Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Manual updates 20241120 NuGet SBOM generation #1052

Merged
merged 1 commit into from
Nov 22, 2024
Merged

Manual updates 20241120 NuGet SBOM generation #1052

merged 1 commit into from
Nov 22, 2024
+13 −0

Conversation

moljac
Copy link
Contributor

@moljac moljac commented Nov 21, 2024 •
edited
Loading

Add support new nuget package that generates and packs SPDX SBOM into nuget package being built and packaged.

  <PropertyGroup>
    <GenerateSBOM>true</GenerateSBOM>
  </PropertyGroup>

  <ItemGroup>
    <PackageReference Include="Microsoft.Sbom.Targets" Version="3.0.0">
      <PrivateAssets>all</PrivateAssets>
      <IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
    </PackageReference>
  </ItemGroup>

SBOM can be found

./_manifest/spdx_2.2/manifest.spdx.json

Details

https://github.com/microsoft/sbom-tool

https://devblogs.microsoft.com/engineering-at-microsoft/microsoft-open-sources-software-bill-of-materials-sbom-generation-tool/

https://devblogs.microsoft.com/engineering-at-microsoft/generating-software-bills-of-materials-sboms-with-spdx-at-microsoft/

https://www.infoworld.com/article/2336159/build-sboms-with-microsofts-spdx-sbom-generator.html

https://medium.com/@susmeetajagtap/sbom-generation-tools-analysis-1fb6b0c49c0d

https://www.cybeats.com/blog/5-key-takeaways-from-microsoft-and-googles-webinar-on-sbom

@moljac moljac marked this pull request as draft November 21, 2024 22:25
@moljac moljac requested a review from jpobst November 22, 2024 11:53
@moljac moljac marked this pull request as ready for review November 22, 2024 11:53
@moljac
Copy link
Contributor Author

moljac commented Nov 22, 2024 

tree output/Xamarin.AndroidX.Core.1.15.0.1

content of the nuget

output/Xamarin.AndroidX.Core.1.15.0.1
├── LICENSE.md
├── THIRD-PARTY-NOTICES.txt
├── Xamarin.AndroidX.Core.nuspec
├── [Content_Types].xml
├── _manifest
│   └── spdx_2.2
│       ├── manifest.spdx.json
│       └── manifest.spdx.json.sha256
├── _rels
├── aar
│   └── androidx.core.core.aar
├── build
│   └── net8.0-android34.0
│       └── Xamarin.AndroidX.Core.targets
├── buildTransitive
│   └── net8.0-android34.0
│       └── Xamarin.AndroidX.Core.targets
├── icon.png
├── lib
│   └── net8.0-android34.0
│       ├── Xamarin.AndroidX.Core.dll
│       ├── Xamarin.AndroidX.Core.pdb
│       └── Xamarin.AndroidX.Core.xml
├── package
│   └── services
│       └── metadata
│           └── core-properties
│               └── c304aa1f70fe421f8a49353a94b30fab.psmdcp
├── proguard
│   └── proguard.txt
└── readme.md

16 directories, 16 files

content of the nuget SPDX SBOM manifest:

