type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd2
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd3)
created: 2026-07-04T02:24:06Z

type: CreationInfo
spec version: 3.0.1
created by: SPDXRef-gnrtd0
created using: syft-[not provided] (additionalToolSPDXRef-gnrtd1)
created: 2026-07-04T02:24:06Z

spdx id: https://anchore.com/syft/dir/repo/openeuler/openEuler-24.03-LTS-SP4/everything/x86_64-4d64d0a4-9352-45cb-9c5f-6366db87449d-specv3/SPDXRef-gnrtd31992
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd31993
from: buildah
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4378
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd237
from: openssl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24518
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd24519
from: httpd-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd498
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd499
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9346
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd9347
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4376
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd237
from: openssl
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd501
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd502
from: bash
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd439
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd440
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1041
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1039
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd546
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd547
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32203
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32204
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32182
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32183
from: podman
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32206
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32207
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9349
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd9350
from: gpgme
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32009
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32010
from: golang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32097
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32098
from: git-daemon
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31989
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd31990
from: buildah
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32185
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32186
from: podman
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32094
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32095
from: git-daemon
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd442
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd443
from: coreutils
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd549
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd550
from: glibc
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29285
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd129
from: bats
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2323
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd2324
from: libseccomp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32115
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd32116
from: jq
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32202
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd1627
from: nmap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2326
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd2327
from: libseccomp
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32118
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32119
from: jq
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32200
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1627
from: nmap
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1038
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd1039
from: bzip2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29283
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd129
from: bats
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32012
type: Relationship
relationship type: hasDeclaredLicense
to: SPDXRef-gnrtd32013
from: golang
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24515
type: Relationship
relationship type: hasConcludedLicense
to: SPDXRef-gnrtd24516
from: httpd-tools
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32188
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: openssl
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32187
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: buildah
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32099
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bats
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32101
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: libseccomp
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32189
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: nmap
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32014
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: glibc
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32102
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: jq
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32100
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bash
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32122
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: bzip2
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31995
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: gpgme
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32123
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: podman
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31996
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: golang
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32120
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: httpd-tools
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32015
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: git-daemon
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32121
type: LifecycleScopedRelationship
relationship type: dependsOn
scope: build
completeness: noAssertion
to: coreutils
from: buildah-tests
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd547
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32119
type: simplelicensing_LicenseExpression
simplelicensing license expression: (ICU AND MIT AND CC-BY-3.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32116
type: simplelicensing_LicenseExpression
simplelicensing license expression: (ICU AND MIT AND CC-BY-3.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd499
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32098
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND GPL-2.0-or-later AND MIT AND LGPL-2.1-or-later AND GPL-2.0-only)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1627
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPL-2.0-or-later
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32207
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND BSD-2-Clause AND MPL-2.0 AND MIT AND ISC AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9347
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32095
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND GPL-2.0-or-later AND MIT AND LGPL-2.1-or-later AND GPL-2.0-only)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32013
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd443
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd550
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2327
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31993
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND BSD-2-Clause AND MPL-2.0 AND MIT AND ISC AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24519
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2324
type: simplelicensing_LicenseExpression
simplelicensing license expression: LGPLv2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24516
type: simplelicensing_LicenseExpression
simplelicensing license expression: ASL 2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32204
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND BSD-2-Clause AND MPL-2.0 AND MIT AND ISC AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd129
type: simplelicensing_LicenseExpression
simplelicensing license expression: MIT
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd440
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32186
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31990
type: simplelicensing_LicenseExpression
simplelicensing license expression: (BSD-3-Clause AND BSD-2-Clause AND MPL-2.0 AND MIT AND ISC AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32183
type: simplelicensing_LicenseExpression
simplelicensing license expression: (MIT AND Apache-2.0)
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9350
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv2+ and LGPLv2+
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd502
type: simplelicensing_LicenseExpression
simplelicensing license expression: GPLv3
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32010
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD and Public Domain
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd237
type: simplelicensing_LicenseExpression
simplelicensing license expression: Apache-2.0
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1039
type: simplelicensing_LicenseExpression
simplelicensing license expression: BSD-4-Clause
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9348
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32011
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2325
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd548
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32184
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24517
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32117
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd441
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31991
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4377
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32201
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29284
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd500
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32096
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32205
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1040
type: Organization
name: http://openeuler.org
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32103
type: software_Package
supplied by: SPDXRef-gnrtd32117
software download location: NOASSERTION
summary: A lightweight and flexible command-line JSON processor
software package version: 0:1.8.0-5.oe2403sp4
software home page: https://jqlang.github.io/jq/
description: jq is a lightweight and flexible command-line JSON processor. you can use it to slice and filter and map and transform structured data. It is written in portable C, and it has zero runtime dependencies. it can mangle the data format that you have into the one that you want.
