{"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:4994dffc-6b79-4982-864f-3b30c05abd20","version":1,"metadata":{"timestamp":"2026-10-12T06:29:28Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.8.5","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.5","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.5","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"name":"api","properties":[{"name":"cdx:cargo:manifestMode","value":"virtual-workspace"},{"name":"cdx:cargo:workspaceRoot","value":"/home/runner/work/zerobit/zerobit/services/api/Cargo.toml"},{"name":"cdx:cargo:hasWorkspaceMembers","value":"true"},{"name":"cdx:cargo:workspaceMembers","value":"crates/zerobit-api"}],"version":"workspace","purl":"pkg:cargo/api@workspace","bom-ref":"pkg:cargo/api@workspace","type":"application","components":[{"group":"","name":"zerobit-api","version":"0.1.0","licenses":[{"license":{"name":"Proprietary","properties":[{"name":"cdx:license:category","value":"Proprietary Free"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"true"}]}}],"purl":"pkg:cargo/zerobit-api@0.1.0","type":"library","bom-ref":"pkg:cargo/zerobit-api@0.1.0","properties":[{"name":"cdx:cargo:workspaceRoot","value":"/home/runner/work/zerobit/zerobit/services/api/Cargo.toml"},{"name":"cdx:cargo:manifestMode","value":"package"},{"name":"cdx:license:category","value":"Proprietary Free"}]}]},"properties":[{"name":"cdx:bom:componentTypes","value":"cargo"},{"name":"cdx:bom:componentSrcFiles","value":"services/api/Cargo.lock"}]},"components":[{"group":"","name":"zerobit-api","version":"0.1.0","purl":"pkg:cargo/zerobit-api@0.1.0","type":"library","bom-ref":"pkg:cargo/zerobit-api@0.1.0","properties":[{"name":"SrcFile","value":"services/api/Cargo.lock"}],"evidence":{"identity":[{"field":"purl","confidence":0.6,"methods":[{"technique":"manifest-analysis","confidence":0.6,"value":"services/api/Cargo.lock"}],"concludedValue":"services/api/Cargo.lock"}]}}],"dependencies":[{"ref":"pkg:cargo/zerobit-api@0.1.0","dependsOn":[]},{"ref":"pkg:cargo/api@workspace","dependsOn":["pkg:cargo/zerobit-api@0.1.0"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:cargo/api@workspace"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.8.5","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.5","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.5","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-10-12T06:29:28Z","text":"This Software Bill-of-Materials (SBOM) document was created on Monday, October 12, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'api' with version 'workspace'. The application also has 1 child modules/components."}]}