output/Xamarin.AndroidX.Core.1.15.0.1/_manifest/spdx_2.2/manifest.spdx.json

{
  "files": [
    {
      "fileName": "./LICENSE.md",
      "SPDXID": "SPDXRef-File--LICENSE.md-96D62CFA2D273D5C2D6FA61FBFA857CF42595CBF",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "679ccd0507abc67772af2d7187595b047352dd8be2b2240d1cef42ce143ddb58"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "96d62cfa2d273d5c2d6fa61fbfa857cf42595cbf"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./icon.png",
      "SPDXID": "SPDXRef-File--icon.png-7229B5BECEBBC51925AA2E08341DDB4BFB53F7AD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8fcf6f6cd575c0f8c643691765a7db2a4b3b104bfbff34646555f5ccffdb2895"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "7229b5becebbc51925aa2e08341ddb4bfb53f7ad"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./[Content_Types].xml",
      "SPDXID": "SPDXRef-File---Content-Types-.xml-507DA651EA342E4422B43932F64544C44A4F4560",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3bb6456aea4bdbff3d8613692ebde9fec44095c7ede9b68a24ca842f365e16a1"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "507da651ea342e4422b43932f64544c44a4f4560"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./readme.md",
      "SPDXID": "SPDXRef-File--readme.md-A5785264C11399F583CC8C8AE1FB5C5CF0FF8355",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "7879cfaa094c939a10ddf6e88b73d85c54dd227dbe9bae7bb201298743c7446c"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "a5785264c11399f583cc8c8ae1fb5c5cf0ff8355"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./THIRD-PARTY-NOTICES.txt",
      "SPDXID": "SPDXRef-File--THIRD-PARTY-NOTICES.txt-388C3154025C3C8B38B587950EC93AF0B99AA737",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c4573cb59cc9665e74ff8b1d48e712c8c65da1cd7990cdb97088187b82fa99ac"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "388c3154025c3c8b38b587950ec93af0b99aa737"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./Xamarin.AndroidX.Core.nuspec",
      "SPDXID": "SPDXRef-File--Xamarin.AndroidX.Core.nuspec-61543075F05417A430024AD87F0DF8D498231F6B",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "04839a5537be3af7b18a0bf0ad28a89e0396328bbb0502cedb0320be2e602a55"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "61543075f05417a430024ad87f0df8d498231f6b"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./buildTransitive/net8.0-android34.0/Xamarin.AndroidX.Core.targets",
      "SPDXID": "SPDXRef-File--buildTransitive-net8.0-android34.0-Xamarin.AndroidX.Core.targets-D738FBB66B220A2627BB40ED389C3369CCEF07AB",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a77d94961888dcfb801cb418a5bf22cc88b2f7a2ed8c0b04bdbbdb30d1a7eae7"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "d738fbb66b220a2627bb40ed389c3369ccef07ab"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./aar/androidx.core.core.aar",
      "SPDXID": "SPDXRef-File--aar-androidx.core.core.aar-E8D4C7EEED12403FDD2D5EF29A00EBE946D530D6",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "432b85a1974076e14b487ece4a28c59a84f1b9efc3fc8be72cd7f05d32055e51"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "e8d4c7eeed12403fdd2d5ef29a00ebe946d530d6"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./_rels/.rels",
      "SPDXID": "SPDXRef-File---rels-.rels-4978DC1860127E51370A5E63B500F5849C81CADE",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6a3e2b20c8fa972e1a210c6c8e1a0b8d163a30d48dfbc45814a70ae54eef3f40"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "4978dc1860127e51370a5e63b500f5849c81cade"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./lib/net8.0-android34.0/Xamarin.AndroidX.Core.xml",
