argunix
☰

Software Bill of Materials

packages.x86_64-linux.zot

← back to job

image
zot
components
8
format
CycloneDX

Transcribed straight from the Nix dependency graph — every store path the image ships, with no scanner heuristics. This SBOM is also attached to the image in the registry as an OCI referrer (discover it with oras discover).

components

name version purl store path
mailcap 2.1.54 pkg:nix/mailcap@2.1.54 /nix/store/9mikxas901qn0r2j1baqfv7pdd36n23m-mailcap-2.1.54
zot 2.1.17 pkg:nix/zot@2.1.17 /nix/store/aaf6lzrvdfvr321j10nqfpfgs1vyq1iz-zot-2.1.17
iana-etc 20251215 pkg:nix/iana-etc@20251215 /nix/store/d5jj34synqyn1bc5n362pric9a695a0h-iana-etc-20251215
libunistring 1.4.2 pkg:nix/libunistring@1.4.2 /nix/store/fp6wnyklwzdncp0nvhdy9d5fnir0mjq5-libunistring-1.4.2
glibc 2.42-67 pkg:nix/glibc@2.42-67 /nix/store/m07h00fl6538s4gavrp66a20ka4hg7fy-glibc-2.42-67
tzdata 2026c pkg:nix/tzdata@2026c /nix/store/m2sv1rizzbnsb35hv3ii0dnf3rvfy3n3-tzdata-2026c
xgcc 15.2.0-libgcc pkg:nix/xgcc@15.2.0-libgcc /nix/store/rdw0n35z6xhipyiq6sc8qv0mg7vrldaj-xgcc-15.2.0-libgcc
libidn2 2.3.8 pkg:nix/libidn2@2.3.8 /nix/store/xidgjdv05b8yz6w6qrhk4mmjxm4l2zjf-libidn2-2.3.8
raw CycloneDX JSON
{
  "bomFormat": "CycloneDX",
  "components": [
    {
      "bom-ref": "9mikxas901qn0r2j1baqfv7pdd36n23m-mailcap-2.1.54",
      "name": "mailcap",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/9mikxas901qn0r2j1baqfv7pdd36n23m-mailcap-2.1.54"
        }
      ],
      "purl": "pkg:nix/mailcap@2.1.54",
      "type": "library",
      "version": "2.1.54"
    },
    {
      "bom-ref": "aaf6lzrvdfvr321j10nqfpfgs1vyq1iz-zot-2.1.17",
      "name": "zot",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/aaf6lzrvdfvr321j10nqfpfgs1vyq1iz-zot-2.1.17"
        }
      ],
      "purl": "pkg:nix/zot@2.1.17",
      "type": "library",
      "version": "2.1.17"
    },
    {
      "bom-ref": "d5jj34synqyn1bc5n362pric9a695a0h-iana-etc-20251215",
      "name": "iana-etc",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/d5jj34synqyn1bc5n362pric9a695a0h-iana-etc-20251215"
        }
      ],
      "purl": "pkg:nix/iana-etc@20251215",
      "type": "library",
      "version": "20251215"
    },
    {
      "bom-ref": "fp6wnyklwzdncp0nvhdy9d5fnir0mjq5-libunistring-1.4.2",
      "name": "libunistring",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/fp6wnyklwzdncp0nvhdy9d5fnir0mjq5-libunistring-1.4.2"
        }
      ],
      "purl": "pkg:nix/libunistring@1.4.2",
      "type": "library",
      "version": "1.4.2"
    },
    {
      "bom-ref": "m07h00fl6538s4gavrp66a20ka4hg7fy-glibc-2.42-67",
      "name": "glibc",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/m07h00fl6538s4gavrp66a20ka4hg7fy-glibc-2.42-67"
        }
      ],
      "purl": "pkg:nix/glibc@2.42-67",
      "type": "library",
      "version": "2.42-67"
    },
    {
      "bom-ref": "m2sv1rizzbnsb35hv3ii0dnf3rvfy3n3-tzdata-2026c",
      "name": "tzdata",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/m2sv1rizzbnsb35hv3ii0dnf3rvfy3n3-tzdata-2026c"
        }
      ],
      "purl": "pkg:nix/tzdata@2026c",
      "type": "library",
      "version": "2026c"
    },
    {
      "bom-ref": "rdw0n35z6xhipyiq6sc8qv0mg7vrldaj-xgcc-15.2.0-libgcc",
      "name": "xgcc",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/rdw0n35z6xhipyiq6sc8qv0mg7vrldaj-xgcc-15.2.0-libgcc"
        }
      ],
      "purl": "pkg:nix/xgcc@15.2.0-libgcc",
      "type": "library",
      "version": "15.2.0-libgcc"
    },
    {
      "bom-ref": "xidgjdv05b8yz6w6qrhk4mmjxm4l2zjf-libidn2-2.3.8",
      "name": "libidn2",
      "properties": [
        {
          "name": "nix:store_path",
          "value": "/nix/store/xidgjdv05b8yz6w6qrhk4mmjxm4l2zjf-libidn2-2.3.8"
        }
      ],
      "purl": "pkg:nix/libidn2@2.3.8",
      "type": "library",
      "version": "2.3.8"
    }
  ],
  "metadata": {
    "component": {
      "bom-ref": "zot",
      "name": "zot",
      "type": "container"
    },
    "manufacturer": {
      "url": [
        "https://argunixdev.stack4ops.com"
      ]
    },
    "timestamp": "2026-09-20T06:14:19.537582896+00:00",
    "tools": {
      "components": [
        {
          "name": "argunix",
          "publisher": "applicative.systems",
          "type": "application"
        }
      ]
    }
  },
  "serialNumber": "urn:uuid:459206f7-b270-42ec-86df-962a0412bfcd",
  "specVersion": "1.6",
  "version": 1
}