mod_cluster/mod_cluster-load-spi@2.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/mod_cluster-load-spi-2.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.modules/jboss-modules@2.1.6.Final-redhat-00001", + "group": "org.jboss.modules", + "name": "jboss-modules", + "version": "2.1.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7cb77155922e029095e8562db0a6f762c016b82325aeaedb5c597c71a83561d0" + } + ], + "purl": "pkg:maven/org.jboss.modules/jboss-modules@2.1.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "jboss-modules.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.msc/jboss-msc@1.5.5.Final-redhat-00001", + "group": "org.jboss.msc", + "name": "jboss-msc", + "version": "1.5.5.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b10e97bb2f367be7441e84d0c7077bde042f2a07f868355dc20c53ffdf8ea914" + } + ], + "purl": "pkg:maven/org.jboss.msc/jboss-msc@1.5.5.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/msc/main/jboss-msc-1.5.5.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana/jbosstxbridge@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana", + "name": "jbosstxbridge", + "version": "7.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6238dbc5da4a07a38b5810fe8f838b8d9efcacc2d44f6d7f9bef5820f02de70a" + } + ], + "purl": "pkg:maven/org.jboss.narayana/jbosstxbridge@7.1.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/xts/main/jbosstxbridge-7.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-idlj@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jts", + "name": "narayana-jts-idlj", + "version": "7.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1696e05d5160bb0c6e185f5f5f6dce7a05fe186dcfd7c24086094e66f56c2ed8" + } + ], + "purl": "pkg:maven/org.jboss.narayana.jts/narayana-jts-idlj@7.1.2.Final-redhat-00001", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana/common@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana", + "name": "common", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana/common@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.arjunacore/arjuna@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.arjunacore", + "name": "arjuna", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.arjunacore/arjuna@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.arjunacore/txoj@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.arjunacore", + "name": "txoj", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.arjunacore/txoj@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jta/cdi@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jta", + "name": "cdi", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.jta/cdi@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jta/jdbc@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jta", + "name": "jdbc", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.jta/jdbc@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jta/jms@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jta", + "name": "jms", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.jta/jms@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jta/jta@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jta", + "name": "jta", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.jta/jta@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/idlj-idl-openjdk@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jts", + "name": "idlj-idl-openjdk", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.jts/idlj-idl-openjdk@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/jtax@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jts", + "name": "jtax", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.jts/jtax@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/jts@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jts", + "name": "jts", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.jts/jts@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/orbportability@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jts", + "name": "orbportability", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.jts/orbportability@7.1.2.Final-redhat-00001", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/jts/main/narayana-jts-idlj-7.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.jts", + "name": "narayana-jts-integration", + "version": "7.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "27487c81b3ebe04cbe5e875512bca27ed1b7c462b6783e0352c991bf6c817e32" + } + ], + "purl": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@7.1.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/jts/integration/main/narayana-jts-integration-7.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.rts/restat-api@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.rts", + "name": "restat-api", + "version": "7.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "25d52b7043f40a8cec4dbf0b4308646cf433120f49f72c291cc915bd53a3eeec" + } + ], + "purl": "pkg:maven/org.jboss.narayana.rts/restat-api@7.1.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/narayana/rts/main/restat-api-7.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.rts/restat-bridge@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.rts", + "name": "restat-bridge", + "version": "7.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c77f26c9da848106a4276c09d5e72732b18f64450776b5afc1d6e88c96913493" + } + ], + "purl": "pkg:maven/org.jboss.narayana.rts/restat-bridge@7.1.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/narayana/rts/main/restat-bridge-7.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.rts/restat-integration@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.rts", + "name": "restat-integration", + "version": "7.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "38e9efea7a2a6926e2bd45f11fa422bf2ecefcdb811877711ff65e058d267f4a" + } + ], + "purl": "pkg:maven/org.jboss.narayana.rts/restat-integration@7.1.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/narayana/rts/main/restat-integration-7.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.rts/restat-util@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.rts", + "name": "restat-util", + "version": "7.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9c951eea7414d67108622d2715ba186c44c1a566dddc2238e28682caa0d5ea95" + } + ], + "purl": "pkg:maven/org.jboss.narayana.rts/restat-util@7.1.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/narayana/rts/main/restat-util-7.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/jbossxts@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "jbossxts", + "version": "7.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6630efa68186ee474cbc42a35800a06b2931190760cfcbcbeeb9f9f929415905" + } + ], + "purl": "pkg:maven/org.jboss.narayana.xts/jbossxts@7.1.2.Final-redhat-00001", + "components": [ + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/bridge@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "bridge", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.xts/bridge@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/recovery@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "recovery", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.xts/recovery@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/service@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "service", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.xts/service@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/ws-c11@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "ws-c11", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.xts/ws-c11@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/ws-t11@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "ws-t11", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.xts/ws-t11@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/wsas@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "wsas", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.xts/wsas@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/wscf11@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "wscf11", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.xts/wscf11@7.1.2.Final-redhat-00001", + "evidence": {} + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.xts/wstx11@7.1.2.Final-redhat-00001", + "group": "org.jboss.narayana.xts", + "name": "wstx11", + "version": "7.1.2.Final-redhat-00001", + "purl": "pkg:maven/org.jboss.narayana.xts/wstx11@7.1.2.Final-redhat-00001", + "evidence": {} + } + ], + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/xts/main/jbossxts-7.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.openjdk-orb/openjdk-orb@10.1.1.Final-redhat-00001", + "group": "org.jboss.openjdk-orb", + "name": "openjdk-orb", + "version": "10.1.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "02c03d783eb96e43b19255696fa4caed89d9eb3d85d564ad5b9c5c60aae7cf46" + } + ], + "purl": "pkg:maven/org.jboss.openjdk-orb/openjdk-orb@10.1.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/javax/orb/api/main/openjdk-orb-10.1.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.remoting/jboss-remoting@5.0.31.Final-redhat-00001", + "group": "org.jboss.remoting", + "name": "jboss-remoting", + "version": "5.0.31.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "334d4845e3acee7609d0efc990ac4604eda749575352d295d1fb0262b1e0d5d4" + } + ], + "purl": "pkg:maven/org.jboss.remoting/jboss-remoting@5.0.31.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/remoting/main/jboss-remoting-5.0.31.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.remotingjmx/remoting-jmx@3.1.0.Final-redhat-00002", + "group": "org.jboss.remotingjmx", + "name": "remoting-jmx", + "version": "3.1.0.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "ebe9aa8247ae6e15f0e8de901a1d3714e108fb55f631654c8ef94e870603d04b" + } + ], + "purl": "pkg:maven/org.jboss.remotingjmx/remoting-jmx@3.1.0.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/remoting-jmx/main/remoting-jmx-3.1.0.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-atom-provider@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-atom-provider", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "ce89cd986fab5251b384dbff4e8f235e2deb8c3b2b2c998fde0ad8d05df12512" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-atom-provider@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/resteasy-atom-provider-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-cdi@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-cdi", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "7fa66755fb32b014b03b7343a75fb72a16059375ac36f260d20fdce0540694c7" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-cdi@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/resteasy-cdi-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-client@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-client", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "b64eae12ce586cb1bb408c4034b46a765500345a36f6e1004057826ee03a1ac2" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-client@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/resteasy-client-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-client-api@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-client-api", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "871e66680aabd61d22f4e86f26b30b0151dd2d784b7167745324cd33333c30fa" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-client-api@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/resteasy-client-api-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-core", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "35ec20b500b47e7ad0298e67eeb2b11a4f306a209a2a12794265cb33c3f962d1" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-core@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/resteasy-core-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-core-spi", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "72b3bd70b20d2bed1340d8a8d9d881e73e70006c89c4fd8a8c2584d49a065839" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/resteasy-core-spi-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-crypto@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-crypto", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "923a19f9f7a256ab2928931778062a738228d375495f3445cd43c4874cde3820" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-crypto@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/resteasy-crypto-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-jackson2-provider", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "9ce43abe65bcca677a56dee5a904285ddce32fdc55c4d3b399a70e893b8173a9" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/resteasy-jackson2-provider-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-jaxb-provider", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "9afd282ad30dbd048e151e1f5d4ce1199ad36e85b80111dcc69eea71a412c21c" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/resteasy-jaxb-provider-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jsapi@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-jsapi", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "270fb028e7b0ff900e97649adc7634ab58f93113bce717f0159eca8247f3c023" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-jsapi@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/resteasy-jsapi-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-json-binding-provider@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-json-binding-provider", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "9387c9718817dcfa82d1af3b68fe305a774c69f30f9df3315320e7d31e0e98e0" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-json-binding-provider@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/resteasy-json-binding-provider-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-json-p-provider@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-json-p-provider", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "822810aeaf366f9d215d46c11d2185378b390feca7110036103377a894130a53" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-json-p-provider@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/resteasy-json-p-provider-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-multipart-provider", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "0428c1e053dd43e5913426966f783ae489bfc3621d8d3bff315dce8561e080c7" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/resteasy-multipart-provider-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-rxjava2@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-rxjava2", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "2a84ad70b833307bbb0c666a4d9107146c8909970d9fb64fbea9d29a1cf972b4" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-rxjava2@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/resteasy-rxjava2-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-tracing-api@2.0.1.Final-redhat-00001", + "group": "org.jboss.resteasy", + "name": "resteasy-tracing-api", + "version": "2.0.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "baa88f29e796f3c2becf2c162e0df79a20d29e264bfc1e4f48cb12428f536306" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-tracing-api@2.0.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/resteasy-tracing-api-2.0.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-validator-provider@6.2.15.Final-redhat-00002", + "group": "org.jboss.resteasy", + "name": "resteasy-validator-provider", + "version": "6.2.15.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "f079c116273400b767d58b7832c637b1a02011f83250e2a5fc2c9a350e824c93" + } + ], + "purl": "pkg:maven/org.jboss.resteasy/resteasy-validator-provider@6.2.15.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/resteasy-validator-provider-6.2.15.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy.spring/resteasy-spring@3.2.0.Final-redhat-00001", + "group": "org.jboss.resteasy.spring", + "name": "resteasy-spring", + "version": "3.2.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a0d6a97fe65ddd8574cd44a764504dcb2d818d18eb371ab35f768f57ba051cf9" + } + ], + "purl": "pkg:maven/org.jboss.resteasy.spring/resteasy-spring@3.2.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/bundled/resteasy-spring-jar/resteasy-spring-3.2.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@2.0.2.Final-redhat-00001", + "group": "org.jboss.slf4j", + "name": "slf4j-jboss-logmanager", + "version": "2.0.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ba6fb9bd7cda0e62581297117bc740c13eed53c8f4581a0d7ec6214fd83c0ba3" + } + ], + "purl": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@2.0.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/slf4j/impl/main/slf4j-jboss-logmanager-2.0.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.jakarta.el/jboss-el-api_5.0_spec@4.0.2.Final-redhat-00001", + "group": "org.jboss.spec.jakarta.el", + "name": "jboss-el-api_5.0_spec", + "version": "4.0.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "feb47d06272cd4902f53f076816f870bcf11d2523f89ccdeab9caaf008f1db21" + } + ], + "purl": "pkg:maven/org.jboss.spec.jakarta.el/jboss-el-api_5.0_spec@4.0.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/el/api/main/jboss-el-api_5.0_spec-4.0.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.jakarta.xml.soap/jboss-saaj-api_3.0_spec@1.0.0.Final-redhat-00001", + "group": "org.jboss.spec.jakarta.xml.soap", + "name": "jboss-saaj-api_3.0_spec", + "version": "1.0.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "720f5064bc17b027936300feb305edceb9f3ed6799c32fab8aa41e1247ad5f57" + } + ], + "purl": "pkg:maven/org.jboss.spec.jakarta.xml.soap/jboss-saaj-api_3.0_spec@1.0.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/xml/soap/api/main/jboss-saaj-api_3.0_spec-1.0.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.jakarta.xml.ws/jboss-jakarta-xml-ws-api_4.0_spec@1.0.0.Final-redhat-00001", + "group": "org.jboss.spec.jakarta.xml.ws", + "name": "jboss-jakarta-xml-ws-api_4.0_spec", + "version": "1.0.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "50d81e9c267851aba5f858755b9d0cfe4459c56d3e8036c1a98ac9109e02cac5" + } + ], + "purl": "pkg:maven/org.jboss.spec.jakarta.xml.ws/jboss-jakarta-xml-ws-api_4.0_spec@1.0.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/jakarta/xml/ws/api/main/jboss-jakarta-xml-ws-api_4.0_spec-1.0.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.stdio/jboss-stdio@1.1.0.Final-redhat-00001", + "group": "org.jboss.stdio", + "name": "jboss-stdio", + "version": "1.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d28963da13936a5c320c00ff32f483c449e447109a7057693d6b95d1019daf2d" + } + ], + "purl": "pkg:maven/org.jboss.stdio/jboss-stdio@1.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/stdio/main/jboss-stdio-1.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@2.5.0.redhat-00001", + "group": "org.jboss.threads", + "name": "jboss-threads", + "version": "2.5.0.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7bd7934a504d1f127a1be5ed0358734d2e15f07044efb0f48e14c6f9aaaf5f5d" + } + ], + "purl": "pkg:maven/org.jboss.threads/jboss-threads@2.5.0.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/threads/main/jboss-threads-2.5.0.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.weld/weld-api@5.0.0.SP3-redhat-00001", + "group": "org.jboss.weld", + "name": "weld-api", + "version": "5.0.0.SP3-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b4b2604c55cdcea6e846cd5243a9835edeed5278d61940c006b867cf27188963" + } + ], + "purl": "pkg:maven/org.jboss.weld/weld-api@5.0.0.SP3-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/weld/api/main/weld-api-5.0.0.SP3-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.weld/weld-core-impl@5.1.6.Final-redhat-00001", + "group": "org.jboss.weld", + "name": "weld-core-impl", + "version": "5.1.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "938a07673677ba428583c86e06e1e817e4ab5ebf4ca860891b28d4cbf817b89d" + } + ], + "purl": "pkg:maven/org.jboss.weld/weld-core-impl@5.1.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/weld/core/main/weld-core-impl-5.1.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.weld/weld-lite-extension-translator@5.1.6.Final-redhat-00001", + "group": "org.jboss.weld", + "name": "weld-lite-extension-translator", + "version": "5.1.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3cf7c5aa0e2134096909fda57341ab6d8602c643ec9fdf80925c56903f68c39d" + } + ], + "purl": "pkg:maven/org.jboss.weld/weld-lite-extension-translator@5.1.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/weld/core/main/weld-lite-extension-translator-5.1.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.weld/weld-spi@5.0.0.SP3-redhat-00001", + "group": "org.jboss.weld", + "name": "weld-spi", + "version": "5.0.0.SP3-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "8f7e853f344743125e349d069aa8f2078e4b48838815bbbfaaabf14c3bab1814" + } + ], + "purl": "pkg:maven/org.jboss.weld/weld-spi@5.0.0.SP3-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/weld/spi/main/weld-spi-5.0.0.SP3-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.weld.module/weld-ejb@5.1.6.Final-redhat-00001", + "group": "org.jboss.weld.module", + "name": "weld-ejb", + "version": "5.1.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "98b36c86b49287b3e1b29e0da9b0d3795acf57bd704a58c635959a037f8a12c4" + } + ], + "purl": "pkg:maven/org.jboss.weld.module/weld-ejb@5.1.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/weld/core/main/weld-ejb-5.1.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.weld.module/weld-jsf@5.1.6.Final-redhat-00001", + "group": "org.jboss.weld.module", + "name": "weld-jsf", + "version": "5.1.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1c66bd895efd53be3913f17375012df935d64ad759a367abb5a7931a17dcb399" + } + ], + "purl": "pkg:maven/org.jboss.weld.module/weld-jsf@5.1.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jsf-injection/main/weld-jsf-5.1.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.weld.module/weld-jta@5.1.6.Final-redhat-00001", + "group": "org.jboss.weld.module", + "name": "weld-jta", + "version": "5.1.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4b6f5653df8546b9f8e246aaac1408a156fcec646135ab80c7d8c8f2cd097ec5" + } + ], + "purl": "pkg:maven/org.jboss.weld.module/weld-jta@5.1.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/weld/core/main/weld-jta-5.1.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.weld.module/weld-web@5.1.6.Final-redhat-00001", + "group": "org.jboss.weld.module", + "name": "weld-web", + "version": "5.1.6.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ffe935921b2adf14ccd4732acb2db561e0850e061f0997175b731932ca4f9111" + } + ], + "purl": "pkg:maven/org.jboss.weld.module/weld-web@5.1.6.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/weld/core/main/weld-web-5.1.6.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws/jbossws-api@3.0.0.Final-redhat-00001", + "group": "org.jboss.ws", + "name": "jbossws-api", + "version": "3.0.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "da9b31decf78acace4306c54642e6ea354a50d55b2cafb3bb7d5e22f788b452c" + } + ], + "purl": "pkg:maven/org.jboss.ws/jbossws-api@3.0.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/api/main/jbossws-api-3.0.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws/jbossws-common@5.1.0.Final-redhat-00001", + "group": "org.jboss.ws", + "name": "jbossws-common", + "version": "5.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c364d906ce7a5bdeff8a34efaceb046668722df2fd37a870b5c7d0bdd4a3e4bc" + } + ], + "purl": "pkg:maven/org.jboss.ws/jbossws-common@5.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/common/main/jbossws-common-5.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws/jbossws-common-tools@2.1.0.Final-redhat-00001", + "group": "org.jboss.ws", + "name": "jbossws-common-tools", + "version": "2.1.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5160625c3ca79496aad2062d945796975305f22cb8c693d021637a727e29c3bb" + } + ], + "purl": "pkg:maven/org.jboss.ws/jbossws-common-tools@2.1.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/tools/common/main/jbossws-common-tools-2.1.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws/jbossws-spi@5.0.0.Final-redhat-00001", + "group": "org.jboss.ws", + "name": "jbossws-spi", + "version": "5.0.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a9a095bc91ebb10a9fbd1f4cea08804e6372fcaaca629712d948ab3fcea0b246" + } + ], + "purl": "pkg:maven/org.jboss.ws/jbossws-spi@5.0.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/spi/main/jbossws-spi-5.0.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-client@7.3.8.Final-redhat-00001", + "group": "org.jboss.ws.cxf", + "name": "jbossws-cxf-client", + "version": "7.3.8.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "69d2d3161df4965860722da88b61ba2bc432698ae612f1c39f237ad862151b53" + } + ], + "purl": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-client@7.3.8.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/jaxws-client/main/jbossws-cxf-client-7.3.8.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-factories@7.3.8.Final-redhat-00001", + "group": "org.jboss.ws.cxf", + "name": "jbossws-cxf-factories", + "version": "7.3.8.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9a58a1aae84ea7569e5a98be40cb6741985efef8075735a9bbe476d8c226d866" + } + ], + "purl": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-factories@7.3.8.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/jbossws-cxf-factories-7.3.8.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-resources@7.3.8.Final-redhat-00001", + "group": "org.jboss.ws.cxf", + "name": "jbossws-cxf-resources", + "version": "7.3.8.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4431623cb178749a5fd2dedc36982c53f7feca751eafb1481308e0a11c1110c9" + } + ], + "purl": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-resources@7.3.8.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/webservices/main/jbossws-cxf-resources-7.3.8.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-server@7.3.8.Final-redhat-00001", + "group": "org.jboss.ws.cxf", + "name": "jbossws-cxf-server", + "version": "7.3.8.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1b05c68c4c981d694bf8004b47c82479d2453c76ceb70ce07db1228f47936812" + } + ], + "purl": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-server@7.3.8.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/jbossws-cxf-server-7.3.8.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-transports-udp@7.3.8.Final-redhat-00001", + "group": "org.jboss.ws.cxf", + "name": "jbossws-cxf-transports-udp", + "version": "7.3.8.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "df5caf6bbc07ec5f63d2913b2b2495ab9963f4e025ac8947eac1b587bf59822c" + } + ], + "purl": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-transports-udp@7.3.8.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/jbossws-cxf-transports-udp-7.3.8.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-transports-undertow@7.3.8.Final-redhat-00001", + "group": "org.jboss.ws.cxf", + "name": "jbossws-cxf-transports-undertow", + "version": "7.3.8.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "11ad9342ca3a137c0a43c0e739074a3e0c181c2c2708b3d3273f59074e2dd1e3" + } + ], + "purl": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-transports-undertow@7.3.8.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/jbossws-cxf-transports-undertow-7.3.8.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.ws.projects/jaxws-undertow-httpspi@2.0.0.Final-redhat-00001", + "group": "org.jboss.ws.projects", + "name": "jaxws-undertow-httpspi", + "version": "2.0.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "de48ba92f053c871f95e5f57c52032f7928db1966d78c061e141018d133846c0" + } + ], + "purl": "pkg:maven/org.jboss.ws.projects/jaxws-undertow-httpspi@2.0.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/jaxws-undertow-httpspi-2.0.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final-redhat-00001", + "group": "org.jboss.xnio", + "name": "xnio-api", + "version": "3.8.16.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "99db6090ed8cf5258cb3bbd5bc8f52c0c42cb962e09658c813e2d9254b308e39" + } + ], + "purl": "pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/xnio/main/xnio-api-3.8.16.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final-redhat-00001", + "group": "org.jboss.xnio", + "name": "xnio-nio", + "version": "3.8.16.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5beb35be972a3397e4706164238473a52b2d400c445e34f7bdc747c0c113d6a5" + } + ], + "purl": "pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/xnio/nio/main/xnio-nio-3.8.16.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jboss.xnio.netty/netty-xnio-transport@0.1.10.Final-redhat-00001", + "group": "org.jboss.xnio.netty", + "name": "netty-xnio-transport", + "version": "0.1.10.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "04258488db49a854dd4c64f740299835ecd938fa02a0cb163426b9cc261ba809" + } + ], + "purl": "pkg:maven/org.jboss.xnio.netty/netty-xnio-transport@0.1.10.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/netty-xnio-transport-0.1.10.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jctools/jctools-core@4.0.6.redhat-00001", + "group": "org.jctools", + "name": "jctools-core", + "version": "4.0.6.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7551586cefdcf679a55b6bad397c51de25e9afc0bce5748a0b812183d5e0d9ed" + } + ], + "purl": "pkg:maven/org.jctools/jctools-core@4.0.6.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jctools/main/jctools-core-4.0.6.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jgroups/jgroups@5.3.23.Final-redhat-00001", + "group": "org.jgroups", + "name": "jgroups", + "version": "5.3.23.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3bd3eb654d9ec21c6c9f4dee17e683a32d0b7eff87db1e04d6cef8b9a85a4721" + } + ], + "purl": "pkg:maven/org.jgroups/jgroups@5.3.23.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jgroups/main/jgroups-5.3.23.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jgroups.aws/jgroups-aws@3.0.1.Final-redhat-00001", + "group": "org.jgroups.aws", + "name": "jgroups-aws", + "version": "3.0.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d8105d7173c18b0fc9410f3175804267115c5142c179774333822c0e1abb4790" + } + ], + "purl": "pkg:maven/org.jgroups.aws/jgroups-aws@3.0.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jgroups/aws/main/jgroups-aws-3.0.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jgroups.azure/jgroups-azure@2.0.2.Final-redhat-00002", + "group": "org.jgroups.azure", + "name": "jgroups-azure", + "version": "2.0.2.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "45f7e40d83378dbbcba70cbbd556d2a709399861a7751181be63df1c64b7189c" + } + ], + "purl": "pkg:maven/org.jgroups.azure/jgroups-azure@2.0.2.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jgroups/azure/main/jgroups-azure-2.0.2.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jgroups.kubernetes/jgroups-kubernetes@2.0.2.Final-redhat-00001", + "group": "org.jgroups.kubernetes", + "name": "jgroups-kubernetes", + "version": "2.0.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1718e50b8426b61cbbb137501c1d9fe934f5e00fe249b17d920ba700f7b3489a" + } + ], + "purl": "pkg:maven/org.jgroups.kubernetes/jgroups-kubernetes@2.0.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jgroups/kubernetes/main/jgroups-kubernetes-2.0.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.jvnet.staxex/stax-ex@2.1.0.redhat-00003", + "group": "org.jvnet.staxex", + "name": "stax-ex", + "version": "2.1.0.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "ba647b0639238d525704eba2336053fc4aa6b54c7781a827549092532fa8d0b9" + } + ], + "purl": "pkg:maven/org.jvnet.staxex/stax-ex@2.1.0.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/com/sun/xml/messaging/saaj/main/stax-ex-2.1.0.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-core@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-core", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "fc80e74106d87b8d736a024e6620390f9550c7d4d7658f66bb8c8cdde7f09fe9" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-core@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-core-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-profile-api@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-profile-api", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "dca2b28b560622b335fb064b4dcc6bc72bf8a458e704c1e59285793453bcdac7" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-profile-api@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-profile-api-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-saml-api@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-saml-api", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "b5ac434b69dce5d78df72ba6649b0ea22c8d6b4e9a4f5a86d347861814ebca5d" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-saml-api@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-saml-api-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-saml-impl@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-saml-impl", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "370b53b26dc5699ec72ca74ad5da714ff15ef9d6b7a77590ebed555837f8e375" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-saml-impl@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-saml-impl-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-security-api@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-security-api", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "e441971a1e9f5460d566ce25f8657a24ed148ed0619f9c8f543d674f6f5e1c0e" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-security-api@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-security-api-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-security-impl@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-security-impl", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "2c4db8f85d3c33233c0c0243010db0597e265356b4ca3c0f4644e2a88654d073" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-security-impl@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-security-impl-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-soap-api@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-soap-api", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "d132dcc5f9590722ea2d102d89affc37b64247396dbf1abe4785e58f1b796692" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-soap-api@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-soap-api-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-xacml-api@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-xacml-api", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "d664392f2d3e83316d8e71cf40cde4451c03c72767abff924da31204df7ec58d" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-xacml-api@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-xacml-api-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-xacml-impl@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-xacml-impl", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "6501b2bdde9b156f3f78677ddc3bde9da538abf2758e45749c76510b7da95a68" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-xacml-impl@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-xacml-impl-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-xacml-saml-api@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-xacml-saml-api", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "20a0511434a4501dc99b0c165ea342bc82e59d1b1fa014d6955fef1ce526cfe7" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-xacml-saml-api@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-xacml-saml-api-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-xacml-saml-impl", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "730388f436807caf5ffc8237307feaa0ec0647896858e5af828202a1f3519163" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-xacml-saml-impl-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-xmlsec-api@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-xmlsec-api", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "a1925caa4cbbd8082a063c97874e0fbba730c9ac3dab7cd3a98204c1afde5dbe" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-xmlsec-api@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-xmlsec-api-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.3.2.redhat-00002", + "group": "org.opensaml", + "name": "opensaml-xmlsec-impl", + "version": "4.3.2.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "90b15ca70517e749642dbb7d4f216cd069ca6fb620769ceeba1bc834e7671d8a" + } + ], + "purl": "pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.3.2.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/opensaml/main/opensaml-xmlsec-impl-4.3.2.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm@9.7.1.redhat-00002", + "group": "org.ow2.asm", + "name": "asm", + "version": "9.7.1.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "af17bac09115c0bb70dd6791d8874064adcb23e94e1c1165bf08e361709b15d3" + } + ], + "purl": "pkg:maven/org.ow2.asm/asm@9.7.1.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/asm/asm/main/asm-9.7.1.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1.redhat-00002", + "group": "org.ow2.asm", + "name": "asm-util", + "version": "9.7.1.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "bbc12d2bee3e290ed24971e8ac7c4b10ee7e223bdd452776370377beb6e556c5" + } + ], + "purl": "pkg:maven/org.ow2.asm/asm-util@9.7.1.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/asm/asm/main/asm-util-9.7.1.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.projectodd.vdx/vdx-core@1.1.6.redhat-1", + "group": "org.projectodd.vdx", + "name": "vdx-core", + "version": "1.1.6.redhat-1", + "hashes": [ + { + "alg": "SHA-256", + "content": "7bfe48cc64b9d3ad54235d3e21e21b18895b81a41fb5b18164196e5dd3c1e1b8" + } + ], + "purl": "pkg:maven/org.projectodd.vdx/vdx-core@1.1.6.redhat-1", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/projectodd/vdx/main/vdx-core-1.1.6.redhat-1.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.projectodd.vdx/vdx-wildfly@1.1.6.redhat-1", + "group": "org.projectodd.vdx", + "name": "vdx-wildfly", + "version": "1.1.6.redhat-1", + "hashes": [ + { + "alg": "SHA-256", + "content": "0cd4d1587d4bdaee25aaf1b1a15e2882e8ccf2a8f893b9cf3f341d665ba29a03" + } + ], + "purl": "pkg:maven/org.projectodd.vdx/vdx-wildfly@1.1.6.redhat-1", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/projectodd/vdx/main/vdx-wildfly-1.1.6.redhat-1.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.4.redhat-00005", + "group": "org.reactivestreams", + "name": "reactive-streams", + "version": "1.0.4.redhat-00005", + "hashes": [ + { + "alg": "SHA-256", + "content": "d03eedb24aaf07496241b06e54fe4f0ac90d0c32fe4062e2fd13032c4e1ccafb" + } + ], + "purl": "pkg:maven/org.reactivestreams/reactive-streams@1.0.4.redhat-00005", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/reactivestreams/main/reactive-streams-1.0.4.redhat-00005.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.17.redhat-00001", + "group": "org.slf4j", + "name": "slf4j-api", + "version": "2.0.17.redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2f0ff543310a1ff260b7187375fc38da49899214fdc208cf8d83940c6487756c" + } + ], + "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.17.redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/slf4j/main/slf4j-api-2.0.17.redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly/wildfly-naming-client@2.0.1.Final-redhat-00001", + "group": "org.wildfly", + "name": "wildfly-naming-client", + "version": "2.0.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c9a371b7f51d8ccbaa599144ca0157d904e7b34afdea2e3dff0c0be65838c20b" + } + ], + "purl": "pkg:maven/org.wildfly/wildfly-naming-client@2.0.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/naming-client/main/wildfly-naming-client-2.0.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final-redhat-00002", + "group": "org.wildfly.client", + "name": "wildfly-client-config", + "version": "1.0.1.Final-redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "b31607556062483e44d919db47ceb46457d7b72716ef86c8b2ddd714a18fd1dc" + } + ], + "purl": "pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final-redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/client/config/main/wildfly-client-config-1.0.1.Final-redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-common@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-cache-infinispan-common", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "46fb8e6e89621bc896b05b02ce3da2d8369b9d11572f41acd39f7116de20d371" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-common@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/wildfly-clustering-cache-infinispan-common-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-embedded@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-cache-infinispan-embedded", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "53a2adb225d3da1a77266b974c16eee6eb4fa33cd83ad515d86ef92440b9df3b" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-embedded@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/wildfly-clustering-cache-infinispan-embedded-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-remote@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-cache-infinispan-remote", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3bc9508a797f11ebe6587fcfc5c8d01e9220c5315789a4d600832a5aea122eea" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-remote@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/wildfly-clustering-cache-infinispan-remote-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-spi@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-cache-spi", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4a7319575ff8d9ede5394dd81c14633b741cc8b510212535fef4480b523d256e" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-spi@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/cache/spi/main/wildfly-clustering-cache-spi-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-context@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-context", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "02c24d774d8b942daa6fae4d705b91ddbd93a95324a928560c432f5eb1eb53b7" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-context@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/context/main/wildfly-clustering-context-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-jboss@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-marshalling-jboss", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "acda6c0a0eafa878b4c70ab16e9e9b0815e45ea5b53c51cba9a27438cce4cc57" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-jboss@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/wildfly-clustering-marshalling-jboss-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-protostream@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-marshalling-protostream", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3b95d69052dee7faffc88639f5628addeeccb260e900ef986a8f8ec14aeb8437" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-protostream@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/wildfly-clustering-marshalling-protostream-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-spi@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-marshalling-spi", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6fc08e5cba39d3cc9ca5dc0ea5e47fc0f79f3bba3d64d1f584f45202777c8885" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-spi@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/wildfly-clustering-marshalling-spi-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-api@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-server-api", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "fbed07953e0e930f141e6406a4acf6370a73a2e5e5419607c8e0008052eccd2b" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-api@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/server/api/main/wildfly-clustering-server-api-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-infinispan@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-server-infinispan", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5dfe524fc061c4153b7861255623899fedfa982848a1ee8f6c790e4ae25b6186" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-infinispan@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/wildfly-clustering-server-infinispan-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-jgroups@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-server-jgroups", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "81710a7b7b0d6948da4943fac64de613a40e9f1d8317bb43a075fdbf4b2710b1" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-jgroups@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/wildfly-clustering-server-jgroups-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-local@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-server-local", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ab3d4fb5124aae267bcb46cd4effd9a76227847a9f7f0d9ca692b253bb194ba2" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-local@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/server/local/main/wildfly-clustering-server-local-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-spi@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-server-spi", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "007e21abc6615dc1f877cc81bd5fcd50eb20052ceac5fba06a15edf06050fee0" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-spi@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/server/spi/main/wildfly-clustering-server-spi-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-cache@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-session-cache", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "29bc2f3052960611e9be1a149c850c19c89fbe69d74ca076b0aa238cc08e4b0a" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-cache@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/session/cache/main/wildfly-clustering-session-cache-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-infinispan-embedded@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-session-infinispan-embedded", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "503d14dd09acae96041f9a7ce5568dc0868d1a139e02f735fde7fc0196fbf55a" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-infinispan-embedded@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/wildfly-clustering-session-infinispan-embedded-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-infinispan-remote@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-session-infinispan-remote", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1d2d3a51deec587ad3ca03cf0b96b31c2b9e064a0ff4b0d090b9056444dae7f1" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-infinispan-remote@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/wildfly-clustering-session-infinispan-remote-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spec-servlet-6.0@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-session-spec-servlet-6.0", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "02e0b7801313b4f078dfe13681a4ab817313b7c3fb4eb684d908dc21392a3678" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spec-servlet-6.0@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/wildfly-clustering-session-spec-servlet-6.0-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spec-spi@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-session-spec-spi", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1a8b451a557fbcdd72631dd0247ce92230d8e129f7dc910b199e82c0492587f4" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spec-spi@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/wildfly-clustering-session-spec-spi-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spi@5.0.12.Final-redhat-00001", + "group": "org.wildfly.clustering", + "name": "wildfly-clustering-session-spi", + "version": "5.0.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7c62a612c1f9c6d6f024c6f8bcea7aae8bc34ebf1e32f229bc3167d863558baf" + } + ], + "purl": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spi@5.0.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/clustering/session/spi/main/wildfly-clustering-session-spi-5.0.