Software Bill of Materials

packages.x86_64-linux.zot

image: zot
components: 8
format: CycloneDX

Transcribed straight from the Nix dependency graph — every store path the image ships, with no scanner heuristics. This SBOM is also attached to the image in the registry as an OCI referrer (discover it with oras discover).

components

name	version	purl	store path
mailcap	2.1.54	pkg:nix/mailcap@2.1.54	/nix/store/9mikxas901qn0r2j1baqfv7pdd36n23m-mailcap-2.1.54
zot	2.1.17	pkg:nix/zot@2.1.17	/nix/store/aaf6lzrvdfvr321j10nqfpfgs1vyq1iz-zot-2.1.17
iana-etc	20251215	pkg:nix/iana-etc@20251215	/nix/store/d5jj34synqyn1bc5n362pric9a695a0h-iana-etc-20251215
libunistring	1.4.2	pkg:nix/libunistring@1.4.2	/nix/store/fp6wnyklwzdncp0nvhdy9d5fnir0mjq5-libunistring-1.4.2
glibc	2.42-67	pkg:nix/glibc@2.42-67	/nix/store/m07h00fl6538s4gavrp66a20ka4hg7fy-glibc-2.42-67
tzdata	2026c	pkg:nix/tzdata@2026c	/nix/store/m2sv1rizzbnsb35hv3ii0dnf3rvfy3n3-tzdata-2026c
xgcc	15.2.0-libgcc	pkg:nix/xgcc@15.2.0-libgcc	/nix/store/rdw0n35z6xhipyiq6sc8qv0mg7vrldaj-xgcc-15.2.0-libgcc
libidn2	2.3.8	pkg:nix/libidn2@2.3.8	/nix/store/xidgjdv05b8yz6w6qrhk4mmjxm4l2zjf-libidn2-2.3.8

raw CycloneDX JSON

{
  "bomFormat": "CycloneDX",
  "components": [
    {
      "bom-ref": "9mikxas901qn0r2j1baqfv7pdd36n23m-mailcap-2.1.54",
      "name": "mailcap",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/9mikxas901qn0r2j1baqfv7pdd36n23m-mailcap-2.1.54"
        }
      ],
      "purl": "pkg:nix/mailcap@2.1.54",
      "type": "library",
      "version": "2.1.54"
    },
    {
      "bom-ref": "aaf6lzrvdfvr321j10nqfpfgs1vyq1iz-zot-2.1.17",
      "name": "zot",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/aaf6lzrvdfvr321j10nqfpfgs1vyq1iz-zot-2.1.17"
        }
      ],
      "purl": "pkg:nix/zot@2.1.17",
      "type": "library",
      "version": "2.1.17"
    },
    {
      "bom-ref": "d5jj34synqyn1bc5n362pric9a695a0h-iana-etc-20251215",
      "name": "iana-etc",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/d5jj34synqyn1bc5n362pric9a695a0h-iana-etc-20251215"
        }
      ],
      "purl": "pkg:nix/iana-etc@20251215",
      "type": "library",
      "version": "20251215"
    },
    {
      "bom-ref": "fp6wnyklwzdncp0nvhdy9d5fnir0mjq5-libunistring-1.4.2",
      "name": "libunistring",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/fp6wnyklwzdncp0nvhdy9d5fnir0mjq5-libunistring-1.4.2"
        }
      ],
      "purl": "pkg:nix/libunistring@1.4.2",
      "type": "library",
      "version": "1.4.2"
    },
    {
      "bom-ref": "m07h00fl6538s4gavrp66a20ka4hg7fy-glibc-2.42-67",
      "name": "glibc",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/m07h00fl6538s4gavrp66a20ka4hg7fy-glibc-2.42-67"
        }
      ],
      "purl": "pkg:nix/glibc@2.42-67",
      "type": "library",
      "version": "2.42-67"
    },
    {
      "bom-ref": "m2sv1rizzbnsb35hv3ii0dnf3rvfy3n3-tzdata-2026c",
      "name": "tzdata",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/m2sv1rizzbnsb35hv3ii0dnf3rvfy3n3-tzdata-2026c"
        }
      ],
      "purl": "pkg:nix/tzdata@2026c",
      "type": "library",
      "version": "2026c"
    },
    {
      "bom-ref": "rdw0n35z6xhipyiq6sc8qv0mg7vrldaj-xgcc-15.2.0-libgcc",
      "name": "xgcc",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/rdw0n35z6xhipyiq6sc8qv0mg7vrldaj-xgcc-15.2.0-libgcc"
        }
      ],
      "purl": "pkg:nix/xgcc@15.2.0-libgcc",
      "type": "library",
      "version": "15.2.0-libgcc"
    },
    {
      "bom-ref": "xidgjdv05b8yz6w6qrhk4mmjxm4l2zjf-libidn2-2.3.8",
      "name": "libidn2",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/xidgjdv05b8yz6w6qrhk4mmjxm4l2zjf-libidn2-2.3.8"
        }
      ],
      "purl": "pkg:nix/libidn2@2.3.8",
      "type": "library",
      "version": "2.3.8"
    }
  ],
  "metadata": {
    "component": {
      "bom-ref": "zot",
      "name": "zot",
      "type": "container"
    },
    "tools": [
      {
        "name": "argunix",
        "vendor": "applicative.systems"
      }
    ]
  },
  "specVersion": "1.5",
  "version": 1
}