{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:291a8c06-12f3-4721-b57e-feef41be85ba",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-10T18:14:55Z",
    "component": {
      "type": "container",
      "bom-ref": "collimo-image",
      "name": "collimo",
      "version": "0.3.1",
      "purl": "pkg:oci/collimo@0.3.1?repository_url=ghcr.io/collimohq/collimo&arch=amd64",
      "properties": [{"name": "base-image", "value": "scratch"}]
    }
  },
  "components": [
    {
      "type": "application",
      "bom-ref": "collimo",
      "name": "collimo",
      "version": "0.3.1",
      "description": "The Collimo collector, a static linux/amd64 binary",
      "purl": "pkg:generic/collimohq/collimo@0.3.1?arch=amd64"
    },
    {
      "type": "library",
      "bom-ref": "golang-stdlib",
      "name": "stdlib",
      "version": "1.24.13",
      "description": "The Go standard library, compiled into the binary",
      "purl": "pkg:golang/stdlib@1.24.13"
    },
    {
      "type": "data",
      "bom-ref": "ca-bundle",
      "name": "ca-certificates-bundle",
      "version": "20251003-r0",
      "description": "The CA certificate bundle at /etc/ssl/certs/ca-certificates.crt",
      "purl": "pkg:apk/alpine/ca-certificates-bundle@20251003-r0?distro=alpine-3.23.3"
    }
  ],
  "dependencies": [
    {"ref": "collimo-image", "dependsOn": ["collimo", "ca-bundle"]},
    {"ref": "collimo", "dependsOn": ["golang-stdlib"]}
  ]
}