{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "skopeo-tests-1.1.14.2-6.oe2403.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-05-16T13:59:12.772799911Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/skopeo-tests-1.1.14.2-6.oe2403.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "5adc2b57027700f62925bd520aab7a7347bb53535232a42c5b2bd34f637e77cf"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-crun-1.8.7",
      "name": "crun",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2cfa48dcb9a17af3ddd255d52c14b1269d84f9c5ad91a7b2df0889e6ff83596c"
        }
      ],
      "description": "crun is a fast and low-memory footprint OCI Container Runtime fully written in C.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/crun@1.8.7-3.oe2403?arch=x86_64&epoch=0&upstream=crun-1.8.7-3.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/containers/crun",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "A fast and low-memory footprint OCI Container Runtime fully written in C.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.7-3.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-gnupg2-2.4.3",
      "name": "gnupg2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "befdca1fa4291bbb6c08295a01b7a2e8b828391ee314510e0f2da89e35f880b0"
        }
      ],
      "description": "GnuPG is a complete and free implementation of the OpenPGP standard\nas defined by RFC4880 (also known as PGP).  GnuPG enables encryption\nand signing of data and communication, and features a versatile key\nmanagement system as well as access modules for public key\ndirectories.\n\nGnuPG 2.0 adds support for smart cards and S/MIME encryption and\nsigning to the base GnuPG package.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gnupg2@2.4.3-10.oe2403?arch=x86_64&epoch=0&upstream=gnupg2-2.4.3-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gnupg.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "Utility for secure communication and data storage",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4.3-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-golang-1.21.4",
      "name": "golang",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c95bf37c9aa8bb235864cf238a47b308470e814cf8927d70f2add7cb57ada08e"
        }
      ],
      "description": "The Go Programming Language.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/golang@1.21.4-12.oe2403?arch=x86_64&epoch=0&upstream=golang-1.21.4-12.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://golang.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "The Go Programming Language",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21.4-12.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-httpd-tools-2.4.58",
      "name": "httpd-tools",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2244dbefa39b2792eb9a6b423cc271bd9394f544d8032c158302bab34f84f18e"
        }
      ],
      "description": "This package contains tools used for HTTP Server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/httpd-tools@2.4.58-10.oe2403?arch=x86_64&epoch=0&upstream=httpd-2.4.58-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://httpd.apache.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "Related tools for use HTTP Server",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.4.58-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-jq-1.8.0",
      "name": "jq",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1d058450f9441dbef07b8fda4be53d47b0a913e098d790273e0e9dbf4d064116"
        }
      ],
      "description": "jq is a lightweight and flexible command-line JSON processor.\nyou can use it to slice and filter and map and transform structured data.\nIt is written in portable C, and it has zero runtime dependencies.\nit can mangle the data format that you have into the one that you want.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/jq@1.8.0-2.oe2403?arch=x86_64&epoch=0&upstream=jq-1.8.0-2.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://jqlang.github.io/jq/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "A lightweight and flexible command-line JSON processor",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.8.0-2.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-openssl-3.0.12",
      "name": "openssl",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a865a81fcb24bf6a473d108a82e781f1f0b2c1f4a42e89880c6851470cff2413"
        }
      ],
      "description": "OpenSSL is a robust, commercial-grade, and full-featured toolkit for the\nTransport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openssl@3.0.12-10.oe2403?arch=x86_64&epoch=1&upstream=openssl-3.0.12-10.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openssl.org/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "Cryptography and SSL/TLS Toolkit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.0.12-10.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-podman-4.9.4",
      "name": "podman",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "827ea5e85d7b59d2a2e4eac99e06ecca49436bfd7d2b0a374e7557f6fee63291"
        }
      ],
      "description": "Podman manages the entire container ecosystem which includes pods,\ncontainers, container images, and container volumes using the libpod library.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/podman@4.9.4-13.oe2403?arch=x86_64&epoch=1&upstream=podman-4.9.4-13.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://podman.io/",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "A tool for managing OCI containers and pods.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:4.9.4-13.oe2403"
    },
    {
      "SPDXID": "SPDXRef-rpm-skopeo-1.14.2",
      "name": "skopeo",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "98686a988da857dc3fc0b8ffd01293ee8b4181bd0521581b380c12487f12b262"
        }
      ],
      "description": "A command line utility that performs various operations on container images and image repositories",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/skopeo@1.14.2-6.oe2403?arch=x86_64&epoch=1&upstream=skopeo-1.14.2-6.oe2403.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/containers/skopeo",
      "sourceInfo": "acquired package info from repodata DB: repodata/6670ba3823d4ccf6729ed47771f9ed3c61734de7bea212778296e142fffc943e-primary.sqlite.bz2",
      "summary": "Work with remote images registries - retrieving information, images, signing content",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.14.2-6.oe2403"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-crun-1.8.7"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gnupg2-2.4.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-golang-1.21.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-httpd-tools-2.4.58"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-jq-1.8.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openssl-3.0.12"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-podman-4.9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-tests-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-skopeo-1.14.2"
    }
  ]
}