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final-redhat-00003", + "group": "org.wildfly.common", + "name": "wildfly-common", + "version": "1.7.0.Final-redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "2a9dcdbac5641ea1270a46d12001da7d901dbfea11680bcedc1ec2a8e967f3bd" + } + ], + "purl": "pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final-redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/common/main/wildfly-common-1.7.0.Final-redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-cli@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-cli", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "89cfd8eb77459c8948d8c344b2719d59440760a4c1d9654d6df723052cb86ff7" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-cli@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/cli/main/wildfly-cli-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-controller@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-controller", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2de74449264f419e6cec14f645036b9d5005050a787897623567e1873bf66113" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-controller@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/controller/main/wildfly-controller-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-controller-client@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-controller-client", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "89b3d03046db804764d5de26ae7a368d1642c396d9ffcb9897043711460b2e2c" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-controller-client@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/controller-client/main/wildfly-controller-client-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-core-management-client@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-core-management-client", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "b732eedc3f463256f4af58c952eb111740de02d6bc1cbea9c485490c89f1cc79" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-core-management-client@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/core-management-client/main/wildfly-core-management-client-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-core-management-subsystem@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-core-management-subsystem", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7f9c6d4cc44d36524495541b781adf91f518420f83675b4004212d4aa20c02a5" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-core-management-subsystem@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/core-management/main/wildfly-core-management-subsystem-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-core-security@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-core-security", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7f8766323aad69592485f67c426f9b497cd5a64274aa815a4ae21af491ba7334" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-core-security@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/core-security/main/wildfly-core-security-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-deployment-repository@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-deployment-repository", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "357b3e3e74b05c1bbbd15acb57978de7cf03bb72ed04aed46901fed02715e886" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-deployment-repository@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/deployment-repository/main/wildfly-deployment-repository-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-deployment-scanner@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-deployment-scanner", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ad340b2ca4d22afe699382d23ed6f237afde85b7f9bde94d8a1a6616cbf03273" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-deployment-scanner@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/deployment-scanner/main/wildfly-deployment-scanner-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-discovery@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-discovery", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "af01f0c6c397437084fe6026bf57aa736b567302afe92c47384ff82d138bc1bc" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-discovery@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/discovery/main/wildfly-discovery-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-domain-http-interface@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-domain-http-interface", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3757c20e64d8e6b01ac64fa4f9a9008393b2cbcf302923715085ceefc84d5e5c" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-domain-http-interface@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/domain-http-interface/main/wildfly-domain-http-interface-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-domain-management@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-domain-management", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "78ec7daad53489d3632966389812c68eb6b721a5aa944e4019ac6810bb72c98f" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-domain-management@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/domain-management/main/wildfly-domain-management-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-elytron-integration@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-elytron-integration", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7a73b9b22bcc3190cdfcc5a5d1949c8a88141376c37a0d4cde1f420b52756741" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-elytron-integration@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/elytron/main/wildfly-elytron-integration-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-embedded@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-embedded", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7a9cfa80e114b45cdb39188d39322d2c532c0d9878156bedb5681315645a3169" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-embedded@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/embedded/main/wildfly-embedded-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-event-logger@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-event-logger", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d27ca6ea33fb359550b703dc2e3b0f5db8e0c4686c1f8ec187542b7e2a06c9d7" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-event-logger@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/event/logger/main/wildfly-event-logger-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-host-controller@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-host-controller", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d8b2c847b0d67bbad7b01f382fb60949a51bef482b889efed26b6e90a6f1f463" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-host-controller@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/host-controller/main/wildfly-host-controller-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-installation-manager@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-installation-manager", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "16c92fc8a0b53c54f59f45d144ef40299dfd9a13d5e6d66acfec14208bcb20e0" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-installation-manager@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/installation-manager/main/wildfly-installation-manager-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-io@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-io", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c7f0e4d6cf10126e9149d491a1e796ae277b2af427b7219b43327ca01b81e379" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-io@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/io/main/wildfly-io-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-io-spi@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-io-spi", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "40fe21187dee008f00a87012651abadf4df26cb97ac65d806792ac29ea99ebf0" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-io-spi@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/io/spi/main/wildfly-io-spi-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-jar-runtime@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-jar-runtime", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "39bce5d5d11494aff929154e03cb53bc8a46dc0766d21532cde0e25b74b8e4e7" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-jar-runtime@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/bootable-jar/main/wildfly-jar-runtime-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-jmx@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-jmx", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "39ef9cc7097d19493143f23567c3f7ed18a074858496b07c9c878ea1ee1780cf" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-jmx@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/jmx/main/wildfly-jmx-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-logging@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-logging", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ca2caaef99cbd0b214fe2925738aa4104b308bfc94dea177a877f8d06005de25" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-logging@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-management-client-content@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-management-client-content", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "e4ebe7d610b954908a122de8286cfce28209cb09f8b958a87a87a91172f8582b" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-management-client-content@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/management-client-content/main/wildfly-management-client-content-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-network@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-network", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "8b67681194a9d28072733951d7c2c70d1239bc6d5596bf391f4aca5195b2c06e" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-network@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/network/main/wildfly-network-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-patching@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-patching", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "137e21f4d6565dc9bb89dbf969a16758cd8871ccb123c5bbf7b454bde8849492" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-patching@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/patching/main/wildfly-patching-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-platform-mbean@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-platform-mbean", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "29ba7f03765b7d7e280a3a0f89a81ae13773eb595a24d5176a949699cf12fdb2" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-platform-mbean@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/platform-mbean/main/wildfly-platform-mbean-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-process-controller@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-process-controller", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "de9fbaf9f5fecb6b4ed83a4e03f219ebd9ae7531bc65cea4b304e41df37d32e6" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-process-controller@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/process-controller/main/wildfly-process-controller-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-protocol@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-protocol", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a035b610b693be8237eb7667230cb80a896006d37baabb2094b4276b24c59a02" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-protocol@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/protocol/main/wildfly-protocol-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-remoting@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-remoting", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ddf00aab9594eb18fca8594a54bd91eb8b6e6d3a84c3c0355787286477c17242" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-remoting@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/remoting/main/wildfly-remoting-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-request-controller@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-request-controller", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "428f83209e06d92cc57d6dbc4e79d4929496eff243172553fdb05eb3b343c541" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-request-controller@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/request-controller/main/wildfly-request-controller-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-security-manager@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-security-manager", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c22d609928862e41086b64e19ae1f76ed71bc02d3c30987c2ff891eca2c8dfa8" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-security-manager@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/extension/security/manager/main/wildfly-security-manager-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-server@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-server", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4cd57e7302df43eb0a823bfb98e9a3c1a8dc74a0ed127b97b39dc74469a5206e" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-server@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/server/main/wildfly-server-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-service@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-service", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d560ab980821b6c4c612ffdd73d5e9242d036605957903a47b9dc41006ab24fd" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-service@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/service/main/wildfly-service-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-subsystem@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-subsystem", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6acd88990ad43c6d382a40aa759e7029c20027c4f561291edf4bad5808294fd9" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-subsystem@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/subsystem/main/wildfly-subsystem-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-threads@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-threads", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "cd5e1cc769af9b505a3ea6133f1f60dd97f870e4ae6f3cc0a891214cfedfe0dc" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-threads@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/threads/main/wildfly-threads-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.core/wildfly-version@27.1.12.Final-redhat-00001", + "group": "org.wildfly.core", + "name": "wildfly-version", + "version": "27.1.12.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "72c4e483352151f50ff83d2ead898bc757b0f43f0856aa0f9ed6293c1f7b5178" + } + ], + "purl": "pkg:maven/org.wildfly.core/wildfly-version@27.1.12.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/jboss/as/version/main/wildfly-version-27.1.12.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.discovery/wildfly-discovery-client@1.3.0.Final-redhat-00001", + "group": "org.wildfly.discovery", + "name": "wildfly-discovery-client", + "version": "1.3.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "229d2514ca73b684429eb17e560cc29e4216128100cc2ca046ed0ea0846974b1" + } + ], + "purl": "pkg:maven/org.wildfly.discovery/wildfly-discovery-client@1.3.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/discovery/main/wildfly-discovery-client-1.3.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.installation-manager/installation-manager-api@1.1.1.Final-redhat-00001", + "group": "org.wildfly.installation-manager", + "name": "installation-manager-api", + "version": "1.1.1.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "31dd2eb2431ac458fe80454db936794cd6e552aa3ac4f33c77d1b3e9792559e4" + } + ], + "purl": "pkg:maven/org.wildfly.installation-manager/installation-manager-api@1.1.1.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/installation-manager/api/main/installation-manager-api-1.1.1.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.launcher/wildfly-launcher@1.0.2.Final-redhat-00001", + "group": "org.wildfly.launcher", + "name": "wildfly-launcher", + "version": "1.0.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "e8ae0cd56a9da58a774590dc867230b2e52db5172c496ae1bf6ab40a3a9ebb7c" + } + ], + "purl": "pkg:maven/org.wildfly.launcher/wildfly-launcher@1.0.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "bin/launcher.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-java@2.3.0.Final-redhat-00001", + "group": "org.wildfly.openssl", + "name": "wildfly-openssl-java", + "version": "2.3.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "797bbe1c5a6677cdba00207763881e5eb2fc304fff78d92915d7c19e14d013da" + } + ], + "purl": "pkg:maven/org.wildfly.openssl/wildfly-openssl-java@2.3.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/openssl/main/wildfly-openssl-java-2.3.0.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-ppc64le@2.3.0.Final-redhat-00001", + "group": "org.wildfly.openssl", + "name": "wildfly-openssl-linux-ppc64le", + "version": "2.3.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "bbafccc493e1e5e7abaf3385f7c54a65acb37f4bde1f59c0042d8e022e33d8dc" + } + ], + "purl": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-ppc64le@2.3.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/openssl/main/lib" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel10-x86_64@2.3.0.Final-redhat-00001", + "group": "org.wildfly.openssl", + "name": "wildfly-openssl-linux-rhel10-x86_64", + "version": "2.3.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "871f1901e21c79ee7eab98ca082b2f0890b5b4e1b9628965487be80dc279783e" + } + ], + "purl": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel10-x86_64@2.3.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/openssl/main/lib" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel8-x86_64@2.3.0.Final-redhat-00001", + "group": "org.wildfly.openssl", + "name": "wildfly-openssl-linux-rhel8-x86_64", + "version": "2.3.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "306ead6d625607e15ceacc64ed0771c52eb60b48b5d8814623ced3bc6d34c2be" + } + ], + "purl": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel8-x86_64@2.3.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/openssl/main/lib" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel9-x86_64@2.3.0.Final-redhat-00001", + "group": "org.wildfly.openssl", + "name": "wildfly-openssl-linux-rhel9-x86_64", + "version": "2.3.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f0a7e4230f7f083effbf0be8bed0207bc741abc3602fe2585b50be64eb0d5379" + } + ], + "purl": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel9-x86_64@2.3.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/openssl/main/lib" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-s390x@2.3.0.Final-redhat-00001", + "group": "org.wildfly.openssl", + "name": "wildfly-openssl-linux-s390x", + "version": "2.3.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "0ce9f6e2f3ffe68943f7656487053a1d839ccb1521df5fd9b0681328e6ad4dfd" + } + ], + "purl": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-s390x@2.3.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/openssl/main/lib" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-windows-x86_64@2.3.0.Final-redhat-00001", + "group": "org.wildfly.openssl", + "name": "wildfly-openssl-windows-x86_64", + "version": "2.3.0.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "dbe408af36637744f48cee73e22f6cf755ef007c445278424a08c9c885d24b10" + } + ], + "purl": "pkg:maven/org.wildfly.openssl/wildfly-openssl-windows-x86_64@2.3.0.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/openssl/main/lib" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-asn1@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-asn1", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "45523a1d0403c6ace37e0c183a93395a05384a9bc8c905ad9039c6083c88d164" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-asn1@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-asn1-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-audit@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-audit", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "be2d9f6ab611bae91fecace4ea19dc2321a70e2bd51af20ff4a20b25e1352895" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-audit@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-audit-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "350a51e58e419cb8a7df95019d5be0cebf40d1b0f90df77f3d9848c91b2fa489" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ae65e4bb7861069c291d6493daac64f71b2dd12fd95a9a17dda0d5d7565d3a42" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-deprecated@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server-deprecated", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a2511c78a56cb5a645f5632ee8bbed433a0598443df583b96dc4b1f52c8f9663" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-deprecated@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-deprecated-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-http@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server-http", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4cc8412ccd312840427338e081203f9f829b68194041e63f302a75d69f60d96e" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-http@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-http-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-sasl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-server-sasl", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5fc8a3116bf6820afb596aeb8998d3644f6bf2bcfc9f3b63aa4fbdbaae63087e" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-sasl@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-sasl-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-auth-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "45ffe22b0bb73e98dc843b9401bd2923236d1af90ee1c1dd1140cd97107cc567" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-base@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-base", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "676272eb1c08073f98061630b31cf134c1b45b4511f9d0b068a2eb85930c6299" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-base@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-base-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-client@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-client", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "aa995950ce614e5a3df56e02f43803a3da15a1b7956c02ced69f6a6c5a60ef04" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-client@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-client-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "8f669682ca4b1b8a59b43486f6f330b39ef17c3ba1f6260308325c22486e8465" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-source-impl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential-source-impl", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "e729b079e67d5e5913eda00106803e1dfb874b37ea4f4436f414265a5372c8cf" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-source-impl@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-source-impl-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-store@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-credential-store", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a985144a77caee736471eca044533f18ce7f332e03c264dd4433d6ec165b2662" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-store@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-store-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-digest@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-digest", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7777675872fe702ed6df446b4dadbc28cbd234eba83b485b779029ee9318b45d" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-digest@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-digest-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-encryption@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-encryption", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9e575f9e9d419da8e7ce00acf423bdad44625a3e3b551bd191c10def8d8110a2" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-encryption@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-encryption-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1de7505d9fa619b83259e67d8e7775840d72fe8b0a1f929075e58278b7cf5c71" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-basic@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-basic", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ba4e29ed77824c61a2a2a805b59b8a9e2692d23c8f2a1236d31d9c50001677c5" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-basic@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-basic-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-bearer@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-bearer", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3a38e0675287785c69b1121d092e1737ca5adc1e38a47be6cea793080f826ab1" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-bearer@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-bearer-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-cert@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-cert", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "79fef9b4ca408db0005dd0cb5109138a96e9c8dc7d2d65d2a63679d894a70653" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-cert@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-cert-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-digest@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-digest", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "45716bdb6d2f3e95c10e2ec61f3eaf68cbc2406d9774b5a089809c9d2a39d7a9" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-digest@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-digest-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-external@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-external", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a10020095e765eee50ec7e37219f3cf1ebfd11014f0f7b9eec718e90e3c42721" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-external@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-external-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-form@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-form", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ccfa48baf06c3bfbe44697b52800987bb3865ef56650b8f8c7e03614acec440a" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-form@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-form-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-oidc@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-oidc", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "65aa135892f24eaba103d6b03e9942337ed541e15614213eb9ec14a785aa8297" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-oidc@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/wildfly-elytron-http-oidc-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-spnego@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-spnego", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "30da67ab7d575f30d06d9ae456c0921354ef3be507fa00f1217ee3291259c10f" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-spnego@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-spnego-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-sso@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-sso", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4fe24c5dadb5eaad1565299c829f4131497baa76b3de77d7442e02f7754d7161" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-sso@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-sso-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-stateful-basic@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-stateful-basic", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "237838680528b3cbc43d3cc8b293d0db79e0d37ad22ea2453d0a185a76020e34" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-stateful-basic@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/http/sfbasic/main/wildfly-elytron-http-stateful-basic-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-http-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "db2c9e63649c554283994ce570c4e6eac38c251e502a68e160148bbca14dbfef" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-http-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-jose-jwk@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-jose-jwk", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "046fef257060f3e7047ecd3cfcb7de936fdad2720a2c018e953e55e18f9e267a" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-jose-jwk@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/wildfly-elytron-jose-jwk-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-jose-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-jose-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "bb43d3841cf09b051889a40dfb87035d17746af77e47b0e64d5427890a85de7c" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-jose-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/wildfly-elytron-jose-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-json-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-json-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "53b08d1582b7eb4a16f023f6d58f3aef1a8cff2c15331e6d752c2abfba4a6f19" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-json-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-json-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-keystore@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-keystore", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "65e50819ff02d00d79fd5597b9f2c4343cc0a75bc87e9701d73fa442de2966ec" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-keystore@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-keystore-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c96429e52665a4ec9081462060d06459044f0924cacc1b8fdec484b8448a13d2" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-digest@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-digest", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a0e653c43a088c61504985c028340ebf018f97954e1c0f5ace1b833223cbe863" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-digest@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-digest-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-gssapi@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-gssapi", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "fd96671d36195130a2606ec04246a7cb4185641844c385dc3d5635c08f262051" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-gssapi@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-gssapi-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-http@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-http", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4e5380bd0b8110452361567063696114173fa35b53c61d7ec12218477aede0d4" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-http@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-http-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-oauth2@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-oauth2", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f5893242b6b0a4fff1026d045fd60b62a6f4f3ec2eb33783507cab2e1152b50a" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-oauth2@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-oauth2-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-scram@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-mechanism-scram", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f736aa158ca4d4288b69a7b2495651ff65286de576eb6fdd970322970168e0b3" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-scram@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-scram-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-password-impl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-password-impl", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9c0c558eb1997273d699e70cb0df1c91aa8d11074cc6185f71636e2f5bb9fe22" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-password-impl@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-password-impl-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-permission@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-permission", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2471d9bb4faaa2662616021e91e1d206706d66579dc1c4303e4ba6d441a59255" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-permission@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-permission-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-provider-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-provider-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3d58fd36b423dad75aa6ddde67b8128ef98a7587b2ad9cc11f2de308636b2695" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-provider-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-provider-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-realm", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "0eef9efbea5c27ff413210e8bee0cb65725220099b3d892ed9f434ceef511da0" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-realm@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-jdbc@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-realm-jdbc", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6eaea5e68593d76e0df84f358be1d3f4fc4bef71c81548f07c9bef78f9c7610e" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-jdbc@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-jdbc-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-ldap@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-realm-ldap", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "c79913ad6f051b61f32c351d2f38333ca34bee0960dd2c4cd295f9e9642c6c0f" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-ldap@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-ldap-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-token@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-realm-token", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "95c2c9f868f9809704712a26e97362edd2340c667ff5adb501ff7c8a887b6abf" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-token@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-token-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1c147067cad1be774da2f46d4d51ae538c793b76b26afd9d8ca466e2ed7988b1" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-anonymous@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-anonymous", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6bd0a96ab35d1a2c9776ec1666e5db051ee97ea252f17833bb2c97862db102f3" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-anonymous@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-anonymous-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-auth-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-auth-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d7906d5ae8cce0a8b6e8b931cae4e2ac50331e6c3daca9a2346079a62cfa99e4" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-auth-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-auth-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-digest@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-digest", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3ff50a4e88c98d849893d4e2a4e534b5ff0758e641d20530177b8a6385eeaf3b" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-digest@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-digest-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-entity@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-entity", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7e4cdb19711860a21848c0bd04c6029831608b7fa4f4e4a8bdc7513ca282ae7a" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-entity@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-entity-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-external@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-external", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "abb938d60563afa77094ff21b1aada20e96cd962ed134dc9ab0411e95ebbc382" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-external@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-external-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gs2@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-gs2", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "80782ad625f6d6d26a3fd196cdf6b0350df07c75948debf475746f7f49520884" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gs2@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-gs2-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gssapi@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-gssapi", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "1a5618bc9609a6ced43103dba0cca5c4befd6ec6b0b24bcb7b8e9a2c9703ad87" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gssapi@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-gssapi-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-localuser@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-localuser", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "35b589f25c0fcd1582dd64f5586d760fc50fa461c499ee6ace26e92264f885e9" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-localuser@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-localuser-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-oauth2@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-oauth2", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5d83e4fabd26390d153c7614365803f212c811ce0f98a25c0d0fe166ccc6d993" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-oauth2@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-oauth2-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-otp@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-otp", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "aa8e3db1168e3e572faf6e02f41fe7c7ab8536b6eec39b55597672cb7aebf0c7" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-otp@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-otp-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-plain@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-plain", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9ad2c46d658d29243a37633328a001c4fb1508467dc76885bf53c674f66b9b3a" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-plain@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-plain-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-scram@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-sasl-scram", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "aeaaa27fffd40edde8a383424dd93ae82192b039cfa4e4650b8c19775c493eb7" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-scram@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-scram-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-security-manager", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "353abb0410dac1ca4c8229dcfcf464ee08dbde5be46e5f7ca9c2202760fca543" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-security-manager-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager-action@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-security-manager-action", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "db0b63f04d0ee218b3a5102457d4ce1f542a54a2d4212dfba3fe4410d5cf1a1e" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager-action@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-security-manager-action-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-ssh-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-ssh-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "a33167e0c8e6627a9fda98e044b0c8b2602e0143563dd8acccb3cf4a84cd808b" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-ssh-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-ssh-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-ssl@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-ssl", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "ae3178b2887a6788862ebb8805a81d5ca1bf3a98594e343fc7b406b1ff2e1309" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-ssl@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-ssl-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-tool@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-tool", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "7d0a5b4aea4367e7f1064c69338115b7515f600b8a5eee2547c2eb7f741f04d8" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-tool@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-tool/main/wildfly-elytron-tool-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "288abba22eca1330d97a641c6f71592a356871388c2665d3b358f6b68003f0e5" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5444b7ff62a54396dc4dcf914171a33965636db788e13c47bdc91e41ba621b61" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-cert", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "5f7107e0d7141aa0e59cedf2481d62ff10f2267a23846d39fee54ecb693a9fd0" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-acme@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-cert-acme", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "bf577a47ab7a2194f6cd209ad30debf5f11620c15c0e4521e3838326f98116a7" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-acme@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-acme-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-util@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-cert-util", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "d2d9d83ecc4abb9922b82addc5d46ea331439ad2cc90f94c73a84925b53b8ad3" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-util@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-util-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-principal@2.6.9.Final-redhat-00001", + "group": "org.wildfly.security", + "name": "wildfly-elytron-x500-principal", + "version": "2.6.9.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "75eb43c88b8765af885b8c516ba1ef24bffac035b1bd98fe8c66595ca7b3964c" + } + ], + "purl": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-principal@2.6.9.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-principal-2.6.9.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security.elytron-web/undertow-server@4.1.2.Final-redhat-00001", + "group": "org.wildfly.security.elytron-web", + "name": "undertow-server", + "version": "4.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "2a2befd5fafb1d0d36c42b5ef33c4fc3301c3b75a10d9dddebcc3b58e31109b0" + } + ], + "purl": "pkg:maven/org.wildfly.security.elytron-web/undertow-server@4.1.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/undertow-server-4.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security.elytron-web/undertow-server-servlet@4.1.2.Final-redhat-00001", + "group": "org.wildfly.security.elytron-web", + "name": "undertow-server-servlet", + "version": "4.1.2.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "3dfe2561178159de5ebad247f041a6e14e6fc1a808d85bf82e070f00235cd8d9" + } + ], + "purl": "pkg:maven/org.wildfly.security.elytron-web/undertow-server-servlet@4.1.2.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/undertow-server-servlet-4.1.2.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-authentication@3.1.4.Final-redhat-00001", + "group": "org.wildfly.security.jakarta", + "name": "jakarta-authentication", + "version": "3.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "6f7088d9151f843cd7339fc6ca8a1c17b72d1adc6cbe736c703f5dd12a28f52f" + } + ], + "purl": "pkg:maven/org.wildfly.security.jakarta/jakarta-authentication@3.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/jakarta-authentication-3.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-authorization@3.1.4.Final-redhat-00001", + "group": "org.wildfly.security.jakarta", + "name": "jakarta-authorization", + "version": "3.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "064eed8b5bcd502f47420e12043167739a4d678c14ae2577da1c33bae0b517a7" + } + ], + "purl": "pkg:maven/org.wildfly.security.jakarta/jakarta-authorization@3.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/jakarta-authorization-3.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-client-resteasy@3.1.4.Final-redhat-00001", + "group": "org.wildfly.security.jakarta", + "name": "jakarta-client-resteasy", + "version": "3.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "9da4262db6ddcf6bfe03f69d9bef459d99981bdb042552069f8ae780904e6642" + } + ], + "purl": "pkg:maven/org.wildfly.security.jakarta/jakarta-client-resteasy@3.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/jakarta-client-resteasy-3.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-client-webservices@3.1.4.Final-redhat-00001", + "group": "org.wildfly.security.jakarta", + "name": "jakarta-client-webservices", + "version": "3.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "4961fc11ea85e2fdfca576d2917ef3c2fbafeb2404e6e506a7853266f942815b" + } + ], + "purl": "pkg:maven/org.wildfly.security.jakarta/jakarta-client-webservices@3.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/jakarta-client-webservices-3.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-security@3.1.4.Final-redhat-00001", + "group": "org.wildfly.security.jakarta", + "name": "jakarta-security", + "version": "3.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f848a6a6bf4ee3b5d7f20a4c7699f7225d8676797cc74f262f857cb073ba0050" + } + ], + "purl": "pkg:maven/org.wildfly.security.jakarta/jakarta-security@3.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/security/jakarta/security/main/jakarta-security-3.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.transaction/wildfly-transaction-client@3.0.5.Final-redhat-00001", + "group": "org.wildfly.transaction", + "name": "wildfly-transaction-client", + "version": "3.0.5.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "feb8ff5372c2029d3a8d73aadcb587c87be5940c95f434b9d53e60875c091d31" + } + ], + "purl": "pkg:maven/org.wildfly.transaction/wildfly-transaction-client@3.0.5.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/transaction/client/main/wildfly-transaction-client-3.0.5.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-client-common@2.1.4.Final-redhat-00001", + "group": "org.wildfly.wildfly-http-client", + "name": "wildfly-http-client-common", + "version": "2.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "f2c95ab9facd8088a3e11aeba8f8e08b8fe1b7e6a4df9756b98c41c61e1622fe" + } + ], + "purl": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-client-common@2.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/http-client/common/main/wildfly-http-client-common-2.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-ejb-client@2.1.4.Final-redhat-00001", + "group": "org.wildfly.wildfly-http-client", + "name": "wildfly-http-ejb-client", + "version": "2.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "47ce7518e63a2f01fdb223c47d43bc45ad8e4357ad5803332cf1588f867905e9" + } + ], + "purl": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-ejb-client@2.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/http-client/ejb/main/wildfly-http-ejb-client-2.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-naming-client@2.1.4.Final-redhat-00001", + "group": "org.wildfly.wildfly-http-client", + "name": "wildfly-http-naming-client", + "version": "2.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "38765c2785a1254be644afc790bbe08c21f6e881a37c3417dea2241e217318b1" + } + ], + "purl": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-naming-client@2.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/http-client/naming/main/wildfly-http-naming-client-2.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-transaction-client@2.1.4.Final-redhat-00001", + "group": "org.wildfly.wildfly-http-client", + "name": "wildfly-http-transaction-client", + "version": "2.1.4.Final-redhat-00001", + "hashes": [ + { + "alg": "SHA-256", + "content": "796e9455b41e847bd64e1ce93d3bad6569e011e71712c949d8f3d4bfa4a3314a" + } + ], + "purl": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-transaction-client@2.1.4.Final-redhat-00001", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/wildfly/http-client/transaction/main/wildfly-http-transaction-client-2.1.4.Final-redhat-00001.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.3.0.redhat-00002", + "group": "org.yaml", + "name": "snakeyaml", + "version": "2.3.0.redhat-00002", + "hashes": [ + { + "alg": "SHA-256", + "content": "9a9fb88dbe15ed1b0dacf0b3c2ae08d0dcb150fd2ba38b839882a60f3ab9b04b" + } + ], + "purl": "pkg:maven/org.yaml/snakeyaml@2.3.0.redhat-00002", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/yaml/snakeyaml/main/snakeyaml-2.3.0.redhat-00002.