      "SPDXID": "SPDXRef-File--lib-net8.0-android34.0-Xamarin.AndroidX.Core.xml-A79A92383FC29401D472AEEA00AEB7F13C0B5CEF",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c1731ed7203b273719e6d583172149d109d6b5c1331c6b2fbcf8daa3a092005b"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "a79a92383fc29401d472aeea00aeb7f13c0b5cef"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./lib/net8.0-android34.0/Xamarin.AndroidX.Core.pdb",
      "SPDXID": "SPDXRef-File--lib-net8.0-android34.0-Xamarin.AndroidX.Core.pdb-326C4756595D6F1A53069BA1F683DCB82EB2AE27",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "465fbd55f8cd6e55edc10502334f37efc0adf3632d4b46a307892ec1dc448345"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "326c4756595d6f1a53069ba1f683dcb82eb2ae27"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./proguard/proguard.txt",
      "SPDXID": "SPDXRef-File--proguard-proguard.txt-E6FC0B3C500039E86BC0F58006294BC36042A226",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8a01a87d269ba3e8e113fa5978459d5b45cf5c6318ea374a2d4dcb3452eb51cb"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "e6fc0b3c500039e86bc0f58006294bc36042a226"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./build/net8.0-android34.0/Xamarin.AndroidX.Core.targets",
      "SPDXID": "SPDXRef-File--build-net8.0-android34.0-Xamarin.AndroidX.Core.targets-D738FBB66B220A2627BB40ED389C3369CCEF07AB",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a77d94961888dcfb801cb418a5bf22cc88b2f7a2ed8c0b04bdbbdb30d1a7eae7"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "d738fbb66b220a2627bb40ed389c3369ccef07ab"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./package/services/metadata/core-properties/c304aa1f70fe421f8a49353a94b30fab.psmdcp",
      "SPDXID": "SPDXRef-File--package-services-metadata-core-properties-c304aa1f70fe421f8a49353a94b30fab.psmdcp-767173319928DD046D16EC5E88C537A6A45F55B3",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4544264e97ac6ef00cbdc5d708a63fc980b0db885c314c98e23d631a6f468fd6"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "767173319928dd046d16ec5e88c537a6a45f55b3"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./lib/net8.0-android34.0/Xamarin.AndroidX.Core.dll",
      "SPDXID": "SPDXRef-File--lib-net8.0-android34.0-Xamarin.AndroidX.Core.dll-A663C1756C1584C67D06E295E1CD989AB8F8154C",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "489b0e813514999738a1384ac97f96d8c9098f0bfb524df93861f450f7526c29"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "a663c1756c1584c67d06e295e1cd989ab8f8154c"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    }
  ],
  "packages": [
    {
      "name": "Xamarin.AndroidX.Core",
      "SPDXID": "SPDXRef-Package-06FC364E3C5900445F00410061571100764EDA322AE8C6698514CA447CB9B2DE",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "1.15.0.1",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/Xamarin.AndroidX.Core@1.15.0.1"
        }
      ],
      "supplier": "Organization: Microsoft"
    },
    {
      "name": "Microsoft.NET.ILLink.Tasks",
      "SPDXID": "SPDXRef-Package-B84F439F5F1D8181504001808BED8E35B93D9468972E1607A04B571DD24DA920",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "8.0.11",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/Microsoft.NET.ILLink.Tasks@8.0.11"
        }
      ],
      "supplier": "NOASSERTION"
    },
    {
      "name": "Microsoft.Sbom.Targets",
