{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:51069d7a-2847-405b-bb91-2ad56bf00c43",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-26T13:45:44Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "author": "anchore",
          "name": "syft",
          "version": "1.51.0"
        }
      ]
    },
    "component": {
      "bom-ref": "f8d5f215d74ccd26",
      "type": "container",
      "name": "/w/image.tar",
      "version": "sha256:a3c20fc9524422aeb3eba68cfa3e9bdb7c250023f93061652547490bca71bf9f"
    },
    "properties": [
      {
        "name": "syft:image:labels:io.buildah.version",
        "value": "1.43.2"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.description",
        "value": "The GNU core utilities: the basic file, shell and text manipulation tools"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.source",
        "value": "https://index.kapsl.sh"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.title",
        "value": "coreutils-core"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.vendor",
        "value": "kapsl"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.version",
        "value": "9.7"
      },
      {
        "name": "syft:image:labels:sh.kapsl.prefix",
        "value": "/kapsl/dist/coreutils-core-9.7"
      },
      {
        "name": "syft:image:labels:sh.kapsl.project",
        "value": "coreutils"
      },
      {
        "name": "syft:image:labels:sh.kapsl.source-url",
        "value": "https://www.gnu.org/software/coreutils/"
      },
      {
        "name": "syft:image:labels:sh.kapsl.version",
        "value": "9.7"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:deb/ubuntu/attr@1%3A2.5.2-4?distro=ubuntu&package-id=7d8b33ef655b7827",
      "type": "library",
      "name": "attr",
      "version": "1:2.5.2-4",
      "cpe": "cpe:2.3:a:attr:attr:1\\:2.5.2-4:*:*:*:*:*:*:*",
      "purl": "pkg:deb/ubuntu/attr@1%3A2.5.2-4?distro=ubuntu-26.04",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "elf-binary-package-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "elf-binary-package-note-json-payload"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/libattr.so.1"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/ubuntu/coreutils@9.7-3ubuntu2?distro=ubuntu&package-id=3a01f2f3552f8444",
      "type": "library",
      "name": "coreutils",
      "version": "9.7-3ubuntu2",
      "cpe": "cpe:2.3:a:coreutils:coreutils:9.7-3ubuntu2:*:*:*:*:*:*:*",
      "purl": "pkg:deb/ubuntu/coreutils@9.7-3ubuntu2?distro=ubuntu-26.04",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "elf-binary-package-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "elf-binary-package-note-json-payload"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/base64"
        },
        {
          "name": "syft:location:10:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:10:path",
          "value": "/bin/dirname"
        },
        {
          "name": "syft:location:11:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:11:path",
          "value": "/bin/du"
        },
        {
          "name": "syft:location:12:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:12:path",
          "value": "/bin/echo"
        },
        {
          "name": "syft:location:13:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:13:path",
          "value": "/bin/env"
        },
        {
          "name": "syft:location:14:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:14:path",
          "value": "/bin/false"
        },
        {
          "name": "syft:location:15:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:15:path",
          "value": "/bin/head"
        },
        {
          "name": "syft:location:16:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:16:path",
          "value": "/bin/id"
        },
        {
          "name": "syft:location:17:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:17:path",
          "value": "/bin/install"
        },
        {
          "name": "syft:location:18:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:18:path",
          "value": "/bin/ln"
        },
        {
          "name": "syft:location:19:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:19:path",
          "value": "/bin/ls"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:1:path",
          "value": "/bin/basename"
        },
        {
          "name": "syft:location:20:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:20:path",
          "value": "/bin/mkdir"
        },
        {
          "name": "syft:location:21:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:21:path",
          "value": "/bin/mktemp"
        },
        {
          "name": "syft:location:22:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:22:path",
          "value": "/bin/mv"
        },
        {
          "name": "syft:location:23:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:23:path",
          "value": "/bin/nproc"
        },
        {
          "name": "syft:location:24:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:24:path",
          "value": "/bin/printf"
        },
        {
          "name": "syft:location:25:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:25:path",
          "value": "/bin/pwd"
        },
        {
          "name": "syft:location:26:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:26:path",
          "value": "/bin/readlink"
        },
        {
          "name": "syft:location:27:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:27:path",