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/annotations@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "annotations", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "49bc9f91cef775f5265c000914ab74e4854dff3d67dfa0d6a6f4a629b70ca749" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/annotations@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/annotations-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/apache-client@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "apache-client", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "914507b9d5f742e3810031f0082d1c97ca58d600400c2845919c12beced7db7a" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/apache-client@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/apache-client-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/arns@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "arns", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "454d308f5af1543151b6d8d4acf80f331bd9f0be16bca16137128f87d8dfc93c" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/arns@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/arns-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/auth@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "auth", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "c31b40e5fef7927de92b35173b88445f1da4171a63b4f02b97b89d9e942cf4f9" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/auth@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/auth-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/aws-core@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "aws-core", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "a66aae41c684d3505850c0cb59ba4bbb00e8b7867fd95c62b5c391f5cf6c4f54" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/aws-core@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/aws-core-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/aws-query-protocol@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "aws-query-protocol", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "2294e9acebc51213cd41f64e2404088f2a835fc6d61d3337ce300ed59b1d2e08" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/aws-query-protocol@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/aws-query-protocol-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "aws-xml-protocol", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "f90df6518e9d0fd15b9bc33069d3f954370dc1340545cc235d5e9acaf03ba31a" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/aws-xml-protocol-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/checksums@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "checksums", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "8b0568d4d93d33bcaa1c09b0ea3773ec78cada6af71e13fe31754e589a4870d8" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/checksums@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/checksums-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/checksums-spi@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "checksums-spi", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "c925b421bd5ee3c5d55535bf27b412dbcbe1ff7662a070c47736f6c8af368ca3" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/checksums-spi@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/checksums-spi-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/crt-core@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "crt-core", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "d1fd0a481ff8c9fa6f933ce7b766211544a7592786d17e793621952c0f3f9de8" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/crt-core@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/crt-core-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/endpoints-spi@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "endpoints-spi", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "1713823843d4d5c49d1e45a3d7c11f85a123f5ec2f30d3d3b131e04f62ee04ea" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/endpoints-spi@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/endpoints-spi-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/http-auth@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "http-auth", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "d3084f81c8a9cc961b12addb39da0794fb691aecfd7a78f602f73444624a1386" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/http-auth@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/http-auth-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/http-auth-aws@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "http-auth-aws", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "90ebefb8fad27000811420275a7597f80401af6368dad495c10bc0cc62be6911" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/http-auth-aws@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/http-auth-aws-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/http-auth-spi@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "http-auth-spi", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "e0ce4f57a5708bc3e1ad7a19917a0ac40039706ce27290a174cffb0ae9fc00ce" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/http-auth-spi@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/http-auth-spi-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/http-client-spi@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "http-client-spi", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "f3fbe8e6eb5edf6a1fe2af4b2b32d77f9a5c1b512640f6545db512209c8e9e23" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/http-client-spi@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/http-client-spi-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/identity-spi@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "identity-spi", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "ad2bbd051f47724662f578271c0428d1367cfedca6b71fd9d2ee42ebf7d06c70" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/identity-spi@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/identity-spi-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/json-utils@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "json-utils", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "cf14bfd4b080d99256a4d52b78226fc34d979de02edd6540e8d6d8607b7b284c" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/json-utils@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/json-utils-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/metrics-spi@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "metrics-spi", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "c736756a060f5a069017c21bd887908d75098f9cc3fd744b28896fa4645ef9d0" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/metrics-spi@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/metrics-spi-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/profiles@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "profiles", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "b820f7dbf94cd01b89656979f58274ba5a35db7c11a29dc974a3fa5077870fd7" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/profiles@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/profiles-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/protocol-core@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "protocol-core", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "a7ca480156b768e8028924f768ade9c7aa44f229509853da30b92a49cce15190" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/protocol-core@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/protocol-core-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/regions@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "regions", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "3021103c035518e9988382e410848e02a1f016cd38d3ce923b8a75e4e0bbfa82" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/regions@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/regions-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/retries@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "retries", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "7e9436f3607f90beac540fe4f3e63a80c66969de34749f9b44f3db4ef19fbb48" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/retries@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/retries-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/retries-spi@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "retries-spi", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "928eee6dac65179fb27757811d190b912e889254789e2215f0634690042362eb" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/retries-spi@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/retries-spi-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/s3@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "s3", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "46ab0824beeadf7fab0475d093fc338a16021ac594b48096f8cf813b38b33f3d" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/s3@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/s3-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/sdk-core@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "sdk-core", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "b46bb8af125c074945204d59ac51eba170f01ac10faf3a56491f67bb0c825901" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/sdk-core@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/sdk-core-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "third-party-jackson-core", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "8bb0e596f25240bd252da84d61a0feeaa5e167a1fa59421126a810e4a68fcdb9" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/third-party-jackson-core-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.awssdk/utils@2.30.32.redhat-00003", + "group": "software.amazon.awssdk", + "name": "utils", + "version": "2.30.32.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "34a20a8349a259a0fd72da3a8c6bbd8c042c505e8e37810203622fac5add5d28" + } + ], + "purl": "pkg:maven/software.amazon.awssdk/utils@2.30.32.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/utils-2.30.32.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/software.amazon.eventstream/eventstream@1.0.1.redhat-00003", + "group": "software.amazon.eventstream", + "name": "eventstream", + "version": "1.0.1.redhat-00003", + "hashes": [ + { + "alg": "SHA-256", + "content": "210c83bffcf59118dd2d6e12774598bb458e828497e045a4b1537f3512b506a1" + } + ], + "purl": "pkg:maven/software.amazon.eventstream/eventstream@1.0.1.redhat-00003", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/software/amazon/awssdk/s3/main/eventstream-1.0.1.redhat-00003.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/wsdl4j/wsdl4j@1.6.3.redhat-00008", + "group": "wsdl4j", + "name": "wsdl4j", + "version": "1.6.3.redhat-00008", + "hashes": [ + { + "alg": "SHA-256", + "content": "d803f97448251fc667694fa14ab3e9695209b4018af36495b3dcff9851997bea" + } + ], + "purl": "pkg:maven/wsdl4j/wsdl4j@1.6.3.redhat-00008", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/javax/wsdl4j/api/main/wsdl4j-1.6.3.redhat-00008.jar" + } + ] + } + }, + { + "type": "library", + "bom-ref": "pkg:maven/xml-resolver/xml-resolver@1.2.0.redhat-12", + "group": "xml-resolver", + "name": "xml-resolver", + "version": "1.2.0.redhat-12", + "hashes": [ + { + "alg": "SHA-256", + "content": "bfc4ddff0f917b7cf0ed2fff88580daec37ee702c077aa7888b9f497d328364c" + } + ], + "purl": "pkg:maven/xml-resolver/xml-resolver@1.2.0.redhat-12", + "evidence": { + "occurrences": [ + { + "location": "modules/system/layers/base/org/apache/xml-resolver/main/xml-resolver-1.2.0.redhat-12.jar" + } + ] + } + } + ], + "dependencies": [ + { + "ref": "pkg:generic/jboss-cli-client@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:generic/jboss-client@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:generic/jboss-eap@8.1-update-7.1", + "dependsOn": [ + "pkg:generic/jboss-cli-client@8.1.1.GA-redhat-00019", + "pkg:generic/jboss-client@8.1.1.GA-redhat-00019", + "pkg:generic/wildfly-elytron-tool@8.1.1.GA-redhat-00019", + "pkg:maven/com.carrotsearch/hppc@0.10.0.redhat-00001", + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.18.4.redhat-00002", + "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0.redhat-00002", + "pkg:maven/com.fasterxml/classmate@1.6.0.redhat-00001", + "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8.redhat-00002", + "pkg:maven/com.github.fge/btf@1.2.0.redhat-00007", + "pkg:maven/com.github.fge/jackson-coreutils@1.8.0.redhat-00002", + "pkg:maven/com.github.fge/json-patch@1.9.0.redhat-00002", + "pkg:maven/com.github.fge/msg-simple@1.1.0.redhat-00007", + "pkg:maven/com.google.code.gson/gson@2.10.1.redhat-00005", + "pkg:maven/com.google.guava/failureaccess@1.0.3.redhat-00001", + "pkg:maven/com.google.guava/guava@33.0.0.jre-redhat-00004", + "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3.redhat-00002", + "pkg:maven/com.h2database/h2@2.2.224.redhat-00003", + "pkg:maven/com.ibm.async/asyncutil@0.1.0.redhat-00010", + "pkg:maven/com.microsoft.azure/azure-storage@8.6.6.redhat-00001", + "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.3.redhat-00001", + "pkg:maven/com.redhat.insights/runtimes-java-api@1.1.3.redhat-00002", + "pkg:maven/com.redhat.insights/runtimes-java-core-runtime@1.1.3.redhat-00002", + "pkg:maven/com.squareup/protoparser@4.0.3.redhat-00001", + "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2.redhat-00003", + "pkg:maven/com.sun.istack/istack-commons-tools@4.1.2.redhat-00003", + "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@4.0.6.redhat-00001", + "pkg:maven/com.sun.xml.bind.external/rngom@4.0.6.redhat-00001", + "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1.redhat-00001", + "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@3.0.4.redhat-00002", + "pkg:maven/commons-beanutils/commons-beanutils@1.11.0.redhat-00001", + "pkg:maven/commons-cli/commons-cli@1.9.0.redhat-00001", + "pkg:maven/commons-codec/commons-codec@1.17.2.redhat-00001", + "pkg:maven/commons-collections/commons-collections@3.2.2.redhat-2", + "pkg:maven/commons-io/commons-io@2.16.1.redhat-00002", + "pkg:maven/de.dentrassi.crypto/pem-keystore@2.4.0.redhat-00001", + "pkg:maven/gnu.getopt/java-getopt@1.0.13.redhat-5", + "pkg:maven/io.agroal/agroal-api@2.3.0.redhat-00001", + "pkg:maven/io.agroal/agroal-narayana@2.3.0.redhat-00001", + "pkg:maven/io.agroal/agroal-pool@2.3.0.redhat-00001", + "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0.redhat-00001", + "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0.redhat-00001", + "pkg:maven/io.netty/netty-buffer@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-codec-http@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-codec@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-common@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-handler@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-resolver@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final-redhat-00001", + "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "pkg:maven/io.netty/netty-transport@4.1.135.Final-redhat-00001", + "pkg:maven/io.reactivex.rxjava2/rxjava@2.2.21.redhat-00003", + "pkg:maven/io.reactivex.rxjava3/rxjava@3.1.12.redhat-00001", + "pkg:maven/io.smallrye/jandex@3.2.7.redhat-00001", + "pkg:maven/io.undertow.jastow/jastow@2.2.9.SP1-redhat-00001", + "pkg:maven/io.undertow/undertow-core@2.3.24.SP3-redhat-00001", + "pkg:maven/io.undertow/undertow-servlet@2.3.24.SP3-redhat-00001", + "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.24.SP3-redhat-00001", + "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4.redhat-00001", + "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1.redhat-00005", + "pkg:maven/jakarta.authentication/jakarta.authentication-api@3.0.0.redhat-00001", + "pkg:maven/jakarta.authorization/jakarta.authorization-api@2.1.0.redhat-00001", + "pkg:maven/jakarta.batch/jakarta.batch-api@2.1.1.redhat-00003", + "pkg:maven/jakarta.ejb/jakarta.ejb-api@4.0.1.redhat-00001", + "pkg:maven/jakarta.enterprise.concurrent/jakarta.enterprise.concurrent-api@3.0.3.redhat-00001", + "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.1.redhat-00001", + "pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.1.redhat-00001", + "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1.redhat-00007", + "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0.redhat-00003", + "pkg:maven/jakarta.jms/jakarta.jms-api@3.1.0.redhat-00003", + "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.1.redhat-00002", + "pkg:maven/jakarta.json/jakarta.json-api@2.1.3.redhat-00002", + "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3.redhat-00003", + "pkg:maven/jakarta.persistence/jakarta.persistence-api@3.1.0.redhat-00002", + "pkg:maven/jakarta.resource/jakarta.resource-api@2.1.0.redhat-00001", + "pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@3.0.0.redhat-00001", + "pkg:maven/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api@3.0.2.redhat-00001", + "pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@3.1.1.redhat-00001", + "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0.redhat-00007", + "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1.redhat-00004", + "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2.redhat-00006", + "pkg:maven/jakarta.websocket/jakarta.websocket-api@2.1.1.redhat-00001", + "pkg:maven/jakarta.websocket/jakarta.websocket-client-api@2.1.1.redhat-00001", + "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0.redhat-00003", + "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4.redhat-00001", + "pkg:maven/jboss.jaxbintros/jboss-jaxb-intros@2.0.1.redhat-00001", + "pkg:maven/joda-time/joda-time@2.12.7.redhat-00002", + "pkg:maven/net.bytebuddy/byte-buddy@1.14.18.redhat-00001", + "pkg:maven/net.jcip/jcip-annotations@1.0.0.redhat-00009", + "pkg:maven/net.shibboleth.utilities/java-support@8.0.0.redhat-00001", + "pkg:maven/org.aesh/aesh-extensions@1.8.0.redhat-00001", + "pkg:maven/org.aesh/aesh@2.4.0.redhat-00001", + "pkg:maven/org.aesh/readline@2.4.0.redhat-00002", + "pkg:maven/org.antlr/antlr4-runtime@4.13.2.redhat-00001", + "pkg:maven/org.antlr/antlr4@4.13.2.redhat-00001", + "pkg:maven/org.apache.activemq/activemq-artemis-native@2.0.0.redhat-00005", + "pkg:maven/org.apache.activemq/artemis-cli@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-commons@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-core-client@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-dto@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-hornetq-protocol@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-hqclient-protocol@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-jakarta-client@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-jakarta-ra@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-jakarta-server@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-jakarta-service-extensions@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-jdbc-store@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-journal@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-selector@2.40.0.redhat-00015", + "pkg:maven/org.apache.activemq/artemis-server@2.40.0.redhat-00015", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0.redhat-00003", + "pkg:maven/org.apache.cxf.services.sts/cxf-services-sts-core@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@4.1.0.redhat-00001", + "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@4.1.0.redhat-00001", + "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug986@4.1.0.redhat-00001", + "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@4.1.0.redhat-00001", + "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@4.1.0.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-core@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-features-clustering@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-features-logging@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-features-throttling@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-management@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-security@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-transports-http-hc@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-transports-jms@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-transports-local@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-ws-security@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-tools-common@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-tools-java2ws@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-tools-validator@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@4.0.10.redhat-00001", + "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@4.0.10.redhat-00001", + "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5.redhat-00006", + "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14.redhat-00016", + "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16.redhat-00011", + "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16.redhat-00011", + "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14.redhat-00016", + "pkg:maven/org.apache.james/apache-mime4j-core@0.8.12.redhat-00001", + "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.12.redhat-00001", + "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.12.redhat-00001", + "pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1.redhat-00002", + "pkg:maven/org.apache.lucene/lucene-analysis-common@9.11.1.redhat-00001", + "pkg:maven/org.apache.lucene/lucene-core@9.11.1.redhat-00001", + "pkg:maven/org.apache.lucene/lucene-facet@9.11.1.redhat-00001", + "pkg:maven/org.apache.lucene/lucene-join@9.11.1.redhat-00001", + "pkg:maven/org.apache.lucene/lucene-queries@9.11.1.redhat-00001", + "pkg:maven/org.apache.lucene/lucene-queryparser@9.11.1.redhat-00001", + "pkg:maven/org.apache.neethi/neethi@3.2.1.redhat-00002", + "pkg:maven/org.apache.santuario/xmlsec@3.0.5.redhat-00001", + "pkg:maven/org.apache.sshd/sshd-common@2.14.0.redhat-00003", + "pkg:maven/org.apache.sshd/sshd-core@2.14.0.redhat-00003", + "pkg:maven/org.apache.velocity/velocity-engine-core@2.3.0.redhat-00010", + "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.0.redhat-00002", + "pkg:maven/org.apache.wss4j/wss4j-bindings@3.0.4.redhat-00002", + "pkg:maven/org.apache.wss4j/wss4j-policy@3.0.4.redhat-00002", + "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@3.0.4.redhat-00002", + "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.4.redhat-00002", + "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@3.0.4.redhat-00002", + "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@3.0.4.redhat-00002", + "pkg:maven/org.bitbucket.b_c/jose4j@0.9.6.redhat-00002", + "pkg:maven/org.bouncycastle/bcjmail-jdk18on@1.84.0.redhat-00001", + "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.84.0.redhat-00001", + "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.84.0.redhat-00001", + "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.84.0.redhat-00001", + "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.84.0.redhat-00001", + "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2.redhat-00003", + "pkg:maven/org.cryptacular/cryptacular@1.2.5.redhat-00001", + "pkg:maven/org.eclipse.angus/angus-activation@2.0.3.redhat-00001", + "pkg:maven/org.eclipse.angus/angus-mail@2.0.5.redhat-00001", + "pkg:maven/org.eclipse.jdt/ecj@3.33.0.redhat-00001", + "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.10.1.202505221210-r-redhat-00002", + "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.1.202505221210-r-redhat-00002", + "pkg:maven/org.eclipse.parsson/parsson@1.1.7.redhat-00003", + "pkg:maven/org.eclipse/yasson@3.0.4.redhat-00007", + "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client-sniffer@8.15.4.redhat-00003", + "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client@8.15.4.redhat-00003", + "pkg:maven/org.fusesource.jansi/jansi@2.4.1.redhat-00001", + "pkg:maven/org.glassfish.expressly/expressly@5.0.0.redhat-00001", + "pkg:maven/org.glassfish.jaxb/codemodel@4.0.6.redhat-00001", + "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6.redhat-00001", + "pkg:maven/org.glassfish.jaxb/jaxb-jxc@4.0.6.redhat-00001", + "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6.redhat-00001", + "pkg:maven/org.glassfish.jaxb/jaxb-xjc@4.0.6.redhat-00001", + "pkg:maven/org.glassfish.jaxb/txw2@4.0.6.redhat-00001", + "pkg:maven/org.glassfish.jaxb/xsom@4.0.6.redhat-00001", + "pkg:maven/org.glassfish.soteria/jakarta.security.enterprise@3.0.3.redhat-00001", + "pkg:maven/org.glassfish.soteria/soteria.spi.bean.decorator.weld@3.0.3.redhat-00001", + "pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@3.0.2.redhat-00001", + "pkg:maven/org.glassfish/jakarta.enterprise.concurrent@3.0.2.redhat-00001", + "pkg:maven/org.glassfish/jakarta.faces@4.0.11.redhat-00001", + "pkg:maven/org.glassfish/jakarta.json@1.1.6.redhat-00003", + "pkg:maven/org.hibernate.common/hibernate-commons-annotations@7.0.3.Final-redhat-00002", + "pkg:maven/org.hibernate.orm/hibernate-core@6.6.50.Final-redhat-00001", + "pkg:maven/org.hibernate.orm/hibernate-envers@6.6.50.Final-redhat-00001", + "pkg:maven/org.hibernate.search/hibernate-search-backend-elasticsearch@7.2.6.Final-redhat-00001", + "pkg:maven/org.hibernate.search/hibernate-search-backend-lucene@7.2.6.Final-redhat-00001", + "pkg:maven/org.hibernate.search/hibernate-search-engine@7.2.6.Final-redhat-00001", + "pkg:maven/org.hibernate.search/hibernate-search-mapper-orm@7.2.6.Final-redhat-00001", + "pkg:maven/org.hibernate.search/hibernate-search-mapper-pojo-base@7.2.6.Final-redhat-00001", + "pkg:maven/org.hibernate.search/hibernate-search-util-common@7.2.6.Final-redhat-00001", + "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@8.0.2.Final-redhat-00001", + "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final-redhat-00001", + "pkg:maven/org.hornetq/hornetq-commons@2.4.11.Final-redhat-00001", + "pkg:maven/org.hornetq/hornetq-core-client@2.4.11.Final-redhat-00001", + "pkg:maven/org.hornetq/hornetq-jakarta-client@2.4.11.Final-redhat-00001", + "pkg:maven/org.infinispan.protostream/protostream-types@5.0.14.Final-redhat-00002", + "pkg:maven/org.infinispan.protostream/protostream@5.0.14.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-cachestore-jdbc-common@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-cachestore-jdbc@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-cachestore-remote@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-cdi-common@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-cdi-embedded@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-cdi-remote@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-client-hotrod@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-clustered-counter@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-clustered-lock@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-commons@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-core@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-hibernate-cache-commons@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-hibernate-cache-spi@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-hibernate-cache-v62@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-objectfilter@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-query-core@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-query-dsl@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-query@15.0.21.Final-redhat-00002", + "pkg:maven/org.infinispan/infinispan-remote-query-client@15.0.21.Final-redhat-00002", + "pkg:maven/org.jasypt/jasypt@1.9.3.redhat-00004", + "pkg:maven/org.jberet/jberet-core@3.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.activemq.artemis.integration/artemis-wildfly-integration@2.0.4.Final-redhat-00001", + "pkg:maven/org.jboss.classfilewriter/jboss-classfilewriter@1.3.1.Final-redhat-00001", + "pkg:maven/org.jboss.common/jboss-common-beans@2.0.1.Final-redhat-00001", + "pkg:maven/org.jboss.eap/jboss-insights@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/jipijapa-eclipselink@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/jipijapa-hibernate6@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/jipijapa-hibernatesearch@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/jipijapa-spi@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-appclient@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-batch-jberet@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-bean-validation@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-common@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-cache@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-client@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-extension@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-infinispan@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-spi@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-el-expressly@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-faces-api@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-faces-mojarra@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-client-api@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-client-service@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-embedded-service@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-extension@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-api@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-extension@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-spi@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-api@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-jboss@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-protostream@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-server-api@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-server-extension@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-server-service@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-service@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-api@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-compat@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-extension@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-server@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-web-api@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-web-container@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-web-extension@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-web-service@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-web-undertow@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-weld-core@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-weld-ejb@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-clustering-weld-web@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-concurrency-impl-30@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-concurrency-spi@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-connector@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-datasources-agroal@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-ee-feature-pack-product-conf@801.7.1.GA-redhat-00001", + "pkg:maven/org.jboss.eap/wildfly-ee-feature-pack-product-conf@801.7.1.GA-redhat-00001?classifier=version&type=txt", + "pkg:maven/org.jboss.eap/wildfly-ee-security@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-ee@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-ejb3@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-elytron-oidc-client-subsystem@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-health@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-iiop-openjdk@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-jaxrs@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-jdr@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-jpa@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-jsf-injection@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-jsf@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-jsr77@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-keycloak@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-mail@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-messaging-activemq-injection@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-messaging-activemq-subsystem@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-metrics@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-mod_cluster-extension@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-mod_cluster-undertow@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-naming@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-picketlink@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-pojo@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-rts@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-sar@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-security@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-system-jmx@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-transactions@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-undertow@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-web-common@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-webservices-opensaml-sysconfig@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-webservices-server-integration@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-weld-bean-validation@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-weld-common@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-weld-ejb@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-weld-jpa@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-weld-spi@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-weld-transactions@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-weld-webservices@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-weld@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.eap/wildfly-xts@8.1.1.GA-redhat-00019", + "pkg:maven/org.jboss.ejb3/jboss-ejb3-ext-api@2.4.0.Final-redhat-00001", + "pkg:maven/org.jboss.genericjms/generic-jms-ra-jar@3.0.0.Final-redhat-00001", + "pkg:maven/org.jboss.hal/hal-console@3.7.19.Final-redhat-00001?classifier=resources", + "pkg:maven/org.jboss.invocation/jboss-invocation@2.0.1.Final-redhat-00001", + "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-api@3.0.18.Final-redhat-00001", + "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-impl@3.0.18.Final-redhat-00001", + "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-spi@3.0.18.Final-redhat-00001", + "pkg:maven/org.jboss.ironjacamar/ironjacamar-core-api@3.0.18.Final-redhat-00001", + "pkg:maven/org.jboss.ironjacamar/ironjacamar-core-impl@3.0.18.Final-redhat-00001", + "pkg:maven/org.jboss.ironjacamar/ironjacamar-deployers-common@3.0.18.Final-redhat-00001", + "pkg:maven/org.jboss.ironjacamar/ironjacamar-jdbc@3.0.18.Final-redhat-00001", + "pkg:maven/org.jboss.ironjacamar/ironjacamar-validator@3.0.18.Final-redhat-00001", + "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final-redhat-1", + "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "pkg:maven/org.jboss.logging/jul-to-slf4j-stub@1.0.1.Final-redhat-3", + "pkg:maven/org.jboss.logmanager/jboss-logmanager@2.1.19.Final-redhat-00001", + "pkg:maven/org.jboss.logmanager/log4j2-jboss-logmanager@2.0.1.Final-redhat-00001", + "pkg:maven/org.jboss.marshalling/jboss-marshalling-river@2.2.3.Final-redhat-00001", + "pkg:maven/org.jboss.marshalling/jboss-marshalling@2.2.3.Final-redhat-00001", + "pkg:maven/org.jboss.metadata/jboss-metadata-appclient@16.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.metadata/jboss-metadata-common@16.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.metadata/jboss-metadata-ear@16.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.metadata/jboss-metadata-ejb@16.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.metadata/jboss-metadata-web@16.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.mod_cluster/mod_cluster-container-spi@2.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.mod_cluster/mod_cluster-core@2.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.mod_cluster/mod_cluster-load-spi@2.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.modules/jboss-modules@2.1.6.Final-redhat-00001", + "pkg:maven/org.jboss.msc/jboss-msc@1.5.5.Final-redhat-00001", + "pkg:maven/org.jboss.narayana.jts/narayana-jts-idlj@7.1.2.Final-redhat-00001", + "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@7.1.2.Final-redhat-00001", + "pkg:maven/org.jboss.narayana.rts/restat-api@7.1.2.Final-redhat-00001", + "pkg:maven/org.jboss.narayana.rts/restat-bridge@7.1.2.Final-redhat-00001", + "pkg:maven/org.jboss.narayana.rts/restat-integration@7.1.2.Final-redhat-00001", + "pkg:maven/org.jboss.narayana.rts/restat-util@7.1.2.Final-redhat-00001", + "pkg:maven/org.jboss.narayana.xts/jbossxts@7.1.2.Final-redhat-00001", + "pkg:maven/org.jboss.narayana/jbosstxbridge@7.1.2.Final-redhat-00001", + "pkg:maven/org.jboss.openjdk-orb/openjdk-orb@10.1.1.Final-redhat-00001", + "pkg:maven/org.jboss.remoting/jboss-remoting@5.0.31.Final-redhat-00001", + "pkg:maven/org.jboss.remotingjmx/remoting-jmx@3.1.0.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy.spring/resteasy-spring@3.2.0.Final-redhat-00001", + "pkg:maven/org.jboss.resteasy/resteasy-atom-provider@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-cdi@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-client-api@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-client@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-core-spi@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-core@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-crypto@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-jsapi@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-json-binding-provider@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-json-p-provider@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-rxjava2@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.resteasy/resteasy-tracing-api@2.0.1.Final-redhat-00001", + "pkg:maven/org.jboss.resteasy/resteasy-validator-provider@6.2.15.Final-redhat-00002", + "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@2.0.2.Final-redhat-00001", + "pkg:maven/org.jboss.spec.jakarta.el/jboss-el-api_5.0_spec@4.0.2.Final-redhat-00001", + "pkg:maven/org.jboss.spec.jakarta.xml.soap/jboss-saaj-api_3.0_spec@1.0.0.Final-redhat-00001", + "pkg:maven/org.jboss.spec.jakarta.xml.ws/jboss-jakarta-xml-ws-api_4.0_spec@1.0.0.Final-redhat-00001", + "pkg:maven/org.jboss.stdio/jboss-stdio@1.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.threads/jboss-threads@2.5.0.redhat-00001", + "pkg:maven/org.jboss.weld.module/weld-ejb@5.1.6.Final-redhat-00001", + "pkg:maven/org.jboss.weld.module/weld-jsf@5.1.6.Final-redhat-00001", + "pkg:maven/org.jboss.weld.module/weld-jta@5.1.6.Final-redhat-00001", + "pkg:maven/org.jboss.weld.module/weld-web@5.1.6.Final-redhat-00001", + "pkg:maven/org.jboss.weld/weld-api@5.0.0.SP3-redhat-00001", + "pkg:maven/org.jboss.weld/weld-core-impl@5.1.6.Final-redhat-00001", + "pkg:maven/org.jboss.weld/weld-lite-extension-translator@5.1.6.Final-redhat-00001", + "pkg:maven/org.jboss.weld/weld-spi@5.0.0.SP3-redhat-00001", + "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-client@7.3.8.Final-redhat-00001", + "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-factories@7.3.8.Final-redhat-00001", + "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-resources@7.3.8.Final-redhat-00001", + "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-server@7.3.8.Final-redhat-00001", + "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-transports-udp@7.3.8.Final-redhat-00001", + "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-transports-undertow@7.3.8.Final-redhat-00001", + "pkg:maven/org.jboss.ws.projects/jaxws-undertow-httpspi@2.0.0.Final-redhat-00001", + "pkg:maven/org.jboss.ws/jbossws-api@3.0.0.Final-redhat-00001", + "pkg:maven/org.jboss.ws/jbossws-common-tools@2.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.ws/jbossws-common@5.1.0.Final-redhat-00001", + "pkg:maven/org.jboss.ws/jbossws-spi@5.0.0.Final-redhat-00001", + "pkg:maven/org.jboss.xnio.netty/netty-xnio-transport@0.1.10.Final-redhat-00001", + "pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final-redhat-00001", + "pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final-redhat-00001", + "pkg:maven/org.jboss/jboss-dmr@1.7.0.Final-redhat-00001", + "pkg:maven/org.jboss/jboss-ejb-client@5.0.8.Final-redhat-00001", + "pkg:maven/org.jboss/jboss-iiop-client@2.0.1.Final-redhat-00001", + "pkg:maven/org.jboss/jboss-transaction-spi@8.0.0.Final-redhat-00001", + "pkg:maven/org.jboss/jboss-vfs@3.3.2.Final-redhat-00001", + "pkg:maven/org.jboss/staxmapper@1.5.0.Final-redhat-00001", + "pkg:maven/org.jctools/jctools-core@4.0.6.redhat-00001", + "pkg:maven/org.jgroups.aws/jgroups-aws@3.0.1.Final-redhat-00001", + "pkg:maven/org.jgroups.azure/jgroups-azure@2.0.2.Final-redhat-00002", + "pkg:maven/org.jgroups.kubernetes/jgroups-kubernetes@2.0.2.Final-redhat-00001", + "pkg:maven/org.jgroups/jgroups@5.3.23.Final-redhat-00001", + "pkg:maven/org.jvnet.staxex/stax-ex@2.1.0.redhat-00003", + "pkg:maven/org.opensaml/opensaml-core@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-profile-api@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-saml-api@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-saml-impl@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-security-api@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-security-impl@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-soap-api@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-xacml-api@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-xacml-impl@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-xacml-saml-api@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-xmlsec-api@4.3.2.redhat-00002", + "pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.3.2.redhat-00002", + "pkg:maven/org.ow2.asm/asm-util@9.7.1.redhat-00002", + "pkg:maven/org.ow2.asm/asm@9.7.1.redhat-00002", + "pkg:maven/org.projectodd.vdx/vdx-core@1.1.6.redhat-1", + "pkg:maven/org.projectodd.vdx/vdx-wildfly@1.1.6.redhat-1", + "pkg:maven/org.reactivestreams/reactive-streams@1.0.4.redhat-00005", + "pkg:maven/org.slf4j/slf4j-api@2.0.17.redhat-00001", + "pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final-redhat-00002", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-common@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-embedded@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-remote@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-spi@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-context@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-jboss@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-protostream@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-spi@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-api@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-infinispan@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-jgroups@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-local@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-spi@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-cache@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-infinispan-embedded@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-infinispan-remote@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spec-servlet-6.0@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spec-spi@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spi@5.0.12.Final-redhat-00001", + "pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final-redhat-00003", + "pkg:maven/org.wildfly.core/wildfly-cli@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-controller-client@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-controller@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-core-management-client@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-core-management-subsystem@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-core-security@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-deployment-repository@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-deployment-scanner@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-discovery@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-domain-http-interface@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-domain-management@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-elytron-integration@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-embedded@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-event-logger@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-host-controller@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-installation-manager@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-io-spi@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-io@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-jar-runtime@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-jmx@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-logging@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-management-client-content@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-network@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-patching@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-platform-mbean@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-process-controller@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-protocol@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-remoting@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-request-controller@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-security-manager@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-server@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-service@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-subsystem@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-threads@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.core/wildfly-version@27.1.12.Final-redhat-00001", + "pkg:maven/org.wildfly.discovery/wildfly-discovery-client@1.3.0.Final-redhat-00001", + "pkg:maven/org.wildfly.installation-manager/installation-manager-api@1.1.1.Final-redhat-00001", + "pkg:maven/org.wildfly.launcher/wildfly-launcher@1.0.2.Final-redhat-00001", + "pkg:maven/org.wildfly.openssl/wildfly-openssl-java@2.3.0.Final-redhat-00001", + "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-ppc64le@2.3.0.Final-redhat-00001", + "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel10-x86_64@2.3.0.Final-redhat-00001", + "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel8-x86_64@2.3.0.Final-redhat-00001", + "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel9-x86_64@2.3.0.Final-redhat-00001", + "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-s390x@2.3.0.Final-redhat-00001", + "pkg:maven/org.wildfly.openssl/wildfly-openssl-windows-x86_64@2.3.0.Final-redhat-00001", + "pkg:maven/org.wildfly.security.elytron-web/undertow-server-servlet@4.1.2.Final-redhat-00001", + "pkg:maven/org.wildfly.security.elytron-web/undertow-server@4.1.2.Final-redhat-00001", + "pkg:maven/org.wildfly.security.jakarta/jakarta-authentication@3.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly.security.jakarta/jakarta-authorization@3.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly.security.jakarta/jakarta-client-resteasy@3.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly.security.jakarta/jakarta-client-webservices@3.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly.security.jakarta/jakarta-security@3.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-asn1@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-audit@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-deprecated@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-http@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-sasl@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-auth-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-auth@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-base@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-client@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-credential-source-impl@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-credential-store@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-credential@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-digest@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-encryption@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-basic@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-bearer@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-cert@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-digest@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-external@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-form@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-oidc@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-spnego@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-sso@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-stateful-basic@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-http@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-jose-jwk@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-jose-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-json-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-keystore@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-digest@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-gssapi@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-http@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-oauth2@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-scram@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-password-impl@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-permission@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-provider-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-realm-jdbc@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-realm-ldap@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-realm-token@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-realm@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-anonymous@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-auth-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-digest@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-entity@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-external@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gs2@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gssapi@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-localuser@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-oauth2@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-otp@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-plain@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-scram@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-sasl@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager-action@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-ssh-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-ssl@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-tool@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-acme@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-util@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-x500-principal@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.security/wildfly-elytron-x500@2.6.9.Final-redhat-00001", + "pkg:maven/org.wildfly.transaction/wildfly-transaction-client@3.0.5.Final-redhat-00001", + "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-client-common@2.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-ejb-client@2.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-naming-client@2.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-transaction-client@2.1.4.Final-redhat-00001", + "pkg:maven/org.wildfly/wildfly-naming-client@2.0.1.Final-redhat-00001", + "pkg:maven/org.yaml/snakeyaml@2.3.0.redhat-00002", + "pkg:maven/software.amazon.awssdk/annotations@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/apache-client@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/arns@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/auth@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/aws-core@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/aws-query-protocol@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/checksums-spi@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/checksums@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/crt-core@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/endpoints-spi@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/http-auth-aws@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/http-auth-spi@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/http-auth@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/http-client-spi@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/identity-spi@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/json-utils@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/metrics-spi@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/profiles@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/protocol-core@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/regions@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/retries-spi@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/retries@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/s3@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/sdk-core@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.30.32.redhat-00003", + "pkg:maven/software.amazon.awssdk/utils@2.30.32.redhat-00003", + "pkg:maven/software.amazon.eventstream/eventstream@1.0.1.redhat-00003", + "pkg:maven/wsdl4j/wsdl4j@1.6.3.redhat-00008", + "pkg:maven/xml-resolver/xml-resolver@1.2.0.redhat-12" + ] + }, + { + "ref": "pkg:generic/wildfly-elytron-tool@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.carrotsearch/hppc@0.10.