      "SPDXID": "SPDXRef-Package-7DAA0B3EDED3076AACC82E185C2A8B522D51C2079B97B13D8E6454E08E0A27CA",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "3.0.0",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/Microsoft.Sbom.Targets@3.0.0"
        }
      ],
      "supplier": "NOASSERTION"
    },
    {
      "name": "Xamarin.AndroidX.Core",
      "SPDXID": "SPDXRef-RootPackage",
      "downloadLocation": "NOASSERTION",
      "packageVerificationCode": {
        "packageVerificationCodeValue": "9497ff62308415e31384edaa293de8ee446edd0e"
      },
      "filesAnalyzed": true,
      "licenseConcluded": "NOASSERTION",
      "licenseInfoFromFiles": [
        "NOASSERTION"
      ],
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "1.0.0",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:swid/Microsoft/spdx.org/Xamarin.AndroidX.Core@1.0.0?tag_id=add20720-f4b2-41e8-a5ce-e4ad50596306"
        }
      ],
      "supplier": "Organization: Microsoft",
      "hasFiles": [
        "SPDXRef-File--package-services-metadata-core-properties-c304aa1f70fe421f8a49353a94b30fab.psmdcp-767173319928DD046D16EC5E88C537A6A45F55B3",
        "SPDXRef-File--proguard-proguard.txt-E6FC0B3C500039E86BC0F58006294BC36042A226",
        "SPDXRef-File--lib-net8.0-android34.0-Xamarin.AndroidX.Core.xml-A79A92383FC29401D472AEEA00AEB7F13C0B5CEF",
        "SPDXRef-File---rels-.rels-4978DC1860127E51370A5E63B500F5849C81CADE",
        "SPDXRef-File--lib-net8.0-android34.0-Xamarin.AndroidX.Core.dll-A663C1756C1584C67D06E295E1CD989AB8F8154C",
        "SPDXRef-File--buildTransitive-net8.0-android34.0-Xamarin.AndroidX.Core.targets-D738FBB66B220A2627BB40ED389C3369CCEF07AB",
        "SPDXRef-File--Xamarin.AndroidX.Core.nuspec-61543075F05417A430024AD87F0DF8D498231F6B",
        "SPDXRef-File--THIRD-PARTY-NOTICES.txt-388C3154025C3C8B38B587950EC93AF0B99AA737",
        "SPDXRef-File--build-net8.0-android34.0-Xamarin.AndroidX.Core.targets-D738FBB66B220A2627BB40ED389C3369CCEF07AB",
        "SPDXRef-File--lib-net8.0-android34.0-Xamarin.AndroidX.Core.pdb-326C4756595D6F1A53069BA1F683DCB82EB2AE27",
        "SPDXRef-File--aar-androidx.core.core.aar-E8D4C7EEED12403FDD2D5EF29A00EBE946D530D6",
        "SPDXRef-File--readme.md-A5785264C11399F583CC8C8AE1FB5C5CF0FF8355",
        "SPDXRef-File---Content-Types-.xml-507DA651EA342E4422B43932F64544C44A4F4560",
        "SPDXRef-File--icon.png-7229B5BECEBBC51925AA2E08341DDB4BFB53F7AD",
        "SPDXRef-File--LICENSE.md-96D62CFA2D273D5C2D6FA61FBFA857CF42595CBF"
      ]
    }
  ],
  "externalDocumentRefs": [],
  "relationships": [
    {
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-RootPackage",
      "spdxElementId": "SPDXRef-DOCUMENT"
    },
    {
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-7DAA0B3EDED3076AACC82E185C2A8B522D51C2079B97B13D8E6454E08E0A27CA",
      "spdxElementId": "SPDXRef-RootPackage"
    },
    {
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-B84F439F5F1D8181504001808BED8E35B93D9468972E1607A04B571DD24DA920",
      "spdxElementId": "SPDXRef-RootPackage"
    },
    {
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-06FC364E3C5900445F00410061571100764EDA322AE8C6698514CA447CB9B2DE",
      "spdxElementId": "SPDXRef-RootPackage"
    }
  ],
  "spdxVersion": "SPDX-2.2",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "Xamarin.AndroidX.Core 1.0.0",
  "documentNamespace": "http://spdx.org/spdxdocs/Xamarin.AndroidX.Core/Xamarin.AndroidX.Core/1.0.0/W1ryGiwB50uXSSsGTQN7Ag",
  "creationInfo": {
    "created": "2024-11-22T13:22:56Z",
    "creators": [
      "Organization: Microsoft",
      "Tool: Microsoft.SBOMTool-3.0.0"
    ]
  },
  "documentDescribes": [
    "SPDXRef-RootPackage"
  ]
}

