{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"build-0.20230809-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/build-0.20230809-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-112a9fcc-7f88-4200-8b1b-f218db793b19",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-binutils-2.41-4865db81-90b4-42dd-8269-174419b3a479-5c629019-f1f5-4bd9-88c2-a085b0e34c58",
			"name":"binutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"75a9704781962de58f857f52bd9f113182ba6135d29fee49a19c813207959cf1"
				}
			],
			"description":"Binutils is a collection of binary utilities, including ar (for\ncreating, modifying and extracting from archives), as (a family of GNU\nassemblers), gprof (for displaying call graph profile data), ld (the\nGNU linker), nm (for listing symbols from object files), objcopy (for\ncopying and translating object files), objdump (for displaying\ninformation from object files), ranlib (for generating an index for\nthe contents of an archive), readelf (for displaying detailed\ninformation about binary files), size (for listing the section sizes\nof an object or archive file), strings (for listing printable strings\nfrom files), strip (for discarding symbols), and addr2line (for\nconverting addresses to file and line).",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/binutils@2.41-6.oe2409?arch=aarch64&epoch=0&upstream=binutils-2.41-6.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://sourceware.org/binutils",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A GNU collection of binary utilities",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.41-6.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-build-mkbaselibs-20230809-a91546b0-5fd4-42c3-9549-6ccd675d8e36-31e13846-93ab-4b46-b08a-a562fbfd3856",
			"name":"build-mkbaselibs",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"1e5311dac5aea1dc3281ea881176744875fb06e5576971efc521dfd853b7f196"
				}
			],
			"description":"This package contains some files to be installed int the build system to generate\nbase lib packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/build-mkbaselibs@20230809-1.oe2409?arch=noarch&epoch=0&upstream=build-20230809-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/openSUSE/obs-build",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Base lib package for build",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:20230809-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-932e5965-7dfc-4b41-b6c4-61ecba316d8f",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-perl-5.38.0-3373dd29-00bf-4751-bc96-5b01fbd1f07c-956de96f-3b70-4547-bd8c-1a8f379efaf2",
			"name":"perl",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"1cc1d4df3e2feb90c5250bb3619d63d60b9ec82bb75e180bdeecccce97e37e91"
				}
			],
			"description":"Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.\nPerl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid\nprototyping and large scale development projects.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/perl@5.38.0-8.oe2409?arch=aarch64&epoch=4&upstream=perl-5.38.0-8.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.perl.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A highly capable, feature-rich programming language",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"4:5.38.0-8.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-psmisc-23.6-41dc803e-ce60-46c6-8271-a9e3fb432431-4348bd28-2df0-49b7-be8a-c8a66089f51f",
			"name":"psmisc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"806a6fef9e42d8df2c81678ccddc15f6d3494e596542ad1e57f9a791c52dbcc3"
				}
			],
			"description":"This PSmisc package is a set of some small useful utilities that use the proc\nfilesystem. We're not about changing the world, but providing the system\nadministrator with some help in common tasks.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/psmisc@23.6-1.oe2409?arch=aarch64&epoch=0&upstream=psmisc-23.6-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitlab.com/psmisc/psmisc",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Utilities for managing processes on your system",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:23.6-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-tar-1.35-404d2df1-5a3a-4b8e-b2fa-14d7dd8ad2d5-81eb9a02-cf95-481b-8d54-8a56881e159c",
			"name":"tar",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"a2cd91ffa50e3b1e20180ee00c53e72dbb47a8db59af2119dc7b0cb4bbd743b8"
				}
			],
			"description":"GNU Tar provides the ability to create tar archives, as well as various other\nkinds of manipulation. For example, you can use Tar on previously created archives\nto extract files, to store additional files, or to update or list files which were\nalready stored.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/tar@1.35-2.oe2409?arch=aarch64&epoch=2&upstream=tar-1.35-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/tar/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"An organized and systematic method of controlling a large amount of data",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"2:1.35-2.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-112a9fcc-7f88-4200-8b1b-f218db793b19"
		},
		{
			"spdxElementId":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-binutils-2.41-4865db81-90b4-42dd-8269-174419b3a479-5c629019-f1f5-4bd9-88c2-a085b0e34c58"
		},
		{
			"spdxElementId":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-build-mkbaselibs-20230809-a91546b0-5fd4-42c3-9549-6ccd675d8e36-31e13846-93ab-4b46-b08a-a562fbfd3856"
		},
		{
			"spdxElementId":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-932e5965-7dfc-4b41-b6c4-61ecba316d8f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-perl-5.38.0-3373dd29-00bf-4751-bc96-5b01fbd1f07c-956de96f-3b70-4547-bd8c-1a8f379efaf2"
		},
		{
			"spdxElementId":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-psmisc-23.6-41dc803e-ce60-46c6-8271-a9e3fb432431-4348bd28-2df0-49b7-be8a-c8a66089f51f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-build-20230809-b09193ef-284d-47b7-8b2d-9e66a7644f99",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-tar-1.35-404d2df1-5a3a-4b8e-b2fa-14d7dd8ad2d5-81eb9a02-cf95-481b-8d54-8a56881e159c"
		}
	]
}