{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"buildah-0.1.34.1-4.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/buildah-0.1.34.1-4.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-containers-common-1-f58e2a19-9f60-41c0-bd35-82f852887fb0-728f00e2-6c17-424a-b19c-d7b494dc7df3",
			"name":"containers-common",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"72cfc61ac52fd41b184481af753055e0b5b70d9bd33e4ef7a5e9609080ed74dd"
				}
			],
			"description":"This package contains common configuration files and documentation for container\ntools ecosystem, such as Podman, Buildah and Skopeo.\n\nIt is required because the most of configuration files and docs come from projects\nwhich are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged\nseparately.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/containers-common@1-5.oe2409?arch=noarch&epoch=4&upstream=containers-common-1-5.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/containers/common",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Common configuration and documentation for containers.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"4:1-5.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-8db05239-360c-4e2c-9383-dfa292b5780c",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-5a716cd1-b71c-487e-a79f-4e4268e7abf4",
			"name":"gpgme",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5963e161fceba63598766c29e9f64811682236fc49b809667ef8d33affd6d5c0"
				}
			],
			"description":"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications.  It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gpgme@1.21.0-1.oe2409?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/related_software/gpgme/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GnuPG Made Easy",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-e83c1a91-a53e-4999-8cfb-685fe94fb950",
			"name":"libseccomp",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"8587cac95cea90fa88a47c4da2937198c025b5b967e4b2180ea7285ccd16c533"
				}
			],
			"description":"The libseccomp library provides an easy to use, platform independent, interface to\nthe Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to\nabstract away the underlying BPF based syscall filter language and present a more\nconventional function-call based filtering interface that should be familiar to,\nand easily adopted by, application developers.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libseccomp@2.5.4-3.oe2409?arch=aarch64&epoch=0&upstream=libseccomp-2.5.4-3.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://github.com/seccomp/libseccomp",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Interface to the syscall filtering mechanism",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.5.4-3.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-buildah-1.34.1-e55cae7c-dd2d-425c-9d6f-f24ad0f709c5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-containers-common-1-f58e2a19-9f60-41c0-bd35-82f852887fb0-728f00e2-6c17-424a-b19c-d7b494dc7df3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-buildah-1.34.1-e55cae7c-dd2d-425c-9d6f-f24ad0f709c5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-8db05239-360c-4e2c-9383-dfa292b5780c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-buildah-1.34.1-e55cae7c-dd2d-425c-9d6f-f24ad0f709c5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-5a716cd1-b71c-487e-a79f-4e4268e7abf4"
		},
		{
			"spdxElementId":"SPDXRef-rpm-buildah-1.34.1-e55cae7c-dd2d-425c-9d6f-f24ad0f709c5",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libseccomp-2.5.4-33e85e97-c884-4b33-acd7-3c90498c3339-e83c1a91-a53e-4999-8cfb-685fe94fb950"
		}
	]
}