{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:3b29164a-aedb-4bef-a513-5481e4f9f650","version":1,"metadata":{"timestamp":"2026-11-02T03:08:39Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"cab0b0c6860e2ba4","type":"file","name":"SonarSource/sonarqube","version":"26.10.0.133078"}},"components":[{"bom-ref":"pkg:github/sonarsource/ci-github-actions@v1.3.24?package-id=742548f52ce28a58#build-gradle","type":"library","name":"SonarSource/ci-github-actions/build-gradle","version":"v1.3.24","cpe":"cpe:2.3:a:SonarSource\\/ci-github-actions\\/build-gradle:SonarSource\\/ci-github-actions\\/build-gradle:v1.3.24:*:*:*:*:*:*:*","purl":"pkg:github/SonarSource/ci-github-actions@v1.3.24#build-gradle","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci-github-actions\\/build-gradle:SonarSource\\/ci_github_actions\\/build_gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci_github_actions\\/build_gradle:SonarSource\\/ci-github-actions\\/build-gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci_github_actions\\/build_gradle:SonarSource\\/ci_github_actions\\/build_gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci-github-actions\\/build:SonarSource\\/ci-github-actions\\/build-gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci-github-actions\\/build:SonarSource\\/ci_github_actions\\/build_gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci_github_actions\\/build:SonarSource\\/ci-github-actions\\/build-gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci_github_actions\\/build:SonarSource\\/ci_github_actions\\/build_gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci-github:SonarSource\\/ci-github-actions\\/build-gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci-github:SonarSource\\/ci_github_actions\\/build_gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci_github:SonarSource\\/ci-github-actions\\/build-gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci_github:SonarSource\\/ci_github_actions\\/build_gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci:SonarSource\\/ci-github-actions\\/build-gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/ci:SonarSource\\/ci_github_actions\\/build_gradle:v1.3.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=22387a11c1e345b2","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/jdx/mise-action@v4.0.1?package-id=8d0647c1e8e9474a","type":"library","name":"jdx/mise-action","version":"v4.0.1","cpe":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise-action:v4.0.1:*:*:*:*:*:*:*","purl":"pkg:github/jdx/mise-action@v4.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise_action:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise-action:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise_action:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise-action:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise_action:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"ebff2c81fbaf921b","type":"file","name":"/.github/workflows/build.yml","hashes":[{"alg":"SHA-1","content":"5b0d8166f82b066087cfd3d97594abf5509fabf6"},{"alg":"SHA-256","content":"802b95f6a49a512e79911e41697d48c07b51079c8adab1dddab0989f85e05e8a"}]}]}