          "value": "/bin/realpath"
        },
        {
          "name": "syft:location:28:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:28:path",
          "value": "/bin/rm"
        },
        {
          "name": "syft:location:29:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:29:path",
          "value": "/bin/rmdir"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:2:path",
          "value": "/bin/cat"
        },
        {
          "name": "syft:location:30:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:30:path",
          "value": "/bin/seq"
        },
        {
          "name": "syft:location:31:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:31:path",
          "value": "/bin/sleep"
        },
        {
          "name": "syft:location:32:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:32:path",
          "value": "/bin/sort"
        },
        {
          "name": "syft:location:33:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:33:path",
          "value": "/bin/stat"
        },
        {
          "name": "syft:location:34:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:34:path",
          "value": "/bin/sync"
        },
        {
          "name": "syft:location:35:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:35:path",
          "value": "/bin/tail"
        },
        {
          "name": "syft:location:36:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:36:path",
          "value": "/bin/tee"
        },
        {
          "name": "syft:location:37:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:37:path",
          "value": "/bin/test"
        },
        {
          "name": "syft:location:38:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:38:path",
          "value": "/bin/timeout"
        },
        {
          "name": "syft:location:39:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:39:path",
          "value": "/bin/touch"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:3:path",
          "value": "/bin/chgrp"
        },
        {
          "name": "syft:location:40:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:40:path",
          "value": "/bin/tr"
        },
        {
          "name": "syft:location:41:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:41:path",
          "value": "/bin/true"
        },
        {
          "name": "syft:location:42:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:42:path",
          "value": "/bin/uname"
        },
        {
          "name": "syft:location:43:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:43:path",
          "value": "/bin/uniq"
        },
        {
          "name": "syft:location:44:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:44:path",
          "value": "/bin/wc"
        },
        {
          "name": "syft:location:45:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:45:path",
          "value": "/bin/whoami"
        },
        {
          "name": "syft:location:46:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:46:path",
          "value": "/bin/yes"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:4:path",
          "value": "/bin/chmod"
        },
        {
          "name": "syft:location:5:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:5:path",
          "value": "/bin/chown"
        },
        {
          "name": "syft:location:6:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:6:path",
          "value": "/bin/cp"
        },
        {
          "name": "syft:location:7:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:7:path",
          "value": "/bin/cut"
        },
        {
          "name": "syft:location:8:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:8:path",
          "value": "/bin/date"
        },
        {
          "name": "syft:location:9:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:9:path",
          "value": "/bin/df"
        },
        {
          "name": "syft:location:47:path",
          "value": "/lib/libacl.so.1"
        },
        {
          "name": "syft:location:48:path",
          "value": "/share/man/man1/base64.1.gz"
        },
        {
          "name": "syft:location:49:path",
          "value": "/share/man/man1/basename.1.gz"
        },
        {
          "name": "syft:location:50:path",
          "value": "/share/man/man1/cat.1.gz"
        },
        {
          "name": "syft:location:51:path",
          "value": "/share/man/man1/chgrp.1.gz"
        },
        {
          "name": "syft:location:52:path",
          "value": "/share/man/man1/chmod.1.gz"
        },
        {
          "name": "syft:location:53:path",
          "value": "/share/man/man1/chown.1.gz"
        },
        {
          "name": "syft:location:54:path",
          "value": "/share/man/man1/cp.1.gz"
        },
        {
          "name": "syft:location:55:path",
          "value": "/share/man/man1/cut.1.gz"
        },
        {
          "name": "syft:location:56:path",
          "value": "/share/man/man1/date.1.gz"
        },
        {
          "name": "syft:location:57:path",
          "value": "/share/man/man1/df.1.gz"
        },
        {
          "name": "syft:location:58:path",
          "value": "/share/man/man1/dirname.1.gz"
        },
        {
          "name": "syft:location:59:path",
          "value": "/share/man/man1/du.1.gz"
        },
        {
          "name": "syft:location:60:path",
          "value": "/share/man/man1/echo.1.gz"