@moljac
Copy link
Contributor Author

moljac commented Nov 22, 2024

Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.116.1.0.19.nupkg

{
  "files": [
    {
      "fileName": "./icon.png",
      "SPDXID": "SPDXRef-File--icon.png-7229B5BECEBBC51925AA2E08341DDB4BFB53F7AD",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8fcf6f6cd575c0f8c643691765a7db2a4b3b104bfbff34646555f5ccffdb2895"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "7229b5becebbc51925aa2e08341ddb4bfb53f7ad"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.nuspec",
      "SPDXID": "SPDXRef-File--Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.nuspec-2D8A165B90D403548BE985A17C0E447F941B7810",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "921158cb72c9a8ff492a5b3b777df8bcd8edbe06334f74b52e73b25cadbe2e35"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "2d8a165b90d403548be985a17c0e447f941b7810"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./readme.md",
      "SPDXID": "SPDXRef-File--readme.md-A3B56C1C4BE95FB4E1A0DC15E652119459548793",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6dcd3e0f33d9fd4fa94de03ddc19c25fc834904e99b8329ac746a02b24e6ea46"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "a3b56c1c4be95fb4e1a0dc15e652119459548793"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./LICENSE.md",
      "SPDXID": "SPDXRef-File--LICENSE.md-96D62CFA2D273D5C2D6FA61FBFA857CF42595CBF",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "679ccd0507abc67772af2d7187595b047352dd8be2b2240d1cef42ce143ddb58"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "96d62cfa2d273d5c2d6fa61fbfa857cf42595cbf"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./THIRD-PARTY-NOTICES.txt",
      "SPDXID": "SPDXRef-File--THIRD-PARTY-NOTICES.txt-932E1B6605CA181180152428C51D6B1F0CFF5A26",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "567049c1fe5798f6356854a400e24ae753c85c7b3c2a85de35aff259e64772f1"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "932e1b6605ca181180152428c51d6b1f0cff5a26"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./[Content_Types].xml",
      "SPDXID": "SPDXRef-File---Content-Types-.xml-82DF13B25A58194650B2AF01FE2C8EC6A35CC95C",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "a27ff91e21e8812083ae32b7c57f651ca6028cb659d856422e1fd03575c1c235"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "82df13b25a58194650b2af01fe2c8ec6a35cc95c"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./buildTransitive/net8.0-android34.0/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.targets",
      "SPDXID": "SPDXRef-File--buildTransitive-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.targets-A62E8BA5CF54541B7CA53A115305883829EBBC7D",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1f0a4d21f09c106ea49a3b7f98dd5abe57cc45ae205cf9654f905688d39dfa64"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "a62e8ba5cf54541b7ca53a115305883829ebbc7d"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./_rels/.rels",
      "SPDXID": "SPDXRef-File---rels-.rels-2774EFF502736ACF5660242845407D539E47D0D8",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3774503630698051908e698cdb13669597cd20c55729d8e38f266038a5248b7d"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "2774eff502736acf5660242845407d539e47d0d8"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./lib/net8.0-android34.0/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.dll",
      "SPDXID": "SPDXRef-File--lib-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.dll-3943002141FD0DECA26A05F70863C712D6889D13",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "fbc51503ef95b4c5f861a4eb03c4825fb0f382e335d1e14f8be5ac9ba4f7a865"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "3943002141fd0deca26a05f70863c712d6889d13"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./lib/net8.0-android34.0/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.pdb",
      "SPDXID": "SPDXRef-File--lib-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.pdb-7B7EDE31775911F61C4DE2148863D691D229B2E5",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "be8289b057ac85ddf3c87fdf2ffdf85503459beea7589b94e812534050ac651e"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "7b7ede31775911f61c4de2148863d691d229b2e5"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./lib/net8.0-android34.0/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.xml",
      "SPDXID": "SPDXRef-File--lib-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.xml-3AE2F6725C834A451B982AC6148734D50E147569",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "07cd74f2ae88085db7a4b9b033814b641de38b91573e5732770113c172ffa2d1"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "3ae2f6725c834a451b982ac6148734d50e147569"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./proguard/proguard.txt",
      "SPDXID": "SPDXRef-File--proguard-proguard.txt-BD3DEDDBA80C5F44D4218D8E3679DE7067B7A0A4",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b5ddf18c16f374b0769bd55803eba0b616ce7c509fb1d5040bc549ab9e954c7d"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "bd3deddba80c5f44d4218d8e3679de7067b7a0a4"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./package/services/metadata/core-properties/f15f5a1ec9bb4cba92e881a410e2f917.psmdcp",
      "SPDXID": "SPDXRef-File--package-services-metadata-core-properties-f15f5a1ec9bb4cba92e881a410e2f917.psmdcp-3222CC11C41A46A3361C1691AE6FD58E902E1132",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "773713b46429faca6e1faa59be933f5e42ca3cc705e46fdd7de2ed6c5d12ca23"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "3222cc11c41a46a3361c1691ae6fd58e902e1132"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    },
    {
      "fileName": "./build/net8.0-android34.0/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.targets",