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.18.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.fasterxml/classmate@1.6.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.github.fge/btf@1.2.0.redhat-00007", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.github.fge/jackson-coreutils@1.8.0.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.github.fge/json-patch@1.9.0.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.github.fge/msg-simple@1.1.0.redhat-00007", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.google.code.gson/gson@2.10.1.redhat-00004", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.google.code.gson/gson@2.10.1.redhat-00005", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.google.guava/guava@33.0.0.jre-redhat-00004", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.h2database/h2@2.2.224.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0.redhat-00010", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.microsoft.azure/azure-storage@8.6.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.3.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.redhat.insights/runtimes-java-api@1.1.3.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.redhat.insights/runtimes-java-core-runtime@1.1.3.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.squareup/protoparser@4.0.3.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.sun.istack/istack-commons-tools@4.1.2.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.sun.xml.bind.external/rngom@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@3.0.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/commons-beanutils/commons-beanutils@1.11.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/commons-cli/commons-cli@1.9.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/commons-codec/commons-codec@1.17.2.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/commons-collections/commons-collections@3.2.2.redhat-2", + "dependsOn": [] + }, + { + "ref": "pkg:maven/commons-io/commons-io@2.16.1.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/commons-io/commons-io@2.8.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/de.dentrassi.crypto/pem-keystore@2.4.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/gnu.getopt/java-getopt@1.0.13.redhat-5", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.agroal/agroal-api@2.3.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.agroal/agroal-narayana@2.3.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.agroal/agroal-pool@2.3.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-buffer@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-codec-dns@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-codec-http@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-codec-socks@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-codec@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-common@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-handler@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-resolver@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.135.Final-redhat-00001?classifier=linux-x86_64", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.netty/netty-transport@4.1.135.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.reactivex.rxjava2/rxjava@2.2.21.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.reactivex.rxjava3/rxjava@3.1.12.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.smallrye/jandex@3.2.7.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.undertow.jastow/jastow@2.2.9.SP1-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.undertow/undertow-core@2.3.24.SP3-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.undertow/undertow-servlet@2.3.24.SP3-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.undertow/undertow-websockets-jsr@2.3.24.SP3-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1.redhat-00005", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.authentication/jakarta.authentication-api@3.0.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.authorization/jakarta.authorization-api@2.1.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.batch/jakarta.batch-api@2.1.1.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@4.0.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.enterprise.concurrent/jakarta.enterprise.concurrent-api@3.0.3.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1.redhat-00007", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.jms/jakarta.jms-api@3.1.0.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.1.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.json/jakarta.json-api@1.1.6.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@3.1.0.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.resource/jakarta.resource-api@2.1.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@3.0.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.servlet.jsp.jstl/jakarta.servlet.jsp.jstl-api@3.0.2.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@3.1.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0.redhat-00007", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1.redhat-00004", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2.redhat-00006", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.websocket/jakarta.websocket-api@2.1.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.websocket/jakarta.websocket-client-api@2.1.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jboss.jaxbintros/jboss-jaxb-intros@2.0.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/joda-time/joda-time@2.12.7.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/net.bytebuddy/byte-buddy@1.14.18.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/net.java.dev.msv/xsdlib@2022.7", + "dependsOn": [] + }, + { + "ref": "pkg:maven/net.jcip/jcip-annotations@1.0.0.redhat-00009", + "dependsOn": [] + }, + { + "ref": "pkg:maven/net.shibboleth.utilities/java-support@8.0.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.aesh/aesh-extensions@1.8.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.aesh/aesh@2.4.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.aesh/readline@2.4.0.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.aesh/terminal-api@2.4.0.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.antlr/antlr-runtime@3.5.3.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.antlr/antlr4@4.13.2.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/activemq-artemis-native@2.0.0.redhat-00005", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-cli@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-commons@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-core-client@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-dto@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-hornetq-protocol@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-hqclient-protocol@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-jakarta-client@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-jakarta-ra@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-jakarta-server@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-jakarta-service-extensions@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-jdbc-store@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-journal@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-selector@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.activemq/artemis-server@2.40.0.redhat-00015", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.commons/commons-lang3@3.18.0.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf.services.sts/cxf-services-sts-core@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@4.1.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@4.1.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug986@4.1.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@4.1.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@4.1.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-core@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-features-clustering@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-features-logging@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-features-throttling@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-security@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-transports-http-hc@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-transports-jms@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-transports-local@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-ws-security@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-tools-common@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-tools-validator@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@4.0.10.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5.redhat-00006", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14.redhat-00016", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16.redhat-00011", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16.redhat-00011", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14.redhat-00016", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.12.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.12.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.12.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.johnzon/johnzon-core@1.2.21", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.lucene/lucene-analysis-common@9.11.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.lucene/lucene-core@9.11.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.lucene/lucene-facet@9.11.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.lucene/lucene-join@9.11.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.lucene/lucene-queries@9.11.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.lucene/lucene-queryparser@9.11.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.neethi/neethi@3.2.1.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.santuario/xmlsec@3.0.5.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.sshd/sshd-common@2.14.0.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.sshd/sshd-core@2.14.0.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.velocity/velocity-engine-core@2.3.0.redhat-00010", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.0.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.wss4j/wss4j-bindings@3.0.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.wss4j/wss4j-policy@3.0.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@3.0.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@3.0.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@3.0.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@3.0.4.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.bitbucket.b_c/jose4j@0.9.6.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.bouncycastle/bcjmail-jdk18on@1.84.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.bouncycastle/bcpg-jdk18on@1.84.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.84.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.84.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.84.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.cryptacular/cryptacular@1.2.5.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.angus/angus-core@2.0.5.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.angus/imap@2.0.5.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.angus/logging-mailhandler@2.0.5.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.angus/pop3@2.0.5.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.angus/smtp@2.0.5.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.jdt/ecj@3.33.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@6.10.1.202505221210-r-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.1.202505221210-r-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse.parsson/parsson@1.1.7.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.eclipse/yasson@3.0.4.redhat-00007", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client-sniffer@8.15.4.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-client@8.15.4.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.fusesource.jansi/jansi@2.4.1.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.jaxb/codemodel@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.jaxb/jaxb-jxc@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.jaxb/jaxb-xjc@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.jaxb/txw2@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.jaxb/xsom@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.soteria/jakarta.security.enterprise@3.0.3.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.soteria/soteria.spi.bean.decorator.weld@3.0.3.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@3.0.2.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish/jakarta.enterprise.concurrent@3.0.2.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish/jakarta.faces@4.0.11.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.glassfish/jakarta.json@1.1.6.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@7.0.3.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.orm/hibernate-core@6.6.50.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.orm/hibernate-envers@6.6.50.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.search/hibernate-search-backend-elasticsearch@7.2.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.search/hibernate-search-backend-lucene@7.2.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.search/hibernate-search-engine@7.2.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.search/hibernate-search-mapper-orm@7.2.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.search/hibernate-search-mapper-pojo-base@7.2.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.search/hibernate-search-util-common@7.2.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@8.0.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hornetq/hornetq-commons@2.4.11.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hornetq/hornetq-core-client@2.4.11.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.hornetq/hornetq-jakarta-client@2.4.11.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan.protostream/protostream-types@5.0.14.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan.protostream/protostream@5.0.14.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-cachestore-jdbc-common@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-cachestore-jdbc@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-cachestore-remote@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-cdi-common@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-cdi-embedded@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-cdi-remote@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-client-hotrod@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-clustered-counter@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-clustered-lock@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-commons@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-core@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-hibernate-cache-commons@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-hibernate-cache-spi@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-hibernate-cache-v62@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-objectfilter@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-query-core@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-query-dsl@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-query@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.infinispan/infinispan-remote-query-client@15.0.21.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jasypt/jasypt@1.9.3.redhat-00004", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jberet/jberet-core@3.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.activemq.artemis.integration/artemis-wildfly-integration@2.0.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.classfilewriter/jboss-classfilewriter@1.3.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.common/jboss-common-beans@2.0.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/jboss-insights@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/jipijapa-eclipselink@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/jipijapa-hibernate6@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/jipijapa-hibernatesearch@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/jipijapa-spi@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-appclient@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-batch-jberet@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-bean-validation@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-client-properties@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-common@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-cache@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-client@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-extension@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-infinispan@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-ejb-spi@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-el-expressly@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-faces-api@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-faces-mojarra@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-client-api@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-client-service@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-embedded-service@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-infinispan-extension@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-api@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-extension@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-jgroups-spi@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-api@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-jboss@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-marshalling-protostream@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-server-api@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-server-extension@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-server-service@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-service@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-api@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-compat@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-extension@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-singleton-server@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-api@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-container@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-extension@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-service@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-web-undertow@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-core@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-ejb@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-clustering-weld-web@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-concurrency-impl-30@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-concurrency-spi@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-connector@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-datasources-agroal@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-ee-feature-pack-product-conf@801.7.1.GA-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-ee-feature-pack-product-conf@801.7.1.GA-redhat-00001?classifier=version&type=txt", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-ee-security@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-ee@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-ejb3@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-elytron-oidc-client-subsystem@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-health@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-iiop-openjdk@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-jaxrs@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-jdr@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-jpa@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-jsf-injection@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-jsf@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-jsr77@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-keycloak@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-mail@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-messaging-activemq-injection@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-messaging-activemq-subsystem@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-metrics@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-mod_cluster-extension@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-mod_cluster-undertow@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-naming@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-picketlink@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-pojo@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-rts@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-sar@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-security@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-system-jmx@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-transactions@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-undertow@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-web-common@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-webservices-opensaml-sysconfig@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-webservices-server-integration@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-weld-bean-validation@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-weld-common@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-weld-ejb@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-weld-jpa@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-weld-spi@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-weld-transactions@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-weld-webservices@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-weld@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.eap/wildfly-xts@8.1.1.GA-redhat-00019", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ejb3/jboss-ejb3-ext-api@2.4.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.genericjms/generic-jms-ra-jar@3.0.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.hal/hal-console@3.7.19.Final-redhat-00001?classifier=resources", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.invocation/jboss-invocation@2.0.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-api@3.0.18.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-impl@3.0.18.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-common-spi@3.0.18.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-core-api@3.0.18.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-core-impl@3.0.18.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-deployers-common@3.0.18.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-jdbc@3.0.18.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ironjacamar/ironjacamar-validator@3.0.18.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final-redhat-1", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.logging/jul-to-slf4j-stub@1.0.1.Final-redhat-3", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager@2.1.19.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.logmanager/log4j2-jboss-logmanager@2.0.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.marshalling/jboss-marshalling-river@2.2.3.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.marshalling/jboss-marshalling@2.2.3.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.metadata/jboss-metadata-appclient@16.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.metadata/jboss-metadata-common@16.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.metadata/jboss-metadata-ear@16.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.metadata/jboss-metadata-ejb@16.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.metadata/jboss-metadata-web@16.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.mod_cluster/mod_cluster-container-spi@2.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.mod_cluster/mod_cluster-core@2.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.mod_cluster/mod_cluster-load-spi@2.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.modules/jboss-modules@2.1.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.msc/jboss-msc@1.5.5.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.arjunacore/arjuna@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.arjunacore/txoj@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jta/cdi@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jta/jdbc@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jta/jms@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jta/jta@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jts/idlj-idl-openjdk@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jts/jtax@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jts/jts@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-idlj@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.jts/orbportability@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.rts/restat-api@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.rts/restat-bridge@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.rts/restat-integration@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.rts/restat-util@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/bridge@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/jbossxts@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/recovery@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/service@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/ws-c11@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/ws-t11@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/wsas@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/wscf11@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana.xts/wstx11@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana/common@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.narayana/jbosstxbridge@7.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.openjdk-orb/openjdk-orb@10.1.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.remoting/jboss-remoting@5.0.31.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.remotingjmx/remoting-jmx@3.1.0.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy.spring/resteasy-spring@3.2.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-atom-provider@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-cdi@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-client-api@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-client@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-core@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-crypto@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-jsapi@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-json-binding-provider@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-json-p-provider@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-rxjava2@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-tracing-api@2.0.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.resteasy/resteasy-validator-provider@6.2.15.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@2.0.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.spec.jakarta.el/jboss-el-api_5.0_spec@4.0.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.spec.jakarta.xml.soap/jboss-saaj-api_3.0_spec@1.0.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.spec.jakarta.xml.ws/jboss-jakarta-xml-ws-api_4.0_spec@1.0.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.stdio/jboss-stdio@1.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.threads/jboss-threads@2.5.0.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.weld.module/weld-ejb@5.1.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.weld.module/weld-jsf@5.1.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.weld.module/weld-jta@5.1.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.weld.module/weld-web@5.1.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.weld/weld-api@5.0.0.SP3-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.weld/weld-core-impl@5.1.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.weld/weld-lite-extension-translator@5.1.6.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.weld/weld-spi@5.0.0.SP3-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-client@7.3.8.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-factories@7.3.8.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-resources@7.3.8.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-server@7.3.8.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-transports-udp@7.3.8.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws.cxf/jbossws-cxf-transports-undertow@7.3.8.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws.projects/jaxws-undertow-httpspi@2.0.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws/jbossws-api@3.0.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws/jbossws-common-tools@2.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws/jbossws-common@5.1.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.ws/jbossws-spi@5.0.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.xnio.netty/netty-xnio-transport@0.1.10.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss/jboss-dmr@1.7.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss/jboss-ejb-client@5.0.8.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss/jboss-iiop-client@2.0.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss/jboss-transaction-spi@8.0.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss/jboss-vfs@3.3.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jboss/staxmapper@1.5.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jctools/jctools-core@4.0.5.redhat-00004", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jctools/jctools-core@4.0.6.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jgroups.aws/jgroups-aws@3.0.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jgroups.azure/jgroups-azure@2.0.2.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jgroups.kubernetes/jgroups-kubernetes@2.0.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jgroups/jgroups@5.3.23.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.jvnet.staxex/stax-ex@2.1.0.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-core@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-profile-api@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-saml-api@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-saml-impl@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-security-api@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-security-impl@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-soap-api@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-xacml-api@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-xacml-impl@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-xacml-saml-api@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-xmlsec-api@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.3.2.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.ow2.asm/asm@9.7.1.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.projectodd.vdx/vdx-core@1.1.6.redhat-1", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.projectodd.vdx/vdx-wildfly@1.1.6.redhat-1", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.4.redhat-00005", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.17.redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final-redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-common@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-embedded@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-infinispan-remote@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-cache-spi@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-context@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-jboss@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-protostream@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-marshalling-spi@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-api@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-infinispan@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-jgroups@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-local@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-server-spi@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-cache@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-infinispan-embedded@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-infinispan-remote@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spec-servlet-6.0@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spec-spi@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.clustering/wildfly-clustering-session-spi@5.0.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final-redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-cli@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-controller-client@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-controller@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-core-management-client@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-core-management-subsystem@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-core-security@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-deployment-repository@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-deployment-scanner@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-discovery@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-domain-http-interface@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-domain-management@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-elytron-integration@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-elytron-tool-wrapper@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-embedded@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-event-logger@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-host-controller@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-installation-manager@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-io-spi@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-io@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-jar-runtime@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-jmx@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-logging@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-management-client-content@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-network@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-patching@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-platform-mbean@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-process-controller@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-protocol@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-remoting@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-request-controller@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-security-manager@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-server@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-service@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-subsystem@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-threads@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.core/wildfly-version@27.1.12.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.discovery/wildfly-discovery-client@1.3.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.installation-manager/installation-manager-api@1.1.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.launcher/wildfly-launcher@1.0.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-java@2.3.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-ppc64le@2.3.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel10-x86_64@2.3.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel8-x86_64@2.3.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-rhel9-x86_64@2.3.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-linux-s390x@2.3.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.openssl/wildfly-openssl-windows-x86_64@2.3.0.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security.elytron-web/undertow-server-servlet@4.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security.elytron-web/undertow-server@4.1.2.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-authentication@3.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-authorization@3.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-client-resteasy@3.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-client-webservices@3.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security.jakarta/jakarta-security@3.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-asn1@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-audit@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-deprecated@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-http@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server-sasl@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-server@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-auth@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-base@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-client@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-source-impl@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential-store@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-credential@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-digest@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-encryption@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-basic@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-bearer@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-cert@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-digest@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-external@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-form@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-oidc@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-spnego@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-sso@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-stateful-basic@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-http@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-jose-jwk@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-jose-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-json-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-keystore@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-digest@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-gssapi@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-http@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-oauth2@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism-scram@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-mechanism@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-password-impl@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-permission@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-provider-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-jdbc@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-ldap@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm-token@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-realm@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-anonymous@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-auth-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-digest@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-entity@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-external@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gs2@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-gssapi@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-localuser@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-oauth2@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-otp@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-plain@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl-scram@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-sasl@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager-action@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-security-manager@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-ssh-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-ssl@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-tool@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-acme@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert-util@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-cert@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500-principal@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.security/wildfly-elytron-x500@2.6.9.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.transaction/wildfly-transaction-client@3.0.5.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-client-common@2.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-ejb-client@2.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-naming-client@2.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly.wildfly-http-client/wildfly-http-transaction-client@2.1.4.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.wildfly/wildfly-naming-client@2.0.1.Final-redhat-00001", + "dependsOn": [] + }, + { + "ref": "pkg:maven/org.yaml/snakeyaml@2.3.0.redhat-00002", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/annotations@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/apache-client@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/arns@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/auth@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/aws-core@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/aws-query-protocol@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/checksums-spi@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/checksums@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/crt-core@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/endpoints-spi@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/http-auth-aws@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/http-auth-spi@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/http-auth@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/http-client-spi@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/identity-spi@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/json-utils@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/metrics-spi@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/profiles@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/protocol-core@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/regions@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/retries-spi@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/retries@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/s3@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/sdk-core@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.awssdk/utils@2.30.32.