2170a58734
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Export Center CI / export-ci (push) Has been cancelled
Findings Ledger CI / build-test (push) Has been cancelled
Findings Ledger CI / migration-validation (push) Has been cancelled
Findings Ledger CI / generate-manifest (push) Has been cancelled
Manifest Integrity / Validate Schema Integrity (push) Has been cancelled
Lighthouse CI / Lighthouse Audit (push) Has been cancelled
Lighthouse CI / Axe Accessibility Audit (push) Has been cancelled
Manifest Integrity / Validate Contract Documents (push) Has been cancelled
Manifest Integrity / Validate Pack Fixtures (push) Has been cancelled
Manifest Integrity / Audit SHA256SUMS Files (push) Has been cancelled
Manifest Integrity / Verify Merkle Roots (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Policy Simulation / policy-simulate (push) Has been cancelled
- Implemented tests for Cryptographic Failures (A02) to ensure proper handling of sensitive data, secure algorithms, and key management. - Added tests for Security Misconfiguration (A05) to validate production configurations, security headers, CORS settings, and feature management. - Developed tests for Authentication Failures (A07) to enforce strong password policies, rate limiting, session management, and MFA support. - Created tests for Software and Data Integrity Failures (A08) to verify artifact signatures, SBOM integrity, attestation chains, and feed updates.
89 lines
2.3 KiB
JSON
89 lines
2.3 KiB
JSON
{
|
|
"spdxVersion": "SPDX-2.3",
|
|
"dataLicense": "CC0-1.0",
|
|
"SPDXID": "SPDXRef-DOCUMENT",
|
|
"name": "test-app-sbom",
|
|
"documentNamespace": "https://example.com/test-app/1.0.0",
|
|
"creationInfo": {
|
|
"created": "2025-01-15T10:00:00Z",
|
|
"creators": [
|
|
"Tool: syft-1.0.0"
|
|
]
|
|
},
|
|
"documentDescribes": [
|
|
"SPDXRef-Package-test-app"
|
|
],
|
|
"packages": [
|
|
{
|
|
"SPDXID": "SPDXRef-Package-test-app",
|
|
"name": "test-app",
|
|
"versionInfo": "1.0.0",
|
|
"downloadLocation": "NOASSERTION",
|
|
"filesAnalyzed": false,
|
|
"checksums": [
|
|
{
|
|
"algorithm": "SHA256",
|
|
"checksumValue": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"SPDXID": "SPDXRef-Package-zlib",
|
|
"name": "zlib",
|
|
"versionInfo": "1.2.11",
|
|
"downloadLocation": "NOASSERTION",
|
|
"filesAnalyzed": false,
|
|
"checksums": [
|
|
{
|
|
"algorithm": "SHA256",
|
|
"checksumValue": "c3e5e9fdd5004dcb542feda5ee4f0ff0744628baf8ed2dd5d66f8ca1197cb1a1"
|
|
}
|
|
],
|
|
"externalRefs": [
|
|
{
|
|
"referenceCategory": "PACKAGE-MANAGER",
|
|
"referenceType": "purl",
|
|
"referenceLocator": "pkg:generic/zlib@1.2.11"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"SPDXID": "SPDXRef-Package-openssl",
|
|
"name": "openssl",
|
|
"versionInfo": "3.0.0",
|
|
"downloadLocation": "NOASSERTION",
|
|
"filesAnalyzed": false,
|
|
"checksums": [
|
|
{
|
|
"algorithm": "SHA256",
|
|
"checksumValue": "919b4a3e65a8deade6b3c94dd44cb98e0f65a1785a787689c23e6b5c0b4edfea"
|
|
}
|
|
],
|
|
"externalRefs": [
|
|
{
|
|
"referenceCategory": "PACKAGE-MANAGER",
|
|
"referenceType": "purl",
|
|
"referenceLocator": "pkg:generic/openssl@3.0.0"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"relationships": [
|
|
{
|
|
"spdxElementId": "SPDXRef-DOCUMENT",
|
|
"relatedSpdxElement": "SPDXRef-Package-test-app",
|
|
"relationshipType": "DESCRIBES"
|
|
},
|
|
{
|
|
"spdxElementId": "SPDXRef-Package-test-app",
|
|
"relatedSpdxElement": "SPDXRef-Package-zlib",
|
|
"relationshipType": "DEPENDS_ON"
|
|
},
|
|
{
|
|
"spdxElementId": "SPDXRef-Package-test-app",
|
|
"relatedSpdxElement": "SPDXRef-Package-openssl",
|
|
"relationshipType": "DEPENDS_ON"
|
|
}
|
|
]
|
|
}
|