        },
        {
          "name": "syft:location:61:path",
          "value": "/share/man/man1/env.1.gz"
        },
        {
          "name": "syft:location:62:path",
          "value": "/share/man/man1/false.1.gz"
        },
        {
          "name": "syft:location:63:path",
          "value": "/share/man/man1/head.1.gz"
        },
        {
          "name": "syft:location:64:path",
          "value": "/share/man/man1/id.1.gz"
        },
        {
          "name": "syft:location:65:path",
          "value": "/share/man/man1/install.1.gz"
        },
        {
          "name": "syft:location:66:path",
          "value": "/share/man/man1/ln.1.gz"
        },
        {
          "name": "syft:location:67:path",
          "value": "/share/man/man1/ls.1.gz"
        },
        {
          "name": "syft:location:68:path",
          "value": "/share/man/man1/mkdir.1.gz"
        },
        {
          "name": "syft:location:69:path",
          "value": "/share/man/man1/mktemp.1.gz"
        },
        {
          "name": "syft:location:70:path",
          "value": "/share/man/man1/mv.1.gz"
        },
        {
          "name": "syft:location:71:path",
          "value": "/share/man/man1/nproc.1.gz"
        },
        {
          "name": "syft:location:72:path",
          "value": "/share/man/man1/printf.1.gz"
        },
        {
          "name": "syft:location:73:path",
          "value": "/share/man/man1/pwd.1.gz"
        },
        {
          "name": "syft:location:74:path",
          "value": "/share/man/man1/readlink.1.gz"
        },
        {
          "name": "syft:location:75:path",
          "value": "/share/man/man1/realpath.1.gz"
        },
        {
          "name": "syft:location:76:path",
          "value": "/share/man/man1/rm.1.gz"
        },
        {
          "name": "syft:location:77:path",
          "value": "/share/man/man1/rmdir.1.gz"
        },
        {
          "name": "syft:location:78:path",
          "value": "/share/man/man1/seq.1.gz"
        },
        {
          "name": "syft:location:79:path",
          "value": "/share/man/man1/sleep.1.gz"
        },
        {
          "name": "syft:location:80:path",
          "value": "/share/man/man1/sort.1.gz"
        },
        {
          "name": "syft:location:81:path",
          "value": "/share/man/man1/stat.1.gz"
        },
        {
          "name": "syft:location:82:path",
          "value": "/share/man/man1/sync.1.gz"
        },
        {
          "name": "syft:location:83:path",
          "value": "/share/man/man1/tail.1.gz"
        },
        {
          "name": "syft:location:84:path",
          "value": "/share/man/man1/tee.1.gz"
        },
        {
          "name": "syft:location:85:path",
          "value": "/share/man/man1/test.1.gz"
        },
        {
          "name": "syft:location:86:path",
          "value": "/share/man/man1/timeout.1.gz"
        },
        {
          "name": "syft:location:87:path",
          "value": "/share/man/man1/touch.1.gz"
        },
        {
          "name": "syft:location:88:path",
          "value": "/share/man/man1/tr.1.gz"
        },
        {
          "name": "syft:location:89:path",
          "value": "/share/man/man1/true.1.gz"
        },
        {
          "name": "syft:location:90:path",
          "value": "/share/man/man1/uname.1.gz"
        },
        {
          "name": "syft:location:91:path",
          "value": "/share/man/man1/uniq.1.gz"
        },
        {
          "name": "syft:location:92:path",
          "value": "/share/man/man1/wc.1.gz"
        },
        {
          "name": "syft:location:93:path",
          "value": "/share/man/man1/whoami.1.gz"
        },
        {
          "name": "syft:location:94:path",
          "value": "/share/man/man1/yes.1.gz"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/ubuntu/libselinux@3.9-4build1?distro=ubuntu&package-id=09c005ba98ee919e",
      "type": "library",
      "name": "libselinux",
      "version": "3.9-4build1",
      "cpe": "cpe:2.3:a:libselinux:libselinux:3.9-4build1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/ubuntu/libselinux@3.9-4build1?distro=ubuntu-26.04",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "elf-binary-package-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "elf-binary-package-note-json-payload"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/libselinux.so.1"
        }
      ]
    },
    {
      "bom-ref": "pkg:deb/ubuntu/pcre2@10.46-1build1?distro=ubuntu&package-id=29a57abe53049143",
      "type": "library",
      "name": "pcre2",
      "version": "10.46-1build1",
      "cpe": "cpe:2.3:a:pcre2:pcre2:10.46-1build1:*:*:*:*:*:*:*",
      "purl": "pkg:deb/ubuntu/pcre2@10.46-1build1?distro=ubuntu-26.04",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "elf-binary-package-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "deb"
        },
        {
          "name": "syft:package:metadataType",
          "value": "elf-binary-package-note-json-payload"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:85a4f3977729d89e9035e7838dfa855f0266a6a8ad4963f4a1a57adeda2d4b82"
        },
        {
          "name": "syft:location:0:path",
          "value": "/lib/libpcre2-8.so.0"
        }
      ]
    },
    {
      "type": "library",
      "name": "acl",
      "version": "2.3.2-2",
      "purl": "pkg:deb/ubuntu/acl@2.3.2-2?distro=ubuntu-26.04",
      "properties": [
        {
          "name": "kapsl:attribution",
          "value": "1 file(s) from libacl1"
        }
      ]
    }
  ]
}