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/software.amazon.eventstream/eventstream@1.0.1.redhat-00003", + "dependsOn": [] + }, + { + "ref": "pkg:maven/wsdl4j/wsdl4j@1.6.3.redhat-00008", + "dependsOn": [] + }, + { + "ref": "pkg:maven/xml-resolver/xml-resolver@1.2.0.redhat-12", + "dependsOn": [] + } + ] +} From 956a078822448ba385bc758d8f62f2a1a59b5f0e Mon Sep 17 00:00:00 2001 From: Hank Donnay Date: Mon, 28 Sep 2026 13:18:04 -0500 Subject: [PATCH 02/11] test: change hashing scheme for PackageScanner helper This shouldn't matter for correctly written tests. However, poorly written tests will require follow-up fixes. Signed-off-by: Hank Donnay Change-Id: Ic89dfd66113bd99bf0f65b53df7df1b46a6a6964 --- test/packagescanner.go | 34 +++++++++++++++++++--------------- 1 file changed, 19 insertions(+), 15 deletions(-) diff --git a/test/packagescanner.go b/test/packagescanner.go index 23bfc6c2c..411fb7ab0 100644 --- a/test/packagescanner.go +++ b/test/packagescanner.go @@ -2,6 +2,7 @@ package test import ( "context" + "hash/maphash" "sort" "strings" "testing" @@ -24,6 +25,7 @@ type ScannerTestcase struct { Hash string Want []*claircore.Package Scanner indexer.PackageScanner + Cmpopts []cmp.Option } // Digest reports the digest in the Hash member. @@ -54,8 +56,8 @@ func (tc ScannerTestcase) Run(ctx context.Context) func(*testing.T) { } sort.Slice(got, pkgSort(got)) t.Logf("found %d packages", len(got)) - if !cmp.Equal(tc.Want, got) { - t.Error(cmp.Diff(tc.Want, got)) + if !cmp.Equal(tc.Want, got, tc.Cmpopts...) { + t.Error(cmp.Diff(tc.Want, got, tc.Cmpopts...)) } } } @@ -67,6 +69,9 @@ func (tc ScannerTestcase) Run(ctx context.Context) func(*testing.T) { // n is the total number of expected packages, ie len(got). func (tc ScannerTestcase) RunSubset(ctx context.Context, n int) func(*testing.T) { sort.Slice(tc.Want, pkgSort(tc.Want)) + seed := maphash.MakeSeed() + var h maphash.Hash + h.SetSeed(seed) return func(t *testing.T) { ctx := Logging(t, ctx) l := tc.getLayer(ctx, t) @@ -81,29 +86,28 @@ func (tc ScannerTestcase) RunSubset(ctx context.Context, n int) func(*testing.T) t.Error(cmp.Diff(n, len(got))) } - type key struct { - name, hint string - } - gotMap := make(map[key]*claircore.Package, len(got)) + gotMap := make(map[uint64]*claircore.Package, len(got)) for _, p := range got { - gotMap[key{ - name: p.Name, - hint: p.RepositoryHint, - }] = p + h.Reset() + maphash.WriteComparable(&h, *p) + k := h.Sum64() + + gotMap[k] = p + t.Log(p.Name, p.PackageDB, p.RepositoryHint) } for _, p := range tc.Want { - g, exists := gotMap[key{ - name: p.Name, - hint: p.RepositoryHint, - }] + h.Reset() + maphash.WriteComparable(&h, *p) + k := h.Sum64() + g, exists := gotMap[k] if !exists { t.Errorf("\"got\" is missing package %s with hint %s", p.Name, p.RepositoryHint) continue } if !cmp.Equal(p, g) { - t.Errorf("%v-%v-%v: %v", p.Name, p.RepositoryHint, p.Filepath, cmp.Diff(p, g)) + t.Errorf("%v-%v-%v:\n%v", p.Name, p.RepositoryHint, p.Filepath, cmp.Diff(p, g)) } } } From 1ac247fed7cee511956430fec540519bc6072a55 Mon Sep 17 00:00:00 2001 From: Hank Donnay Date: Mon, 28 Sep 2026 13:18:04 -0500 Subject: [PATCH 03/11] jar: add SHA256 support for jar inspection This returns SHA256 and SHA1 digests for embedded jars. Signed-off-by: Hank Donnay Change-Id: Icdd64e6f259ef9eab34b47ac9e5936516a6a6964 --- java/jar/jar.go | 35 +++++++++++++++++++++++++---------- java/jar/jar_test.go | 2 +- 2 files changed, 26 insertions(+), 11 deletions(-) diff --git a/java/jar/jar.go b/java/jar/jar.go index 0eba71234..c8734ed92 100644 --- a/java/jar/jar.go +++ b/java/jar/jar.go @@ -31,6 +31,7 @@ import ( "bytes" "context" "crypto/sha1" + "crypto/sha256" "encoding/hex" "errors" "fmt" @@ -237,7 +238,8 @@ func extractInner(ctx context.Context, p srcPath, z *zip.Reader) ([]Info, error) var ret []Info // Zips need random access, so allocate a buffer for any we find. var buf bytes.Buffer - h := sha1.New() + h1, h256 := sha1.New(), sha256.New() + hs := io.MultiWriter(h1, h256) checkFile := func(ctx context.Context, f *zip.File) error { name := normName(f.Name) // Check name. @@ -257,8 +259,9 @@ func extractInner(ctx context.Context, p srcPath, z *zip.Reader) ([]Info, error) defer rc.Close() buf.Reset() buf.Grow(int(fi.Size())) - h.Reset() - sz, err := buf.ReadFrom(io.TeeReader(rc, h)) + h1.Reset() + h256.Reset() + sz, err := buf.ReadFrom(io.TeeReader(rc, hs)) if err != nil { return mkErr("failed buffering file", err) } @@ -293,10 +296,14 @@ func extractInner(ctx context.Context, p srcPath, z *zip.Reader) ([]Info, error) default: return mkErr("parse error", err) } - c := make([]byte, sha1.Size) - h.Sum(c[:0]) + ck1, ck256 := h1.Sum(make([]byte, 0, sha1.Size)), h256.Sum(make([]byte, 0, sha256.Size)) for i := range ps { - ps[i].SHA = c + if len(ps[i].SHA1) == 0 { + ps[i].SHA1 = ck1 + } + if len(ps[i].SHA256) == 0 { + ps[i].SHA256 = ck256 + } } ret = append(ret, ps...) return nil @@ -355,9 +362,12 @@ type Info struct { // If this jar is embedded inside another jar or series of jars, // each jar file will be included and separated via ":". Source string - // SHA is populated with the SHA1 of the file if this entry was discovered + // SHA1 is populated with the SHA1 of the file if this entry was discovered // inside another archive. - SHA []byte + SHA1 []byte + // SHA256 is populated with the SHA256 of the file if this entry was + // discovered inside another archive. + SHA256 []byte } func (i *Info) String() string { @@ -365,9 +375,14 @@ func (i *Info) String() string { b.WriteString(i.Name) b.WriteByte('/') b.WriteString(i.Version) - if len(i.SHA) != 0 { + if len(i.SHA1) != 0 { b.WriteString("(sha1:") - hex.NewEncoder(&b).Write(i.SHA) + hex.NewEncoder(&b).Write(i.SHA1) + b.WriteByte(')') + } + if len(i.SHA256) != 0 { + b.WriteString("(sha256:") + hex.NewEncoder(&b).Write(i.SHA256) b.WriteByte(')') } b.WriteString(" [") diff --git a/java/jar/jar_test.go b/java/jar/jar_test.go index 47e43ebd9..0961a60c8 100644 --- a/java/jar/jar_test.go +++ b/java/jar/jar_test.go @@ -509,7 +509,7 @@ func TestInnerJar(t *testing.T) { }, } - if !cmp.Equal(got, want, cmpopts.IgnoreFields(Info{}, "SHA")) { + if !cmp.Equal(got, want, cmpopts.IgnoreFields(Info{}, "SHA1", "SHA256")) { t.Error(cmp.Diff(got, want)) } } From 00414c60e975e737690b632e3de4e42c6d602b33 Mon Sep 17 00:00:00 2001 From: Hank Donnay Date: Mon, 28 Sep 2026 13:18:04 -0500 Subject: [PATCH 04/11] jar: add embedded SBoM support This calls into the `java/bom` package when an appropriate file is found. Signed-off-by: Hank Donnay Change-Id: If6e96e723e5735ed5acbfcbaf9d0d0056a6a6964 --- java/jar/jar.go | 145 ++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 141 insertions(+), 4 deletions(-) diff --git a/java/jar/jar.go b/java/jar/jar.go index c8734ed92..f5e361e88 100644 --- a/java/jar/jar.go +++ b/java/jar/jar.go @@ -29,6 +29,7 @@ import ( "archive/zip" "bufio" "bytes" + "compress/gzip" "context" "crypto/sha1" "crypto/sha256" @@ -44,7 +45,9 @@ import ( "regexp" "strings" + "github.com/quay/claircore/java/bom" "github.com/quay/claircore/toolkit/log" + "github.com/quay/claircore/toolkit/types/cpe" ) // MinSize is the absolute minimum size for a jar. @@ -55,9 +58,10 @@ const MinSize = 22 // Parse returns Info structs describing all of the discovered "artifacts" in // the jar. // -// POM properties are a preferred source of information, falling back to -// examining the jar manifest and then looking at the name. Anything that looks -// like a jar bundled into the archive is also examined. +// An embedded SBoM is the preferred source of information. When one is +// found, it is assumed correct for the archive and bundled jars are not +// examined. Otherwise, POM properties are used, falling back to the jar +// manifest and then the archive name, and bundled jars are examined. // // The provided name is expected to be the full path within the layer to the jar // file being provided as "z". @@ -100,7 +104,24 @@ func parse(ctx context.Context, name srcPath, z *zip.Reader) ([]Info, error) { var i Info var err error base := filepath.Base(name.Cur()) - // Try the pom.properties files first. Fatjars hopefully have the multiple + // TODO(hank) It may be worth reworking this to process the jar manifest + // first, to be able to make use of keys like "Sbom-Location" and + // "Sbom-Format". + + // First, check an embedded SBoM. + // + // If found, assume it's correct for its entire tree of jars. + ret, err = extractSBOM(ctx, name, z) + switch { + case errors.Is(err, nil): + slog.DebugContext(ctx, "using discovered SBoM file(s); skipping examining jars") + return ret, nil + case errors.Is(err, errUnpopulated): + default: + return nil, archiveErr(name, err) + } + + // Then, try the pom.properties files. Fatjars hopefully have the multiple // properties files preserved. ret, err = extractProperties(ctx, name, z) switch { @@ -155,6 +176,93 @@ Finish: return ret, nil } +// TODO(hank) All these functions that return a slice should return an iterator. + +// ExtractSBOM looks for CycloneDX JSON files underneath "META-INF/sbom/" and +// attempts to read them using the Red Hat-flavored rules in the "bom" package. +// +// This function should transparently handle the file being gzipped in addition +// to the zip compression. +func extractSBOM(ctx context.Context, name srcPath, z *zip.Reader) ([]Info, error) { + // Avoid using the fs interface for the odd (but observed) case where + // intermediate directories are not present. + dup := make(map[string]struct{}) + files := func(yield func(*zip.File, bool) bool) { + for _, f := range z.File { + ok, _ := path.Match(`META-INF/sbom/*.cdx.json*`, f.Name) // Can only report bad pattern, and it's static. + if !ok { + continue + } + norm, after, isGz := strings.Cut(f.Name, ".gzip") + if after != "" { // Unknown name. + continue + } + if _, ok := dup[norm]; ok { + continue + } + dup[norm] = struct{}{} + if !yield(f, isGz) { + return + } + } + } + var out []Info + var buf bytes.Buffer + var zr *gzip.Reader + for f, isGz := range files { + buf.Reset() + buf.Grow(int(f.UncompressedSize64)) + rc, err := f.Open() + if err != nil { + return nil, mkErr("opening SBoM", err) + } + // Odd control flow to avoid extra open zip members. + switch { + case !isGz: + _, err = buf.ReadFrom(rc) + case isGz && zr == nil: + zr = new(gzip.Reader) + fallthrough + case isGz && zr != nil: + err = zr.Reset(rc) + if err != nil { + break + } + _, err = buf.ReadFrom(zr) + default: + panic("unreachable") + } + rc.Close() + if err != nil { + return nil, mkErr("opening SBoM", err) + } + + pkgs, err := bom.LoadCDX(ctx, bytes.NewReader(buf.Bytes())) + if err != nil { + return nil, mkErr("loading SBoM", err) + } + for pkg, err := range pkgs { + if err != nil { + return nil, mkErr("reading SBoM", err) + } + i := len(out) + out = append(out, Info{}) + err = out[i].parseSBOM(ctx, pkg) + if err != nil { + return nil, mkErr("parsing SBoM package", err) + } + name.Push(f.Name) + out[i].Source = name.String() + name.Pop() + } + } + + if len(out) == 0 { + return nil, errUnpopulated + } + return out, nil +} + // ExtractManifest attempts to open the manifest file at the well-known path. // // Reports NotAJar if the file doesn't exist. @@ -362,6 +470,10 @@ type Info struct { // If this jar is embedded inside another jar or series of jars, // each jar file will be included and separated via ":". Source string + // CPE Name, if known. + // + // Currently only populated if the info source is an embedded SBoM. + CPE *cpe.WFN // SHA1 is populated with the SHA1 of the file if this entry was discovered // inside another archive. SHA1 []byte @@ -399,6 +511,31 @@ var errUnpopulated = errors.New("unpopulated") // checks fail. var errInsaneManifest = errors.New("jar manifest does not pass sanity checks") +// ParseSBOM does what it says on the tin. +// +// This attempts to make the [bom.Package] → [Info] → [claircore.Package] +// transformations equivalent to the [bom.Package] → [claircore.Package] +// transformation. +func (i *Info) parseSBOM(ctx context.Context, pkg bom.Package) error { + for k, v := range pkg.Hashes { + switch k { + case bom.HashSHA1: + i.SHA1 = v + case bom.HashSHA256: + i.SHA256 = v + } + } + group, artifact, ok := strings.Cut(pkg.PURL.Name, "/") + if !ok { + i.Name = pkg.PURL.Name + } else { + i.Name = group + ":" + artifact + } + i.Version = pkg.PURL.Version + i.CPE = pkg.CPE + return nil +} + // ParseManifest does what it says on the tin. // // This extracts "Main Attributes", as defined at From e08bdf538a45a21bf63c12cda50144ba04d75df2 Mon Sep 17 00:00:00 2001 From: Hank Donnay Date: Mon, 28 Sep 2026 13:18:04 -0500 Subject: [PATCH 05/11] java: integrate `bom` package This change has the fs walk discover and use SBoM files. As long as they're earlier in the walk (this should always be the case), the entries there will be authoritative to the claircore examination. This also shook loose bugs in the `Package` object creation that would result in incorrect digests and file paths. Signed-off-by: Hank Donnay Change-Id: I70b2e9dcebbfc92b82cb354463b700c76a6a6964 --- java/common.go | 90 ++++-- java/packagescanner.go | 255 ++++++++++------ java/packagescanner_test.go | 594 ++++++++++++++++++------------------ 3 files changed, 507 insertions(+), 432 deletions(-) diff --git a/java/common.go b/java/common.go index 65a44311d..55749239c 100644 --- a/java/common.go +++ b/java/common.go @@ -3,44 +3,70 @@ package java import ( "context" "io/fs" + "iter" + "path" "strings" "github.com/quay/claircore/java/jar" ) -// Archives returns a slice of names that are probably archives, based on name -// and size. Callers should still check that the named file is valid. -func archives(_ context.Context, sys fs.FS) (out []string, err error) { - return out, fs.WalkDir(sys, ".", func(p string, d fs.DirEntry, err error) error { - // Incoming checks: - switch { - case err != nil: - return err - case d.IsDir(): - return nil - } - fi, err := d.Info() - if err != nil { - return err - } - - // Prefix check: - if strings.HasPrefix(fi.Name(), ".wh.") { - return nil - } +const ( + cdxJSON = ".cdx.json" + cdxJSONGZ = ".cdx.json.gz" +) - // Extension check: - if !jar.ValidExt(fi.Name()) { - return nil - } +// WalkInteresting walks the [fs.FS] and reports interesting files: +// +// - Archives: Names that are probably archives, based on name and size. +// - SBoMs: Names that are probably CycloneDX SBoMs, either gzip compressed or not. +// +// Callers still need to perform validity checks in both cases. +func walkInteresting(ctx context.Context, sys fs.FS) (iter.Seq2[fileKind, string], func() error) { + var err error + seq := func(yield func(fileKind, string) bool) { + err = fs.WalkDir(sys, ".", func(p string, d fs.DirEntry, err error) error { + switch { + case err != nil: + return err + case d.IsDir(): + return nil + } + n := path.Base(p) + if strings.HasPrefix(n, ".wh.") { + return nil + } - // Size check: - if fi.Size() < jar.MinSize { - return nil - } + var k fileKind + switch { + case jar.ValidExt(n): + fi, err := d.Info() + if err != nil { + return err + } + if fi.Size() < jar.MinSize { + return nil + } + // Probably an archive. + k = fileJAR + case strings.HasSuffix(n, cdxJSON), strings.HasSuffix(n, cdxJSONGZ): + k = fileSBoM + default: + return nil + } - // Probably an archive. - out = append(out, p) - return nil - }) + if !yield(k, p) { + return fs.SkipAll + } + return nil + }) + } + return seq, func() error { return err } } + +type fileKind uint + +const ( + _ fileKind = iota + fileSBoM + fileJAR +) diff --git a/java/packagescanner.go b/java/packagescanner.go index 4d687a58d..cfae0c126 100644 --- a/java/packagescanner.go +++ b/java/packagescanner.go @@ -5,23 +5,30 @@ package java import ( "archive/zip" "bytes" + "cmp" "context" "crypto/sha1" + "crypto/sha256" + "encoding/hex" "encoding/json" "errors" "fmt" + "hash/maphash" "io" "log/slog" "net/http" "net/url" + "path" "runtime/trace" "sort" "strconv" "strings" "time" + "unique" "github.com/quay/claircore" "github.com/quay/claircore/indexer" + "github.com/quay/claircore/java/bom" "github.com/quay/claircore/java/jar" "github.com/quay/claircore/rpm" "github.com/quay/claircore/toolkit/types" @@ -117,8 +124,6 @@ func (s *Scanner) Configure(ctx context.Context, f indexer.ConfigDeserializer, c func (s *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircore.Package, error) { defer trace.StartRegion(ctx, "Scanner.Scan").End() trace.Log(ctx, "layer", layer.Hash.String()) - slog.DebugContext(ctx, "start") - defer slog.DebugContext(ctx, "done") if err := ctx.Err(); err != nil { return nil, err } @@ -127,33 +132,38 @@ func (s *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircor return nil, fmt.Errorf("java: unable to open layer: %w", err) } - ars, err := archives(ctx, sys) - if err != nil { - return nil, err - } // All used in the loop below. var ret []*claircore.Package buf := getBuf() - sh := sha1.New() - ck := make([]byte, sha1.Size) + h1, h256 := sha1.New(), sha256.New() + hs := io.MultiWriter(h1, h256) + ck1, ck256 := make([]byte, 0, sha1.Size), make([]byte, 0, sha256.Size) doSearch := s.root != nil defer putBuf(buf) set, err := rpm.NewPathSet(ctx, layer) if err != nil { return nil, fmt.Errorf("java: unable to check RPM db: %w", err) } - for _, n := range ars { - log := slog.With("path", n) - if set.Contains(n) { - log.DebugContext(ctx, "file path determined to be of RPM origin") + seed := maphash.MakeSeed() + sbomDup := make(map[uint64]struct{}) + sbomPath := make(map[uint64]struct{}) + sbomHash := map[unique.Handle[string]]map[uint64]struct{}{ + bom.HashSHA1: make(map[uint64]struct{}), + bom.HashSHA256: make(map[uint64]struct{}), + } + + seq, walkErr := walkInteresting(ctx, sys) + for k, p := range seq { + log := slog.With("path", p) + if set.Contains(p) { + log.DebugContext(ctx, "file from an rpm") continue } - sh.Reset() + h1.Reset() + h256.Reset() buf.Reset() - // Calculate the SHA1 as it's buffered, since it may be needed for - // searching later. - f, err := sys.Open(n) + f, err := sys.Open(p) if err != nil { return nil, err } @@ -161,100 +171,147 @@ func (s *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircor if err == nil { buf.Grow(int(fStat.Size())) } - sz, err := buf.ReadFrom(io.TeeReader(f, sh)) + sz, err := buf.ReadFrom(io.TeeReader(f, hs)) f.Close() if err != nil { return nil, err } - zb := buf.Bytes() - // Let the zip reader determine if this is actually a valid zip file. - // We cannot just check the header, as it's possible the jar file - // starts off with a script. This scenario is explicitly mentioned in - // the standard library: https://cs.opensource.google/go/go/+/refs/tags/go1.24.3:src/archive/zip/reader.go;l=41. - z, err := zip.NewReader(bytes.NewReader(zb), sz) - switch { - case errors.Is(err, nil): - case errors.Is(err, io.EOF): - // BUG(go1.21) Older versions of the stdlib can report io.EOF when - // opening malformed zips. - fallthrough - case errors.Is(err, zip.ErrFormat): - log.InfoContext(ctx, "not actually a jar: invalid zip", "reason", err) - continue - default: - return nil, err - } + rd := bytes.NewReader(buf.Bytes()) - infos, err := jar.Parse(ctx, n, z) - switch { - case err == nil: - case errors.Is(err, jar.ErrNotAJar): - // Could not prove this is really a jar. Skip it and move on. - log.InfoContext(ctx, "skipping jar", "reason", err) - continue - default: - return nil, err - } - sh.Sum(ck[:0]) - ps := make([]*claircore.Package, len(infos)) - for j := range infos { - i := &infos[j] - // If we discovered a pom file, don't bother talking to the network. - // If not, talk to the network if configured to do so. - if !strings.HasSuffix(i.Source, "pom.properties") && doSearch { - switch err := s.search(ctx, i, ck); { - case errors.Is(err, nil): // OK - case errors.Is(err, errRPC): - // BUG(hank) There's no way for a scanner that makes RPC calls - // to signal "the call failed, these are best-effort results, - // and please retry." - default: + switch k { + case fileSBoM: + dir := path.Dir(p) + // Don't consume both compressed and uncompressed versions. + // + // This code doesn't prefer one or the other and assumes they're + // equivalent. + k := maphash.String(seed, dir) + if _, ok := sbomDup[k]; ok { + log.DebugContext(ctx, "skipping (assumed) duplicate SBoM") + continue + } + sbomDup[k] = struct{}{} + + seq, err := bom.LoadCDX(ctx, rd) + if err != nil { + return nil, err + } + for bp, err := range seq { + if err != nil { return nil, err } + n := path.Join(dir, bp.Location) + sbomPath[maphash.String(seed, n)] = struct{}{} + for k, b := range bp.Hashes { + h, ok := sbomHash[k] + if !ok { + continue + } + h[maphash.Bytes(seed, b)] = struct{}{} + } + var pkg claircore.Package + if err := bom.PopulatePackage(&pkg, bp, p); err != nil { + return nil, err + } + ret = append(ret, &pkg) } - - var pkg claircore.Package - pkg.Name = i.Name - pkg.Version = i.Version - pkg.Kind = types.BinaryPackage - pkg.Filepath = n - b := ck - if len(i.SHA) != 0 { - b = i.SHA + case fileJAR: + // Let the zip reader determine if this is actually a valid zip file. + // We cannot just check the header, as it's possible the jar file + // starts off with a script. This scenario is explicitly mentioned in + // the standard library: https://cs.opensource.google/go/go/+/refs/tags/go1.24.3:src/archive/zip/reader.go;l=41. + z, err := zip.NewReader(rd, sz) + switch { + case errors.Is(err, nil): + case errors.Is(err, zip.ErrFormat): + log.InfoContext(ctx, "not actually a jar: invalid zip", "reason", err) + continue + default: + return nil, err } - pkg.RepositoryHint = fmt.Sprintf(`sha1:%40x`, b) - // BUG(hank) There's probably some bugs lurking in the jar.Info → - // claircore.Package mapping code around embedded jars. There's a - // testcase to be written, there. - idx := strings.LastIndex(i.Source, ":") - // If the top-level JAR file can only be identified by its name, - // i.Source will just be `.` - // In this case, PackageDB should just be the filepath, n. - // Otherwise, use i.Source. - pkgDB := n - if idx != -1 { - pkgDB = i.Source[:idx] - } - // Only examine anything after the last colon (or the entire path if there is no colon). - switch l := i.Source[idx+1:]; { - case strings.HasSuffix(l, "pom.properties"): - fallthrough - case s.root != nil && i.Source == s.root.String(): - // Populate as a maven artifact. - pkg.PackageDB = `maven:` + pkgDB - case l == "META-INF/MANIFEST.MF": - // information pulled from a manifest file - pkg.PackageDB = `jar:` + pkgDB - case l == ".": - // Name guess. - pkg.PackageDB = `file:` + pkgDB + infos, err := jar.Parse(ctx, p, z) + switch { + case err == nil: + case errors.Is(err, jar.ErrNotAJar): + // Could not prove this is really a jar. Skip it and move on. + log.InfoContext(ctx, "skipping jar", "reason", err) + continue default: - return nil, fmt.Errorf("java: martian Info: %+v", i) + return nil, err + } + ck1 := h1.Sum(ck1) + ck256 := h256.Sum(ck256) + hex1, hex256 := hex.EncodeToString(ck1), hex.EncodeToString(ck256) + ps := make([]*claircore.Package, len(infos)) + for j := range infos { + i := &infos[j] + // If we discovered a pom file, don't bother talking to the network. + // If not, talk to the network if configured to do so. + if !strings.HasSuffix(i.Source, "pom.properties") && doSearch { + switch err := s.search(ctx, i, ck1); { + case errors.Is(err, nil): // OK + case errors.Is(err, errRPC): + // BUG(hank) There's no way for a scanner that makes RPC calls + // to signal "the call failed, these are best-effort results, + // and please retry." + default: + return nil, err + } + } + + var pkg claircore.Package + pkg.Name = i.Name + pkg.Version = i.Version + pkg.Kind = types.BinaryPackage + pkg.Filepath = p + pkg.RepositoryHint = (url.Values{ + "hash": { + "sha1:" + cmp.Or(hex.EncodeToString(i.SHA1), hex1), + "sha256:" + cmp.Or(hex.EncodeToString(i.SHA256), hex256), + }, + }).Encode() + if i.CPE != nil { + pkg.CPE = *i.CPE + } + // BUG(hank) There's probably some bugs lurking in the jar.Info → + // claircore.Package mapping code around embedded jars. There's a + // testcase to be written, there. + + idx := strings.LastIndex(i.Source, ":") + // If the top-level JAR file can only be identified by its name, + // i.Source will just be `.` + // In this case, PackageDB should just be the filepath, n. + // Otherwise, use i.Source. + pkgDB := p + if idx != -1 { + pkgDB = i.Source[:idx] + } + // Only examine anything after the last colon (or the entire path if there is no colon). + switch l := i.Source[idx+1:]; { + case strings.HasSuffix(l, "pom.properties"): + fallthrough + case s.root != nil && i.Source == s.root.String(): + // Populate as a maven artifact. + pkg.PackageDB = `maven:` + pkgDB + case l == "META-INF/MANIFEST.MF": + // information pulled from a manifest file + pkg.PackageDB = `jar:` + pkgDB + case l == ".": + // Name guess. + pkg.PackageDB = `file:` + pkgDB + default: + return nil, fmt.Errorf("java: martian Info: %+v", i) + } + ps[j] = &pkg } - ps[j] = &pkg + ret = append(ret, ps...) + default: + panic("unreachable") } - ret = append(ret, ps...) + } + if err := walkErr(); err != nil { + return nil, fmt.Errorf("java: walking fs: %w", err) } return ret, nil } @@ -273,8 +330,8 @@ func (Scanner) DefaultRepository(ctx context.Context) *claircore.Repository { // ErrRPC is reported if anything went wrong making the request or reading the // response. func (s *Scanner) search(ctx context.Context, i *jar.Info, ck []byte) error { - if i.SHA != nil { - ck = i.SHA + if i.SHA1 != nil { + ck = i.SHA1 } success := false defer func() { diff --git a/java/packagescanner_test.go b/java/packagescanner_test.go index 09011c05e..b3528016f 100644 --- a/java/packagescanner_test.go +++ b/java/packagescanner_test.go @@ -61,7 +61,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/ext/gremlin-groovy/lib/gremlin-groovy-3.4.8.jar", - RepositoryHint: "sha1:9ae4c997e7b38ef6f6bc72c53412434743705866", + RepositoryHint: "hash=sha1%3A9ae4c997e7b38ef6f6bc72c53412434743705866&hash=sha256%3Afad6dd2ab378d1558800070023569210863cab9acb9946994925879db59f4249", Filepath: "opt/gremlin-console/ext/gremlin-groovy/lib/gremlin-groovy-3.4.8.jar", }, { @@ -69,7 +69,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/ext/gremlin-groovy/plugin/gremlin-groovy-3.4.8.jar", - RepositoryHint: "sha1:9ae4c997e7b38ef6f6bc72c53412434743705866", + RepositoryHint: "hash=sha1%3A9ae4c997e7b38ef6f6bc72c53412434743705866&hash=sha256%3Afad6dd2ab378d1558800070023569210863cab9acb9946994925879db59f4249", Filepath: "opt/gremlin-console/ext/gremlin-groovy/plugin/gremlin-groovy-3.4.8.jar", }, { @@ -77,7 +77,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/ext/tinkergraph-gremlin/lib/tinkergraph-gremlin-3.4.8.jar", - RepositoryHint: "sha1:b438353c7514e468f983370a909328aa5957813a", + RepositoryHint: "hash=sha1%3Ab438353c7514e468f983370a909328aa5957813a&hash=sha256%3A9524af330e2b9c7afd1427a095a27fbd9ce530ffed5cbca25a8d07dedefa0529", Filepath: "opt/gremlin-console/ext/tinkergraph-gremlin/lib/tinkergraph-gremlin-3.4.8.jar", }, { @@ -85,7 +85,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/ext/tinkergraph-gremlin/plugin/tinkergraph-gremlin-3.4.8.jar", - RepositoryHint: "sha1:b438353c7514e468f983370a909328aa5957813a", + RepositoryHint: "hash=sha1%3Ab438353c7514e468f983370a909328aa5957813a&hash=sha256%3A9524af330e2b9c7afd1427a095a27fbd9ce530ffed5cbca25a8d07dedefa0529", Filepath: "opt/gremlin-console/ext/tinkergraph-gremlin/plugin/tinkergraph-gremlin-3.4.8.jar", }, { @@ -93,7 +93,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.3.1", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/caffeine-2.3.1.jar", - RepositoryHint: "sha1:d6aec5cbd26313a341ee7c034bd56d604f68bebe", + RepositoryHint: "hash=sha1%3Ad6aec5cbd26313a341ee7c034bd56d604f68bebe&hash=sha256%3Af0343c767eb8d2ac5627106366b777dca3ce21863992ea2e693ba1099bf39f66", Filepath: "opt/gremlin-console/lib/caffeine-2.3.1.jar", }, { @@ -101,7 +101,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.14", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/commons-codec-1.14.jar", - RepositoryHint: "sha1:3cb1181b2141a7e752f5bdc998b7ef1849f726cf", + RepositoryHint: "hash=sha1%3A3cb1181b2141a7e752f5bdc998b7ef1849f726cf&hash=sha256%3Aa128e4f93fabe5381ded64cf2873019e06030b718eb43ceeae0b0e5d17ad33e9", Filepath: "opt/gremlin-console/lib/commons-codec-1.14.jar", }, { @@ -109,7 +109,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.2.2", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/commons-collections-3.2.2.jar", - RepositoryHint: "sha1:8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5", + RepositoryHint: "hash=sha1%3A8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5&hash=sha256%3Aeeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8", Filepath: "opt/gremlin-console/lib/commons-collections-3.2.2.jar", }, { @@ -117,7 +117,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.10", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/commons-configuration-1.10.jar", - RepositoryHint: "sha1:2b36e4adfb66d966c5aef2d73deb6be716389dc9", + RepositoryHint: "hash=sha1%3A2b36e4adfb66d966c5aef2d73deb6be716389dc9&hash=sha256%3A95d4e6711e88ce78992c82c25bc03c8df9ecf5a357f0de0bec72a26db3399374", Filepath: "opt/gremlin-console/lib/commons-configuration-1.10.jar", }, { @@ -125,7 +125,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.6", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/commons-lang-2.6.jar", - RepositoryHint: "sha1:0ce1edb914c94ebc388f086c6827e8bdeec71ac2", + RepositoryHint: "hash=sha1%3A0ce1edb914c94ebc388f086c6827e8bdeec71ac2&hash=sha256%3A50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c", Filepath: "opt/gremlin-console/lib/commons-lang-2.6.jar", }, { @@ -133,7 +133,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.8.1", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/commons-lang3-3.8.1.jar", - RepositoryHint: "sha1:6505a72a097d9270f7a9e7bf42c4238283247755", + RepositoryHint: "hash=sha1%3A6505a72a097d9270f7a9e7bf42c4238283247755&hash=sha256%3Adac807f65b07698ff39b1b07bfef3d87ae3fd46d91bbf8a2bc02b2a831616f68", Filepath: "opt/gremlin-console/lib/commons-lang3-3.8.1.jar", }, { @@ -141,7 +141,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.2", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/commons-logging-1.2.jar", - RepositoryHint: "sha1:4bfc12adfe4842bf07b657f0369c4cb522955686", + RepositoryHint: "hash=sha1%3A4bfc12adfe4842bf07b657f0369c4cb522955686&hash=sha256%3Adaddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636", Filepath: "opt/gremlin-console/lib/commons-logging-1.2.jar", }, { @@ -149,7 +149,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "0.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/exp4j-0.4.8.jar", - RepositoryHint: "sha1:cf1cfc0f958077d86ac7452c7e36d944689b2ec4", + RepositoryHint: "hash=sha1%3Acf1cfc0f958077d86ac7452c7e36d944689b2ec4&hash=sha256%3A271f7824ee8a3468257bc0613afdabb67597af8389317643fa806b983b7ecb27", Filepath: "opt/gremlin-console/lib/exp4j-0.4.8.jar", }, { @@ -157,7 +157,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-console-3.4.8.jar", - RepositoryHint: "sha1:f001a2644ca44cf60fdde8dbd271e919168ec208", + RepositoryHint: "hash=sha1%3Af001a2644ca44cf60fdde8dbd271e919168ec208&hash=sha256%3A97ad8d11910c46b3a213bb7b674bf164c75a4ce6308341ac4a630050c54cf23c", Filepath: "opt/gremlin-console/lib/gremlin-console-3.4.8.jar", }, { @@ -165,7 +165,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-core-3.4.8.jar", - RepositoryHint: "sha1:7d6074aa75fc8e219fd7456fa94312ba52922dac", + RepositoryHint: "hash=sha1%3A7d6074aa75fc8e219fd7456fa94312ba52922dac&hash=sha256%3A5818f87798caa8cf70596eb34f18707c6a8d38655c457b07fc0c9a3dad93727d", Filepath: "opt/gremlin-console/lib/gremlin-core-3.4.8.jar", }, { @@ -173,7 +173,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-driver-3.4.8.jar", - RepositoryHint: "sha1:53a55a34441c49ad7b933a7ddb4276d3e81dbe72", + RepositoryHint: "hash=sha1%3A53a55a34441c49ad7b933a7ddb4276d3e81dbe72&hash=sha256%3Ad92b1dce6c0610a495473f1e5233905802b42cb280026903341c5063a1dd4ced", Filepath: "opt/gremlin-console/lib/gremlin-driver-3.4.8.jar", }, { @@ -181,7 +181,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.4.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", - RepositoryHint: "sha1:eecca88aa8b7e6ca0d85821a0b7df9f9b873e95b", + RepositoryHint: "hash=sha1%3Aeecca88aa8b7e6ca0d85821a0b7df9f9b873e95b&hash=sha256%3A979d1fa7bd9b611df4beb693425a9b9037d47f2513aa178a40454946c0465324", Filepath: "opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", }, { @@ -189,7 +189,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "3.0.3", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", - RepositoryHint: "sha1:eecca88aa8b7e6ca0d85821a0b7df9f9b873e95b", + RepositoryHint: "hash=sha1%3Aeecca88aa8b7e6ca0d85821a0b7df9f9b873e95b&hash=sha256%3A979d1fa7bd9b611df4beb693425a9b9037d47f2513aa178a40454946c0465324", Filepath: "opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", }, { @@ -197,7 +197,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.10.1", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", - RepositoryHint: "sha1:eecca88aa8b7e6ca0d85821a0b7df9f9b873e95b", + RepositoryHint: "hash=sha1%3Aeecca88aa8b7e6ca0d85821a0b7df9f9b873e95b&hash=sha256%3A979d1fa7bd9b611df4beb693425a9b9037d47f2513aa178a40454946c0465324", Filepath: "opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", }, { @@ -205,7 +205,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.3.0", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", - RepositoryHint: "sha1:eecca88aa8b7e6ca0d85821a0b7df9f9b873e95b", + RepositoryHint: "hash=sha1%3Aeecca88aa8b7e6ca0d85821a0b7df9f9b873e95b&hash=sha256%3A979d1fa7bd9b611df4beb693425a9b9037d47f2513aa178a40454946c0465324", Filepath: "opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", }, { @@ -213,7 +213,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.9.10.5", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", - RepositoryHint: "sha1:eecca88aa8b7e6ca0d85821a0b7df9f9b873e95b", + RepositoryHint: "hash=sha1%3Aeecca88aa8b7e6ca0d85821a0b7df9f9b873e95b&hash=sha256%3A979d1fa7bd9b611df4beb693425a9b9037d47f2513aa178a40454946c0465324", Filepath: "opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", }, { @@ -221,7 +221,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.9.10", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", - RepositoryHint: "sha1:eecca88aa8b7e6ca0d85821a0b7df9f9b873e95b", + RepositoryHint: "hash=sha1%3Aeecca88aa8b7e6ca0d85821a0b7df9f9b873e95b&hash=sha256%3A979d1fa7bd9b611df4beb693425a9b9037d47f2513aa178a40454946c0465324", Filepath: "opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", }, { @@ -229,7 +229,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.9.10", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", - RepositoryHint: "sha1:eecca88aa8b7e6ca0d85821a0b7df9f9b873e95b", + RepositoryHint: "hash=sha1%3Aeecca88aa8b7e6ca0d85821a0b7df9f9b873e95b&hash=sha256%3A979d1fa7bd9b611df4beb693425a9b9037d47f2513aa178a40454946c0465324", Filepath: "opt/gremlin-console/lib/gremlin-shaded-3.4.8.jar", }, { @@ -237,7 +237,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-2.5.11-indy.jar", - RepositoryHint: "sha1:1d90cbcff0947aaf43f31741b48839e5fe190f13", + RepositoryHint: "hash=sha1%3A1d90cbcff0947aaf43f31741b48839e5fe190f13&hash=sha256%3A12266b841ec74ca0f0f4112d110f09c4fb48f9814ac6dcddfcca5353ba089e13", Filepath: "opt/gremlin-console/lib/groovy-2.5.11-indy.jar", }, { @@ -245,7 +245,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-cli-picocli-2.5.11.jar", - RepositoryHint: "sha1:d612d63d4ef1083bc05fcadc233b3d8f201d10f2", + RepositoryHint: "hash=sha1%3Ad612d63d4ef1083bc05fcadc233b3d8f201d10f2&hash=sha256%3A5f8de2af3a68e3f9b2c69823fc72194fd95a75d5e7dd9e75d4cc8258ad3cb13e", Filepath: "opt/gremlin-console/lib/groovy-cli-picocli-2.5.11.jar", }, { @@ -253,7 +253,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-console-2.5.11.jar", - RepositoryHint: "sha1:3db61e9f5806dbf999bbeb44bf6c532540abc731", + RepositoryHint: "hash=sha1%3A3db61e9f5806dbf999bbeb44bf6c532540abc731&hash=sha256%3A34f1dc144b2f052777afecc34f1749e2dc036a3032451d5dfd3a3a0a091f645b", Filepath: "opt/gremlin-console/lib/groovy-console-2.5.11.jar", }, { @@ -261,7 +261,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-groovysh-2.5.11-indy.jar", - RepositoryHint: "sha1:c4c372f662fdfb5f298aee7484553379ef207d1b", + RepositoryHint: "hash=sha1%3Ac4c372f662fdfb5f298aee7484553379ef207d1b&hash=sha256%3A2d3c690577f7df053f25f3fb5f76f98471cfb7529bcbb4c3e47c22aa783f37d8", Filepath: "opt/gremlin-console/lib/groovy-groovysh-2.5.11-indy.jar", }, { @@ -269,7 +269,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-json-2.5.11-indy.jar", - RepositoryHint: "sha1:50233b0100cdb17a90a49a8aaaa9f0d020608600", + RepositoryHint: "hash=sha1%3A50233b0100cdb17a90a49a8aaaa9f0d020608600&hash=sha256%3A8060e9492279cb5dfc0e9fd3a270aa937378bb36b776de1c38b5f43ea3d00ae0", Filepath: "opt/gremlin-console/lib/groovy-json-2.5.11-indy.jar", }, { @@ -277,7 +277,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-jsr223-2.5.11-indy.jar", - RepositoryHint: "sha1:c95ee910c2e74cfc37c73a6510b8476b146f3d10", + RepositoryHint: "hash=sha1%3Ac95ee910c2e74cfc37c73a6510b8476b146f3d10&hash=sha256%3A1329e93f8e44834bb9bb4428e4b81733aa002cc76612b001e95a50941368b560", Filepath: "opt/gremlin-console/lib/groovy-jsr223-2.5.11-indy.jar", }, { @@ -285,7 +285,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-swing-2.5.11.jar", - RepositoryHint: "sha1:bcb2614685279e845f075cd1a22fe6950ce960b2", + RepositoryHint: "hash=sha1%3Abcb2614685279e845f075cd1a22fe6950ce960b2&hash=sha256%3A13620f73aacf36421ea558b557f429689e2342388d278ee7090c6e6e7a8c8689", Filepath: "opt/gremlin-console/lib/groovy-swing-2.5.11.jar", }, { @@ -293,7 +293,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-templates-2.5.11.jar", - RepositoryHint: "sha1:941001acfda010320e2426a3b8fe056d6a1eb8f1", + RepositoryHint: "hash=sha1%3A941001acfda010320e2426a3b8fe056d6a1eb8f1&hash=sha256%3A51680a972daf561e014fa43288f930adab7ca39850f50927ec30e933350e71cb", Filepath: "opt/gremlin-console/lib/groovy-templates-2.5.11.jar", }, { @@ -301,7 +301,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.5.11", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/groovy-xml-2.5.11.jar", - RepositoryHint: "sha1:3b1e713e805d7ea354a83d1c9e17a0754ea74132", + RepositoryHint: "hash=sha1%3A3b1e713e805d7ea354a83d1c9e17a0754ea74132&hash=sha256%3A9b419bdf90668440bcfab475bcbd13ba77346345ff28fd9faf1b709e5096d96f", Filepath: "opt/gremlin-console/lib/groovy-xml-2.5.11.jar", }, { @@ -309,7 +309,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "0.7.1", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/hppc-0.7.1.jar", - RepositoryHint: "sha1:8b5057f74ea378c0150a1860874a3ebdcb713767", + RepositoryHint: "hash=sha1%3A8b5057f74ea378c0150a1860874a3ebdcb713767&hash=sha256%3A40d2a57f59e9eae7b018d3b4841954087ee40a5c1db6a54c3ea87742e3890391", Filepath: "opt/gremlin-console/lib/hppc-0.7.1.jar", }, { @@ -317,7 +317,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "4.5.8", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/httpclient-4.5.8.jar", - RepositoryHint: "sha1:c27c9d6f15435dc2b6947112027b418b0eef32b9", + RepositoryHint: "hash=sha1%3Ac27c9d6f15435dc2b6947112027b418b0eef32b9&hash=sha256%3Abebc085fc7675c75111e98295b830565cf040dd118029d2c0bbfd0779cf685a4", Filepath: "opt/gremlin-console/lib/httpclient-4.5.8.jar", }, { @@ -325,7 +325,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "4.4.11", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/httpcore-4.4.11.jar", - RepositoryHint: "sha1:de748cf874e4e193b42eceea9fe5574fabb9d4df", + RepositoryHint: "hash=sha1%3Ade748cf874e4e193b42eceea9fe5574fabb9d4df&hash=sha256%3Ad799522d579aac06b170603f8f080f6e3248dadc01f9652cdd7ea7bc318c21ce", Filepath: "opt/gremlin-console/lib/httpcore-4.4.11.jar", }, { @@ -333,7 +333,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.3.0.final_20130110142753", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/ivy-2.3.0.jar", - RepositoryHint: "sha1:c5ebf1c253ad4959a29f4acfe696ee48cdd9f473", + RepositoryHint: "hash=sha1%3Ac5ebf1c253ad4959a29f4acfe696ee48cdd9f473&hash=sha256%3Aff3543305c62f23d1a4cafc66fab9c9f55ea169ccf2b6c040d3fa23254b86b18", Filepath: "opt/gremlin-console/lib/ivy-2.3.0.jar", }, { @@ -341,7 +341,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.8.0", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/javapoet-1.8.0.jar", - RepositoryHint: "sha1:e858dc62ef484048540d27d36f3ec2177a3fa9b1", + RepositoryHint: "hash=sha1%3Ae858dc62ef484048540d27d36f3ec2177a3fa9b1&hash=sha256%3A8e108c92027bb428196f10fa11cffbe589f7648a6af2016d652279385fdfd789", Filepath: "opt/gremlin-console/lib/javapoet-1.8.0.jar", }, { @@ -349,7 +349,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.2", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/javatuples-1.2.jar", - RepositoryHint: "sha1:507312ac4b601204a72a83380badbca82683dd36", + RepositoryHint: "hash=sha1%3A507312ac4b601204a72a83380badbca82683dd36&hash=sha256%3A2eda5b19d9820e1cc2f69fcd01639a715a673c11f8507e3d1ed593cf765d5e0a", Filepath: "opt/gremlin-console/lib/javatuples-1.2.jar", }, { @@ -357,7 +357,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "0.4", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/jbcrypt-0.4.jar", - RepositoryHint: "sha1:af7e61017f73abb18ac4e036954f9f28c6366c07", + RepositoryHint: "hash=sha1%3Aaf7e61017f73abb18ac4e036954f9f28c6366c07&hash=sha256%3Ae183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624", Filepath: "opt/gremlin-console/lib/jbcrypt-0.4.jar", }, { @@ -365,7 +365,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "0.14", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/jcabi-log-0.14.jar", - RepositoryHint: "sha1:819a57348f2448f01d74f8a317dab61d6a90cac2", + RepositoryHint: "hash=sha1%3A819a57348f2448f01d74f8a317dab61d6a90cac2&hash=sha256%3A095815157128766570462d1df4cd7377a493427e6e0b88b9cd8ca0e9870951d3", Filepath: "opt/gremlin-console/lib/jcabi-log-0.14.jar", }, { @@ -373,7 +373,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/jcabi-manifests-1.1.jar", - RepositoryHint: "sha1:e4f4488c0e3905c6fab287aca2569928fe1712df", + RepositoryHint: "hash=sha1%3Ae4f4488c0e3905c6fab287aca2569928fe1712df&hash=sha256%3Affa9717ad78e630f210ecbe06c7108039ddaf6109725c2a139ef5d572b95c849", Filepath: "opt/gremlin-console/lib/jcabi-manifests-1.1.jar", }, { @@ -381,7 +381,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.7.25", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/jcl-over-slf4j-1.7.25.jar", - RepositoryHint: "sha1:f8c32b13ff142a513eeb5b6330b1588dcb2c0461", + RepositoryHint: "hash=sha1%3Af8c32b13ff142a513eeb5b6330b1588dcb2c0461&hash=sha256%3A5e938457e79efcbfb3ab64bc29c43ec6c3b95fffcda3c155f4a86cc320c11e14", Filepath: "opt/gremlin-console/lib/jcl-over-slf4j-1.7.25.jar", }, { @@ -389,7 +389,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "2.14.6", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/jline-2.14.6.jar", - RepositoryHint: "sha1:c3aeac59c022bdc497c8c48ed86fa50450e4896a", + RepositoryHint: "hash=sha1%3Ac3aeac59c022bdc497c8c48ed86fa50450e4896a&hash=sha256%3A97d1acaac82409be42e622d7a54d3ae9d08517e8aefdea3d2ba9791150c2f02d", Filepath: "opt/gremlin-console/lib/jline-2.14.6.jar", }, { @@ -397,7 +397,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.2.17", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/log4j-1.2.17.jar", - RepositoryHint: "sha1:5af35056b4d257e4b64b9e8069c0746e8b08629f", + RepositoryHint: "hash=sha1%3A5af35056b4d257e4b64b9e8069c0746e8b08629f&hash=sha256%3A1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9", Filepath: "opt/gremlin-console/lib/log4j-1.2.17.jar", }, { @@ -405,7 +405,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "4.1.49.Final", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/netty-all-4.1.49.Final.jar", - RepositoryHint: "sha1:ffe903492be79f5bd8348b04c958de3734a22c6b", + RepositoryHint: "hash=sha1%3Affe903492be79f5bd8348b04c958de3734a22c6b&hash=sha256%3Ac29dfc719c5f7de8d6c915bd0903128fa9ec61d5e49123d980485f3028f2c382", Filepath: "opt/gremlin-console/lib/netty-all-4.1.49.Final.jar", }, { @@ -413,7 +413,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "4.0.1", Kind: types.BinaryPackage, PackageDB: "jar:opt/gremlin-console/lib/picocli-4.0.1.jar", - RepositoryHint: "sha1:282c164057d55e6b6af2de49e8930f3c760439da", + RepositoryHint: "hash=sha1%3A282c164057d55e6b6af2de49e8930f3c760439da&hash=sha256%3Aee8487de1e8389d466f3fdf5775f59048dc32e040d546da5cf1982e146b7ff81", Filepath: "opt/gremlin-console/lib/picocli-4.0.1.jar", }, { @@ -421,7 +421,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.7.25", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/slf4j-api-1.7.25.jar", - RepositoryHint: "sha1:da76ca59f6a57ee3102f8f9bd9cee742973efa8a", + RepositoryHint: "hash=sha1%3Ada76ca59f6a57ee3102f8f9bd9cee742973efa8a&hash=sha256%3A18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79", Filepath: "opt/gremlin-console/lib/slf4j-api-1.7.25.jar", }, { @@ -429,7 +429,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.7.25", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/slf4j-log4j12-1.7.25.jar", - RepositoryHint: "sha1:110cefe2df103412849d72ef7a67e4e91e4266b4", + RepositoryHint: "hash=sha1%3A110cefe2df103412849d72ef7a67e4e91e4266b4&hash=sha256%3Addb343954deb6f046f862606c534178730c02ed23d0b7f6ca1012c1e3fa74273", Filepath: "opt/gremlin-console/lib/slf4j-log4j12-1.7.25.jar", }, { @@ -437,7 +437,7 @@ var tinkerpop = test.ScannerTestcase{ Version: "1.15", Kind: types.BinaryPackage, PackageDB: "maven:opt/gremlin-console/lib/snakeyaml-1.15.jar", - RepositoryHint: "sha1:3b132bea69e8ee099f416044970997bde80f4ea6", + RepositoryHint: "hash=sha1%3A3b132bea69e8ee099f416044970997bde80f4ea6&hash=sha256%3A79ea8aac6590f49ee8390c2f17ed9343079e85b44158a097b301dfee42af86ec", Filepath: "opt/gremlin-console/lib/snakeyaml-1.15.jar", }, }, @@ -454,7 +454,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.316", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:f9f22bab538db3c075251ae693a524204efdc32b", + RepositoryHint: "hash=sha1%3Af9f22bab538db3c075251ae693a524204efdc32b&hash=sha256%3A4128e1d9ea5a541ba620a8e94a43010694ca11fdefa9881702f934d2c2c0b970", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -462,7 +462,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.21", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -470,7 +470,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -478,7 +478,7 @@ var jenkins = test.ScannerTestcase{ Version: "3.1.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -486,7 +486,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -494,7 +494,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -502,7 +502,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -510,7 +510,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -518,7 +518,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -526,7 +526,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -534,7 +534,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -542,7 +542,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -550,7 +550,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -558,7 +558,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -566,7 +566,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -574,7 +574,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -582,7 +582,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1.3.v20160715", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -590,7 +590,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -598,7 +598,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -606,7 +606,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -614,7 +614,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -622,7 +622,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -630,7 +630,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -638,7 +638,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.4.43.v20210629", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -646,15 +646,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:winstone.jar", - RepositoryHint: "sha1:40c26ecf0491aae65f2fe5c4d08c9352a846f412", + RepositoryHint: "hash=sha1%3A40c26ecf0491aae65f2fe5c4d08c9352a846f412&hash=sha256%3A93f4ebde7229dc7e31226baaaffaddebe28765670dd9185465fda3f05f273ac3", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins.workflow:workflow-step-api", Version: "2.23", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/workflow-step-api.hpi:WEB-INF/lib/workflow-step-api.jar", - RepositoryHint: "sha1:b3eb4f90b8fcccba673cecb3b34cb9a19fa39772", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/workflow-step-api.hpi", + RepositoryHint: "hash=sha1%3Ab3eb4f90b8fcccba673cecb3b34cb9a19fa39772&hash=sha256%3Ae0e39cbe0c3ebfb2d3f80edfef470d3c7d033c7deafac8c6e553e7d391ea1287", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -662,15 +662,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.23", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/workflow-step-api.hpi:WEB-INF/lib/workflow-step-api.jar", - RepositoryHint: "sha1:b3eb4f90b8fcccba673cecb3b34cb9a19fa39772", + RepositoryHint: "hash=sha1%3A0d44c5b51eabfaa2669f426abb53d9ec2c8cd624&hash=sha256%3Af14cb7921abff61272bdba2ccf3e4ce087f264596b12a3fd117210f3c6b8a82b", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:junit", Version: "1.29", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/junit.hpi:WEB-INF/lib/junit.jar", - RepositoryHint: "sha1:cb91bfc6d9833495462b82a95d937599ef11c1a9", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/junit.hpi", + RepositoryHint: "hash=sha1%3Acb91bfc6d9833495462b82a95d937599ef11c1a9&hash=sha256%3Ace387ebc85e659660e3fb9fa405cbb8764d1e307a0161ae522caf13d60109cf4", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -678,15 +678,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.29", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/junit.hpi:WEB-INF/lib/junit.jar", - RepositoryHint: "sha1:cb91bfc6d9833495462b82a95d937599ef11c1a9", + RepositoryHint: "hash=sha1%3A26efa6845141650c1426dd4793b8eada00c1553e&hash=sha256%3A907d28b4e2d94a6e477c7cb7c95e3b2a8263e83d83b09203bf4cd5fc82d8a7c8", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:bouncycastle-api", Version: "2.20", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi:WEB-INF/lib/bouncycastle-api.jar", - RepositoryHint: "sha1:1b22775d6f258b5be61d855d5cedb9cf935e2d1b", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi", + RepositoryHint: "hash=sha1%3A1b22775d6f258b5be61d855d5cedb9cf935e2d1b&hash=sha256%3A8d01986d83dd2cd6acdb19c13f583c95aece51adfbd5f262938b1808a40ae0e0", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -694,7 +694,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.68", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi:WEB-INF/lib/bcprov-jdk15on-1.68.jar", - RepositoryHint: "sha1:1b22775d6f258b5be61d855d5cedb9cf935e2d1b", + RepositoryHint: "hash=sha1%3A46a080368d38b428d237a59458f9bc915222894d&hash=sha256%3Af732a46c8de7e2232f2007c682a21d1f4cc8a8a0149b6b7bd6aa1afdc65a0f8d", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -702,7 +702,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.68", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi:WEB-INF/lib/bcpkix-jdk15on-1.68.jar", - RepositoryHint: "sha1:1b22775d6f258b5be61d855d5cedb9cf935e2d1b", + RepositoryHint: "hash=sha1%3A81da950604ff0b2652348cbd2b48fde46ced9867&hash=sha256%3Afb8d0f8f673ad6e16c604732093d7aa31b26ff4e0bd9cae1d7f99984c06b8a0f", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -710,15 +710,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.20", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi:WEB-INF/lib/bouncycastle-api.jar", - RepositoryHint: "sha1:1b22775d6f258b5be61d855d5cedb9cf935e2d1b", + RepositoryHint: "hash=sha1%3A43879586f2bf20dee7de550c0650aaec25ea40c7&hash=sha256%3Ad502bc8b275cf00c5769bcf68ad1f3aac47121e28f37cfe47e956ff0861f10f8", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:matrix-project", Version: "1.18", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/matrix-project.hpi:WEB-INF/lib/matrix-project.jar", - RepositoryHint: "sha1:cffd146e62b20db3aaad544acca543bda9381903", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/matrix-project.hpi", + RepositoryHint: "hash=sha1%3Acffd146e62b20db3aaad544acca543bda9381903&hash=sha256%3Aa69da6850734c71092144aa28eaf6cb7e70afe7e6e0058a5f2ce9056775846dd", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -726,15 +726,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.18", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/matrix-project.hpi:WEB-INF/lib/matrix-project.jar", - RepositoryHint: "sha1:cffd146e62b20db3aaad544acca543bda9381903", + RepositoryHint: "hash=sha1%3A0f7b625146c72cc3cd5f4d495ab3328d53fe3594&hash=sha256%3A98921658dadffd7fc6278ea0335b760ce151766d37e1826d1db94eb28dcf9f38", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:matrix-auth", Version: "2.6.6", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/matrix-auth.hpi:WEB-INF/lib/matrix-auth.jar", - RepositoryHint: "sha1:060cd7df64ae6ece1805e4626efc97709aed61b9", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/matrix-auth.hpi", + RepositoryHint: "hash=sha1%3A060cd7df64ae6ece1805e4626efc97709aed61b9&hash=sha256%3A0e2a9c6258fff7e4965cb5b30e8d1ae66f41916192f4adb4f79aa0b12ad07be5", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -742,15 +742,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.6.6", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/matrix-auth.hpi:WEB-INF/lib/matrix-auth.jar", - RepositoryHint: "sha1:060cd7df64ae6ece1805e4626efc97709aed61b9", + RepositoryHint: "hash=sha1%3A58aeae141b75fc6d71943bce0f5a4b1742f0d136&hash=sha256%3A3eeda6b547a33ae7e85a828f5b6708b4133906669f61889aa2a9d0a7320f3978", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:script-security", Version: "1.75", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/script-security.jar", - RepositoryHint: "sha1:346cb1183d04bf076ffcb05ff0663eeda8075182", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi", + RepositoryHint: "hash=sha1%3A346cb1183d04bf076ffcb05ff0663eeda8075182&hash=sha256%3Ae3a9edc52ba8426695bba4a19c31ae41c3a4e96c20a47fcf5fe80e778519c4b8", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -758,7 +758,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.27", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/groovy-sandbox-1.27.jar", - RepositoryHint: "sha1:346cb1183d04bf076ffcb05ff0663eeda8075182", + RepositoryHint: "hash=sha1%3A1d1a200c062569d93af2e2174855866b04bff691&hash=sha256%3A592c99032542b99ceabe09748e6e2b5a6d5f8a2d990c7dbbad002806c6cc2058", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -766,7 +766,7 @@ var jenkins = test.ScannerTestcase{ Version: "3.3.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/checker-qual-3.3.0.jar", - RepositoryHint: "sha1:346cb1183d04bf076ffcb05ff0663eeda8075182", + RepositoryHint: "hash=sha1%3Aabe016e33994fba7b5d8507da91b1a8aad48872f&hash=sha256%3A8264ec4bbecbfb921df444d666c4550383e2670dc0b54eb878d68252ba543a8a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -774,7 +774,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.8.2", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/caffeine-2.8.2.jar", - RepositoryHint: "sha1:346cb1183d04bf076ffcb05ff0663eeda8075182", + RepositoryHint: "hash=sha1%3Add3fb55488b64495f81a5d2dba9c13d75f51bad7&hash=sha256%3A53ad30a9cc8a38965baa49864280cfe73c88371caf6680c519de42aaa36f77ae", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -782,7 +782,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.4", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/error_prone_annotations-2.3.4.jar", - RepositoryHint: "sha1:346cb1183d04bf076ffcb05ff0663eeda8075182", + RepositoryHint: "hash=sha1%3Adac170e4594de319655ffb62f41cbd6dbb5e601e&hash=sha256%3Abaf7d6ea97ce606c53e11b6854ba5f2ce7ef5c24dddf0afa18d1260bd25b002c", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -790,15 +790,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.75", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/script-security.jar", - RepositoryHint: "sha1:346cb1183d04bf076ffcb05ff0663eeda8075182", + RepositoryHint: "hash=sha1%3A07eff35d71705ff96b39a42a1cc16b9575f4718c&hash=sha256%3A711a4e95fce0092045d2856b607ce37a8416bfb094e29b586c41066805e67aa8", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:mailer", Version: "1.32.1", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/mailer.hpi:WEB-INF/lib/mailer.jar", - RepositoryHint: "sha1:07026888e4b109a66685364111229ab7b99ee4e8", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/mailer.hpi", + RepositoryHint: "hash=sha1%3A07026888e4b109a66685364111229ab7b99ee4e8&hash=sha256%3A0b045ea87efc289fccad55ac51e4c903945d9683b71b48667e19440e42a2d368", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -806,15 +806,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.32.