name: jq
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/jq@1.8.0-5.oe2403sp4?arch=x86_64&epoch=0&upstream=jq-1.8.0-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd1034
type: software_Package
supplied by: SPDXRef-gnrtd1040
software download location: NOASSERTION
summary: A high-quality data compressor
software package version: 0:1.0.8-9.oe2403sp4
software home page: https://www.sourceware.org/bzip2/
description: bzip2 is a freely available, patent free, high-quality data compressor. It typically compresses files to within 10% to 15% of the best available techniques (the PPM family of statistical compressors), whilst being around twice as fast at compression and six times faster at decompression.
name: bzip2
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bzip2@1.0.8-9.oe2403sp4?arch=x86_64&epoch=0&upstream=bzip2-1.0.8-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd2319
type: software_Package
supplied by: SPDXRef-gnrtd2325
software download location: NOASSERTION
summary: Interface to the syscall filtering mechanism
software package version: 0:2.5.4-5.oe2403sp4
software home page: https://github.com/seccomp/libseccomp
description: The libseccomp library provides an easy to use, platform independent, interface to the Linux Kernel's syscall filtering mechanism. The libseccomp API is designed to abstract away the underlying BPF based syscall filter language and present a more conventional function-call based filtering interface that should be familiar to, and easily adopted by, application developers.
name: libseccomp
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/libseccomp@2.5.4-5.oe2403sp4?arch=x86_64&epoch=0&upstream=libseccomp-2.5.4-5.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9341
type: software_Package
supplied by: SPDXRef-gnrtd9348
software download location: NOASSERTION
summary: GnuPG Made Easy
software package version: 0:1.21.0-3.oe2403sp4
software home page: https://gnupg.org/related_software/gpgme/
description: GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG easier for applications. It provides a high-level crypto API for encryption, decryption, signing, signature verification and key management. This package provides C/C++/Qt/Python API support for GPGME.
name: gpgme
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/gpgme@1.21.0-3.oe2403sp4?arch=x86_64&epoch=0&upstream=gpgme-1.21.0-3.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd9
type: software_Package
supplied by: SPDXRef-gnrtd548
software download location: NOASSERTION
summary: The GNU libc libraries
software package version: 0:2.38-107.oe2403sp4
software home page: http://www.gnu.org/software/glibc/
description: The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.
name: glibc
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/glibc@2.38-107.oe2403sp4?arch=x86_64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31997
type: software_Package
supplied by: SPDXRef-gnrtd32011
software download location: NOASSERTION
summary: The Go Programming Language
software package version: 0:1.21.4-48.oe2403sp4
software home page: https://golang.org/
description: The Go Programming Language.
name: golang
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/golang@1.21.4-48.oe2403sp4?arch=x86_64&epoch=0&upstream=golang-1.21.4-48.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31994
type: software_Package
supplied by: SPDXRef-gnrtd32205
software download location: NOASSERTION
summary: Tests for buildah
software package version: 0:1.34.1-12.oe2403sp4
software home page: https://buildah.io
description: Tests for buildah This package contains system tests for buildah
name: buildah-tests
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/buildah-tests@1.34.1-12.oe2403sp4?arch=x86_64&epoch=0&upstream=buildah-1.34.1-12.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd4371
type: software_Package
supplied by: SPDXRef-gnrtd4377
software download location: NOASSERTION
summary: Cryptography and SSL/TLS Toolkit
software package version: 1:3.5.6-4.oe2403sp4
software home page: https://www.openssl.org/
description: OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.