      "SPDXID": "SPDXRef-File--build-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.targets-A62E8BA5CF54541B7CA53A115305883829EBBC7D",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "1f0a4d21f09c106ea49a3b7f98dd5abe57cc45ae205cf9654f905688d39dfa64"
        },
        {
          "algorithm": "SHA1",
          "checksumValue": "a62e8ba5cf54541b7ca53a115305883829ebbc7d"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": [
        "NOASSERTION"
      ],
      "copyrightText": "NOASSERTION"
    }
  ],
  "packages": [
    {
      "name": "Xamarin.GooglePlayServices.Vision.Face.Contour.Internal",
      "SPDXID": "SPDXRef-Package-4358EDB69A3BBB38BEE3F024A09FE4F4E331420EA71A38CB0EF9EE144E4AA333",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "116.1.0.19",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal@116.1.0.19"
        }
      ],
      "supplier": "Organization: Microsoft"
    },
    {
      "name": "Xamarin.Build.Download",
      "SPDXID": "SPDXRef-Package-830D6194587320E08E2C814A3D2B769796D78269127852695928DCA704E9B3FC",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "0.11.4",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/Xamarin.Build.Download@0.11.4"
        }
      ],
      "supplier": "NOASSERTION"
    },
    {
      "name": "Microsoft.NET.ILLink.Tasks",
      "SPDXID": "SPDXRef-Package-B84F439F5F1D8181504001808BED8E35B93D9468972E1607A04B571DD24DA920",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "8.0.11",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/Microsoft.NET.ILLink.Tasks@8.0.11"
        }
      ],
      "supplier": "NOASSERTION"
    },
    {
      "name": "Microsoft.Sbom.Targets",
      "SPDXID": "SPDXRef-Package-7DAA0B3EDED3076AACC82E185C2A8B522D51C2079B97B13D8E6454E08E0A27CA",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "3.0.0",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:nuget/Microsoft.Sbom.Targets@3.0.0"
        }
      ],
      "supplier": "NOASSERTION"
    },
    {
      "name": "Xamarin.GooglePlayServices.Vision.Face.Contour.Internal",
      "SPDXID": "SPDXRef-RootPackage",
      "downloadLocation": "NOASSERTION",
      "packageVerificationCode": {
        "packageVerificationCodeValue": "66001b49c207381e567f741980d0de727583fc32"
      },
      "filesAnalyzed": true,
      "licenseConcluded": "NOASSERTION",
      "licenseInfoFromFiles": [
        "NOASSERTION"
      ],
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "versionInfo": "1.0.0",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:swid/Microsoft/spdx.org/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal@1.0.0?tag_id=2604307f-8661-4392-8ff7-8a0937dcc3e3"
        }
      ],
      "supplier": "Organization: Microsoft",
      "hasFiles": [
        "SPDXRef-File--build-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.targets-A62E8BA5CF54541B7CA53A115305883829EBBC7D",
        "SPDXRef-File--lib-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.pdb-7B7EDE31775911F61C4DE2148863D691D229B2E5",
        "SPDXRef-File--lib-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.dll-3943002141FD0DECA26A05F70863C712D6889D13",
        "SPDXRef-File---rels-.rels-2774EFF502736ACF5660242845407D539E47D0D8",
        "SPDXRef-File--buildTransitive-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.targets-A62E8BA5CF54541B7CA53A115305883829EBBC7D",
        "SPDXRef-File---Content-Types-.xml-82DF13B25A58194650B2AF01FE2C8EC6A35CC95C",
        "SPDXRef-File--proguard-proguard.txt-BD3DEDDBA80C5F44D4218D8E3679DE7067B7A0A4",
        "SPDXRef-File--lib-net8.0-android34.0-Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.xml-3AE2F6725C834A451B982AC6148734D50E147569",
        "SPDXRef-File--THIRD-PARTY-NOTICES.txt-932E1B6605CA181180152428C51D6B1F0CFF5A26",
        "SPDXRef-File--LICENSE.md-96D62CFA2D273D5C2D6FA61FBFA857CF42595CBF",
        "SPDXRef-File--package-services-metadata-core-properties-f15f5a1ec9bb4cba92e881a410e2f917.psmdcp-3222CC11C41A46A3361C1691AE6FD58E902E1132",
        "SPDXRef-File--readme.md-A3B56C1C4BE95FB4E1A0DC15E652119459548793",
        "SPDXRef-File--Xamarin.GooglePlayServices.Vision.Face.Contour.Internal.nuspec-2D8A165B90D403548BE985A17C0E447F941B7810",
        "SPDXRef-File--icon.png-7229B5BECEBBC51925AA2E08341DDB4BFB53F7AD"
      ]
    }
  ],
  "externalDocumentRefs": [],
  "relationships": [
    {
      "relationshipType": "DESCRIBES",
      "relatedSpdxElement": "SPDXRef-RootPackage",
      "spdxElementId": "SPDXRef-DOCUMENT"
    },
    {
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-7DAA0B3EDED3076AACC82E185C2A8B522D51C2079B97B13D8E6454E08E0A27CA",
      "spdxElementId": "SPDXRef-RootPackage"
    },
    {
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-B84F439F5F1D8181504001808BED8E35B93D9468972E1607A04B571DD24DA920",
      "spdxElementId": "SPDXRef-RootPackage"
    },
    {
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-830D6194587320E08E2C814A3D2B769796D78269127852695928DCA704E9B3FC",
      "spdxElementId": "SPDXRef-RootPackage"
    },
    {
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-Package-4358EDB69A3BBB38BEE3F024A09FE4F4E331420EA71A38CB0EF9EE144E4AA333",
      "spdxElementId": "SPDXRef-RootPackage"
    }
  ],
  "spdxVersion": "SPDX-2.2",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "Xamarin.GooglePlayServices.Vision.Face.Contour.Internal 1.0.0",
  "documentNamespace": "http://spdx.org/spdxdocs/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal/Xamarin.GooglePlayServices.Vision.Face.Contour.Internal/1.0.0/cjhtboc_OUSCIIEnguFOzg",
  "creationInfo": {
    "created": "2024-11-22T13:25:39Z",
    "creators": [
      "Organization: Microsoft",
      "Tool: Microsoft.SBOMTool-3.0.0"
    ]
  },
  "documentDescribes": [
    "SPDXRef-RootPackage"
  ]
}

@moljac moljac merged commit 0e43932 into main Nov 22, 2024
6 checks passed
@moljac moljac deleted the mu-20241120-nuget-sbom branch November 22, 2024 22:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jpobst jpobst jpobst approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@moljac @jpobst