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/mailer.hpi:WEB-INF/lib/mailer.jar", - RepositoryHint: "sha1:07026888e4b109a66685364111229ab7b99ee4e8", + RepositoryHint: "hash=sha1%3Acfa80f6daadc60a0c6effb2a8d9978a844503784&hash=sha256%3Ae471921b0a46ecc867fa4afebfc823c87b504e5917d72708838d2740e7557c08", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:display-url-api", Version: "2.3.1", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/display-url-api.hpi:WEB-INF/lib/display-url-api.jar", - RepositoryHint: "sha1:dc5918a37ef530866f6aeb84fe5b6afb177c1ac5", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/display-url-api.hpi", + RepositoryHint: "hash=sha1%3Adc5918a37ef530866f6aeb84fe5b6afb177c1ac5&hash=sha256%3A1488cea95b8b0d1edd830e7aa49458bee6ccb0819171996aff291b13e9b99a3c", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -822,15 +822,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/display-url-api.hpi:WEB-INF/lib/display-url-api.jar", - RepositoryHint: "sha1:dc5918a37ef530866f6aeb84fe5b6afb177c1ac5", + RepositoryHint: "hash=sha1%3A535972c62825ff07cdb3e28e4879fdc74384656f&hash=sha256%3Ab1529e8c77d074980a3bd838a7045edfa26340d3e7c34692ea17f8e6d980cce3", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:antisamy-markup-formatter", Version: "1.1", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/antisamy-markup-formatter.hpi:WEB-INF/lib/antisamy-markup-formatter.jar", - RepositoryHint: "sha1:61c4d370eec0566835f452cdcfdbb185b002c67e", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/antisamy-markup-formatter.hpi", + RepositoryHint: "hash=sha1%3A61c4d370eec0566835f452cdcfdbb185b002c67e&hash=sha256%3A0eb8c567a08e3a18b775e08e982b45f2b6b64685f117eabe6f2a179af557144d", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -838,15 +838,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/antisamy-markup-formatter.hpi:WEB-INF/lib/antisamy-markup-formatter.jar", - RepositoryHint: "sha1:61c4d370eec0566835f452cdcfdbb185b002c67e", + RepositoryHint: "hash=sha1%3A25c51b6ef7e63a02ffc069ff4843d36c32949fd5&hash=sha256%3A4a97876e63fc06a35b8212af338ccaf7788200503bf66ca55cbabbf80fef62e7", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:scm-api", Version: "2.6.5", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/scm-api.hpi:WEB-INF/lib/scm-api.jar", - RepositoryHint: "sha1:9ef1275c52b988af9da4fc491cb0894fa241bd14", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/scm-api.hpi", + RepositoryHint: "hash=sha1%3A9ef1275c52b988af9da4fc491cb0894fa241bd14&hash=sha256%3A20adc461e6459098ffc538dace079d76b948f7ee6f86b247703720e803e2c840", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -854,15 +854,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.6.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/scm-api.hpi:WEB-INF/lib/scm-api.jar", - RepositoryHint: "sha1:9ef1275c52b988af9da4fc491cb0894fa241bd14", + RepositoryHint: "hash=sha1%3A5f781f6165d94bf3fd3cc45e0134155825e2fe86&hash=sha256%3A9669c4691209ae059492630a6ffebc37f4790b981c5b1c3316dcdea0a049d3fd", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:trilead-api", Version: "1.0.4", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/trilead-api.hpi:WEB-INF/lib/trilead-api.jar", - RepositoryHint: "sha1:fa907c54fe14861b2170d4b463fd07df84a1551d", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/trilead-api.hpi", + RepositoryHint: "hash=sha1%3Afa907c54fe14861b2170d4b463fd07df84a1551d&hash=sha256%3A2b78af329b54d4d5b31e0b7cf246e4ae8ae703177134ff6b8fcb9ee403ad36a2", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -870,7 +870,7 @@ var jenkins = test.ScannerTestcase{ Version: "0.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/trilead-api.hpi:WEB-INF/lib/eddsa-0.3.0.jar", - RepositoryHint: "sha1:fa907c54fe14861b2170d4b463fd07df84a1551d", + RepositoryHint: "hash=sha1%3A1901c8d4d8bffb7d79027686cfb91e704217c3e1&hash=sha256%3A4dda1120db856640dbec04140ed23242215a075fe127bdefa0dcfa29fb31267d", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -878,7 +878,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/trilead-api.hpi:WEB-INF/lib/trilead-putty-extension-1.2.jar", - RepositoryHint: "sha1:fa907c54fe14861b2170d4b463fd07df84a1551d", + RepositoryHint: "hash=sha1%3A0f2f41517e1f73be8e319da27a69e0dc0c524bf6&hash=sha256%3Abda184d64b933a6f9c3588102e66f32f69d2e73575df486ff835c30695c432c6", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -886,7 +886,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.0", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:fa907c54fe14861b2170d4b463fd07df84a1551d", + RepositoryHint: "hash=sha1%3Af37bba2b8b78fcc8111bb932318b621dcc6c5194&hash=sha256%3A5e1f9f07014cd9f4b8a517b18c2c9fff84a7e5a27116accc1f1cc22244e238c1", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -894,7 +894,7 @@ var jenkins = test.ScannerTestcase{ Version: "build-217-jenkins-16", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/trilead-api.hpi:WEB-INF/lib/trilead-ssh2-build-217-jenkins-16.jar", - RepositoryHint: "sha1:fa907c54fe14861b2170d4b463fd07df84a1551d", + RepositoryHint: "hash=sha1%3A5c4ba36c75e9a0bc4f6c842028f6c71579fb1d4b&hash=sha256%3A52cccbf45bc83bcb353b9c93844ab8a40216bc8bd966bc0c724aa89d5ae129c6", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -902,15 +902,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.4", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/trilead-api.hpi:WEB-INF/lib/trilead-api.jar", - RepositoryHint: "sha1:fa907c54fe14861b2170d4b463fd07df84a1551d", + RepositoryHint: "hash=sha1%3A754348fe9f29a0020d355e981007bfd053754e69&hash=sha256%3A9083088d66466d0205923e05b87d7474d22ea97bf39bc1c07fa576cf8d0af8cc", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.modules:sshd", Version: "3.0.3", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi:WEB-INF/lib/sshd.jar", - RepositoryHint: "sha1:e8be0e1230293cdb97252480eaba93d1b3663be3", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi", + RepositoryHint: "hash=sha1%3Ae8be0e1230293cdb97252480eaba93d1b3663be3&hash=sha256%3A9dd55d0f725e2d56b2c910da3a5da984b22a938a14d690221b61fdb365371c8f", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -918,7 +918,7 @@ var jenkins = test.ScannerTestcase{ Version: "0.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi:WEB-INF/lib/eddsa-0.3.0.jar", - RepositoryHint: "sha1:e8be0e1230293cdb97252480eaba93d1b3663be3", + RepositoryHint: "hash=sha1%3A1901c8d4d8bffb7d79027686cfb91e704217c3e1&hash=sha256%3A4dda1120db856640dbec04140ed23242215a075fe127bdefa0dcfa29fb31267d", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -926,7 +926,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7.30", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi:WEB-INF/lib/slf4j-api-1.7.30.jar", - RepositoryHint: "sha1:e8be0e1230293cdb97252480eaba93d1b3663be3", + RepositoryHint: "hash=sha1%3Ab5a4b6d16ab13e34a88fae84c35cd5d68cac922c&hash=sha256%3Acdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -934,15 +934,7 @@ var jenkins = test.ScannerTestcase{ Version: "3.0.3", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi:WEB-INF/lib/sshd.jar", - RepositoryHint: "sha1:e8be0e1230293cdb97252480eaba93d1b3663be3", - Filepath: "usr/share/jenkins/jenkins.war", - }, - { - Name: "io.github.stephenc.crypto:self-signed-cert-generator", - Version: "1.0.0", - Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi:WEB-INF/lib/self-signed-cert-generator-1.0.0.jar", - RepositoryHint: "sha1:e8be0e1230293cdb97252480eaba93d1b3663be3", + RepositoryHint: "hash=sha1%3Ad83c57e06257218a6e17e6c58dfb050c17134e9a&hash=sha256%3Ac1036b86a2c583320f97872094ab6380918f77a988b18171ec1a8f315dc43ecd", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -950,7 +942,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi:WEB-INF/lib/sshd-core-1.7.0.jar", - RepositoryHint: "sha1:e8be0e1230293cdb97252480eaba93d1b3663be3", + RepositoryHint: "hash=sha1%3A2e8b14f6d841b098e46bf407b6fdccab4c19fa41&hash=sha256%3A2b4793548bdf172705686c34615c5397b2258d07dd1492f4de936e09985aa3c7", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -958,15 +950,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi:WEB-INF/lib/instance-identity-2.2.jar", - RepositoryHint: "sha1:e8be0e1230293cdb97252480eaba93d1b3663be3", + RepositoryHint: "hash=sha1%3A986e58370b11287dfa73a8fb2eac74e2dc4e2a23&hash=sha256%3Ac752b9d1cbfa600e7fd3387b779ed42ec96dcba6a6296c27a6ffdd1f8012f80b", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:jdk-tool", Version: "1.0", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jdk-tool.hpi:WEB-INF/lib/jdk-tool.jar", - RepositoryHint: "sha1:e063550e164157d6ee90d78090860adc13961c9b", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jdk-tool.hpi", + RepositoryHint: "hash=sha1%3Ae063550e164157d6ee90d78090860adc13961c9b&hash=sha256%3A0dc95b161301317101a2860ff85ce3b3766f710c4e7bf1d8549e05d771e35e77", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -974,15 +966,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jdk-tool.hpi:WEB-INF/lib/jdk-tool.jar", - RepositoryHint: "sha1:e063550e164157d6ee90d78090860adc13961c9b", + RepositoryHint: "hash=sha1%3A1def30151b3250f86daa96829ff183c50d3d81f1&hash=sha256%3A1fcee68a5dd8c394b208d823183aebb5a6c0b4d1bcb10b80b5d2bea0e013473e", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:structs", Version: "1.23", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/structs.hpi:WEB-INF/lib/structs.jar", - RepositoryHint: "sha1:37b98115acc372cbdc517217ad45c74bd965e570", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/structs.hpi", + RepositoryHint: "hash=sha1%3A37b98115acc372cbdc517217ad45c74bd965e570&hash=sha256%3A0d53d44b4ce7f887436921a81321f1738de7391a35912c1096fe412df4d6338a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -990,7 +982,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.23", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/structs.hpi:WEB-INF/lib/structs.jar", - RepositoryHint: "sha1:37b98115acc372cbdc517217ad45c74bd965e570", + RepositoryHint: "hash=sha1%3A722ca3be263369bed2f939c34d0171f45b07d98f&hash=sha256%3A262ce574499cd7ec9388b616af94603dd28e8d338c5b1f0613dd1b4def10a401", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -998,15 +990,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.23", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/structs.hpi:WEB-INF/lib/symbol-annotation-1.23.jar", - RepositoryHint: "sha1:37b98115acc372cbdc517217ad45c74bd965e570", + RepositoryHint: "hash=sha1%3A725854f35540796aefcd6bc32a5d4c3b7c85fa9a&hash=sha256%3Acf31e7fe6e932aa0497bf9e8d2911df353e54fe9c0b41484172f0af0a622063b", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "io.jenkins.plugins:jaxb", Version: "2.3.0", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi", + RepositoryHint: "hash=sha1%3Aa3c9925e9eafdcadebaae750c523b7690cc0c890&hash=sha256%3A8b77ecc43895aeee1196478bca981fefd020ceea795695fb1b0531390c3625d8", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1014,7 +1006,7 @@ var jenkins = test.ScannerTestcase{ Version: "3.0.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb-core-2.3.0.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + RepositoryHint: "hash=sha1%3Ad044c784e41d026778693fb44a8026c1fd9a7506&hash=sha256%3A33061af8d2a07379d452f8f0fddcbbf518428dfd3b83d9e2d479c1948020795b", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1022,7 +1014,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb-core-2.3.0.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + RepositoryHint: "hash=sha1%3Ad044c784e41d026778693fb44a8026c1fd9a7506&hash=sha256%3A33061af8d2a07379d452f8f0fddcbbf518428dfd3b83d9e2d479c1948020795b", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1030,7 +1022,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb-core-2.3.0.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + RepositoryHint: "hash=sha1%3Ad044c784e41d026778693fb44a8026c1fd9a7506&hash=sha256%3A33061af8d2a07379d452f8f0fddcbbf518428dfd3b83d9e2d479c1948020795b", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1038,7 +1030,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb-core-2.3.0.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + RepositoryHint: "hash=sha1%3Ad044c784e41d026778693fb44a8026c1fd9a7506&hash=sha256%3A33061af8d2a07379d452f8f0fddcbbf518428dfd3b83d9e2d479c1948020795b", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1046,7 +1038,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + RepositoryHint: "hash=sha1%3A47128940de9beec73496b3a366b6630df25e057e&hash=sha256%3A5e024c682c99a5b6b5f5083cca47e1f0b247620669087e3db33c35fbbe7f6f68", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1054,7 +1046,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb-impl-2.3.0.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + RepositoryHint: "hash=sha1%3A3a3c6a62719d967175b76b63925f1fb495f11437&hash=sha256%3Aedd691fc6ad7c7f3167e1a6833372367bedf6f4f2a4b8230df444a59bb3718b1", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1062,7 +1054,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb-impl-2.3.0.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + RepositoryHint: "hash=sha1%3A3a3c6a62719d967175b76b63925f1fb495f11437&hash=sha256%3Aedd691fc6ad7c7f3167e1a6833372367bedf6f4f2a4b8230df444a59bb3718b1", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1070,15 +1062,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jaxb.hpi:WEB-INF/lib/jaxb-api-2.3.0.jar", - RepositoryHint: "sha1:a3c9925e9eafdcadebaae750c523b7690cc0c890", + RepositoryHint: "hash=sha1%3A99f802e0cb3e953ba3d6e698795c4aeb98d37c48&hash=sha256%3A883007989d373d19f352ba9792b25dec21dc7d0e205a710a93a3815101bb3d03", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins.workflow:workflow-api", Version: "2.42", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/workflow-api.hpi:WEB-INF/lib/workflow-api.jar", - RepositoryHint: "sha1:9f1b255ba430a7d4210a23d0ae510f7c48600ffd", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/workflow-api.hpi", + RepositoryHint: "hash=sha1%3A9f1b255ba430a7d4210a23d0ae510f7c48600ffd&hash=sha256%3A31dbd413de8ba2ae585f37fd6a31a5a3e5067dd41b1ef8f74eab9e8a297f2c1c", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1086,15 +1078,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.42", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/workflow-api.hpi:WEB-INF/lib/workflow-api.jar", - RepositoryHint: "sha1:9f1b255ba430a7d4210a23d0ae510f7c48600ffd", + RepositoryHint: "hash=sha1%3A4416c4deef9636127fb4c4f3f7b5810a44809bf5&hash=sha256%3A69a6453e33ab3bb497c12452f7515eac63f643f29f1d3fb0f64bf8a6f4b52212", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:windows-slaves", Version: "1.0", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/windows-slaves.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi", + RepositoryHint: "hash=sha1%3A15d036e22a49ffa7b0cdb6c9777ce40d584e40ec&hash=sha256%3A139b628df407177ea8e939b438bfbca5922e2b7e6a0ea2809c5ca895c671bf32", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1102,7 +1094,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/tiger-types-1.1.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + RepositoryHint: "hash=sha1%3A579059e5452496fbfee814339f40abb44f219da4&hash=sha256%3A1a8f7a974923de515eb6d7934a430969e68348d47a162f073ce5a4c434dc0f58", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1110,7 +1102,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.3.17-kohsuke-1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/jcifs-1.3.17-kohsuke-1.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + RepositoryHint: "hash=sha1%3A6c9114dc4075277d829ea09e15d6ffab52f2d0c0&hash=sha256%3A2c37dc3ebf9308cd86706ee7f5e20dd5458742c678222e948f1aa93ce52c179f", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1118,7 +1110,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/jinterop-proxy-1.1.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + RepositoryHint: "hash=sha1%3Aaf1e27f84462979489e07abf6c913e59ddeee482&hash=sha256%3A84b0caf4f0f74808f3e44a0bbe27bcddfe2aaeb00cbfebabc7953316f50f0725", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1126,7 +1118,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.6-kohsuke-1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/j-interopdeps-2.0.6-kohsuke-1.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + RepositoryHint: "hash=sha1%3A778400517a3419ce8c361498c194036534851736&hash=sha256%3Ab091c448eb7e14e44d62c7869bace267210c20d387c49f61f68a1d068abf3ea9", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1134,7 +1126,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.6-kohsuke-1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/j-interop-2.0.6-kohsuke-1.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + RepositoryHint: "hash=sha1%3Ab2e243227608c1424ab0084564dc71659d273007&hash=sha256%3A994401c68a150bffe65718da044e57d1ba98e6266b7f0218b2968a14774fa477", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1142,7 +1134,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/windows-slaves.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + RepositoryHint: "hash=sha1%3A630881b0bed43efb2f060f09fc7ec488544f5d5a&hash=sha256%3Ac79095d22b817982439cd2784e2055f5eb63e1310775601c22a7de4cb6fbe4f2", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1150,7 +1142,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.4", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/windows-remote-command-1.4.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + RepositoryHint: "hash=sha1%3A920f7a32f8c826cebf0fa6f3ab563fc0f9ac8e32&hash=sha256%3A20ca3c0fcc406fb0be269dafa54b6daf12301861b676dd9f063ce642ec8562f7", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1158,15 +1150,15 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/windows-slaves.hpi:WEB-INF/lib/jinterop-wmi-1.1.jar", - RepositoryHint: "sha1:15d036e22a49ffa7b0cdb6c9777ce40d584e40ec", + RepositoryHint: "hash=sha1%3A893d41dc22322dcff83fb26e5664f8cd9a6be337&hash=sha256%3A9fa32975e4006bd00a193238d6f5e062c1068995177635af236f376399e44dc7", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.jenkins-ci.plugins:command-launcher", Version: "1.2", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/command-launcher.hpi:WEB-INF/lib/command-launcher.jar", - RepositoryHint: "sha1:4dd02e91f003be14b949b314636858b22741a2b8", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/command-launcher.hpi", + RepositoryHint: "hash=sha1%3A4dd02e91f003be14b949b314636858b22741a2b8&hash=sha256%3Ac4f964c6deb599816f6740ef674cb6dd2644d5f1b4e7b886a948f778ec5c189e", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1174,7 +1166,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/command-launcher.hpi:WEB-INF/lib/command-launcher.jar", - RepositoryHint: "sha1:4dd02e91f003be14b949b314636858b22741a2b8", + RepositoryHint: "hash=sha1%3A3af2e141774cb3a8bce6f74cf2c7addc130723ba&hash=sha256%3Adda2b14662d8765c09395ef7d7c5836eb7ab77651224c4b8a33354cb5c590918", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1182,7 +1174,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.10.11", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:b875cd48a0bc955ae9c5c477ad991e1f26fb24d2", + RepositoryHint: "hash=sha1%3Ab875cd48a0bc955ae9c5c477ad991e1f26fb24d2&hash=sha256%3A88c0b89bbbaae01e0d9fcae93be792f5abbe3409106f8eee858fdf365dbc0754", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1190,7 +1182,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.4", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-fileupload-1.4.jar", - RepositoryHint: "sha1:f95188e3d372e20e7328706c37ef366e5d7859b0", + RepositoryHint: "hash=sha1%3Af95188e3d372e20e7328706c37ef366e5d7859b0&hash=sha256%3Aa4ec02336f49253ea50405698b79232b8c5cbf02cb60df3a674d77a749a1def7", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1198,7 +1190,7 @@ var jenkins = test.ScannerTestcase{ Version: "20110809", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/txw2-20110809.jar", - RepositoryHint: "sha1:46afa3f3c468680875adb8f2a26086a126c89902", + RepositoryHint: "hash=sha1%3A46afa3f3c468680875adb8f2a26086a126c89902&hash=sha256%3A3c535fd9d38ce20b8c9031086710f0e6f3175e1a638fa088b3de43e7193211d7", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1206,7 +1198,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.33", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/args4j-2.33.jar", - RepositoryHint: "sha1:bd87a75374a6d6523de82fef51fc3cfe9baf9fc9", + RepositoryHint: "hash=sha1%3Abd87a75374a6d6523de82fef51fc3cfe9baf9fc9&hash=sha256%3A91ddeaba0b24adce72291c618c00bbdce1c884755f6c4dba9c5c46e871c69ed6", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1214,7 +1206,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.3.9", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-expression-5.3.9.jar", - RepositoryHint: "sha1:f5ca763cfb9d62d196efd5d25e8daca7d555ed75", + RepositoryHint: "hash=sha1%3Af5ca763cfb9d62d196efd5d25e8daca7d555ed75&hash=sha256%3A4dcd27638170fe0649c6e394c2668448af2f0473d5550407c0e82b73a497cb2a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1222,7 +1214,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7.32", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/log4j-over-slf4j-1.7.32.jar", - RepositoryHint: "sha1:152d3b5e2470bb8e898bd82886fc783361e2c32b", + RepositoryHint: "hash=sha1%3A152d3b5e2470bb8e898bd82886fc783361e2c32b&hash=sha256%3Acef183e051664d53cc8f046fb616ed39eab9e61631e13299c939c995c11e57e3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1230,7 +1222,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jnr-a64asm-1.0.0.jar", - RepositoryHint: "sha1:0a1cb8dbe71b5a6a0288043c3ba3ca64545be165", + RepositoryHint: "hash=sha1%3A0a1cb8dbe71b5a6a0288043c3ba3ca64545be165&hash=sha256%3A53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1238,7 +1230,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/upstart-slave-installer-1.1.jar", - RepositoryHint: "sha1:a2ce1f49745d63c8520d50a0c6430afd377ece48", + RepositoryHint: "hash=sha1%3Aa2ce1f49745d63c8520d50a0c6430afd377ece48&hash=sha256%3Af410d30cc72b1eef36336693647143aca63ebd32db50dac3a41fdffcfc564692", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1246,7 +1238,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.4.12", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/groovy-all-2.4.12.jar", - RepositoryHint: "sha1:760afc568cbd94c09d78f801ce51aed1326710af", + RepositoryHint: "hash=sha1%3A760afc568cbd94c09d78f801ce51aed1326710af&hash=sha256%3A6a56af4bd48903d56bec62821876cadefafd007360cc6bd0d8f7aa8d72b38be4", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1254,7 +1246,7 @@ var jenkins = test.ScannerTestcase{ Version: "1593.v0e838714faae", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/stapler-1593.v0e838714faae.jar", - RepositoryHint: "sha1:fc5431d95cd9602a9ef20dd8d0da9e6903b8b98d", + RepositoryHint: "hash=sha1%3Afc5431d95cd9602a9ef20dd8d0da9e6903b8b98d&hash=sha256%3A7ca03683bd89d2a42eaee654284236afb9ac6e8f3754a242d7c00e028df5e4ff", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1262,7 +1254,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.14.6", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jline-2.14.6.jar", - RepositoryHint: "sha1:c3aeac59c022bdc497c8c48ed86fa50450e4896a", + RepositoryHint: "hash=sha1%3Ac3aeac59c022bdc497c8c48ed86fa50450e4896a&hash=sha256%3A97d1acaac82409be42e622d7a54d3ae9d08517e8aefdea3d2ba9791150c2f02d", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1270,7 +1262,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1-jenkins-20120928", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-jelly-1.1-jenkins-20120928.jar", - RepositoryHint: "sha1:2720a0d54b7f32479b08970d7738041362e1f410", + RepositoryHint: "hash=sha1%3A2720a0d54b7f32479b08970d7738041362e1f410&hash=sha256%3A73dc26fd3fb5b45006266cc2aa1d8cfa784d0e4406dc635881cf2670e502e97e", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1278,7 +1270,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.15", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-codec-1.15.jar", - RepositoryHint: "sha1:49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d", + RepositoryHint: "hash=sha1%3A49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d&hash=sha256%3Ab3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1286,7 +1278,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.1-hudson-20071021", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-jelly-tags-define-1.0.1-hudson-20071021.jar", - RepositoryHint: "sha1:8b952d0e504ee505d234853119e5648441894234", + RepositoryHint: "hash=sha1%3A8b952d0e504ee505d234853119e5648441894234&hash=sha256%3A943b68fe8ff055234b5799579e6dcc70ffa8e94a3f4c8f2fd10f77ced98b2c0d", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1294,7 +1286,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/windows-package-checker-1.2.jar", - RepositoryHint: "sha1:86b5d2f9023633808d65dbcfdfd50dc5ad3ca31f", + RepositoryHint: "hash=sha1%3A86b5d2f9023633808d65dbcfdfd50dc5ad3ca31f&hash=sha256%3A602f868ff050409f9cd5e9ced3a53c44f8ac7faca105b66d40a47dcc76f5a68f", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1302,7 +1294,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jnr-x86asm-1.0.2.jar", - RepositoryHint: "sha1:006936bbd6c5b235665d87bd450f5e13b52d4b48", + RepositoryHint: "hash=sha1%3A006936bbd6c5b235665d87bd450f5e13b52d4b48&hash=sha256%3A39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1310,7 +1302,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.8-kohsuke-1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/j-interop-2.0.8-kohsuke-1.jar", - RepositoryHint: "sha1:7bcd527550b8415ba14c33a8ff00658c43d0c78e", + RepositoryHint: "hash=sha1%3A7bcd527550b8415ba14c33a8ff00658c43d0c78e&hash=sha256%3Acee09b12de8ade946b86abac1522676f44db37c09076994342b0aaa977a1fe97", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1318,7 +1310,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.9.4", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-beanutils-1.9.4.jar", - RepositoryHint: "sha1:d52b9abcd97f38c81342bb7e7ae1eee9b73cba51", + RepositoryHint: "hash=sha1%3Ad52b9abcd97f38c81342bb7e7ae1eee9b73cba51&hash=sha256%3A7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1326,7 +1318,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.3.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/javax.annotation-api-1.3.2.jar", - RepositoryHint: "sha1:934c04d3cfef185a8008e7bf34331b79730a9d43", + RepositoryHint: "hash=sha1%3A934c04d3cfef185a8008e7bf34331b79730a9d43&hash=sha256%3Ae04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1334,7 +1326,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.23", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jcommon-1.0.23.jar", - RepositoryHint: "sha1:a316f336ca996e0c6bec4e4fbd49be8f5e1c3968", + RepositoryHint: "hash=sha1%3Aa316f336ca996e0c6bec4e4fbd49be8f5e1c3968&hash=sha256%3A1e670402809484c71ec74d55b40022a4c4939c7911bd39ee5a0cfb3aaf56397c", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1342,7 +1334,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.3.5", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/jffi-1.3.5-native.jar", - RepositoryHint: "sha1:38602067b8cd1ed3dca6cbfcb3273fb24ab09a3f", + RepositoryHint: "hash=sha1%3A38602067b8cd1ed3dca6cbfcb3273fb24ab09a3f&hash=sha256%3Ab3c14bc153b67b5a92fba4c8ace68bd96d2d47bd2ea605f94e0c375c8ae6cecb", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1350,7 +1342,7 @@ var jenkins = test.ScannerTestcase{ Version: "4.0.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/guice-4.0.jar", - RepositoryHint: "sha1:0f990a43d3725781b6db7cd0acf0a8b62dfd1649", + RepositoryHint: "hash=sha1%3A0f990a43d3725781b6db7cd0acf0a8b62dfd1649&hash=sha256%3Ab378ffc35e7f7125b3c5f3a461d4591ae1685e3c781392f0c854ed7b7581d6d2", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1358,7 +1350,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.3.18-kohsuke-1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jcifs-1.3.18-kohsuke-1.jar", - RepositoryHint: "sha1:35711c36411d962d7228b7e01ab2567ec213a9d3", + RepositoryHint: "hash=sha1%3A35711c36411d962d7228b7e01ab2567ec213a9d3&hash=sha256%3A309bba8d10c968520897d7223dccd5f280c7721503cc4e118af31a15dd13e1ef", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1366,7 +1358,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.31", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/localizer-1.31.jar", - RepositoryHint: "sha1:aa7560693502015b7747697fa5a4fd1da9a95ccd", + RepositoryHint: "hash=sha1%3Aaa7560693502015b7747697fa5a4fd1da9a95ccd&hash=sha256%3A160665408a2e2684ee4527d2efbe5dcb193d2e017010b35a74182cd319f2c5fe", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1374,7 +1366,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-jelly-tags-fmt-1.0.jar", - RepositoryHint: "sha1:2107da38fdd287ab78a4fa65c1300b5ad9999274", + RepositoryHint: "hash=sha1%3A2107da38fdd287ab78a4fa65c1300b5ad9999274&hash=sha256%3A509e873164cf7c5b62b7a5285340ac0f59d92bbd861b78c91322a27e91f24638", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1382,7 +1374,7 @@ var jenkins = test.ScannerTestcase{ Version: "20020414", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:de7952cecd05b65e0e4370cc93fc03035175eef5", + RepositoryHint: "hash=sha1%3Ade7952cecd05b65e0e4370cc93fc03035175eef5&hash=sha256%3A2a2563efc911f431250214220570fac8ec3f43c3ec1e47328cee78062f81b218", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1390,7 +1382,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7.32", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jcl-over-slf4j-1.7.32.jar", - RepositoryHint: "sha1:32c060250bcc5282cdbc1fd7008c12eb4ebad00e", + RepositoryHint: "hash=sha1%3A32c060250bcc5282cdbc1fd7008c12eb4ebad00e&hash=sha256%3A60f3bda5922e3912889cca1311d1b227753610bf60cb4e5e914e8b2eaa0326b4", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1398,7 +1390,7 @@ var jenkins = test.ScannerTestcase{ Version: "1593.v0e838714faae", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/stapler-groovy-1593.v0e838714faae.jar", - RepositoryHint: "sha1:700d2b6e99d7d8fb46746907105839dba51b1a20", + RepositoryHint: "hash=sha1%3A700d2b6e99d7d8fb46746907105839dba51b1a20&hash=sha256%3Ad765807409590308e96555cdebf375d2c838539045faad4a7837bc875d44019e", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1406,7 +1398,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.3.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jffi-1.3.5.jar", - RepositoryHint: "sha1:1dadd62fc8434d4ba6e3c78ed42e4852d79d3a46", + RepositoryHint: "hash=sha1%3A1dadd62fc8434d4ba6e3c78ed42e4852d79d3a46&hash=sha256%3Ad71bfdf7ab2222577547727fa64aa3c9dc26ebd4bda54ed4c93abb882e5f3866", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1414,7 +1406,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.9", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/memory-monitor-1.9.jar", - RepositoryHint: "sha1:1935bfb46474e3043ee2310a9bb790d42dde2ed7", + RepositoryHint: "hash=sha1%3A1935bfb46474e3043ee2310a9bb790d42dde2ed7&hash=sha256%3Aa57d4df8227dce7605be1514ba385859847bbc172dcade1e3439dc9b5e92399a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1422,15 +1414,15 @@ var jenkins = test.ScannerTestcase{ Version: "2.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/tiger-types-2.2.jar", - RepositoryHint: "sha1:7ddc6bbc8ca59be8879d3a943bf77517ec190f39", + RepositoryHint: "hash=sha1%3A7ddc6bbc8ca59be8879d3a943bf77517ec190f39&hash=sha256%3A37af58e5972b3a6678f0dca5932fae99cbe12c73f00f35b939c2ac27e791034c", Filepath: "usr/share/jenkins/jenkins.war", }, { Name: "org.slf4j:slf4j-api", - Version: "1.7.32", + Version: "1.7.30", Kind: types.BinaryPackage, - PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/slf4j-api-1.7.32.jar", - RepositoryHint: "sha1:cdcff33940d9f2de763bc41ea05a0be5941176c3", + PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/sshd.hpi:WEB-INF/lib/slf4j-api-1.7.30.jar", + RepositoryHint: "hash=sha1%3Ab5a4b6d16ab13e34a88fae84c35cd5d68cac922c&hash=sha256%3Acdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1438,7 +1430,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-stapler-support-1.1.jar", - RepositoryHint: "sha1:95127e05b589288439684304a75474bb1261a11c", + RepositoryHint: "hash=sha1%3A95127e05b589288439684304a75474bb1261a11c&hash=sha256%3Aed30dcb0f5fe9efc6f15444a3e14f66639af1e3a44485244fb44d7807a5d4393", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1446,7 +1438,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/robust-http-client-1.2.jar", - RepositoryHint: "sha1:dee9fda92ad39a94a77ec6cf88300d4dd6db8a4d", + RepositoryHint: "hash=sha1%3Adee9fda92ad39a94a77ec6cf88300d4dd6db8a4d&hash=sha256%3A015fc9ea5bbf8da691aabd5ce14429627734dcaef9d8513834dd8885f2b79df1", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1454,7 +1446,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.11.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-io-2.11.0.jar", - RepositoryHint: "sha1:a2503f302b11ebde7ebc3df41daebe0e4eea3689", + RepositoryHint: "hash=sha1%3Aa2503f302b11ebde7ebc3df41daebe0e4eea3689&hash=sha256%3A961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1462,7 +1454,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/mxparser-1.2.2.jar", - RepositoryHint: "sha1:476fb3b3bb3716cad797cd054ce45f89445794e9", + RepositoryHint: "hash=sha1%3A476fb3b3bb3716cad797cd054ce45f89445794e9&hash=sha256%3Aaeeee23a3303d811bca8790ea7f25b534314861c03cff36dafdcc2180969eb97", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1470,7 +1462,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.3.9", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-core-5.3.9.jar", - RepositoryHint: "sha1:cfef19d1dfa41d56f8de66238dc015334997d573", + RepositoryHint: "hash=sha1%3Acfef19d1dfa41d56f8de66238dc015334997d573&hash=sha256%3A99fe2063bbde34050838eec09fb201a017982a7dfb39874d2aa5384ca5b7b9ac", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1478,7 +1470,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.1.3", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:a75914155a9f5808963170ec20653668a2ffd2fd", + RepositoryHint: "hash=sha1%3Aa75914155a9f5808963170ec20653668a2ffd2fd&hash=sha256%3A549f3007c6290f6a901e57d1d331b4ed0e6bf7384f78bf10316ffceeca834de6", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1486,7 +1478,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/windows-slave-installer-2.0.jar", - RepositoryHint: "sha1:7dec945c7b97096c6bcd7ad06f43767c544bb66e", + RepositoryHint: "hash=sha1%3A7dec945c7b97096c6bcd7ad06f43767c544bb66e&hash=sha256%3Aeb1e1345bad8fd211ab4a256257a3c1ab0364bc772c6552424528a76913b74a6", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1494,7 +1486,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/stapler-adjunct-timeline-1.5.jar", - RepositoryHint: "sha1:3fa806cbb94679ceab9c1ecaaf5fea8207390cb7", + RepositoryHint: "hash=sha1%3A3fa806cbb94679ceab9c1ecaaf5fea8207390cb7&hash=sha256%3A5e9f38e58a37fdcdf737c22d87beef13a42186bfd10caa7a7b653d6fdad47df5", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1502,7 +1494,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.8", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jansi-1.11.jar", - RepositoryHint: "sha1:655c643309c2f45a56a747fda70e3fadf57e9f11", + RepositoryHint: "hash=sha1%3A655c643309c2f45a56a747fda70e3fadf57e9f11&hash=sha256%3A9e82163ed2fc6257fe627132ce554726e796edee4e5efe9d9e523aee217d60b8", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1510,7 +1502,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jansi-1.11.jar", - RepositoryHint: "sha1:655c643309c2f45a56a747fda70e3fadf57e9f11", + RepositoryHint: "hash=sha1%3A655c643309c2f45a56a747fda70e3fadf57e9f11&hash=sha256%3A9e82163ed2fc6257fe627132ce554726e796edee4e5efe9d9e523aee217d60b8", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1518,7 +1510,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.11", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jansi-1.11.jar", - RepositoryHint: "sha1:655c643309c2f45a56a747fda70e3fadf57e9f11", + RepositoryHint: "hash=sha1%3A655c643309c2f45a56a747fda70e3fadf57e9f11&hash=sha256%3A9e82163ed2fc6257fe627132ce554726e796edee4e5efe9d9e523aee217d60b8", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1526,7 +1518,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.2.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/asm-analysis-9.2.jar", - RepositoryHint: "sha1:7487dd756daf96cab9986e44b9d7bcb796a61c10", + RepositoryHint: "hash=sha1%3A7487dd756daf96cab9986e44b9d7bcb796a61c10&hash=sha256%3A878fbe521731c072d14d2d65b983b1beae6ad06fda0007b6a8bae81f73f433c4", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1534,7 +1526,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/embedded_su4j-1.1.jar", - RepositoryHint: "sha1:9404130cc4e60670429f1ab8dbf94d669012725d", + RepositoryHint: "hash=sha1%3A9404130cc4e60670429f1ab8dbf94d669012725d&hash=sha256%3A5ff5075959efd9c55296c8cfc6122ca3bdfd58cdc350ff12ff2659b260f7803e", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1542,7 +1534,7 @@ var jenkins = test.ScannerTestcase{ Version: "3.1.10", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jnr-posix-3.1.10.jar", - RepositoryHint: "sha1:18f1ebd53c4a6d7d23487f8f73c3e6adc4cd6716", + RepositoryHint: "hash=sha1%3A18f1ebd53c4a6d7d23487f8f73c3e6adc4cd6716&hash=sha256%3A2b889cb68ef9bf8968938ff7c4150e4ad1d339edbc9b73bb4ac8c319b014cd62", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1550,7 +1542,7 @@ var jenkins = test.ScannerTestcase{ Version: "0.10.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jnr-constants-0.10.2.jar", - RepositoryHint: "sha1:11a081b5482f415443d5e4b860b7a3cb62e319d3", + RepositoryHint: "hash=sha1%3A11a081b5482f415443d5e4b860b7a3cb62e319d3&hash=sha256%3A2edf67dd6dc5877ae73b33196f24c4e688fa45ec2c3de5f1fe76d839cb6eb898", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1558,7 +1550,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.25", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/access-modifier-annotation-1.25.jar", - RepositoryHint: "sha1:fab291c4249c077b9bcc48db313a2255df7408b8", + RepositoryHint: "hash=sha1%3Afab291c4249c077b9bcc48db313a2255df7408b8&hash=sha256%3A03d958dd984a59786201917cdec84b66da706c5a36886544655cfbeac491c245", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1566,7 +1558,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.3.9", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-beans-5.3.9.jar", - RepositoryHint: "sha1:48600db2cb1abc0f7ef2b073f0c1abd78a83bcfc", + RepositoryHint: "hash=sha1%3A48600db2cb1abc0f7ef2b073f0c1abd78a83bcfc&hash=sha256%3A58db038ca3a63cad7e265164e5ea94682ce09af303554e275265c341f238e9a6", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1574,7 +1566,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/version-number-1.7.jar", - RepositoryHint: "sha1:e2cb3f1d3e296adf74463b046bf79f498cc9b937", + RepositoryHint: "hash=sha1%3Ae2cb3f1d3e296adf74463b046bf79f498cc9b937&hash=sha256%3A79728b080848e6889fff162b2b89b7ee25f4b691dd8db077d1e95057b73c129e", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1582,7 +1574,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.6", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-lang-2.6.jar", - RepositoryHint: "sha1:0ce1edb914c94ebc388f086c6827e8bdeec71ac2", + RepositoryHint: "hash=sha1%3A0ce1edb914c94ebc388f086c6827e8bdeec71ac2&hash=sha256%3A50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1590,7 +1582,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.0", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:f37bba2b8b78fcc8111bb932318b621dcc6c5194", + RepositoryHint: "hash=sha1%3Af37bba2b8b78fcc8111bb932318b621dcc6c5194&hash=sha256%3A5e1f9f07014cd9f4b8a517b18c2c9fff84a7e5a27116accc1f1cc22244e238c1", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1598,7 +1590,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.2.7", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jnr-ffi-2.2.7.jar", - RepositoryHint: "sha1:73987a1153030a3f1fd6c304531235ad5a0abc74", + RepositoryHint: "hash=sha1%3A73987a1153030a3f1fd6c304531235ad5a0abc74&hash=sha256%3A5746d6c4aabba610746fe66aa3853ab918be07288686c4069f057e2c24628c3e", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1606,7 +1598,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/instance-identity-2.2.jar", - RepositoryHint: "sha1:986e58370b11287dfa73a8fb2eac74e2dc4e2a23", + RepositoryHint: "hash=sha1%3A986e58370b11287dfa73a8fb2eac74e2dc4e2a23&hash=sha256%3Ac752b9d1cbfa600e7fd3387b779ed42ec96dcba6a6296c27a6ffdd1f8012f80b", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1614,7 +1606,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.3.0", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:ccbc77a5fd907ef863c29f3596c6f54ffa4e9442", + RepositoryHint: "hash=sha1%3Accbc77a5fd907ef863c29f3596c6f54ffa4e9442&hash=sha256%3Af264dd9f79a1fde10ce5ecc53221eff24be4c9331c830b7d52f2f08a7b633de2", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1622,7 +1614,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jaxen-1.2.0.jar", - RepositoryHint: "sha1:c10535a925bd35129a4329bc75065cc6b5293f2c", + RepositoryHint: "hash=sha1%3Ac10535a925bd35129a4329bc75065cc6b5293f2c&hash=sha256%3A70feef9dd75ad064def05a3ce8975aeba515ee7d1be146d12199c8828a64174c", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1630,7 +1622,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1-jenkins-20111212", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-jexl-1.1-jenkins-20111212.jar", - RepositoryHint: "sha1:0a990a77bea8c5a400d58a6f5d98122236300f7d", + RepositoryHint: "hash=sha1%3A0a990a77bea8c5a400d58a6f5d98122236300f7d&hash=sha256%3A3d1e5c11e50862187b13a267afaf14257276c4e311f35305630b3dd690e73eba", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1638,7 +1630,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.6", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/ezmorph-1.0.6.jar", - RepositoryHint: "sha1:01e55d2a0253ea37745d33062852fd2c90027432", + RepositoryHint: "hash=sha1%3A01e55d2a0253ea37745d33062852fd2c90027432&hash=sha256%3A2be06a2380f8656426b5c610db694bbd75314caf3e9191affcd7942721398ed7", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1646,7 +1638,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.3.9", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-context-5.3.9.jar", - RepositoryHint: "sha1:887f4579ade4f47cf0102856f4f4c88eda8ec9d7", + RepositoryHint: "hash=sha1%3A887f4579ade4f47cf0102856f4f4c88eda8ec9d7&hash=sha256%3Aaa6c959cf5081bead41f609c5de47b475ae93dcb0067ffd89d139d46cc100008", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1654,7 +1646,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.4-jenkins-3", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/json-lib-2.4-jenkins-3.jar", - RepositoryHint: "sha1:83f848493c09c735861a90e91591499fb88d7fbb", + RepositoryHint: "hash=sha1%3A83f848493c09c735861a90e91591499fb88d7fbb&hash=sha256%3A744b05db03a1bd92f158dfe88d843e92d5001567789cb675369c3a9275156942", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1662,7 +1654,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.9.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/jna-5.9.0.jar", - RepositoryHint: "sha1:8f503e6d9b500ceff299052d6be75b38c7257758", + RepositoryHint: "hash=sha1%3A8f503e6d9b500ceff299052d6be75b38c7257758&hash=sha256%3Aeafcc780b445434d3c5ae7fa2fb6665de1a7560d537d2c408a8e80cd14d27161", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1670,7 +1662,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.3.9", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.9.jar", - RepositoryHint: "sha1:88c920ec1bda67fea04daa8e16165777440df473", + RepositoryHint: "hash=sha1%3A88c920ec1bda67fea04daa8e16165777440df473&hash=sha256%3Ac8f11853b18f46d30a1bd263eec8de30efafaba5acfa412a2e62ea082b3aaa62", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1678,7 +1670,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.5.2", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-security-core-5.5.2.jar", - RepositoryHint: "sha1:cbb11a2fd6e86c45249562b980ba532476d9cae6", + RepositoryHint: "hash=sha1%3Acbb11a2fd6e86c45249562b980ba532476d9cae6&hash=sha256%3A3b4e8ae54e604d866dea1d001a96a220c4044da54df9aa8d875bb705cc4c1a95", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1686,7 +1678,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.2.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/asm-util-9.2.jar", - RepositoryHint: "sha1:fbc178fc5ba3dab50fd7e8a5317b8b647c8e8946", + RepositoryHint: "hash=sha1%3Afbc178fc5ba3dab50fd7e8a5317b8b647c8e8946&hash=sha256%3Aff5b3cd331ae8a9a804768280da98f50f424fef23dd3c788bb320e08c94ee598", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1694,7 +1686,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.6.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jakarta.mail-1.6.5.jar", - RepositoryHint: "sha1:d08124137cf42397d00b71b5985fd1dc248ac07f", + RepositoryHint: "hash=sha1%3Ad08124137cf42397d00b71b5985fd1dc248ac07f&hash=sha256%3Af4b500a1dd9ffd03ed7d8b2062fa5fd10d5beca4c42611672764bf4365751b53", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1702,7 +1694,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/slave-installer-1.7.jar", - RepositoryHint: "sha1:921d195a7a3d2b8af9f0847099dbb9eb652c7bd8", + RepositoryHint: "hash=sha1%3A921d195a7a3d2b8af9f0847099dbb9eb652c7bd8&hash=sha256%3Ad618a26bbf25f60b38fd173b4d867e58405dfe2fa99429c21d92812c7eea7125", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1710,7 +1702,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.316", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.316.jar", - RepositoryHint: "sha1:4b047f12b03840fb7bee61d84c7f2678afb9e86a", + RepositoryHint: "hash=sha1%3A4b047f12b03840fb7bee61d84c7f2678afb9e86a&hash=sha256%3A37cfdb2e812e68a5fde4ebfda04ccbd4f584f350c6b5fd686b0a0f3b03cf85e5", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1718,7 +1710,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.2.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/asm-commons-9.2.jar", - RepositoryHint: "sha1:f4d7f0fc9054386f2893b602454d48e07d4fbead", + RepositoryHint: "hash=sha1%3Af4d7f0fc9054386f2893b602454d48e07d4fbead&hash=sha256%3Abe4ce53138a238bb522cd781cf91f3ba5ce2f6ca93ec62d46a162a127225e0a6", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1726,7 +1718,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1.3-kohsuke-1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jzlib-1.1.3-kohsuke-1.jar", - RepositoryHint: "sha1:af5d27e1de29df05db95da5d76b546d075bc1bc5", + RepositoryHint: "hash=sha1%3Aaf5d27e1de29df05db95da5d76b546d075bc1bc5&hash=sha256%3Af38267efb47d15c7d39226ac6907eb5e5413f9139af9147701458dbd01d36e7e", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1734,7 +1726,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-jelly-tags-xml-1.1.jar", - RepositoryHint: "sha1:cc0efc2ae0ff81ef7737afc786a0ce16a8540efc", + RepositoryHint: "hash=sha1%3Acc0efc2ae0ff81ef7737afc786a0ce16a8540efc&hash=sha256%3A416c0eb9a03cb6fe212982e133d0ddcbf204946e2c0006855f25f494f50646d8", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1742,7 +1734,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.2.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/asm-tree-9.2.jar", - RepositoryHint: "sha1:d96c99a30f5e1a19b0e609dbb19a44d8518ac01e", + RepositoryHint: "hash=sha1%3Ad96c99a30f5e1a19b0e609dbb19a44d8518ac01e&hash=sha256%3Aaabf9bd23091a4ebfc109c1f3ee7cf3e4b89f6ba2d3f51c5243f16b3cffae011", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1750,7 +1742,7 @@ var jenkins = test.ScannerTestcase{ Version: "1593.v0e838714faae", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/stapler-jelly-1593.v0e838714faae.jar", - RepositoryHint: "sha1:ce9a4f0f5c3eed64165c5915cf1fc2811448fc83", + RepositoryHint: "hash=sha1%3Ace9a4f0f5c3eed64165c5915cf1fc2811448fc83&hash=sha256%3Aa63febc94e1db446f7df4c2b37f1797a5ddb994ce9f3b760db053043d1d7b41a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1758,7 +1750,7 @@ var jenkins = test.ScannerTestcase{ Version: "9.2.0", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/asm-9.2.jar", - RepositoryHint: "sha1:81a03f76019c67362299c40e0ba13405f5467bff", + RepositoryHint: "hash=sha1%3A81a03f76019c67362299c40e0ba13405f5467bff&hash=sha256%3Ab9d4fe4d71938df38839f0eca42aaaa64cf8b313d678da036f0cb3ca199b47f5", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1766,7 +1758,7 @@ var jenkins = test.ScannerTestcase{ Version: "3.2.