{"SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"comment": "This document was created by analyzing recipe files during the build.", "created": "2025-05-10T19:36:24Z", "creators": ["Tool: OpenEmbedded Core create-spdx.bbclass", "Organization: OpenEmbedded ()", "Person: N/A ()"], "licenseListVersion": "3.14"}, "dataLicense": "CC0-1.0", "documentNamespace": "http://spdx.org/spdxdocs/recipe-skopeo-b4c0096c-8add-54dd-9c62-bd5d4a72c563", "externalDocumentRefs": [{"checksum": {"algorithm": "SHA1", "checksumValue": "3465660eb01ac269e9f91c08fc2a52dbb442ee50"}, "externalDocumentId": "DocumentRef-dependency-recipe-btrfs-tools", "spdxDocument": "http://spdx.org/spdxdocs/recipe-btrfs-tools-bc5bebd6-136e-537c-ab8a-e726364ec661"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "626bd259648bd837a736da341f3e4562112de984"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-cross-aarch64", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-cross-aarch64-e05122e2-842a-5b45-a068-7a450933ae13"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "dc06fabe25133177baf23846c11527771077ada9"}, "externalDocumentId": "DocumentRef-dependency-recipe-gcc-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gcc-runtime-a8177036-816d-5f00-a030-969647302050"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "15cf51d2a905fb5165cef47e1b7e490bf6635e54"}, "externalDocumentId": "DocumentRef-dependency-recipe-glib-2.0", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glib-2.0-d0091684-3041-5a99-9476-45ed618feb68"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "78f2f3e0e17baedef9f1b25094e73e91f0595805"}, "externalDocumentId": "DocumentRef-dependency-recipe-glibc", "spdxDocument": "http://spdx.org/spdxdocs/recipe-glibc-8ec5f1d4-204b-530d-8854-79bbb314d6d7"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "31be58dd9fa79d0997fae2b3d5a50697c9481c90"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-cross-cortexa72-cortexa53-2c98fa9b-fac4-5281-8341-8dc08e1c6c3a"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "64d9135485d52b5c9fb07794e012d0038629cbe5"}, "externalDocumentId": "DocumentRef-dependency-recipe-go-runtime", "spdxDocument": "http://spdx.org/spdxdocs/recipe-go-runtime-393054ae-505a-5f30-8e3b-75c9021ab3f5"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "a83c4eeca20bd9d5bde9227e2aa7768ea4ad9c20"}, "externalDocumentId": "DocumentRef-dependency-recipe-gpgme", "spdxDocument": "http://spdx.org/spdxdocs/recipe-gpgme-9f25480d-e8ef-525f-97a2-7dd4a9e31950"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "62475fccdbc5a52045f51ad8de815793cc0e682a"}, "externalDocumentId": "DocumentRef-dependency-recipe-libdevmapper", "spdxDocument": "http://spdx.org/spdxdocs/recipe-libdevmapper-71a62b64-4336-5320-9939-ca716e181a5f"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "8594e181cc96ab5d99cf4bb6e259d0380cde64f3"}, "externalDocumentId": "DocumentRef-dependency-recipe-lvm2", "spdxDocument": "http://spdx.org/spdxdocs/recipe-lvm2-1680e8fa-6311-5209-bee8-8be8f7a6e359"}, {"checksum": {"algorithm": "SHA1", "checksumValue": "c7798615bd290a752127c58c3b2b2533605fa47f"}, "externalDocumentId": "DocumentRef-dependency-recipe-pkgconfig-native", "spdxDocument": "http://spdx.org/spdxdocs/recipe-pkgconfig-native-f02bc6f9-93d3-5de4-bfc1-f49135872105"}], "name": "recipe-skopeo", "packages": [{"SPDXID": "SPDXRef-Recipe-skopeo", "copyrightText": "NOASSERTION", "description": "Work with remote images registries - retrieving information, images, signing content.", "downloadLocation": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceLocator": "cpe:2.3:*:*:skopeo:v1.14.2:*:*:*:*:*:*:*", "referenceType": "http://spdx.org/rdf/references/cpe23Type"}], "homepage": "https://github.com/containers/skopeo", "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "licenseInfoFromFiles": ["NOASSERTION"], "name": "skopeo", "sourceInfo": "CVEs fixed: CVE-2019-10214", "summary": "Work with remote images registries - retrieving information, images, signing content", "supplier": "Organization: OpenEmbedded ()", "versionInfo": "v1.14.2+git"}, {"SPDXID": "SPDXRef-Download-skopeo-1", "copyrightText": "NOASSERTION", "downloadLocation": "git+https://github.com/containers/skopeo@1c2ab995059dd011aad74e2c37305d636ebd2675", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "licenseInfoFromFiles": ["NOASSERTION"], "name": "skopeo-source-1", "supplier": "NOASSERTION"}], "relationships": [{"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Download-skopeo-1", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "SPDXRef-Download-skopeo-1"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-btrfs-tools:SPDXRef-Recipe-btrfs-tools"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-cross-aarch64:SPDXRef-Recipe-gcc-cross-aarch64"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gcc-runtime:SPDXRef-Recipe-gcc-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glib-2.0:SPDXRef-Recipe-glib-2.0"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-glibc:SPDXRef-Recipe-glibc"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-cross-cortexa72-cortexa53:SPDXRef-Recipe-go-cross-cortexa72-cortexa53"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-go-runtime:SPDXRef-Recipe-go-runtime"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-gpgme:SPDXRef-Recipe-gpgme"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-libdevmapper:SPDXRef-Recipe-libdevmapper"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-lvm2:SPDXRef-Recipe-lvm2"}, {"relatedSpdxElement": "SPDXRef-Recipe-skopeo", "relationshipType": "BUILD_DEPENDENCY_OF", "spdxElementId": "DocumentRef-dependency-recipe-pkgconfig-native:SPDXRef-Recipe-pkgconfig-native"}], "spdxVersion": "SPDX-2.2"}