name: openssl
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/openssl@3.5.6-4.oe2403sp4?arch=x86_64&epoch=1&upstream=openssl-3.5.6-4.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32016
type: software_Package
supplied by: SPDXRef-gnrtd32096
software download location: NOASSERTION
summary: Git server daemon
software package version: 0:2.54.0-2.oe2403sp4
software home page: https://git-scm.com/
description: Git server daemon.
name: git-daemon
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/git-daemon@2.54.0-2.oe2403sp4?arch=x86_64&epoch=0&upstream=git-2.54.0-2.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31967
type: software_Package
supplied by: SPDXRef-gnrtd31991
software download location: NOASSERTION
summary: A command line tool used for creating OCI Images
software package version: 0:1.34.1-12.oe2403sp4
software home page: https://buildah.io
description: The buildah package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container's root file system for manipulation * save container's root file system layer to create a new image * delete a working container or an image
name: buildah
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/buildah@1.34.1-12.oe2403sp4?arch=x86_64&epoch=0&upstream=buildah-1.34.1-12.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd24490
type: software_Package
supplied by: SPDXRef-gnrtd24517
software download location: NOASSERTION
summary: Related tools for use HTTP Server
software package version: 0:2.4.58-20.oe2403sp4
software home page: https://httpd.apache.org/
description: This package contains tools used for HTTP Server.
name: httpd-tools
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/httpd-tools@2.4.58-20.oe2403sp4?arch=x86_64&epoch=0&upstream=httpd-2.4.58-20.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd29266
type: software_Package
supplied by: SPDXRef-gnrtd29284
software download location: NOASSERTION
summary: Bash Automated Testing System
software package version: 0:1.10.0-1.oe2403sp4
software home page: https://github.com/bats-core/bats-core
description: Bats is a TAP-compliant testing framework for Bash. It provides a simple way to verify that the UNIX programs you write behave as expected. Bats is most useful when testing software written in Bash, but you can use it to test any UNIX program.
name: bats
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32190
type: software_Package
supplied by: SPDXRef-gnrtd32201
software download location: NOASSERTION
summary: A tool for network discovery and security auditing.
software package version: 2:7.94-9.oe2403sp4
software home page: https://nmap.org/
description: Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts.
name: nmap
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/nmap@7.94-9.oe2403sp4?arch=x86_64&epoch=2&upstream=nmap-7.94-9.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd31
type: software_Package
supplied by: SPDXRef-gnrtd441
software download location: NOASSERTION
summary: A set of basic GNU tools commonly used in shell scripts
software package version: 0:9.4-22.oe2403sp4
software home page: https://www.gnu.org/software/coreutils/
description: These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.
name: coreutils
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/coreutils@9.4-22.oe2403sp4?arch=x86_64&epoch=0&upstream=coreutils-9.4-22.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd21
type: software_Package
supplied by: SPDXRef-gnrtd500
software download location: NOASSERTION
summary: It is the Bourne Again Shell
software package version: 0:5.2.15-19.oe2403sp4
software home page: https://www.gnu.org/software/bash
description: Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
name: bash
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/bash@5.2.15-19.oe2403sp4?arch=x86_64&epoch=0&upstream=bash-5.2.15-19.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: SPDXRef-gnrtd32124
type: software_Package
supplied by: SPDXRef-gnrtd32184
software download location: NOASSERTION
summary: A tool for managing OCI containers and pods.
software package version: 1:4.9.4-15.oe2403sp4
software home page: https://podman.io/
description: Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library.
name: podman
software source info: acquired package info from repodata DB: repodata/69e709f4d2852d98f12867a74015d19384fe2727ff670fd70178cdde80b1e77e-primary.sqlite.bz2
software package url: pkg:rpm/podman@4.9.4-15.oe2403sp4?arch=x86_64&epoch=1&upstream=podman-4.9.4-15.oe2403sp4.src.rpm
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd1
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_0

spdx id: additionalToolSPDXRef-gnrtd3
type: Tool
name: syft-[not provided]
creation info: _:creationInfo_1