{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"isula-build-0.0.9.6-23.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/isula-build-0.0.9.6-23.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-e6491eb9-d54b-4c51-a94c-5e2a8cd8d28c",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-85f39de9-b8b9-403c-9c98-1b5db3a5b31d",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-device-mapper-1.02.195-754304cb-319f-4a06-b6c2-50492d3df79b-a1bcdd8e-85be-486c-ab19-3cb6a908f65f",
			"name":"device-mapper",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"6b4e3c0a595a8c387dbd2844924138b0bbb667efc5a3cf9635c36097e08f9d32"
				}
			],
			"description":"Manages logical devices that use the device-mapper driver.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/device-mapper@1.02.195-11.oe2409?arch=aarch64&epoch=8&upstream=lvm2-2.03.21-11.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://sources.redhat.com/dm",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Low level logical volume management",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"8:1.02.195-11.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-8243581f-6627-492e-ad5b-bc17e1ba0baa",
			"name":"glibc",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f83727d5acc81f8f92521d78f89a59332782c39c8e4d98151505e6bc01fdca98"
				}
			],
			"description":"The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/glibc@2.38-34.oe2409?arch=aarch64&epoch=0&upstream=glibc-2.38-34.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.gnu.org/software/glibc/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"The GNU libc libraries",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.38-34.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-c95021f8-6c1a-4e6f-881e-8ebf570a2243",
			"name":"gpgme",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"5963e161fceba63598766c29e9f64811682236fc49b809667ef8d33affd6d5c0"
				}
			],
			"description":"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications.  It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/gpgme@1.21.0-1.oe2409?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gnupg.org/related_software/gpgme/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"GnuPG Made Easy",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.21.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libassuan-2.5.6-0ac4652f-69b6-4637-90bc-e78d7580eec7-5047cac1-6cb3-443a-bad6-ad7c4754e1ad",
			"name":"libassuan",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2610162e8bc5707599778261b0a306bd4bab12f45bd45cc80be89bc23f9533f6"
				}
			],
			"description":"A small library implementing the so-called Assuan protocal,which is used for IPC between most newer GnuPG cmponents,and provides\\\n\\ both server and client sides functions.\\",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libassuan@2.5.6-2.oe2409?arch=aarch64&epoch=0&upstream=libassuan-2.5.6-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A small library implementing the so-called Assuan protocal",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:2.5.6-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libgpg-error-1.50-1e3d4a24-8221-4604-82d4-8cd17c09000a-a7324775-1488-4f4b-8193-3cd579dbaa51",
			"name":"libgpg-error",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fe4682620a8d2947fa1644e04c87e1c053805b66b5a50a3e027d8c70fcccc10a"
				}
			],
			"description":"The libgpg-error package contains a library that originally defines common error values for all GnuPG components.\nAmong these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SCdaemon.\nBecause Libgpg-error is a common dependency all GnuPG components, more features will be added to this library.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libgpg-error@1.50-1.oe2409?arch=aarch64&epoch=0&upstream=libgpg-error-1.50-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnupg.org/related_software/libgpg-error/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Library for common error values and messages in GnuPG components.",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.50-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-b8013c36-8209-4c0a-9c2b-b2b35ca2a785",
			"name":"systemd",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"fbb6e242b644b0ba4ff5b0dd58e82c338e85dc72f01211275506496049450fb5"
				}
			],
			"description":"systemd is a system and service manager that runs as PID 1 and starts\nthe rest of the system.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/systemd@255-21.oe2409?arch=aarch64&epoch=0&upstream=systemd-255-21.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://systemd.io/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"System and Service Manager",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:255-21.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-isula-build-0.9.6-feffa915-4f5a-4146-b1f1-72f12976ab6c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-e6491eb9-d54b-4c51-a94c-5e2a8cd8d28c"
		},
		{
			"spdxElementId":"SPDXRef-rpm-isula-build-0.9.6-feffa915-4f5a-4146-b1f1-72f12976ab6c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-85f39de9-b8b9-403c-9c98-1b5db3a5b31d"
		},
		{
			"spdxElementId":"SPDXRef-rpm-isula-build-0.9.6-feffa915-4f5a-4146-b1f1-72f12976ab6c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-device-mapper-1.02.195-754304cb-319f-4a06-b6c2-50492d3df79b-a1bcdd8e-85be-486c-ab19-3cb6a908f65f"
		},
		{
			"spdxElementId":"SPDXRef-rpm-isula-build-0.9.6-feffa915-4f5a-4146-b1f1-72f12976ab6c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-glibc-2.38-098de365-83d8-44e8-9207-c3aeb8fc378c-8243581f-6627-492e-ad5b-bc17e1ba0baa"
		},
		{
			"spdxElementId":"SPDXRef-rpm-isula-build-0.9.6-feffa915-4f5a-4146-b1f1-72f12976ab6c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-gpgme-1.21.0-ee9c2252-58fd-474e-9911-c5cbfa92b999-c95021f8-6c1a-4e6f-881e-8ebf570a2243"
		},
		{
			"spdxElementId":"SPDXRef-rpm-isula-build-0.9.6-feffa915-4f5a-4146-b1f1-72f12976ab6c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libassuan-2.5.6-0ac4652f-69b6-4637-90bc-e78d7580eec7-5047cac1-6cb3-443a-bad6-ad7c4754e1ad"
		},
		{
			"spdxElementId":"SPDXRef-rpm-isula-build-0.9.6-feffa915-4f5a-4146-b1f1-72f12976ab6c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libgpg-error-1.50-1e3d4a24-8221-4604-82d4-8cd17c09000a-a7324775-1488-4f4b-8193-3cd579dbaa51"
		},
		{
			"spdxElementId":"SPDXRef-rpm-isula-build-0.9.6-feffa915-4f5a-4146-b1f1-72f12976ab6c",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-systemd-255-c05128db-a527-4e00-9fed-571be1b2b4bf-b8013c36-8209-4c0a-9c2b-b2b35ca2a785"
		}
	]
}