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-collections-3.2.2.jar", - RepositoryHint: "sha1:8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5", + RepositoryHint: "hash=sha1%3A8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5&hash=sha256%3Aeeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1774,7 +1766,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.5.2", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-security-crypto-5.5.2.jar", - RepositoryHint: "sha1:83d2198c12e74dc78a6516563dcc3e989f134b54", + RepositoryHint: "hash=sha1%3A83d2198c12e74dc78a6516563dcc3e989f134b54&hash=sha256%3A790ca096bba516c91721dbfe0ea793d46a9f24a785e121413aac3946dd0f4808", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1782,7 +1774,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.3.9", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-aop-5.3.9.jar", - RepositoryHint: "sha1:9bcad31a74e60d205500dd67d2220bd0195c63f8", + RepositoryHint: "hash=sha1%3A9bcad31a74e60d205500dd67d2220bd0195c63f8&hash=sha256%3Aa8997f8dcb2cd16d3bce26c669ea128688e18311eb93778830729b484850e5ee", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1790,7 +1782,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.21", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-compress-1.21.jar", - RepositoryHint: "sha1:4ec95b60d4e86b5c95a0e919cb172a0af98011ef", + RepositoryHint: "hash=sha1%3A4ec95b60d4e86b5c95a0e919cb172a0af98011ef&hash=sha256%3A6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1798,7 +1790,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/crypto-util-1.5.jar", - RepositoryHint: "sha1:432ba8058e9a653fa191cdda3ed5fe4bb4fc4e53", + RepositoryHint: "hash=sha1%3A432ba8058e9a653fa191cdda3ed5fe4bb4fc4e53&hash=sha256%3A89e7df9dec879b34d96e84e64153d37c5d9003409842fcdd3d7f46949d6439ea", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1806,7 +1798,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jakarta.activation-1.2.1.jar", - RepositoryHint: "sha1:8013606426a73d8ba6b568370877251e91a38b89", + RepositoryHint: "hash=sha1%3A8013606426a73d8ba6b568370877251e91a38b89&hash=sha256%3Ad84d4ba8b55cdb7fdcbb885e6939386367433f56f5ab8cfdc302a7c3587fa92b", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1814,7 +1806,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2.7", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jakarta.servlet.jsp.jstl-api-1.2.7.jar", - RepositoryHint: "sha1:34a035507f0270f1c6b7722d728bd7b5a9bbac4c", + RepositoryHint: "hash=sha1%3A34a035507f0270f1c6b7722d728bd7b5a9bbac4c&hash=sha256%3A42ed486c8d782c64a35d7c7bea50a74c7e4d80f3fdc4ff39fb4629135b8286a9", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1822,7 +1814,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.0.1", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:71ab0620a41ed37f626b96d80c2a7c58165550df", + RepositoryHint: "hash=sha1%3A71ab0620a41ed37f626b96d80c2a7c58165550df&hash=sha256%3A442c6c06d4dfac1afba4ddd31eec54d3dcabc78a37d70baa81455d41b84fb967", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1830,7 +1822,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.3", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/stapler-adjunct-codemirror-1.3.jar", - RepositoryHint: "sha1:fd1d45544400d2a4da6dfee9e60edd4ec3368806", + RepositoryHint: "hash=sha1%3Afd1d45544400d2a4da6dfee9e60edd4ec3368806&hash=sha256%3A86805045ff832db5dd30bce3a3303c8004d2373a495556a06a61bc107518d7cc", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1838,7 +1830,7 @@ var jenkins = test.ScannerTestcase{ Version: "4.10", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1846,7 +1838,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.17", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1854,7 +1846,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.17", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1862,7 +1854,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.17", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1870,7 +1862,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.17", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1878,7 +1870,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1886,7 +1878,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.17", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1894,7 +1886,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1902,7 +1894,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.33", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1910,7 +1902,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-4.10.jar", - RepositoryHint: "sha1:c9016b2501e2a3849e8bd14aa7866b3a5385b330", + RepositoryHint: "hash=sha1%3Ac9016b2501e2a3849e8bd14aa7866b3a5385b330&hash=sha256%3A7992c946401966a1b0601b0b803809a75af21761c15bdce1b7ba32d4d4527666", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1918,7 +1910,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/symbol-annotation-1.1.jar", - RepositoryHint: "sha1:14fe06e7287a8aff81434a2fe8226744183fe955", + RepositoryHint: "hash=sha1%3A14fe06e7287a8aff81434a2fe8226744183fe955&hash=sha256%3A88ffb7b93d2fcff190cdb7fd56a4dbe933eb78ea63cff0aa12f92974aa527715", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1926,7 +1918,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.19", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/jfreechart-1.0.19.jar", - RepositoryHint: "sha1:ba9ee7dbb2e4c57a6901c79f614ed2dea9cc0e20", + RepositoryHint: "hash=sha1%3Aba9ee7dbb2e4c57a6901c79f614ed2dea9cc0e20&hash=sha256%3A153d077d6399776a45de97c555ad026eb6201d4bd8af86cfce7b8b4ccfa66263", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1934,7 +1926,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.21", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/bridge-method-annotation-1.21.jar", - RepositoryHint: "sha1:f380b42653f21c503036a31ff87c6970eeaad080", + RepositoryHint: "hash=sha1%3Af380b42653f21c503036a31ff87c6970eeaad080&hash=sha256%3A6812247ae8b75be24d8781db6776274ee6722d34b1dec7a45c14868a03dcf5d8", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1942,7 +1934,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.15", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/annotation-indexer-1.15.jar", - RepositoryHint: "sha1:b5e9548356e53060e7844b2e7fd235f112a6fb8f", + RepositoryHint: "hash=sha1%3Ab5e9548356e53060e7844b2e7fd235f112a6fb8f&hash=sha256%3A3665f1208f4fd5681650be392fc28820a0b29d573546e433ffd60ca72814ce03", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1950,7 +1942,7 @@ var jenkins = test.ScannerTestcase{ Version: "1", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:6975da39a7040257bd51d21a231b76c915872d38", + RepositoryHint: "hash=sha1%3A6975da39a7040257bd51d21a231b76c915872d38&hash=sha256%3A91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1958,7 +1950,7 @@ var jenkins = test.ScannerTestcase{ Version: "4.4.1", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spotbugs-annotations-4.4.1.jar", - RepositoryHint: "sha1:a409167be27a1b197c0432ebfc421f8f79f9bf41", + RepositoryHint: "hash=sha1%3Aa409167be27a1b197c0432ebfc421f8f79f9bf41&hash=sha256%3Afa5d3b17d585868c74c0e25b3c57c17282f9a3328c73ea5259bfd9ac99c6933a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1966,7 +1958,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.316", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1974,7 +1966,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.15", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1982,7 +1974,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.11.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1990,7 +1982,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.31", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -1998,7 +1990,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.7.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2006,7 +1998,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.7.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2014,7 +2006,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7.32", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2022,7 +2014,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7.32", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2030,7 +2022,7 @@ var jenkins = test.ScannerTestcase{ Version: "0.3.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2038,7 +2030,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7.32", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2046,7 +2038,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2054,7 +2046,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2062,7 +2054,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2070,7 +2062,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2078,7 +2070,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2086,7 +2078,7 @@ var jenkins = test.ScannerTestcase{ Version: "3.0.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2094,7 +2086,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2102,7 +2094,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2110,7 +2102,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2118,7 +2110,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.6", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.316.jar", - RepositoryHint: "sha1:ec1386735dc81ac7f42a4958e1e980f8f89dee11", + RepositoryHint: "hash=sha1%3Aec1386735dc81ac7f42a4958e1e980f8f89dee11&hash=sha256%3A1546082b7c4200550d58df675ea4624ebae6d55cb5b77d7ce6de4b1d12aa8682", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2126,7 +2118,7 @@ var jenkins = test.ScannerTestcase{ Version: "5.5.2", Kind: types.BinaryPackage, PackageDB: "jar:usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-security-web-5.5.2.jar", - RepositoryHint: "sha1:aa1b6fe3c48fbfbf47992633ff63b02208757d3a", + RepositoryHint: "hash=sha1%3Aaa1b6fe3c48fbfbf47992633ff63b02208757d3a&hash=sha256%3A7b1f8d1624a658c474544608dc31bed5de37ba11850101436fa05cbe1eb91060", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2134,7 +2126,7 @@ var jenkins = test.ScannerTestcase{ Version: "11.0.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/guava-11.0.1.jar", - RepositoryHint: "sha1:57b40a943725d43610c898ac0169adf1b2d55742", + RepositoryHint: "hash=sha1%3A57b40a943725d43610c898ac0169adf1b2d55742&hash=sha256%3Aaa7cef9d2ba0110a2db7be0fb6e679cd71f6a26fc3ba9da7715f41d3300def1d", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2142,7 +2134,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.4.18", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/xstream-1.4.18.jar", - RepositoryHint: "sha1:12eb80b4c4b83b184b669866f510a0eae13f9475", + RepositoryHint: "hash=sha1%3A12eb80b4c4b83b184b669866f510a0eae13f9475&hash=sha256%3A0af1a39b127fb2cae0d13de95cf13aaa4c9a7af525964573d3d278c06c4ececd", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2150,7 +2142,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.2", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/launchd-slave-installer-1.2.jar", - RepositoryHint: "sha1:8ef06fc2a3d9436aa214e318c66cb6dc274440b8", + RepositoryHint: "hash=sha1%3A8ef06fc2a3d9436aa214e318c66cb6dc274440b8&hash=sha256%3A0eb89b3ae2eedc89d2d1b47fe60b6a05fc3c67f227a1635f5c2857664e68b616", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2158,7 +2150,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/task-reactor-1.5.jar", - RepositoryHint: "sha1:62964c07bb64457bbbb5711482e9c79bab720f20", + RepositoryHint: "hash=sha1%3A62964c07bb64457bbbb5711482e9c79bab720f20&hash=sha256%3A24297110f2c197f563c912c61b49ce0239a95e64e99f681a6dcb6d901196f9a9", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2166,7 +2158,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.0.8-kohsuke-1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/j-interopdeps-2.0.8-kohsuke-1.jar", - RepositoryHint: "sha1:0c6ae17b2cbb5e07e62fddab1cebadaf351a97c0", + RepositoryHint: "hash=sha1%3A0c6ae17b2cbb5e07e62fddab1cebadaf351a97c0&hash=sha256%3Ae48d0fc6233fc3afa5dc52d7fde679b6dad51dd58122c087ac4e31d1841f16e3", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2174,7 +2166,7 @@ var jenkins = test.ScannerTestcase{ Version: "3.1-jenkins-3", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-httpclient-3.1-jenkins-3.jar", - RepositoryHint: "sha1:56110dc7f655c56c4e2ae8ae2bb055bf2282ba99", + RepositoryHint: "hash=sha1%3A56110dc7f655c56c4e2ae8ae2bb055bf2282ba99&hash=sha256%3A0be35956e9eab43d105711a0383a0f198d0ee07d19481bd30234be68ebe68b50", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2182,7 +2174,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.7.32", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/slf4j-jdk14-1.7.32.jar", - RepositoryHint: "sha1:4d5bdc7da49cd69c25f7eed5ae0b259358c7edeb", + RepositoryHint: "hash=sha1%3A4d5bdc7da49cd69c25f7eed5ae0b259358c7edeb&hash=sha256%3A4e09fd5ace1d3e5d1c9571b8eb7b17a23149e5ac322c11314c688991e2eb6f0b", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2190,7 +2182,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.11", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/libpam4j-1.11.jar", - RepositoryHint: "sha1:82cfca73e813c165c83b5d6b1d16808cb5291fe7", + RepositoryHint: "hash=sha1%3A82cfca73e813c165c83b5d6b1d16808cb5291fe7&hash=sha256%3A39b01f00383f02ccdec3e40878647a92fa10ed584013ec1a8b26c99491f71005", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2198,7 +2190,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.10.11", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:ea0a0475fb6dfcdcf48b30410fd9d4f5c80df07e", + RepositoryHint: "hash=sha1%3Aea0a0475fb6dfcdcf48b30410fd9d4f5c80df07e&hash=sha256%3Adab530df7a980b5ac8fd7e8d208243ae0d3ebd6de09b1aa2ce756360cc2ed256", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2206,7 +2198,7 @@ var jenkins = test.ScannerTestcase{ Version: "0.5", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-discovery-0.5.jar", - RepositoryHint: "sha1:3a8ac816bbe02d2f88523ef22cbf2c4abd71d6a8", + RepositoryHint: "hash=sha1%3A3a8ac816bbe02d2f88523ef22cbf2c4abd71d6a8&hash=sha256%3Ae5b7d58ae62e5b309d5c0ffa5a5b1d9d1e0f0c4c3cc18d1fe3103fd29f90149d", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2214,7 +2206,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.13", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/sezpoz-1.13.jar", - RepositoryHint: "sha1:822ac382900587d0a7d6aaec7b1859f1cf5de2fb", + RepositoryHint: "hash=sha1%3A822ac382900587d0a7d6aaec7b1859f1cf5de2fb&hash=sha256%3A3e0ebeab318e6c634b0ebc64e781b9ca63610b88b7ac09c0d185a313495748c9", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2222,7 +2214,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1.4c", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:9b988ea84b9e4e9f1874e390ce099b8ac12cfff5", + RepositoryHint: "hash=sha1%3A9b988ea84b9e4e9f1874e390ce099b8ac12cfff5&hash=sha256%3A0341395a481bb887803957145a6a37879853dd625e9244c2ea2509d9bb7531b9", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2230,7 +2222,7 @@ var jenkins = test.ScannerTestcase{ Version: "2.7.7", Kind: types.BinaryPackage, PackageDB: "file:usr/share/jenkins/jenkins.war", - RepositoryHint: "sha1:83cd2cd674a217ade95a4bb83a8a14f351f48bd0", + RepositoryHint: "hash=sha1%3A83cd2cd674a217ade95a4bb83a8a14f351f48bd0&hash=sha256%3A88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2238,7 +2230,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.0.0", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/self-signed-cert-generator-1.0.0.jar", - RepositoryHint: "sha1:45542f10d259405b42bf537afe30342575d37b18", + RepositoryHint: "hash=sha1%3A45542f10d259405b42bf537afe30342575d37b18&hash=sha256%3A14e8f963d1b60d727ff534da22c35ce61c12ab2002684a3c647ba59aaaf54a59", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2246,7 +2238,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.1", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/systemd-slave-installer-1.1.jar", - RepositoryHint: "sha1:a9a4adb0480ec8942d031b0fff9005077b889875", + RepositoryHint: "hash=sha1%3Aa9a4adb0480ec8942d031b0fff9005077b889875&hash=sha256%3Ac10fa667c02d7a67bf35d664074ab994a928fee508fe66cb37f80c9edf27199a", Filepath: "usr/share/jenkins/jenkins.war", }, { @@ -2254,7 +2246,7 @@ var jenkins = test.ScannerTestcase{ Version: "1.28", Kind: types.BinaryPackage, PackageDB: "maven:usr/share/jenkins/jenkins.war:WEB-INF/lib/winp-1.28.jar", - RepositoryHint: "sha1:8dcfcc7214e73a906786b80704784d90fb593e75", + RepositoryHint: "hash=sha1%3A8dcfcc7214e73a906786b80704784d90fb593e75&hash=sha256%3A7a6f5b6e6d4294c3c7f9cb92920338193ef08c44fc0d638b539d3aae26fe567e", Filepath: "usr/share/jenkins/jenkins.war", }, }, From bcdc3e8fa8e33c2b065d61d7ac277312bd7e645b Mon Sep 17 00:00:00 2001 From: crozzy Date: Mon, 5 Oct 2026 14:07:17 -0700 Subject: [PATCH 06/11] java: record SBOM components under their product CPE SBOM packages were indexed with the Maven Central repository, which is what selects the OSV Java matcher. Attach them to the product CPE repository instead, and leave that Maven Central repository on packages found by scanning jars. Signed-off-by: crozzy --- java/bom/package.go | 8 +- java/coalescer.go | 54 ++++++- java/coalescer_test.go | 59 ++++++++ java/jar/jar.go | 27 ++++ java/packagescanner.go | 332 ++++++++++++++++++++++++----------------- java/sbom_purl_test.go | 87 +++++++++++ 6 files changed, 425 insertions(+), 142 deletions(-) create mode 100644 java/coalescer_test.go create mode 100644 java/sbom_purl_test.go diff --git a/java/bom/package.go b/java/bom/package.go index 363c0c825..d13a73d24 100644 --- a/java/bom/package.go +++ b/java/bom/package.go @@ -43,7 +43,13 @@ func PopulatePackage(pkg *claircore.Package, bp Package, sbomFile string) error pkg.Kind = types.BinaryPackage pkg.Filepath = n pkg.CPE = *bp.CPE - pkg.RepositoryHint = (url.Values{"hash": vs}).Encode() + hint := url.Values{"hash": vs} + if bp.CPE != nil { + // Package.CPE is not stored. The coalescer reads this back when it + // chooses the product repository. + hint.Set("cpe", bp.CPE.String()) + } + pkg.RepositoryHint = hint.Encode() pkg.PackageDB = `sbom:` + sbomFile return nil diff --git a/java/coalescer.go b/java/coalescer.go index 688f86280..2ee04900a 100644 --- a/java/coalescer.go +++ b/java/coalescer.go @@ -2,6 +2,9 @@ package java import ( "context" + "log/slog" + "net/url" + "strings" "github.com/quay/claircore" "github.com/quay/claircore/indexer" @@ -17,18 +20,28 @@ func (*coalescer) Coalesce(ctx context.Context, ls []*indexer.LayerArtifacts) (* } for _, l := range ls { - // If we didn't find at least one maven repo in this layer + // If we didn't find at least one repository in this layer // no point in searching for packages. if len(l.Repos) == 0 { continue } - rs := make([]string, len(l.Repos)) - for i, r := range l.Repos { - rs[i] = r.ID - ir.Repositories[r.ID] = r + var mavenIDs []string + for _, r := range l.Repos { + if r.Name == Repository.Name && r.Key == "" { + mavenIDs = append(mavenIDs, r.ID) + } } for _, pkg := range l.Pkgs { ir.Packages[pkg.ID] = pkg + rs := mavenIDs + if strings.HasPrefix(pkg.PackageDB, "sbom:") { + rs = sbomRepositoryIDs(ctx, pkg, l.Repos) + } + for _, id := range rs { + if repo := repositoryByID(l.Repos, id); repo != nil { + ir.Repositories[repo.ID] = repo + } + } ir.Environments[pkg.ID] = []*claircore.Environment{ { PackageDB: pkg.PackageDB, @@ -40,3 +53,34 @@ func (*coalescer) Coalesce(ctx context.Context, ls []*indexer.LayerArtifacts) (* } return ir, nil } + +func sbomRepositoryIDs(ctx context.Context, pkg *claircore.Package, repos []*claircore.Repository) []string { + q, err := url.ParseQuery(pkg.RepositoryHint) + if err != nil { + slog.DebugContext(ctx, "sbom repository hint", "reason", err) + return nil + } + want := q.Get("cpe") + if want == "" { + return nil + } + for _, r := range repos { + if r.Key != RedHatCPERepositoryKey { + continue + } + if r.Name == want || r.CPE.String() == want { + return []string{r.ID} + } + } + slog.DebugContext(ctx, "sbom package has no product repository", "package", pkg.Name, "cpe", want) + return nil +} + +func repositoryByID(repos []*claircore.Repository, id string) *claircore.Repository { + for _, r := range repos { + if r.ID == id { + return r + } + } + return nil +} diff --git a/java/coalescer_test.go b/java/coalescer_test.go new file mode 100644 index 000000000..a6830d7af --- /dev/null +++ b/java/coalescer_test.go @@ -0,0 +1,59 @@ +package java + +import ( + "net/url" + "testing" + + "github.com/quay/claircore" + "github.com/quay/claircore/indexer" + "github.com/quay/claircore/test" + "github.com/quay/claircore/toolkit/types/cpe" +) + +func TestCoalescerSplitsRepositories(t *testing.T) { + t.Parallel() + ctx := test.Logging(t) + w := cpe.MustUnbind("cpe:/a:redhat:jboss_enterprise_application_platform:8.1") + cpeRepo := &claircore.Repository{ + ID: "1", + Name: w.String(), + Key: RedHatCPERepositoryKey, + CPE: w, + } + maven := Repository + maven.ID = "2" + + sbom := &claircore.Package{ + ID: "10", + Name: "com.fasterxml.jackson.core:jackson-databind", + PackageDB: "sbom:app.cdx.json", + RepositoryHint: url.Values{ + "cpe": {w.String()}, + }.Encode(), + } + jarPkg := &claircore.Package{ + ID: "11", + Name: "org.slf4j:slf4j-api", + PackageDB: "maven:slf4j-api.jar", + } + ir, err := (*coalescer)(nil).Coalesce(ctx, []*indexer.LayerArtifacts{{ + Hash: test.RandomSHA256Digest(t), + Pkgs: []*claircore.Package{sbom, jarPkg}, + Repos: []*claircore.Repository{cpeRepo, &maven}, + }}) + if err != nil { + t.Fatal(err) + } + if got := ir.Environments[sbom.ID][0].RepositoryIDs; len(got) != 1 || got[0] != cpeRepo.ID { + t.Fatalf("sbom repositories: %v", got) + } + if got := ir.Environments[jarPkg.ID][0].RepositoryIDs; len(got) != 1 || got[0] != maven.ID { + t.Fatalf("jar repositories: %v", got) + } + if _, ok := ir.Repositories[maven.ID]; !ok { + t.Fatal("missing maven repository") + } + if _, ok := ir.Repositories[cpeRepo.ID]; !ok { + t.Fatal("missing cpe repository") + } +} diff --git a/java/jar/jar.go b/java/jar/jar.go index f5e361e88..aaba90f6f 100644 --- a/java/jar/jar.go +++ b/java/jar/jar.go @@ -178,6 +178,33 @@ Finish: // TODO(hank) All these functions that return a slice should return an iterator. +// ProductCPEs returns product CPEs from CycloneDX documents under META-INF/sbom/. +// A jar with no such document returns a nil slice. +func ProductCPEs(ctx context.Context, z *zip.Reader) ([]cpe.WFN, error) { + infos, err := extractSBOM(ctx, srcPath{"."}, z) + switch { + case errors.Is(err, nil): + case errors.Is(err, errUnpopulated): + return nil, nil + default: + return nil, err + } + var out []cpe.WFN + seen := make(map[string]struct{}) + for _, info := range infos { + if info.CPE == nil { + continue + } + s := info.CPE.String() + if _, ok := seen[s]; ok { + continue + } + seen[s] = struct{}{} + out = append(out, *info.CPE) + } + return out, nil +} + // ExtractSBOM looks for CycloneDX JSON files underneath "META-INF/sbom/" and // attempts to read them using the Red Hat-flavored rules in the "bom" package. // diff --git a/java/packagescanner.go b/java/packagescanner.go index cfae0c126..5352e442f 100644 --- a/java/packagescanner.go +++ b/java/packagescanner.go @@ -46,6 +46,11 @@ var ( } ) +// RedHatCPERepositoryKey is the repository key for a Red Hat product CPE +// attributed to a Java component. It is distinct from the Maven Central +// repository and from the RPM CPE repository. +const RedHatCPERepositoryKey = "redhat-java-cpe-repository" + // DefaultSearchAPI is a maven-like REST API that may be used to do // reverse lookups based on an archive's sha1 sum. // @@ -79,7 +84,7 @@ type Scanner struct { func (*Scanner) Name() string { return "java" } // Version implements scanner.VersionedScanner. -func (*Scanner) Version() string { return "8" } +func (*Scanner) Version() string { return "9" } // Kind implements scanner.VersionedScanner. func (*Scanner) Kind() string { return "package" } @@ -153,169 +158,224 @@ func (s *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircor } seq, walkErr := walkInteresting(ctx, sys) + type foundFile struct { + k fileKind + p string + } + var found []foundFile for k, p := range seq { - log := slog.With("path", p) if set.Contains(p) { - log.DebugContext(ctx, "file from an rpm") + slog.DebugContext(ctx, "file from an rpm", "path", p) continue } - - h1.Reset() - h256.Reset() - buf.Reset() - f, err := sys.Open(p) - if err != nil { - return nil, err - } - fStat, err := f.Stat() - if err == nil { - buf.Grow(int(fStat.Size())) - } - sz, err := buf.ReadFrom(io.TeeReader(f, hs)) - f.Close() - if err != nil { - return nil, err - } - rd := bytes.NewReader(buf.Bytes()) - - switch k { - case fileSBoM: - dir := path.Dir(p) - // Don't consume both compressed and uncompressed versions. - // - // This code doesn't prefer one or the other and assumes they're - // equivalent. - k := maphash.String(seed, dir) - if _, ok := sbomDup[k]; ok { - log.DebugContext(ctx, "skipping (assumed) duplicate SBoM") + found = append(found, foundFile{k, p}) + } + if err := walkErr(); err != nil { + return nil, fmt.Errorf("java: walking fs: %w", err) + } + // Layer SBOMs are indexed first so a jar they already describe can be skipped + // even when the walk visits the jar first. + for _, pass := range []fileKind{fileSBoM, fileJAR} { + for _, file := range found { + if file.k != pass { + continue + } + k, p := file.k, file.p + log := slog.With("path", p) + if k == fileJAR && coveredSBOMPath(seed, p, sbomPath) { + log.DebugContext(ctx, "skipping jar covered by sbom path") continue } - sbomDup[k] = struct{}{} - seq, err := bom.LoadCDX(ctx, rd) + h1.Reset() + h256.Reset() + buf.Reset() + f, err := sys.Open(p) if err != nil { return nil, err } - for bp, err := range seq { - if err != nil { - return nil, err - } - n := path.Join(dir, bp.Location) - sbomPath[maphash.String(seed, n)] = struct{}{} - for k, b := range bp.Hashes { - h, ok := sbomHash[k] - if !ok { - continue - } - h[maphash.Bytes(seed, b)] = struct{}{} - } - var pkg claircore.Package - if err := bom.PopulatePackage(&pkg, bp, p); err != nil { - return nil, err - } - ret = append(ret, &pkg) + fStat, err := f.Stat() + if err == nil { + buf.Grow(int(fStat.Size())) } - case fileJAR: - // Let the zip reader determine if this is actually a valid zip file. - // We cannot just check the header, as it's possible the jar file - // starts off with a script. This scenario is explicitly mentioned in - // the standard library: https://cs.opensource.google/go/go/+/refs/tags/go1.24.3:src/archive/zip/reader.go;l=41. - z, err := zip.NewReader(rd, sz) - switch { - case errors.Is(err, nil): - case errors.Is(err, zip.ErrFormat): - log.InfoContext(ctx, "not actually a jar: invalid zip", "reason", err) - continue - default: + sz, err := buf.ReadFrom(io.TeeReader(f, hs)) + f.Close() + if err != nil { return nil, err } - - infos, err := jar.Parse(ctx, p, z) - switch { - case err == nil: - case errors.Is(err, jar.ErrNotAJar): - // Could not prove this is really a jar. Skip it and move on. - log.InfoContext(ctx, "skipping jar", "reason", err) + rd := bytes.NewReader(buf.Bytes()) + if k == fileJAR && coveredSBOMHash(seed, h1.Sum(nil), h256.Sum(nil), sbomHash) { + log.DebugContext(ctx, "skipping jar covered by sbom hash") continue - default: - return nil, err } - ck1 := h1.Sum(ck1) - ck256 := h256.Sum(ck256) - hex1, hex256 := hex.EncodeToString(ck1), hex.EncodeToString(ck256) - ps := make([]*claircore.Package, len(infos)) - for j := range infos { - i := &infos[j] - // If we discovered a pom file, don't bother talking to the network. - // If not, talk to the network if configured to do so. - if !strings.HasSuffix(i.Source, "pom.properties") && doSearch { - switch err := s.search(ctx, i, ck1); { - case errors.Is(err, nil): // OK - case errors.Is(err, errRPC): - // BUG(hank) There's no way for a scanner that makes RPC calls - // to signal "the call failed, these are best-effort results, - // and please retry." - default: + + switch k { + case fileSBoM: + dir := path.Dir(p) + // Don't consume both compressed and uncompressed versions. + // + // This code doesn't prefer one or the other and assumes they're + // equivalent. + k := maphash.String(seed, dir) + if _, ok := sbomDup[k]; ok { + log.DebugContext(ctx, "skipping (assumed) duplicate SBoM") + continue + } + sbomDup[k] = struct{}{} + + seq, err := bom.LoadCDX(ctx, rd) + if err != nil { + return nil, err + } + for bp, err := range seq { + if err != nil { + return nil, err + } + n := path.Join(dir, bp.Location) + sbomPath[maphash.String(seed, n)] = struct{}{} + for k, b := range bp.Hashes { + h, ok := sbomHash[k] + if !ok { + continue + } + h[maphash.Bytes(seed, b)] = struct{}{} + } + var pkg claircore.Package + if err := bom.PopulatePackage(&pkg, bp, p); err != nil { return nil, err } + ret = append(ret, &pkg) } - - var pkg claircore.Package - pkg.Name = i.Name - pkg.Version = i.Version - pkg.Kind = types.BinaryPackage - pkg.Filepath = p - pkg.RepositoryHint = (url.Values{ - "hash": { - "sha1:" + cmp.Or(hex.EncodeToString(i.SHA1), hex1), - "sha256:" + cmp.Or(hex.EncodeToString(i.SHA256), hex256), - }, - }).Encode() - if i.CPE != nil { - pkg.CPE = *i.CPE + case fileJAR: + // Let the zip reader determine if this is actually a valid zip file. + // We cannot just check the header, as it's possible the jar file + // starts off with a script. This scenario is explicitly mentioned in + // the standard library: https://cs.opensource.google/go/go/+/refs/tags/go1.24.3:src/archive/zip/reader.go;l=41. + z, err := zip.NewReader(rd, sz) + switch { + case errors.Is(err, nil): + case errors.Is(err, zip.ErrFormat): + log.InfoContext(ctx, "not actually a jar: invalid zip", "reason", err) + continue + default: + return nil, err } - // BUG(hank) There's probably some bugs lurking in the jar.Info → - // claircore.Package mapping code around embedded jars. There's a - // testcase to be written, there. - idx := strings.LastIndex(i.Source, ":") - // If the top-level JAR file can only be identified by its name, - // i.Source will just be `.` - // In this case, PackageDB should just be the filepath, n. - // Otherwise, use i.Source. - pkgDB := p - if idx != -1 { - pkgDB = i.Source[:idx] - } - // Only examine anything after the last colon (or the entire path if there is no colon). - switch l := i.Source[idx+1:]; { - case strings.HasSuffix(l, "pom.properties"): - fallthrough - case s.root != nil && i.Source == s.root.String(): - // Populate as a maven artifact. - pkg.PackageDB = `maven:` + pkgDB - case l == "META-INF/MANIFEST.MF": - // information pulled from a manifest file - pkg.PackageDB = `jar:` + pkgDB - case l == ".": - // Name guess. - pkg.PackageDB = `file:` + pkgDB + infos, err := jar.Parse(ctx, p, z) + switch { + case err == nil: + case errors.Is(err, jar.ErrNotAJar): + // Could not prove this is really a jar. Skip it and move on. + log.InfoContext(ctx, "skipping jar", "reason", err) + continue default: - return nil, fmt.Errorf("java: martian Info: %+v", i) + return nil, err + } + ck1 := h1.Sum(ck1) + ck256 := h256.Sum(ck256) + hex1, hex256 := hex.EncodeToString(ck1), hex.EncodeToString(ck256) + ps := make([]*claircore.Package, len(infos)) + for j := range infos { + i := &infos[j] + // If we discovered a pom file, don't bother talking to the network. + // If not, talk to the network if configured to do so. + if !strings.HasSuffix(i.Source, "pom.properties") && doSearch { + switch err := s.search(ctx, i, ck1); { + case errors.Is(err, nil): // OK + case errors.Is(err, errRPC): + // BUG(hank) There's no way for a scanner that makes RPC calls + // to signal "the call failed, these are best-effort results, + // and please retry." + default: + return nil, err + } + } + + var pkg claircore.Package + pkg.Name = i.Name + pkg.Version = i.Version + pkg.Kind = types.BinaryPackage + pkg.Filepath = p + hint := url.Values{ + "hash": { + "sha1:" + cmp.Or(hex.EncodeToString(i.SHA1), hex1), + "sha256:" + cmp.Or(hex.EncodeToString(i.SHA256), hex256), + }, + } + if i.CPE != nil { + hint.Set("cpe", i.CPE.String()) + } + pkg.RepositoryHint = hint.Encode() + if i.CPE != nil { + pkg.CPE = *i.CPE + } + // BUG(hank) There's probably some bugs lurking in the jar.Info → + // claircore.Package mapping code around embedded jars. There's a + // testcase to be written, there. + + idx := strings.LastIndex(i.Source, ":") + // If the top-level JAR file can only be identified by its name, + // i.Source will just be `.` + // In this case, PackageDB should just be the filepath, n. + // Otherwise, use i.Source. + pkgDB := p + if idx != -1 { + pkgDB = i.Source[:idx] + } + // Only examine anything after the last colon (or the entire path if there is no colon). + switch l := i.Source[idx+1:]; { + case strings.HasSuffix(l, "pom.properties"): + fallthrough + case s.root != nil && i.Source == s.root.String(): + // Populate as a maven artifact. + pkg.PackageDB = `maven:` + pkgDB + case l == "META-INF/MANIFEST.MF": + // information pulled from a manifest file + pkg.PackageDB = `jar:` + pkgDB + case l == ".": + // Name guess. + pkg.PackageDB = `file:` + pkgDB + case isSBOMMember(l): + pkg.PackageDB = `sbom:` + i.Source + default: + return nil, fmt.Errorf("java: martian Info: %+v", i) + } + ps[j] = &pkg } - ps[j] = &pkg + ret = append(ret, ps...) + default: + panic("unreachable") } - ret = append(ret, ps...) - default: - panic("unreachable") } } - if err := walkErr(); err != nil { - return nil, fmt.Errorf("java: walking fs: %w", err) - } return ret, nil } +func coveredSBOMPath(seed maphash.Seed, p string, paths map[uint64]struct{}) bool { + _, ok := paths[maphash.String(seed, p)] + return ok +} + +func coveredSBOMHash(seed maphash.Seed, sha1Sum, sha256Sum []byte, hashes map[unique.Handle[string]]map[uint64]struct{}) bool { + if _, ok := hashes[bom.HashSHA1][maphash.Bytes(seed, sha1Sum)]; ok { + return true + } + _, ok := hashes[bom.HashSHA256][maphash.Bytes(seed, sha256Sum)] + return ok +} + +// isSBOMMember reports whether an archive member is a CycloneDX document +// under META-INF/sbom/. +func isSBOMMember(name string) bool { + if !strings.Contains(name, "META-INF/sbom/") { + return false + } + base := path.Base(name) + return strings.HasSuffix(base, ".cdx.json") || + strings.HasSuffix(base, ".cdx.json.gz") || + strings.HasSuffix(base, ".cdx.json.gzip") +} + // DefaultRepository implements [indexer.DefaultRepoScanner]. func (Scanner) DefaultRepository(ctx context.Context) *claircore.Repository { return &Repository diff --git a/java/sbom_purl_test.go b/java/sbom_purl_test.go new file mode 100644 index 000000000..847062d2a --- /dev/null +++ b/java/sbom_purl_test.go @@ -0,0 +1,87 @@ +package java + +import ( + "net/url" + "os" + "testing" + + "github.com/quay/claircore" + "github.com/quay/claircore/java/bom" + "github.com/quay/claircore/test" + "github.com/quay/claircore/toolkit/types" +) + +func TestSBOMPackageName(t *testing.T) { + ctx := test.Logging(t) + f, err := os.Open("bom/testdata/sbom.cdx.json") + if err != nil { + t.Fatal(err) + } + defer f.Close() + + seq, err := bom.LoadCDX(ctx, f) + if err != nil { + t.Fatal(err) + } + var found bool + for bp, err := range seq { + if err != nil { + t.Fatal(err) + } + if bp.PURL.Namespace != "com.fasterxml.jackson.core" || bp.PURL.Name != "jackson-databind" { + continue + } + var pkg claircore.Package + if err := bom.PopulatePackage(&pkg, bp, "sbom.cdx.json"); err != nil { + t.Fatal(err) + } + if pkg.Name != "jackson-databind" { + t.Fatalf("name: got %q", pkg.Name) + } + if pkg.Version != "2.18.4.redhat-00002" { + t.Fatalf("version: got %q", pkg.Version) + } + if pkg.Kind != types.BinaryPackage { + t.Fatalf("kind: got %q", pkg.Kind) + } + hint, err := url.ParseQuery(pkg.RepositoryHint) + if err != nil { + t.Fatal(err) + } + if hint.Get("cpe") != bp.CPE.String() { + t.Fatalf("cpe hint: got %q", hint.Get("cpe")) + } + if pkg.PackageDB != "sbom:sbom.cdx.json" { + t.Fatalf("package db: got %q", pkg.PackageDB) + } + found = true + break + } + if !found { + t.Fatal("jackson-databind not in fixture") + } +} + +func TestIsSBOMMember(t *testing.T) { + t.Parallel() + ok := []string{ + "META-INF/sbom/app.cdx.json", + "META-INF/sbom/app.cdx.json.gz", + "META-INF/sbom/app.cdx.json.gzip", + } + for _, name := range ok { + if !isSBOMMember(name) { + t.Errorf("expected sbom member %q", name) + } + } + no := []string{ + "META-INF/MANIFEST.MF", + "META-INF/maven/pom.properties", + "app.cdx.json", + } + for _, name := range no { + if isSBOMMember(name) { + t.Errorf("expected ordinary member %q", name) + } + } +} From e17846908610b0c3b5acfe36c9286f359e0251ae Mon Sep 17 00:00:00 2001 From: crozzy Date: Mon, 5 Oct 2026 14:07:17 -0700 Subject: [PATCH 07/11] java: detect product CPE repositories SBOM packages are associated with a redhat-java-cpe-repository during coalescing, but nothing recorded those repositories. Detect one repository per product CPE in a layer SBOM or an embedded jar SBOM. Signed-off-by: crozzy --- java/detector.go | 114 ++++++++++++++++++++++++++++++++++++++++++++++ java/ecosystem.go | 2 +- 2 files changed, 115 insertions(+), 1 deletion(-) create mode 100644 java/detector.go diff --git a/java/detector.go b/java/detector.go new file mode 100644 index 000000000..5009fb081 --- /dev/null +++ b/java/detector.go @@ -0,0 +1,114 @@ +package java + +import ( + "archive/zip" + "bytes" + "context" + "fmt" + "io" + "log/slog" + + "github.com/quay/claircore" + "github.com/quay/claircore/indexer" + "github.com/quay/claircore/java/bom" + "github.com/quay/claircore/java/jar" + "github.com/quay/claircore/rpm" + "github.com/quay/claircore/toolkit/types/cpe" +) + +var _ indexer.RepositoryScanner = (*Detector)(nil) + +// Detector records one repository per Red Hat product CPE discovered in a +// Java SBOM. The package scanner cannot return those repositories itself: +// [DefaultRepository] is a single Maven Central repository for the layer. +type Detector struct{} + +// Name implements [indexer.VersionedScanner]. +func (*Detector) Name() string { return "java" } + +// Version implements [indexer.VersionedScanner]. +func (*Detector) Version() string { return "1" } + +// Kind implements [indexer.VersionedScanner]. +func (*Detector) Kind() string { return "repository" } + +// Scan implements [indexer.RepositoryScanner]. +func (*Detector) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircore.Repository, error) { + if err := ctx.Err(); err != nil { + return nil, err + } + sys, err := layer.FS() + if err != nil { + return nil, fmt.Errorf("java: unable to open layer: %w", err) + } + set, err := rpm.NewPathSet(ctx, layer) + if err != nil { + return nil, fmt.Errorf("java: unable to check RPM db: %w", err) + } + seen := make(map[string]*claircore.Repository) + add := func(w cpe.WFN) { + s := w.String() + if _, ok := seen[s]; ok { + return + } + seen[s] = &claircore.Repository{ + Name: s, + Key: RedHatCPERepositoryKey, + CPE: w, + } + } + + seq, walkErr := walkInteresting(ctx, sys) + for k, p := range seq { + if set.Contains(p) { + continue + } + f, err := sys.Open(p) + if err != nil { + return nil, err + } + buf, err := io.ReadAll(f) + f.Close() + if err != nil { + return nil, err + } + switch k { + case fileSBoM: + pkgs, err := bom.LoadCDX(ctx, bytes.NewReader(buf)) + if err != nil { + return nil, err + } + for bp, err := range pkgs { + if err != nil { + return nil, err + } + if bp.CPE != nil { + add(*bp.CPE) + } + } + case fileJAR: + z, err := zip.NewReader(bytes.NewReader(buf), int64(len(buf))) + if err != nil { + slog.DebugContext(ctx, "not a jar while detecting repositories", "path", p, "reason", err) + continue + } + wfns, err := jar.ProductCPEs(ctx, z) + if err != nil { + return nil, err + } + for _, w := range wfns { + add(w) + } + default: + panic("unreachable") + } + } + if err := walkErr(); err != nil { + return nil, fmt.Errorf("java: walking fs: %w", err) + } + out := make([]*claircore.Repository, 0, len(seen)) + for _, r := range seen { + out = append(out, r) + } + return out, nil +} diff --git a/java/ecosystem.go b/java/ecosystem.go index 1cca07347..d9ad15439 100644 --- a/java/ecosystem.go +++ b/java/ecosystem.go @@ -14,7 +14,7 @@ func NewEcosystem(ctx context.Context) *indexer.Ecosystem { }, DistributionScanners: func(_ context.Context) ([]indexer.DistributionScanner, error) { return nil, nil }, RepositoryScanners: func(_ context.Context) ([]indexer.RepositoryScanner, error) { - return nil, nil + return []indexer.RepositoryScanner{&Detector{}}, nil }, Coalescer: func(_ context.Context) (indexer.Coalescer, error) { return (*coalescer)(nil), nil From 3072d68a02910f8741d43e0c82fecb8b8ecc3d32 Mon Sep 17 00:00:00 2001 From: crozzy Date: Mon, 5 Oct 2026 16:14:23 -0700 Subject: [PATCH 08/11] java: name SBOM components namespace:name SBOM components were stored under the purl artifact name. The rest of the Java indexer uses group:artifact, which is the purl namespace and name. Signed-off-by: crozzy --- java/bom/package.go | 6 ++---- java/jar/jar.go | 5 ++--- java/sbom_purl_test.go | 2 +- 3 files changed, 5 insertions(+), 8 deletions(-) diff --git a/java/bom/package.go b/java/bom/package.go index d13a73d24..af69ecaab 100644 --- a/java/bom/package.go +++ b/java/bom/package.go @@ -5,7 +5,6 @@ import ( "net/url" "path" "slices" - "strings" "unique" "github.com/package-url/packageurl-go" @@ -33,11 +32,10 @@ func PopulatePackage(pkg *claircore.Package, bp Package, sbomFile string) error } slices.Sort(vs) - group, artifact, ok := strings.Cut(bp.PURL.Name, "/") - if !ok { + if bp.PURL.Namespace == "" { pkg.Name = bp.PURL.Name } else { - pkg.Name = group + ":" + artifact + pkg.Name = bp.PURL.Namespace + ":" + bp.PURL.Name } pkg.Version = bp.PURL.Version pkg.Kind = types.BinaryPackage diff --git a/java/jar/jar.go b/java/jar/jar.go index aaba90f6f..fcc5709c8 100644 --- a/java/jar/jar.go +++ b/java/jar/jar.go @@ -552,11 +552,10 @@ func (i *Info) parseSBOM(ctx context.Context, pkg bom.Package) error { i.SHA256 = v } } - group, artifact, ok := strings.Cut(pkg.PURL.Name, "/") - if !ok { + if pkg.PURL.Namespace == "" { i.Name = pkg.PURL.Name } else { - i.Name = group + ":" + artifact + i.Name = pkg.PURL.Namespace + ":" + pkg.PURL.Name } i.Version = pkg.PURL.Version i.CPE = pkg.CPE diff --git a/java/sbom_purl_test.go b/java/sbom_purl_test.go index 847062d2a..ba8c5e09d 100644 --- a/java/sbom_purl_test.go +++ b/java/sbom_purl_test.go @@ -35,7 +35,7 @@ func TestSBOMPackageName(t *testing.T) { if err := bom.PopulatePackage(&pkg, bp, "sbom.cdx.json"); err != nil { t.Fatal(err) } - if pkg.Name != "jackson-databind" { + if pkg.Name != "com.fasterxml.jackson.core:jackson-databind" { t.Fatalf("name: got %q", pkg.Name) } if pkg.Version != "2.18.4.redhat-00002" { From 77545eada319b7d73087f099a4616d378a756e3b Mon Sep 17 00:00:00 2001 From: crozzy Date: Tue, 6 Oct 2026 15:12:44 -0700 Subject: [PATCH 09/11] java: record which producer filled a jar Info PackageDB depends on whether a jar entry came from a CycloneDX document, pom.properties, a manifest, or the archive name. Store that producer on Info and select the prefix from it. Maven Central is consulted only for a manifest or a filename, so a search hit cannot replace a document or pom.properties. Signed-off-by: crozzy --- java/jar/jar.go | 17 +++++ java/jar/jar_test.go | 3 + java/packagescanner.go | 36 +++------ java/sbom_purl_test.go | 24 ------ java/sbom_search_test.go | 161 +++++++++++++++++++++++++++++++++++++++ 5 files changed, 191 insertions(+), 50 deletions(-) create mode 100644 java/sbom_search_test.go diff --git a/java/jar/jar.go b/java/jar/jar.go index fcc5709c8..bd43b3551 100644 --- a/java/jar/jar.go +++ b/java/jar/jar.go @@ -279,6 +279,7 @@ func extractSBOM(ctx context.Context, name srcPath, z *zip.Reader) ([]Info, erro return nil, mkErr("parsing SBoM package", err) } name.Push(f.Name) + out[i].Kind = SourceSBOM out[i].Source = name.String() name.Pop() } @@ -311,6 +312,7 @@ func extractManifest(ctx context.Context, name srcPath, z *zip.Reader) (Info, er return Info{}, mkErr("parsing manifest", err) } name.Push(manifestPath) + i.Kind = SourceManifest i.Source = name.String() return i, nil } @@ -361,6 +363,7 @@ func extractProperties(ctx context.Context, name srcPath, z *zip.Reader) ([]Info return nil, mkErr("failed parsing properties", err) } name.Push(p) + ret[i].Kind = SourceProperties ret[i].Source = name.String() name.Pop() } @@ -477,10 +480,22 @@ func checkName(ctx context.Context, name string) (Info, error) { return Info{ Name: m[1], Version: m[2], + Kind: SourceName, Source: ".", }, nil } +// SourceKind records which producer filled an [Info]. +type SourceKind uint8 + +const ( + SourceUnknown SourceKind = iota + SourceSBOM + SourceProperties + SourceManifest + SourceName +) + // Info reports the discovered information for a jar file. // // Any given jar may actually contain multiple jars or recombined classes. @@ -497,6 +512,8 @@ type Info struct { // If this jar is embedded inside another jar or series of jars, // each jar file will be included and separated via ":". Source string + // Kind is the producer that filled this Info. + Kind SourceKind // CPE Name, if known. // // Currently only populated if the info source is an embedded SBoM. diff --git a/java/jar/jar_test.go b/java/jar/jar_test.go index 0961a60c8..af47b7af6 100644 --- a/java/jar/jar_test.go +++ b/java/jar/jar_test.go @@ -495,16 +495,19 @@ func TestInnerJar(t *testing.T) { { Name: "jackson-annotations", Version: "2.13.0", + Kind: SourceName, Source: ".", }, { Name: "log4j-api", Version: "2.14", + Kind: SourceName, Source: ".", }, { Name: "log4j", Version: "2.14.0", + Kind: SourceName, Source: ".", }, } diff --git a/java/packagescanner.go b/java/packagescanner.go index 5352e442f..3b93902cc 100644 --- a/java/packagescanner.go +++ b/java/packagescanner.go @@ -277,9 +277,10 @@ func (s *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircor ps := make([]*claircore.Package, len(infos)) for j := range infos { i := &infos[j] - // If we discovered a pom file, don't bother talking to the network. - // If not, talk to the network if configured to do so. - if !strings.HasSuffix(i.Source, "pom.properties") && doSearch { + // pom.properties and an embedded CycloneDX document already name + // the artifact. Ask Maven Central only when the producer was + // a manifest or the archive name. + if doSearch && (i.Kind == jar.SourceManifest || i.Kind == jar.SourceName) { switch err := s.search(ctx, i, ck1); { case errors.Is(err, nil): // OK case errors.Is(err, errRPC): @@ -322,20 +323,14 @@ func (s *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircor if idx != -1 { pkgDB = i.Source[:idx] } - // Only examine anything after the last colon (or the entire path if there is no colon). - switch l := i.Source[idx+1:]; { - case strings.HasSuffix(l, "pom.properties"): - fallthrough - case s.root != nil && i.Source == s.root.String(): - // Populate as a maven artifact. + switch i.Kind { + case jar.SourceProperties: pkg.PackageDB = `maven:` + pkgDB - case l == "META-INF/MANIFEST.MF": - // information pulled from a manifest file + case jar.SourceManifest: pkg.PackageDB = `jar:` + pkgDB - case l == ".": - // Name guess. + case jar.SourceName: pkg.PackageDB = `file:` + pkgDB - case isSBOMMember(l): + case jar.SourceSBOM: pkg.PackageDB = `sbom:` + i.Source default: return nil, fmt.Errorf("java: martian Info: %+v", i) @@ -364,18 +359,6 @@ func coveredSBOMHash(seed maphash.Seed, sha1Sum, sha256Sum []byte, hashes map[un return ok } -// isSBOMMember reports whether an archive member is a CycloneDX document -// under META-INF/sbom/. -func isSBOMMember(name string) bool { - if !strings.Contains(name, "META-INF/sbom/") { - return false - } - base := path.Base(name) - return strings.HasSuffix(base, ".cdx.json") || - strings.HasSuffix(base, ".cdx.json.gz") || - strings.HasSuffix(base, ".cdx.json.gzip") -} - // DefaultRepository implements [indexer.DefaultRepoScanner]. func (Scanner) DefaultRepository(ctx context.Context) *claircore.Repository { return &Repository @@ -437,6 +420,7 @@ func (s *Scanner) search(ctx context.Context, i *jar.Info, ck []byte) error { sort.SliceStable(sr.Response.Doc, func(i, j int) bool { return sr.Response.Doc[i].ID < sr.Response.Doc[j].ID }) + i.Kind = jar.SourceProperties i.Source = s.root.String() d := &sr.Response.Doc[0] i.Version = d.Version diff --git a/java/sbom_purl_test.go b/java/sbom_purl_test.go index ba8c5e09d..3735b5290 100644 --- a/java/sbom_purl_test.go +++ b/java/sbom_purl_test.go @@ -61,27 +61,3 @@ func TestSBOMPackageName(t *testing.T) { t.Fatal("jackson-databind not in fixture") } } - -func TestIsSBOMMember(t *testing.T) { - t.Parallel() - ok := []string{ - "META-INF/sbom/app.cdx.json", - "META-INF/sbom/app.cdx.json.gz", - "META-INF/sbom/app.cdx.json.gzip", - } - for _, name := range ok { - if !isSBOMMember(name) { - t.Errorf("expected sbom member %q", name) - } - } - no := []string{ - "META-INF/MANIFEST.MF", - "META-INF/maven/pom.properties", - "app.cdx.json", - } - for _, name := range no { - if isSBOMMember(name) { - t.Errorf("expected ordinary member %q", name) - } - } -} diff --git a/java/sbom_search_test.go b/java/sbom_search_test.go new file mode 100644 index 000000000..88659fcb8 --- /dev/null +++ b/java/sbom_search_test.go @@ -0,0 +1,161 @@ +package java_test + +import ( + "archive/zip" + "bytes" + "encoding/json" + "net/http" + "net/http/httptest" + "os" + "path/filepath" + "strings" + "testing" + + "github.com/CycloneDX/cyclonedx-go" + + "github.com/quay/claircore" + "github.com/quay/claircore/java" + "github.com/quay/claircore/test" +) + +// TestEmbeddedSBOMNotReplacedByMavenSearch checks that a configured search +// client is used for a filename guess and is not used for an embedded +// CycloneDX component, even when the search would return a hit. +func TestEmbeddedSBOMNotReplacedByMavenSearch(t *testing.T) { + ctx := test.Logging(t) + var calls int + srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + calls++ + w.Header().Set("Content-Type", "application/json") + _, _ = w.Write([]byte(`{"response":{"docs":[{"id":"central:replaced:9.9.9","g":"central","a":"replaced","v":"9.9.9"}]}}`)) + })) + t.Cleanup(srv.Close) + + root := t.TempDir() + writeSearchZip(t, filepath.Join(root, "carrier-1.0.jar"), map[string]string{ + "META-INF/sbom/dependency.cdx.json": string(searchCDX(t)), + }) + writeSearchZip(t, filepath.Join(root, "plain-1.0.jar"), map[string]string{ + "placeholder.txt": "plain", + }) + + var buf bytes.Buffer + if err := json.NewEncoder(&buf).Encode(&java.ScannerConfig{API: srv.URL}); err != nil { + t.Fatal(err) + } + scanner := new(java.Scanner) + if err := scanner.Configure(ctx, json.NewDecoder(&buf).Decode, srv.Client()); err != nil { + t.Fatal(err) + } + + var l claircore.Layer + desc := claircore.LayerDescription{ + Digest: test.RandomSHA256Digest(t).String(), + URI: "file://" + root, + MediaType: "application/vnd.claircore.filesystem", + Headers: map[string][]string{}, + } + if err := l.Init(ctx, &desc, nil); err != nil { + t.Fatal(err) + } + t.Cleanup(func() { + if err := l.Close(); err != nil { + t.Error(err) + } + }) + pkgs, err := scanner.Scan(ctx, &l) + if err != nil { + t.Fatal(err) + } + if calls != 1 { + t.Fatalf("maven searches: got %d, want 1", calls) + } + + var sawSBOM, sawSearch bool + for _, pkg := range pkgs { + switch { + case pkg.Name == "org.example:embedded": + sawSBOM = true + if pkg.Version != "1.0" { + t.Errorf("embedded version: got %q, want 1.0", pkg.Version) + } + if !strings.HasPrefix(pkg.PackageDB, "sbom:") { + t.Errorf("embedded PackageDB: got %q, want sbom: prefix", pkg.PackageDB) + } + case pkg.Name == "central:replaced" && pkg.Version == "9.9.9": + sawSearch = true + } + } + if !sawSBOM { + t.Errorf("missing embedded component; packages: %+v", pkgs) + } + if !sawSearch { + t.Errorf("filename jar was not resolved by search; packages: %+v", pkgs) + } +} + +func searchCDX(t *testing.T) []byte { + t.Helper() + components := []cyclonedx.Component{{ + BOMRef: "pkg:maven/org.example/embedded@1.0", + Type: cyclonedx.ComponentTypeLibrary, + Name: "embedded", + Version: "1.0", + PackageURL: "pkg:maven/org.example/embedded@1.0", + }} + dependsOn := []string{"pkg:maven/org.example/embedded@1.0"} + dependencies := []cyclonedx.Dependency{{ + Ref: "app", + Dependencies: &dependsOn, + }} + bom := &cyclonedx.BOM{ + BOMFormat: cyclonedx.BOMFormat, + SpecVersion: cyclonedx.SpecVersion1_6, + Version: 1, + Metadata: &cyclonedx.Metadata{ + Component: &cyclonedx.Component{ + Type: cyclonedx.ComponentTypeApplication, + BOMRef: "app", + Name: "app", + CPE: "cpe:/a:redhat:jboss_enterprise_application_platform:8.1", + }, + }, + Components: &components, + Dependencies: &dependencies, + } + var buf bytes.Buffer + if err := cyclonedx.NewBOMEncoder(&buf, cyclonedx.BOMFileFormatJSON).Encode(bom); err != nil { + t.Fatal(err) + } + return buf.Bytes() +} + +func writeSearchZip(t *testing.T, name string, files map[string]string) { + t.Helper() + if _, ok := files["META-INF/"]; !ok { + files["META-INF/"] = "" + } + if _, ok := files["META-INF/MANIFEST.MF"]; !ok { + files["META-INF/MANIFEST.MF"] = "Manifest-Version: 1.0\n\n" + } + var buf bytes.Buffer + zw := zip.NewWriter(&buf) + for member, body := range files { + w, err := zw.Create(member) + if err != nil { + t.Fatal(err) + } + if _, err := w.Write([]byte(body)); err != nil { + t.Fatal(err) + } + } + if err := zw.Close(); err != nil { + t.Fatal(err) + } + if err := os.MkdirAll(filepath.Dir(name), 0o755); err != nil { + t.Fatal(err) + } + if err := os.WriteFile(name, buf.Bytes(), 0o644); err != nil { + t.Fatal(err) + } +} From d0c64615b7bb1943a565d3a397512291df139862 Mon Sep 17 00:00:00 2001 From: crozzy Date: Wed, 7 Oct 2026 09:55:19 -0700 Subject: [PATCH 10/11] java: attribute SBOM components to framework product CPEs A Quarkus document has no CPE on the root component. Product identity is a scope-excluded framework, and provides lists say which Maven purls belong to that product. Record every such CPE so the package can be matched against each product repository. Signed-off-by: crozzy --- java/bom/bom.go | 184 ++++++++++++++++----- java/bom/bom_test.go | 144 ++++++++++++++++ java/bom/package.go | 18 +- java/bom/testdata/rhbq-dependency.cdx.json | 65 ++++++++ java/coalescer.go | 31 +++- java/coalescer_test.go | 35 ++++ java/detector.go | 4 +- java/jar/jar.go | 21 ++- java/packagescanner.go | 8 +- java/sbom_purl_test.go | 4 +- 10 files changed, 442 insertions(+), 72 deletions(-) create mode 100644 java/bom/testdata/rhbq-dependency.cdx.json diff --git a/java/bom/bom.go b/java/bom/bom.go index 633a0f4dd..b2f9e6a07 100644 --- a/java/bom/bom.go +++ b/java/bom/bom.go @@ -66,12 +66,53 @@ func LoadCDX(ctx context.Context, r io.ReaderAt) (iter.Seq2[Package, error], err if doc.Dependencies == nil || len(*doc.Dependencies) == 0 { return nil, formatError("no dependencies") } - wfn, err := cpe.Unbind(root.CPE) - if err != nil { - return nil, fmt.Errorf("java/bom: root component %q: %w", root.BOMRef, err) - } cmps := *doc.Components deps := *doc.Dependencies + depidx := slices.IndexFunc(deps, func(d cyclonedx.Dependency) bool { + return d.Ref == root.BOMRef + }) + if depidx == -1 { + return nil, fmt.Errorf("java/bom: missing dependencies of root component %q", root.BOMRef) + } + + // Product frameworks (scope excluded, with a CPE) attribute Maven purls + // through their provides lists. A document with none of those keeps the + // single root CPE on each direct dependency. + frameworks := make(map[string][]cpe.WFN) + for i := range cmps { + cm := &cmps[i] + if !excludedFramework(cm) { + continue + } + wfns, err := productWFNs(cm) + if err != nil { + return nil, fmt.Errorf("java/bom: framework %q: %w", cm.BOMRef, err) + } + if len(wfns) == 0 { + continue + } + frameworks[cm.BOMRef] = wfns + } + var rootWFNs []cpe.WFN + attr := map[string][]cpe.WFN{} + if len(frameworks) == 0 { + wfn, err := cpe.Unbind(root.CPE) + if err != nil { + return nil, fmt.Errorf("java/bom: root component %q: %w", root.BOMRef, err) + } + rootWFNs = []cpe.WFN{wfn} + } else { + for i := range deps { + d := &deps[i] + wfns, ok := frameworks[d.Ref] + if !ok || d.Provides == nil { + continue + } + for _, ref := range *d.Provides { + attr[ref] = appendWFNs(attr[ref], wfns) + } + } + } seq := func(yield func(Package, error) bool) { var skip skipPurls @@ -86,29 +127,17 @@ func LoadCDX(ctx context.Context, r io.ReaderAt) (iter.Seq2[Package, error], err r := &cmps[i] c[r.BOMRef] = r } - depidx := slices.IndexFunc(deps, func(d cyclonedx.Dependency) bool { - return d.Ref == root.BOMRef - }) - if depidx == -1 { - err := fmt.Errorf("java/bom: missing dependencies of root component %q", root.BOMRef) - yield(Package{}, err) - return - } - dep := &deps[depidx] - YieldPackages: - for _, ref := range *dep.Dependencies { - if !strings.HasPrefix(ref, `pkg:maven/`) { - skip.Add(ref) - continue + emit := func(cm *cyclonedx.Component, cpes []cpe.WFN) bool { + if cm == nil { + return yield(Package{}, errors.New("java/bom: missing component")) + } + if !strings.HasPrefix(cm.PackageURL, `pkg:maven/`) { + skip.Add(cm.PackageURL) + return true } - cm := c[ref] purl, err := packageurl.FromString(cm.PackageURL) if err != nil { - err := fmt.Errorf("java/bom: component %q: %w", cm.BOMRef, err) - if !yield(Package{}, err) { - return - } - continue + return yield(Package{}, fmt.Errorf("java/bom: component %q: %w", cm.BOMRef, err)) } var hashes map[unique.Handle[string]][]byte if cm.Hashes != nil { @@ -122,11 +151,7 @@ func LoadCDX(ctx context.Context, r io.ReaderAt) (iter.Seq2[Package, error], err // Assume everything is encoded as hex: v, err := hex.DecodeString(h.Value) if err != nil { - err := fmt.Errorf("java/bom: component %q: %w", cm.BOMRef, err) - if !yield(Package{}, err) { - return - } - continue YieldPackages + return yield(Package{}, fmt.Errorf("java/bom: component %q: %w", cm.BOMRef, err)) } hashes[k] = v } @@ -134,27 +159,52 @@ func LoadCDX(ctx context.Context, r io.ReaderAt) (iter.Seq2[Package, error], err var loc string if ev := cm.Evidence; ev != nil { if ocs := ev.Occurrences; ocs != nil { - Occurrence: for _, oc := range *ocs { if oc.Location != "" { loc = oc.Location - break Occurrence + break } } } } - - pkg := Package{ - CPE: &wfn, + ok := yield(Package{ + CPEs: cpes, PURL: purl, Hashes: hashes, Location: loc, - } - if !yield(pkg, nil) { - return + }, nil) + if !ok { + return false } if err := ctx.Err(); err != nil { yield(Package{}, context.Cause(ctx)) + return false + } + return true + } + + if len(frameworks) == 0 { + dep := &deps[depidx] + if dep.Dependencies == nil { + return + } + for _, ref := range *dep.Dependencies { + if !strings.HasPrefix(ref, `pkg:maven/`) { + skip.Add(ref) + continue + } + if !emit(c[ref], rootWFNs) { + return + } + } + return + } + for i := range cmps { + cm := &cmps[i] + if cm.BOMRef == root.BOMRef || excludedFramework(cm) { + continue + } + if !emit(cm, attr[cm.BOMRef]) { return } } @@ -163,6 +213,66 @@ func LoadCDX(ctx context.Context, r io.ReaderAt) (iter.Seq2[Package, error], err return seq, nil } +func excludedFramework(cm *cyclonedx.Component) bool { + return cm.Type == cyclonedx.ComponentTypeFramework && cm.Scope == cyclonedx.ScopeExcluded +} + +// productWFNs returns the product CPEs on a framework component. +// component.cpe is first. Additional CPEs come from evidence.identity. +func productWFNs(cm *cyclonedx.Component) ([]cpe.WFN, error) { + var out []cpe.WFN + add := func(s string) error { + if s == "" { + return nil + } + w, err := cpe.Unbind(s) + if err != nil { + return err + } + out = appendWFNs(out, []cpe.WFN{w}) + return nil + } + if err := add(cm.CPE); err != nil { + return nil, err + } + if cm.Evidence == nil || cm.Evidence.Identity == nil { + return out, nil + } + id := cm.Evidence.Identity + var ids []cyclonedx.EvidenceIdentity + if id.Identities != nil { + ids = append(ids, (*id.Identities)...) + } + if id.Identity != nil { + ids = append(ids, *id.Identity) + } + for _, ident := range ids { + if ident.Field != cyclonedx.EvidenceIdentityFieldTypeCPE { + continue + } + if err := add(ident.ConcludedValue); err != nil { + return nil, err + } + } + return out, nil +} + +func appendWFNs(dst, src []cpe.WFN) []cpe.WFN { + seen := make(map[string]struct{}, len(dst)+len(src)) + for _, w := range dst { + seen[w.String()] = struct{}{} + } + for _, w := range src { + s := w.String() + if _, ok := seen[s]; ok { + continue + } + seen[s] = struct{}{} + dst = append(dst, w) + } + return dst +} + var _ slog.LogValuer = (*skipPurls)(nil) type skipPurls struct { diff --git a/java/bom/bom_test.go b/java/bom/bom_test.go index 21ebed95c..3d289c6d3 100644 --- a/java/bom/bom_test.go +++ b/java/bom/bom_test.go @@ -1,11 +1,13 @@ package bom import ( + "bytes" "os" "slices" "testing" "github.com/quay/claircore/test" + "github.com/quay/claircore/toolkit/types/cpe" ) func TestLoad(t *testing.T) { @@ -38,4 +40,146 @@ func TestLoad(t *testing.T) { if got != want { t.Error() } + for _, p := range out { + if len(p.CPEs) != 1 { + t.Fatalf("%s: got %d product CPEs", p.PURL, len(p.CPEs)) + } + } +} + +func TestLoadQuarkus(t *testing.T) { + ctx := test.Logging(t) + // Subset of an RHBQ uber-jar document: the root, the excluded framework, + // one component that framework provides, and one it does not. + f, err := os.Open("testdata/rhbq-dependency.cdx.json") + if err != nil { + t.Fatal(err) + } + defer f.Close() + + seq, err := LoadCDX(ctx, f) + if err != nil { + t.Fatal(err) + } + wantQuarkus := cpe.MustUnbind("cpe:/a:redhat:quarkus:3.33").String() + var n, attributed int + var graphql, unattributed bool + for p, err := range seq { + if err != nil { + t.Fatal(err) + } + n++ + switch p.PURL.Namespace + ":" + p.PURL.Name { + case "com.redhat.quarkus.platform:quarkus-bom": + t.Fatal("framework component was indexed") + case "org.acme:rhbq-false-positive-reproducer-app": + t.Fatal("root application was indexed") + case "io.smallrye:smallrye-graphql": + if p.PURL.Version != "2.17.0.redhat-00003" { + continue + } + graphql = true + if len(p.CPEs) != 1 || p.CPEs[0].String() != wantQuarkus { + t.Fatalf("smallrye-graphql cpes: %v", p.CPEs) + } + case "io.quarkus:quarkus-cyclonedx": + if p.PURL.Version != "3.33.3.redhat-00005" { + continue + } + unattributed = true + if len(p.CPEs) != 0 { + t.Fatalf("quarkus-cyclonedx cpes: %v", p.CPEs) + } + } + if len(p.CPEs) > 0 { + attributed++ + } + } + if n != 2 { + t.Fatalf("packages: got %d, want 2", n) + } + if attributed != 1 { + t.Fatalf("attributed packages: got %d, want 1", attributed) + } + if !graphql { + t.Fatal("smallrye-graphql not in fixture") + } + if !unattributed { + t.Fatal("quarkus-cyclonedx not in fixture") + } +} + +func TestProvidesMultipleProducts(t *testing.T) { + ctx := test.Logging(t) + const doc = `{ + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": {"component": {"type": "application", "name": "app", "bom-ref": "app"}}, + "components": [ + {"type": "library", "bom-ref": "pkg:maven/a/shared@1", "name": "shared", "purl": "pkg:maven/a/shared@1"}, + {"type": "library", "bom-ref": "pkg:maven/a/onlyq@1", "name": "onlyq", "purl": "pkg:maven/a/onlyq@1"}, + {"type": "library", "bom-ref": "pkg:maven/a/none@1", "name": "none", "purl": "pkg:maven/a/none@1"}, + { + "type": "framework", + "scope": "excluded", + "bom-ref": "fw-q", + "name": "quarkus-bom", + "cpe": "cpe:/a:redhat:quarkus:3", + "purl": "pkg:maven/com.redhat.quarkus.platform/quarkus-bom@1?type=pom", + "evidence": {"identity": [ + {"field": "cpe", "concludedValue": "cpe:/a:redhat:quarkus:3"}, + {"field": "cpe", "concludedValue": "cpe:/a:redhat:quarkus:3.33"} + ]} + }, + { + "type": "framework", + "scope": "excluded", + "bom-ref": "fw-c", + "name": "camel-quarkus", + "cpe": "cpe:/a:redhat:apache_camel_quarkus:3", + "purl": "pkg:maven/com.redhat.camel/camel@1?type=pom" + } + ], + "dependencies": [ + {"ref": "app", "dependsOn": ["pkg:maven/a/shared@1", "fw-q", "fw-c"]}, + {"ref": "fw-q", "provides": ["pkg:maven/a/shared@1", "pkg:maven/a/onlyq@1"]}, + {"ref": "fw-c", "provides": ["pkg:maven/a/shared@1"]} + ] + }` + seq, err := LoadCDX(ctx, bytes.NewReader([]byte(doc))) + if err != nil { + t.Fatal(err) + } + got := map[string][]string{} + for p, err := range seq { + if err != nil { + t.Fatal(err) + } + name := p.PURL.Namespace + ":" + p.PURL.Name + for _, w := range p.CPEs { + got[name] = append(got[name], w.String()) + } + if _, ok := got[name]; !ok { + got[name] = nil + } + } + q := cpe.MustUnbind("cpe:/a:redhat:quarkus:3").String() + q33 := cpe.MustUnbind("cpe:/a:redhat:quarkus:3.33").String() + c := cpe.MustUnbind("cpe:/a:redhat:apache_camel_quarkus:3").String() + if !slices.Equal(got["a:shared"], []string{q, q33, c}) { + t.Fatalf("shared: %v", got["a:shared"]) + } + if !slices.Equal(got["a:onlyq"], []string{q, q33}) { + t.Fatalf("onlyq: %v", got["a:onlyq"]) + } + if cpes := got["a:none"]; len(cpes) != 0 { + t.Fatalf("none: %v", cpes) + } + if _, ok := got["com.redhat.quarkus.platform:quarkus-bom"]; ok { + t.Fatal("framework was indexed") + } + if len(got) != 3 { + t.Fatalf("packages: %v", got) + } } diff --git a/java/bom/package.go b/java/bom/package.go index af69ecaab..82997a16c 100644 --- a/java/bom/package.go +++ b/java/bom/package.go @@ -14,9 +14,11 @@ import ( "github.com/quay/claircore/toolkit/types/cpe" ) -// Package is an extracted (CPE Name, purl) pair and relevant other metadata. +// Package is an extracted purl and the product CPEs that provide it. +// CPEs is empty when the purl is part of the application but no product +// provides it. type Package struct { - CPE *cpe.WFN + CPEs []cpe.WFN PURL packageurl.PackageURL Hashes map[unique.Handle[string]][]byte Location string @@ -40,12 +42,14 @@ func PopulatePackage(pkg *claircore.Package, bp Package, sbomFile string) error pkg.Version = bp.PURL.Version pkg.Kind = types.BinaryPackage pkg.Filepath = n - pkg.CPE = *bp.CPE hint := url.Values{"hash": vs} - if bp.CPE != nil { - // Package.CPE is not stored. The coalescer reads this back when it - // chooses the product repository. - hint.Set("cpe", bp.CPE.String()) + // Package.CPE is not stored, and it only holds one name. The coalescer + // reads every cpe value back when it chooses product repositories. + for _, w := range bp.CPEs { + hint.Add("cpe", w.String()) + } + if len(bp.CPEs) == 1 { + pkg.CPE = bp.CPEs[0] } pkg.RepositoryHint = hint.Encode() pkg.PackageDB = `sbom:` + sbomFile diff --git a/java/bom/testdata/rhbq-dependency.cdx.json b/java/bom/testdata/rhbq-dependency.cdx.json new file mode 100644 index 000000000..ae9037aa5 --- /dev/null +++ b/java/bom/testdata/rhbq-dependency.cdx.json @@ -0,0 +1,65 @@ +{ + "bomFormat": "CycloneDX", + "specVersion": "1.6", + "version": 1, + "metadata": { + "component": { + "type": "application", + "bom-ref": "pkg:maven/org.acme/rhbq-false-positive-reproducer-app@1.0.0-SNAPSHOT?type=jar", + "name": "rhbq-false-positive-reproducer-app", + "version": "1.0.0-SNAPSHOT", + "purl": "pkg:maven/org.acme/rhbq-false-positive-reproducer-app@1.0.0-SNAPSHOT?type=jar" + } + }, + "components": [ + { + "type": "application", + "bom-ref": "pkg:maven/org.acme/rhbq-false-positive-reproducer-app@1.0.0-SNAPSHOT?type=jar", + "group": "org.acme", + "name": "rhbq-false-positive-reproducer-app", + "version": "1.0.0-SNAPSHOT", + "purl": "pkg:maven/org.acme/rhbq-false-positive-reproducer-app@1.0.0-SNAPSHOT?type=jar" + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-graphql@2.17.0.redhat-00003?type=jar", + "group": "io.smallrye", + "name": "smallrye-graphql", + "version": "2.17.0.redhat-00003", + "purl": "pkg:maven/io.smallrye/smallrye-graphql@2.17.0.redhat-00003?type=jar" + }, + { + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-cyclonedx@3.33.3.redhat-00005?type=jar", + "group": "io.quarkus", + "name": "quarkus-cyclonedx", + "version": "3.33.3.redhat-00005", + "purl": "pkg:maven/io.quarkus/quarkus-cyclonedx@3.33.3.redhat-00005?type=jar" + }, + { + "type": "framework", + "scope": "excluded", + "bom-ref": "pkg:maven/com.redhat.quarkus.platform/quarkus-bom@3.33.3.SP1-redhat-00002?type=pom", + "group": "com.redhat.quarkus.platform", + "name": "quarkus-bom", + "version": "3.33.3.SP1-redhat-00002", + "purl": "pkg:maven/com.redhat.quarkus.platform/quarkus-bom@3.33.3.SP1-redhat-00002?type=pom", + "cpe": "cpe:/a:redhat:quarkus:3.33" + } + ], + "dependencies": [ + { + "ref": "pkg:maven/org.acme/rhbq-false-positive-reproducer-app@1.0.0-SNAPSHOT?type=jar", + "dependsOn": [ + "pkg:maven/com.redhat.quarkus.platform/quarkus-bom@3.33.3.SP1-redhat-00002?type=pom", + "pkg:maven/io.quarkus/quarkus-cyclonedx@3.33.3.redhat-00005?type=jar" + ] + }, + { + "ref": "pkg:maven/com.redhat.quarkus.platform/quarkus-bom@3.33.3.SP1-redhat-00002?type=pom", + "provides": [ + "pkg:maven/io.smallrye/smallrye-graphql@2.17.0.redhat-00003?type=jar" + ] + } + ] +} diff --git a/java/coalescer.go b/java/coalescer.go index 2ee04900a..0415a35f3 100644 --- a/java/coalescer.go +++ b/java/coalescer.go @@ -60,20 +60,33 @@ func sbomRepositoryIDs(ctx context.Context, pkg *claircore.Package, repos []*cla slog.DebugContext(ctx, "sbom repository hint", "reason", err) return nil } - want := q.Get("cpe") - if want == "" { + wants := q["cpe"] + if len(wants) == 0 { return nil } - for _, r := range repos { - if r.Key != RedHatCPERepositoryKey { - continue + var ids []string + seen := make(map[string]struct{}, len(wants)) + for _, want := range wants { + var matched bool + for _, r := range repos { + if r.Key != RedHatCPERepositoryKey { + continue + } + if r.Name != want && r.CPE.String() != want { + continue + } + matched = true + if _, ok := seen[r.ID]; ok { + continue + } + seen[r.ID] = struct{}{} + ids = append(ids, r.ID) } - if r.Name == want || r.CPE.String() == want { - return []string{r.ID} + if !matched { + slog.DebugContext(ctx, "sbom package has no product repository", "package", pkg.Name, "cpe", want) } } - slog.DebugContext(ctx, "sbom package has no product repository", "package", pkg.Name, "cpe", want) - return nil + return ids } func repositoryByID(repos []*claircore.Repository, id string) *claircore.Repository { diff --git a/java/coalescer_test.go b/java/coalescer_test.go index a6830d7af..46b2c2bb3 100644 --- a/java/coalescer_test.go +++ b/java/coalescer_test.go @@ -57,3 +57,38 @@ func TestCoalescerSplitsRepositories(t *testing.T) { t.Fatal("missing cpe repository") } } + +func TestCoalescerMultipleProductCPEs(t *testing.T) { + t.Parallel() + ctx := test.Logging(t) + q := cpe.MustUnbind("cpe:/a:redhat:quarkus:3.33") + c := cpe.MustUnbind("cpe:/a:redhat:apache_camel_quarkus:3.33") + quarkus := &claircore.Repository{ID: "1", Name: q.String(), Key: RedHatCPERepositoryKey, CPE: q} + camel := &claircore.Repository{ID: "2", Name: c.String(), Key: RedHatCPERepositoryKey, CPE: c} + maven := Repository + maven.ID = "3" + pkg := &claircore.Package{ + ID: "10", + Name: "io.smallrye:smallrye-graphql", + PackageDB: "sbom:dependency.cdx.json", + RepositoryHint: url.Values{ + "cpe": {q.String(), c.String()}, + }.Encode(), + } + ir, err := (*coalescer)(nil).Coalesce(ctx, []*indexer.LayerArtifacts{{ + Hash: test.RandomSHA256Digest(t), + Pkgs: []*claircore.Package{pkg}, + Repos: []*claircore.Repository{quarkus, camel, &maven}, + }}) + if err != nil { + t.Fatal(err) + } + got := ir.Environments[pkg.ID][0].RepositoryIDs + want := []string{quarkus.ID, camel.ID} + if len(got) != len(want) || got[0] != want[0] || got[1] != want[1] { + t.Fatalf("repositories: got %v", got) + } + if _, ok := ir.Repositories[maven.ID]; ok { + t.Fatal("sbom package recorded Maven Central") + } +} diff --git a/java/detector.go b/java/detector.go index 5009fb081..9f76599ce 100644 --- a/java/detector.go +++ b/java/detector.go @@ -82,8 +82,8 @@ func (*Detector) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircore if err != nil { return nil, err } - if bp.CPE != nil { - add(*bp.CPE) + for _, w := range bp.CPEs { + add(w) } } case fileJAR: diff --git a/java/jar/jar.go b/java/jar/jar.go index bd43b3551..899cf5b5f 100644 --- a/java/jar/jar.go +++ b/java/jar/jar.go @@ -192,15 +192,14 @@ func ProductCPEs(ctx context.Context, z *zip.Reader) ([]cpe.WFN, error) { var out []cpe.WFN seen := make(map[string]struct{}) for _, info := range infos { - if info.CPE == nil { - continue - } - s := info.CPE.String() - if _, ok := seen[s]; ok { - continue + for _, w := range info.CPEs { + s := w.String() + if _, ok := seen[s]; ok { + continue + } + seen[s] = struct{}{} + out = append(out, w) } - seen[s] = struct{}{} - out = append(out, *info.CPE) } return out, nil } @@ -514,10 +513,10 @@ type Info struct { Source string // Kind is the producer that filled this Info. Kind SourceKind - // CPE Name, if known. + // CPEs are product names that provide this artifact. // // Currently only populated if the info source is an embedded SBoM. - CPE *cpe.WFN + CPEs []cpe.WFN // SHA1 is populated with the SHA1 of the file if this entry was discovered // inside another archive. SHA1 []byte @@ -575,7 +574,7 @@ func (i *Info) parseSBOM(ctx context.Context, pkg bom.Package) error { i.Name = pkg.PURL.Namespace + ":" + pkg.PURL.Name } i.Version = pkg.PURL.Version - i.CPE = pkg.CPE + i.CPEs = pkg.CPEs return nil } diff --git a/java/packagescanner.go b/java/packagescanner.go index 3b93902cc..4e89775a7 100644 --- a/java/packagescanner.go +++ b/java/packagescanner.go @@ -303,12 +303,12 @@ func (s *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircor "sha256:" + cmp.Or(hex.EncodeToString(i.SHA256), hex256), }, } - if i.CPE != nil { - hint.Set("cpe", i.CPE.String()) + for _, w := range i.CPEs { + hint.Add("cpe", w.String()) } pkg.RepositoryHint = hint.Encode() - if i.CPE != nil { - pkg.CPE = *i.CPE + if len(i.CPEs) == 1 { + pkg.CPE = i.CPEs[0] } // BUG(hank) There's probably some bugs lurking in the jar.Info → // claircore.Package mapping code around embedded jars. There's a diff --git a/java/sbom_purl_test.go b/java/sbom_purl_test.go index 3735b5290..2a1da1711 100644 --- a/java/sbom_purl_test.go +++ b/java/sbom_purl_test.go @@ -48,8 +48,8 @@ func TestSBOMPackageName(t *testing.T) { if err != nil { t.Fatal(err) } - if hint.Get("cpe") != bp.CPE.String() { - t.Fatalf("cpe hint: got %q", hint.Get("cpe")) + if len(bp.CPEs) != 1 || hint.Get("cpe") != bp.CPEs[0].String() { + t.Fatalf("cpe hint: got %q", hint["cpe"]) } if pkg.PackageDB != "sbom:sbom.cdx.json" { t.Fatalf("package db: got %q", pkg.PackageDB) From a34690e8ef3e1ac4f1f9d89150e2747cd8890d58 Mon Sep 17 00:00:00 2001 From: crozzy Date: Wed, 7 Oct 2026 14:05:44 -0700 Subject: [PATCH 11/11] java: test the package scanner skipping jars a layer SBOM names The scanner drops a jar when a layer CycloneDX document already records its path or digest. An SBOM embedded in a jar does not cover jars outside that archive. Signed-off-by: crozzy --- java/packagescanner.go | 314 +++++++++++++++---------------- java/sbom_purl_test.go | 63 ------- java/sbom_search_test.go | 161 ---------------- java/sbom_test.go | 394 +++++++++++++++++++++++++++++++++++++++ 4 files changed, 549 insertions(+), 383 deletions(-) delete mode 100644 java/sbom_purl_test.go delete mode 100644 java/sbom_search_test.go create mode 100644 java/sbom_test.go diff --git a/java/packagescanner.go b/java/packagescanner.go index 4e89775a7..b2b2f7877 100644 --- a/java/packagescanner.go +++ b/java/packagescanner.go @@ -158,190 +158,186 @@ func (s *Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircor } seq, walkErr := walkInteresting(ctx, sys) - type foundFile struct { - k fileKind - p string - } - var found []foundFile + var sboms, jars []string for k, p := range seq { if set.Contains(p) { slog.DebugContext(ctx, "file from an rpm", "path", p) continue } - found = append(found, foundFile{k, p}) + switch k { + case fileSBoM: + sboms = append(sboms, p) + case fileJAR: + jars = append(jars, p) + default: + panic("unreachable") + } } if err := walkErr(); err != nil { return nil, fmt.Errorf("java: walking fs: %w", err) } - // Layer SBOMs are indexed first so a jar they already describe can be skipped - // even when the walk visits the jar first. - for _, pass := range []fileKind{fileSBoM, fileJAR} { - for _, file := range found { - if file.k != pass { - continue - } - k, p := file.k, file.p - log := slog.With("path", p) - if k == fileJAR && coveredSBOMPath(seed, p, sbomPath) { - log.DebugContext(ctx, "skipping jar covered by sbom path") - continue - } + // Read the file at p into buf, hashing it as it is copied. + read := func(p string) (int64, error) { + h1.Reset() + h256.Reset() + buf.Reset() + f, err := sys.Open(p) + if err != nil { + return 0, err + } + defer f.Close() + if fStat, err := f.Stat(); err == nil { + buf.Grow(int(fStat.Size())) + } + return buf.ReadFrom(io.TeeReader(f, hs)) + } + + for _, p := range sboms { + log := slog.With("path", p) + if _, err := read(p); err != nil { + return nil, err + } + dir := path.Dir(p) + // Don't consume both compressed and uncompressed versions. + // + // This code doesn't prefer one or the other and assumes they're + // equivalent. + k := maphash.String(seed, dir) + if _, ok := sbomDup[k]; ok { + log.DebugContext(ctx, "skipping (assumed) duplicate SBoM") + continue + } + sbomDup[k] = struct{}{} - h1.Reset() - h256.Reset() - buf.Reset() - f, err := sys.Open(p) + seq, err := bom.LoadCDX(ctx, bytes.NewReader(buf.Bytes())) + if err != nil { + return nil, err + } + for bp, err := range seq { if err != nil { return nil, err } - fStat, err := f.Stat() - if err == nil { - buf.Grow(int(fStat.Size())) + n := path.Join(dir, bp.Location) + sbomPath[maphash.String(seed, n)] = struct{}{} + for k, b := range bp.Hashes { + h, ok := sbomHash[k] + if !ok { + continue + } + h[maphash.Bytes(seed, b)] = struct{}{} } - sz, err := buf.ReadFrom(io.TeeReader(f, hs)) - f.Close() - if err != nil { + var pkg claircore.Package + if err := bom.PopulatePackage(&pkg, bp, p); err != nil { return nil, err } - rd := bytes.NewReader(buf.Bytes()) - if k == fileJAR && coveredSBOMHash(seed, h1.Sum(nil), h256.Sum(nil), sbomHash) { - log.DebugContext(ctx, "skipping jar covered by sbom hash") - continue - } - - switch k { - case fileSBoM: - dir := path.Dir(p) - // Don't consume both compressed and uncompressed versions. - // - // This code doesn't prefer one or the other and assumes they're - // equivalent. - k := maphash.String(seed, dir) - if _, ok := sbomDup[k]; ok { - log.DebugContext(ctx, "skipping (assumed) duplicate SBoM") - continue - } - sbomDup[k] = struct{}{} - - seq, err := bom.LoadCDX(ctx, rd) - if err != nil { - return nil, err - } - for bp, err := range seq { - if err != nil { - return nil, err - } - n := path.Join(dir, bp.Location) - sbomPath[maphash.String(seed, n)] = struct{}{} - for k, b := range bp.Hashes { - h, ok := sbomHash[k] - if !ok { - continue - } - h[maphash.Bytes(seed, b)] = struct{}{} - } - var pkg claircore.Package - if err := bom.PopulatePackage(&pkg, bp, p); err != nil { - return nil, err - } - ret = append(ret, &pkg) - } - case fileJAR: - // Let the zip reader determine if this is actually a valid zip file. - // We cannot just check the header, as it's possible the jar file - // starts off with a script. This scenario is explicitly mentioned in - // the standard library: https://cs.opensource.google/go/go/+/refs/tags/go1.24.3:src/archive/zip/reader.go;l=41. - z, err := zip.NewReader(rd, sz) - switch { - case errors.Is(err, nil): - case errors.Is(err, zip.ErrFormat): - log.InfoContext(ctx, "not actually a jar: invalid zip", "reason", err) - continue - default: - return nil, err - } + ret = append(ret, &pkg) + } + } + for _, p := range jars { + log := slog.With("path", p) + if coveredSBOMPath(seed, p, sbomPath) { + log.DebugContext(ctx, "skipping jar covered by sbom path") + continue + } + sz, err := read(p) + if err != nil { + return nil, err + } + if coveredSBOMHash(seed, h1.Sum(nil), h256.Sum(nil), sbomHash) { + log.DebugContext(ctx, "skipping jar covered by sbom hash") + continue + } + // Let the zip reader determine if this is actually a valid zip file. + // We cannot just check the header, as it's possible the jar file + // starts off with a script. This scenario is explicitly mentioned in + // the standard library: https://cs.opensource.google/go/go/+/refs/tags/go1.24.3:src/archive/zip/reader.go;l=41. + z, err := zip.NewReader(bytes.NewReader(buf.Bytes()), sz) + switch { + case errors.Is(err, nil): + case errors.Is(err, zip.ErrFormat): + log.InfoContext(ctx, "not actually a jar: invalid zip", "reason", err) + continue + default: + return nil, err + } - infos, err := jar.Parse(ctx, p, z) - switch { - case err == nil: - case errors.Is(err, jar.ErrNotAJar): - // Could not prove this is really a jar. Skip it and move on. - log.InfoContext(ctx, "skipping jar", "reason", err) - continue + infos, err := jar.Parse(ctx, p, z) + switch { + case err == nil: + case errors.Is(err, jar.ErrNotAJar): + // Could not prove this is really a jar. Skip it and move on. + log.InfoContext(ctx, "skipping jar", "reason", err) + continue + default: + return nil, err + } + ck1 := h1.Sum(ck1) + ck256 := h256.Sum(ck256) + hex1, hex256 := hex.EncodeToString(ck1), hex.EncodeToString(ck256) + ps := make([]*claircore.Package, len(infos)) + for j := range infos { + i := &infos[j] + // pom.properties and an embedded CycloneDX document already name + // the artifact. Ask Maven Central only when the producer was + // a manifest or the archive name. + if doSearch && (i.Kind == jar.SourceManifest || i.Kind == jar.SourceName) { + switch err := s.search(ctx, i, ck1); { + case errors.Is(err, nil): // OK + case errors.Is(err, errRPC): + // BUG(hank) There's no way for a scanner that makes RPC calls + // to signal "the call failed, these are best-effort results, + // and please retry." default: return nil, err } - ck1 := h1.Sum(ck1) - ck256 := h256.Sum(ck256) - hex1, hex256 := hex.EncodeToString(ck1), hex.EncodeToString(ck256) - ps := make([]*claircore.Package, len(infos)) - for j := range infos { - i := &infos[j] - // pom.properties and an embedded CycloneDX document already name - // the artifact. Ask Maven Central only when the producer was - // a manifest or the archive name. - if doSearch && (i.Kind == jar.SourceManifest || i.Kind == jar.SourceName) { - switch err := s.search(ctx, i, ck1); { - case errors.Is(err, nil): // OK - case errors.Is(err, errRPC): - // BUG(hank) There's no way for a scanner that makes RPC calls - // to signal "the call failed, these are best-effort results, - // and please retry." - default: - return nil, err - } - } + } - var pkg claircore.Package - pkg.Name = i.Name - pkg.Version = i.Version - pkg.Kind = types.BinaryPackage - pkg.Filepath = p - hint := url.Values{ - "hash": { - "sha1:" + cmp.Or(hex.EncodeToString(i.SHA1), hex1), - "sha256:" + cmp.Or(hex.EncodeToString(i.SHA256), hex256), - }, - } - for _, w := range i.CPEs { - hint.Add("cpe", w.String()) - } - pkg.RepositoryHint = hint.Encode() - if len(i.CPEs) == 1 { - pkg.CPE = i.CPEs[0] - } - // BUG(hank) There's probably some bugs lurking in the jar.Info → - // claircore.Package mapping code around embedded jars. There's a - // testcase to be written, there. + var pkg claircore.Package + pkg.Name = i.Name + pkg.Version = i.Version + pkg.Kind = types.BinaryPackage + pkg.Filepath = p + hint := url.Values{ + "hash": { + "sha1:" + cmp.Or(hex.EncodeToString(i.SHA1), hex1), + "sha256:" + cmp.Or(hex.EncodeToString(i.SHA256), hex256), + }, + } + for _, w := range i.CPEs { + hint.Add("cpe", w.String()) + } + pkg.RepositoryHint = hint.Encode() + if len(i.CPEs) == 1 { + pkg.CPE = i.CPEs[0] + } + // BUG(hank) There's probably some bugs lurking in the jar.Info → + // claircore.Package mapping code around embedded jars. There's a + // testcase to be written, there. - idx := strings.LastIndex(i.Source, ":") - // If the top-level JAR file can only be identified by its name, - // i.Source will just be `.` - // In this case, PackageDB should just be the filepath, n. - // Otherwise, use i.Source. - pkgDB := p - if idx != -1 { - pkgDB = i.Source[:idx] - } - switch i.Kind { - case jar.SourceProperties: - pkg.PackageDB = `maven:` + pkgDB - case jar.SourceManifest: - pkg.PackageDB = `jar:` + pkgDB - case jar.SourceName: - pkg.PackageDB = `file:` + pkgDB - case jar.SourceSBOM: - pkg.PackageDB = `sbom:` + i.Source - default: - return nil, fmt.Errorf("java: martian Info: %+v", i) - } - ps[j] = &pkg - } - ret = append(ret, ps...) + idx := strings.LastIndex(i.Source, ":") + // If the top-level JAR file can only be identified by its name, + // i.Source will just be `.` + // In this case, PackageDB should just be the filepath, n. + // Otherwise, use i.Source. + pkgDB := p + if idx != -1 { + pkgDB = i.Source[:idx] + } + switch i.Kind { + case jar.SourceProperties: + pkg.PackageDB = `maven:` + pkgDB + case jar.SourceManifest: + pkg.PackageDB = `jar:` + pkgDB + case jar.SourceName: + pkg.PackageDB = `file:` + pkgDB + case jar.SourceSBOM: + pkg.PackageDB = `sbom:` + i.Source default: - panic("unreachable") + return nil, fmt.Errorf("java: martian Info: %+v", i) } + ps[j] = &pkg } + ret = append(ret, ps...) } return ret, nil } diff --git a/java/sbom_purl_test.go b/java/sbom_purl_test.go deleted file mode 100644 index 2a1da1711..000000000 --- a/java/sbom_purl_test.go +++ /dev/null @@ -1,63 +0,0 @@ -package java - -import ( - "net/url" - "os" - "testing" - - "github.com/quay/claircore" - "github.com/quay/claircore/java/bom" - "github.com/quay/claircore/test" - "github.com/quay/claircore/toolkit/types" -) - -func TestSBOMPackageName(t *testing.T) { - ctx := test.Logging(t) - f, err := os.Open("bom/testdata/sbom.cdx.json") - if err != nil { - t.Fatal(err) - } - defer f.Close() - - seq, err := bom.LoadCDX(ctx, f) - if err != nil { - t.Fatal(err) - } - var found bool - for bp, err := range seq { - if err != nil { - t.Fatal(err) - } - if bp.PURL.Namespace != "com.fasterxml.jackson.core" || bp.PURL.Name != "jackson-databind" { - continue - } - var pkg claircore.Package - if err := bom.PopulatePackage(&pkg, bp, "sbom.cdx.json"); err != nil { - t.Fatal(err) - } - if pkg.Name != "com.fasterxml.jackson.core:jackson-databind" { - t.Fatalf("name: got %q", pkg.Name) - } - if pkg.Version != "2.18.4.redhat-00002" { - t.Fatalf("version: got %q", pkg.Version) - } - if pkg.Kind != types.BinaryPackage { - t.Fatalf("kind: got %q", pkg.Kind) - } - hint, err := url.ParseQuery(pkg.RepositoryHint) - if err != nil { - t.Fatal(err) - } - if len(bp.CPEs) != 1 || hint.Get("cpe") != bp.CPEs[0].String() { - t.Fatalf("cpe hint: got %q", hint["cpe"]) - } - if pkg.PackageDB != "sbom:sbom.cdx.json" { - t.Fatalf("package db: got %q", pkg.PackageDB) - } - found = true - break - } - if !found { - t.Fatal("jackson-databind not in fixture") - } -} diff --git a/java/sbom_search_test.go b/java/sbom_search_test.go deleted file mode 100644 index 88659fcb8..000000000 --- a/java/sbom_search_test.go +++ /dev/null @@ -1,161 +0,0 @@ -package java_test - -import ( - "archive/zip" - "bytes" - "encoding/json" - "net/http" - "net/http/httptest" - "os" - "path/filepath" - "strings" - "testing" - - "github.com/CycloneDX/cyclonedx-go" - - "github.com/quay/claircore" - "github.com/quay/claircore/java" - "github.com/quay/claircore/test" -) - -// TestEmbeddedSBOMNotReplacedByMavenSearch checks that a configured search -// client is used for a filename guess and is not used for an embedded -// CycloneDX component, even when the search would return a hit. -func TestEmbeddedSBOMNotReplacedByMavenSearch(t *testing.T) { - ctx := test.Logging(t) - var calls int - srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - calls++ - w.Header().Set("Content-Type", "application/json") - _, _ = w.Write([]byte(`{"response":{"docs":[{"id":"central:replaced:9.9.9","g":"central","a":"replaced","v":"9.9.9"}]}}`)) - })) - t.Cleanup(srv.Close) - - root := t.TempDir() - writeSearchZip(t, filepath.Join(root, "carrier-1.0.jar"), map[string]string{ - "META-INF/sbom/dependency.cdx.json": string(searchCDX(t)), - }) - writeSearchZip(t, filepath.Join(root, "plain-1.0.jar"), map[string]string{ - "placeholder.txt": "plain", - }) - - var buf bytes.Buffer - if err := json.NewEncoder(&buf).Encode(&java.ScannerConfig{API: srv.URL}); err != nil { - t.Fatal(err) - } - scanner := new(java.Scanner) - if err := scanner.Configure(ctx, json.NewDecoder(&buf).Decode, srv.Client()); err != nil { - t.Fatal(err) - } - - var l claircore.Layer - desc := claircore.LayerDescription{ - Digest: test.RandomSHA256Digest(t).String(), - URI: "file://" + root, - MediaType: "application/vnd.claircore.filesystem", - Headers: map[string][]string{}, - } - if err := l.Init(ctx, &desc, nil); err != nil { - t.Fatal(err) - } - t.Cleanup(func() { - if err := l.Close(); err != nil { - t.Error(err) - } - }) - pkgs, err := scanner.Scan(ctx, &l) - if err != nil { - t.Fatal(err) - } - if calls != 1 { - t.Fatalf("maven searches: got %d, want 1", calls) - } - - var sawSBOM, sawSearch bool - for _, pkg := range pkgs { - switch { - case pkg.Name == "org.example:embedded": - sawSBOM = true - if pkg.Version != "1.0" { - t.Errorf("embedded version: got %q, want 1.0", pkg.Version) - } - if !strings.HasPrefix(pkg.PackageDB, "sbom:") { - t.Errorf("embedded PackageDB: got %q, want sbom: prefix", pkg.PackageDB) - } - case pkg.Name == "central:replaced" && pkg.Version == "9.9.9": - sawSearch = true - } - } - if !sawSBOM { - t.Errorf("missing embedded component; packages: %+v", pkgs) - } - if !sawSearch { - t.Errorf("filename jar was not resolved by search; packages: %+v", pkgs) - } -} - -func searchCDX(t *testing.T) []byte { - t.Helper() - components := []cyclonedx.Component{{ - BOMRef: "pkg:maven/org.example/embedded@1.0", - Type: cyclonedx.ComponentTypeLibrary, - Name: "embedded", - Version: "1.0", - PackageURL: "pkg:maven/org.example/embedded@1.0", - }} - dependsOn := []string{"pkg:maven/org.example/embedded@1.0"} - dependencies := []cyclonedx.Dependency{{ - Ref: "app", - Dependencies: &dependsOn, - }} - bom := &cyclonedx.BOM{ - BOMFormat: cyclonedx.BOMFormat, - SpecVersion: cyclonedx.SpecVersion1_6, - Version: 1, - Metadata: &cyclonedx.Metadata{ - Component: &cyclonedx.Component{ - Type: cyclonedx.ComponentTypeApplication, - BOMRef: "app", - Name: "app", - CPE: "cpe:/a:redhat:jboss_enterprise_application_platform:8.1", - }, - }, - Components: &components, - Dependencies: &dependencies, - } - var buf bytes.Buffer - if err := cyclonedx.NewBOMEncoder(&buf, cyclonedx.BOMFileFormatJSON).Encode(bom); err != nil { - t.Fatal(err) - } - return buf.Bytes() -} - -func writeSearchZip(t *testing.T, name string, files map[string]string) { - t.Helper() - if _, ok := files["META-INF/"]; !ok { - files["META-INF/"] = "" - } - if _, ok := files["META-INF/MANIFEST.MF"]; !ok { - files["META-INF/MANIFEST.MF"] = "Manifest-Version: 1.0\n\n" - } - var buf bytes.Buffer - zw := zip.NewWriter(&buf) - for member, body := range files { - w, err := zw.Create(member) - if err != nil { - t.Fatal(err) - } - if _, err := w.Write([]byte(body)); err != nil { - t.Fatal(err) - } - } - if err := zw.Close(); err != nil { - t.Fatal(err) - } - if err := os.MkdirAll(filepath.Dir(name), 0o755); err != nil { - t.Fatal(err) - } - if err := os.WriteFile(name, buf.Bytes(), 0o644); err != nil { - t.Fatal(err) - } -} diff --git a/java/sbom_test.go b/java/sbom_test.go new file mode 100644 index 000000000..d44d1041a --- /dev/null +++ b/java/sbom_test.go @@ -0,0 +1,394 @@ +package java + +import ( + "archive/zip" + "bytes" + "crypto/sha256" + "encoding/hex" + "encoding/json" + "net/http" + "net/http/httptest" + "net/url" + "os" + "path/filepath" + "strings" + "testing" + + "github.com/CycloneDX/cyclonedx-go" + + "github.com/quay/claircore" + "github.com/quay/claircore/java/bom" + "github.com/quay/claircore/test" + "github.com/quay/claircore/toolkit/types" +) + +func TestSBOMPackageName(t *testing.T) { + ctx := test.Logging(t) + f, err := os.Open("bom/testdata/sbom.cdx.json") + if err != nil { + t.Fatal(err) + } + defer f.Close() + + seq, err := bom.LoadCDX(ctx, f) + if err != nil { + t.Fatal(err) + } + var found bool + for bp, err := range seq { + if err != nil { + t.Fatal(err) + } + if bp.PURL.Namespace != "com.fasterxml.jackson.core" || bp.PURL.Name != "jackson-databind" { + continue + } + var pkg claircore.Package + if err := bom.PopulatePackage(&pkg, bp, "sbom.cdx.json"); err != nil { + t.Fatal(err) + } + if pkg.Name != "com.fasterxml.jackson.core:jackson-databind" { + t.Fatalf("name: got %q", pkg.Name) + } + if pkg.Version != "2.18.4.redhat-00002" { + t.Fatalf("version: got %q", pkg.Version) + } + if pkg.Kind != types.BinaryPackage { + t.Fatalf("kind: got %q", pkg.Kind) + } + hint, err := url.ParseQuery(pkg.RepositoryHint) + if err != nil { + t.Fatal(err) + } + if len(bp.CPEs) != 1 || hint.Get("cpe") != bp.CPEs[0].String() { + t.Fatalf("cpe hint: got %q", hint["cpe"]) + } + if pkg.PackageDB != "sbom:sbom.cdx.json" { + t.Fatalf("package db: got %q", pkg.PackageDB) + } + found = true + break + } + if !found { + t.Fatal("jackson-databind not in fixture") + } +} + +// TestEmbeddedSBOMNotReplacedByMavenSearch checks that a configured search +// client is used for a filename guess and is not used for an embedded +// CycloneDX component, even when the search would return a hit. +func TestEmbeddedSBOMNotReplacedByMavenSearch(t *testing.T) { + ctx := test.Logging(t) + var calls int + srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + calls++ + w.Header().Set("Content-Type", "application/json") + _, _ = w.Write([]byte(`{"response":{"docs":[{"id":"central:replaced:9.9.9","g":"central","a":"replaced","v":"9.9.9"}]}}`)) + })) + t.Cleanup(srv.Close) + + root := t.TempDir() + writeZip(t, filepath.Join(root, "carrier-1.0.jar"), map[string]string{ + "META-INF/sbom/dependency.cdx.json": string(searchCDX(t)), + }) + writeZip(t, filepath.Join(root, "plain-1.0.jar"), map[string]string{ + "placeholder.txt": "plain", + }) + + var buf bytes.Buffer + if err := json.NewEncoder(&buf).Encode(&ScannerConfig{API: srv.URL}); err != nil { + t.Fatal(err) + } + scanner := new(Scanner) + if err := scanner.Configure(ctx, json.NewDecoder(&buf).Decode, srv.Client()); err != nil { + t.Fatal(err) + } + + var l claircore.Layer + desc := claircore.LayerDescription{ + Digest: test.RandomSHA256Digest(t).String(), + URI: "file://" + root, + MediaType: "application/vnd.claircore.filesystem", + Headers: map[string][]string{}, + } + if err := l.Init(ctx, &desc, nil); err != nil { + t.Fatal(err) + } + t.Cleanup(func() { + if err := l.Close(); err != nil { + t.Error(err) + } + }) + pkgs, err := scanner.Scan(ctx, &l) + if err != nil { + t.Fatal(err) + } + if calls != 1 { + t.Fatalf("maven searches: got %d, want 1", calls) + } + + var sawSBOM, sawSearch bool + for _, pkg := range pkgs { + switch { + case pkg.Name == "org.example:embedded": + sawSBOM = true + if pkg.Version != "1.0" { + t.Errorf("embedded version: got %q, want 1.0", pkg.Version) + } + if !strings.HasPrefix(pkg.PackageDB, "sbom:") { + t.Errorf("embedded PackageDB: got %q, want sbom: prefix", pkg.PackageDB) + } + case pkg.Name == "central:replaced" && pkg.Version == "9.9.9": + sawSearch = true + } + } + if !sawSBOM { + t.Errorf("missing embedded component; packages: %+v", pkgs) + } + if !sawSearch { + t.Errorf("filename jar was not resolved by search; packages: %+v", pkgs) + } +} + +// TestSBOMSkipsCoveredJars builds a directory layer and checks the three +// layer-SBOM skip rules: a jar is dropped when its path matches a component +// location, a jar is dropped when only its digest matches, and an SBOM inside +// a jar does not cause another jar to be dropped. +func TestSBOMSkipsCoveredJars(t *testing.T) { + ctx := test.Logging(t) + root := t.TempDir() + + covered := writeZip(t, filepath.Join(root, "lib/covered-1.0.jar"), map[string]string{ + "placeholder.txt": "covered", + }) + hashed := writeZip(t, filepath.Join(root, "lib/hashed-1.0.jar"), map[string]string{ + "placeholder.txt": "hashed", + }) + writeZip(t, filepath.Join(root, "lib/other-1.0.jar"), map[string]string{ + "placeholder.txt": "other", + }) + sibling := writeZip(t, filepath.Join(root, "lib/sibling-1.0.jar"), map[string]string{ + "placeholder.txt": "sibling", + }) + // The carrier sorts before lib/, so a bug that recorded this document's + // path or hash would still be able to drop the sibling. + writeZip(t, filepath.Join(root, "aaa-app-1.0.jar"), map[string]string{ + "META-INF/sbom/dependency.cdx.json": string(cdxDoc(t, + "pkg:maven/org.example/embedded@1.0", + "embedded", + "1.0", + "lib/sibling-1.0.jar", + sha256Hex(sibling), + )), + "placeholder.txt": "carrier", + }) + + writeFile(t, filepath.Join(root, "sbom.cdx.json"), cdxDoc(t, + "pkg:maven/org.example/covered@1.0", + "covered", + "1.0", + "lib/covered-1.0.jar", + sha256Hex(covered), + )) + // Location joins to meta/elsewhere/hashed-1.0.jar, not the real jar. + writeFile(t, filepath.Join(root, "meta/app.cdx.json"), cdxDoc(t, + "pkg:maven/org.example/hashed@1.0", + "hashed", + "1.0", + "elsewhere/hashed-1.0.jar", + sha256Hex(hashed), + )) + + var l claircore.Layer + desc := claircore.LayerDescription{ + Digest: test.RandomSHA256Digest(t).String(), + URI: "file://" + root, + MediaType: "application/vnd.claircore.filesystem", + Headers: map[string][]string{}, + } + if err := l.Init(ctx, &desc, nil); err != nil { + t.Fatalf("init layer: %v", err) + } + t.Cleanup(func() { + if err := l.Close(); err != nil { + t.Error(err) + } + }) + + pkgs, err := new(Scanner).Scan(ctx, &l) + if err != nil { + t.Fatal(err) + } + gotFile := map[string]*claircore.Package{} + gotSBOM := map[string]*claircore.Package{} + for _, pkg := range pkgs { + t.Logf("%s %s %s", pkg.PackageDB, pkg.Name, pkg.Filepath) + switch { + case strings.HasPrefix(pkg.PackageDB, "file:"): + gotFile[pkg.PackageDB] = pkg + case strings.HasPrefix(pkg.PackageDB, "sbom:"): + gotSBOM[pkg.PackageDB] = pkg + default: + t.Errorf("unexpected package db %q", pkg.PackageDB) + } + } + + for _, db := range []string{ + "file:lib/covered-1.0.jar", + "file:lib/hashed-1.0.jar", + "file:aaa-app-1.0.jar", + } { + if pkg, ok := gotFile[db]; ok { + t.Errorf("jar was indexed from the archive: %s %s", pkg.PackageDB, pkg.Name) + } + } + for _, db := range []string{ + "file:lib/other-1.0.jar", + "file:lib/sibling-1.0.jar", + } { + if _, ok := gotFile[db]; !ok { + t.Errorf("missing jar %s", db) + } + } + assertSBOM(t, gotSBOM["sbom:sbom.cdx.json"], "org.example:covered", "lib/covered-1.0.jar") + assertSBOM(t, gotSBOM["sbom:meta/app.cdx.json"], "org.example:hashed", "meta/elsewhere/hashed-1.0.jar") + assertSBOM(t, gotSBOM["sbom:aaa-app-1.0.jar:META-INF/sbom/dependency.cdx.json"], "org.example:embedded", "aaa-app-1.0.jar") + if len(gotFile) != 2 || len(gotSBOM) != 3 { + t.Fatalf("got %d file packages and %d sbom packages", len(gotFile), len(gotSBOM)) + } +} + +func assertSBOM(t *testing.T, pkg *claircore.Package, name, filepath string) { + t.Helper() + if pkg == nil { + t.Fatalf("missing sbom package %s", name) + } + if pkg.Name != name { + t.Fatalf("name: got %q, want %q", pkg.Name, name) + } + if pkg.Filepath != filepath { + t.Fatalf("filepath: got %q, want %q", pkg.Filepath, filepath) + } +} + +func searchCDX(t *testing.T) []byte { + t.Helper() + components := []cyclonedx.Component{{ + BOMRef: "pkg:maven/org.example/embedded@1.0", + Type: cyclonedx.ComponentTypeLibrary, + Name: "embedded", + Version: "1.0", + PackageURL: "pkg:maven/org.example/embedded@1.0", + }} + dependsOn := []string{"pkg:maven/org.example/embedded@1.0"} + dependencies := []cyclonedx.Dependency{{ + Ref: "app", + Dependencies: &dependsOn, + }} + doc := &cyclonedx.BOM{ + BOMFormat: cyclonedx.BOMFormat, + SpecVersion: cyclonedx.SpecVersion1_6, + Version: 1, + Metadata: &cyclonedx.Metadata{ + Component: &cyclonedx.Component{ + Type: cyclonedx.ComponentTypeApplication, + BOMRef: "app", + Name: "app", + CPE: "cpe:/a:redhat:jboss_enterprise_application_platform:8.1", + }, + }, + Components: &components, + Dependencies: &dependencies, + } + var buf bytes.Buffer + if err := cyclonedx.NewBOMEncoder(&buf, cyclonedx.BOMFileFormatJSON).Encode(doc); err != nil { + t.Fatal(err) + } + return buf.Bytes() +} + +func cdxDoc(t *testing.T, purl, name, version, location, sha256sum string) []byte { + t.Helper() + hashes := []cyclonedx.Hash{{ + Algorithm: cyclonedx.HashAlgoSHA256, + Value: sha256sum, + }} + occurrences := []cyclonedx.EvidenceOccurrence{{Location: location}} + components := []cyclonedx.Component{{ + BOMRef: purl, + Type: cyclonedx.ComponentTypeLibrary, + Name: name, + Version: version, + PackageURL: purl, + Hashes: &hashes, + Evidence: &cyclonedx.Evidence{Occurrences: &occurrences}, + }} + dependsOn := []string{purl} + dependencies := []cyclonedx.Dependency{{ + Ref: "app", + Dependencies: &dependsOn, + }} + doc := &cyclonedx.BOM{ + BOMFormat: cyclonedx.BOMFormat, + SpecVersion: cyclonedx.SpecVersion1_6, + Version: 1, + Metadata: &cyclonedx.Metadata{ + Component: &cyclonedx.Component{ + Type: cyclonedx.ComponentTypeApplication, + BOMRef: "app", + Name: "app", + CPE: "cpe:/a:redhat:jboss_enterprise_application_platform:8.1", + }, + }, + Components: &components, + Dependencies: &dependencies, + } + var buf bytes.Buffer + err := cyclonedx.NewBOMEncoder(&buf, cyclonedx.BOMFileFormatJSON).Encode(doc) + if err != nil { + t.Fatal(err) + } + return buf.Bytes() +} + +func writeZip(t *testing.T, name string, files map[string]string) []byte { + t.Helper() + var buf bytes.Buffer + zw := zip.NewWriter(&buf) + // A META-INF directory lets property lookup miss cleanly, and a version-only + // manifest falls through to the archive name. + if _, ok := files["META-INF/"]; !ok { + files["META-INF/"] = "" + } + if _, ok := files["META-INF/MANIFEST.MF"]; !ok { + files["META-INF/MANIFEST.MF"] = "Manifest-Version: 1.0\n\n" + } + for member, body := range files { + w, err := zw.Create(member) + if err != nil { + t.Fatal(err) + } + if _, err := w.Write([]byte(body)); err != nil { + t.Fatal(err) + } + } + if err := zw.Close(); err != nil { + t.Fatal(err) + } + writeFile(t, name, buf.Bytes()) + return buf.Bytes() +} + +func writeFile(t *testing.T, name string, body []byte) { + t.Helper() + if err := os.MkdirAll(filepath.Dir(name), 0o755); err != nil { + t.Fatal(err) + } + if err := os.WriteFile(name, body, 0o644); err != nil { + t.Fatal(err) + } +} + +func sha256Hex(b []byte) string { + sum := sha256.Sum256(b) + return hex.EncodeToString(sum[:]) +}