This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-k-runtime.git

commit df477f240afab7d3c14485093865d73da73b14a1
Author: github-actions[bot] 
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Thu Aug 15 23:37:41 2024 +0000

    chore: update SBOM
---
 camel-k-runtime-sbom/camel-k-runtime-sbom.json | 87 ++++++++++++++------------
 camel-k-runtime-sbom/camel-k-runtime-sbom.xml  | 34 +++++-----
 2 files changed, 65 insertions(+), 56 deletions(-)

diff --git a/camel-k-runtime-sbom/camel-k-runtime-sbom.json 
b/camel-k-runtime-sbom/camel-k-runtime-sbom.json
index ae81970a..acbc043f 100644
--- a/camel-k-runtime-sbom/camel-k-runtime-sbom.json
+++ b/camel-k-runtime-sbom/camel-k-runtime-sbom.json
@@ -9,47 +9,52 @@
         "phase" : "build"
       }
     ],
-    "tools" : [
-      {
-        "vendor" : "OWASP Foundation",
-        "name" : "CycloneDX Maven plugin",
-        "version" : "2.8.0",
-        "hashes" : [
-          {
-            "alg" : "MD5",
-            "content" : "76ffec6a7ddd46b2b24517411874eb99"
-          },
-          {
-            "alg" : "SHA-1",
-            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
-          },
-          {
-            "alg" : "SHA-256",
-            "content" : 
"6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
-          },
-          {
-            "alg" : "SHA-512",
-            "content" : 
"417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
-          },
-          {
-            "alg" : "SHA-384",
-            "content" : 
"5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
-          },
-          {
-            "alg" : "SHA3-384",
-            "content" : 
"0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
-          },
-          {
-            "alg" : "SHA3-256",
-            "content" : 
"3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
-          },
-          {
-            "alg" : "SHA3-512",
-            "content" : 
"59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
-          }
-        ]
-      }
-    ],
+    "tools" : {
+      "components" : [
+        {
+          "author" : "OWASP Foundation",
+          "group" : "org.cyclonedx",
+          "name" : "cyclonedx-maven-plugin",
+          "version" : "2.8.1",
+          "description" : "CycloneDX Maven plugin",
+          "hashes" : [
+            {
+              "alg" : "MD5",
+              "content" : "42c73e70d517b359d40b757c368d68fc"
+            },
+            {
+              "alg" : "SHA-1",
+              "content" : "c66892e13fb7ed7b8105cb5a280fa767d9e0bf12"
+            },
+            {
+              "alg" : "SHA-256",
+              "content" : 
"566681b9fcb1b0178e101cd899d2ea399e2039255e208a1a477bc079158dbdc5"
+            },
+            {
+              "alg" : "SHA-512",
+              "content" : 
"93d7b7421ee2d91f84930e75a52864952f26fee96114740dab477ee5f0e62b6448759ad5a160f1749650379f771941100c7fd84ed523b2407d2004b928998ecb"
+            },
+            {
+              "alg" : "SHA-384",
+              "content" : 
"04b0c71c1b79f77e723e7db96c72705f50172e94df5a7f28edbd96024b886fff65f61f37fc77abb1d12b0809813ae665"
+            },
+            {
+              "alg" : "SHA3-384",
+              "content" : 
"eafa68c2c25670f0b77c5db3acdfd97cfe97dfc50c47bba2103353327b049b9bbac0d8b621b1168200ddf21719048c73"
+            },
+            {
+              "alg" : "SHA3-256",
+              "content" : 
"2c07b6997ba0e40ca3b66e39cfcf101fcebdceaa19fce0baf12e013cf392466e"
+            },
+            {
+              "alg" : "SHA3-512",
+              "content" : 
"636f068843bad92259885cd4d427630619864c0172bd1b41df15c33a7d411767ab09cf2ff339a97fda149ee44c95a162fdf6cb12de19e2dc0250c2fadc80d882"
+            }
+          ],
+          "type" : "library"
+        }
+      ]
+    },
     "component" : {
       "publisher" : "The Apache Software Foundation",
       "group" : "org.apache.camel.k",
diff --git a/camel-k-runtime-sbom/camel-k-runtime-sbom.xml 
b/camel-k-runtime-sbom/camel-k-runtime-sbom.xml
index 63f9e8d1..8392ea13 100644
--- a/camel-k-runtime-sbom/camel-k-runtime-sbom.xml
+++ b/camel-k-runtime-sbom/camel-k-runtime-sbom.xml
@@ -7,21 +7,25 @@
       </lifecycle>
     </lifecycles>
     <tools>
-      <tool>
-        <vendor>OWASP Foundation</vendor>
-        <name>CycloneDX Maven plugin</name>
-        <version>2.8.0</version>
-        <hashes>
-          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
-          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
-          <hash 
alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
-          <hash 
alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
-          <hash 
alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
-          <hash 
alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
-          <hash 
alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
-          <hash 
alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
-        </hashes>
-      </tool>
+      <components>
+        <component type="library">
+          <author>OWASP Foundation</author>
+          <group>org.cyclonedx</group>
+          <name>cyclonedx-maven-plugin</name>
+          <version>2.8.1</version>
+          <description>CycloneDX Maven plugin</description>
+          <hashes>
+            <hash alg="MD5">42c73e70d517b359d40b757c368d68fc</hash>
+            <hash alg="SHA-1">c66892e13fb7ed7b8105cb5a280fa767d9e0bf12</hash>
+            <hash 
alg="SHA-256">566681b9fcb1b0178e101cd899d2ea399e2039255e208a1a477bc079158dbdc5</hash>
+            <hash 
alg="SHA-512">93d7b7421ee2d91f84930e75a52864952f26fee96114740dab477ee5f0e62b6448759ad5a160f1749650379f771941100c7fd84ed523b2407d2004b928998ecb</hash>
+            <hash 
alg="SHA-384">04b0c71c1b79f77e723e7db96c72705f50172e94df5a7f28edbd96024b886fff65f61f37fc77abb1d12b0809813ae665</hash>
+            <hash 
alg="SHA3-384">eafa68c2c25670f0b77c5db3acdfd97cfe97dfc50c47bba2103353327b049b9bbac0d8b621b1168200ddf21719048c73</hash>
+            <hash 
alg="SHA3-256">2c07b6997ba0e40ca3b66e39cfcf101fcebdceaa19fce0baf12e013cf392466e</hash>
+            <hash 
alg="SHA3-512">636f068843bad92259885cd4d427630619864c0172bd1b41df15c33a7d411767ab09cf2ff339a97fda149ee44c95a162fdf6cb12de19e2dc0250c2fadc80d882</hash>
+          </hashes>
+        </component>
+      </components>
     </tools>
     <component type="library" 
bom-ref="pkg:maven/org.apache.camel.k/camel-k-runtime-project@3.13.0-SNAPSHOT?type=pom">
       <publisher>The Apache Software Foundation</publisher>

Reply via email to