{"SPDXID":"SPDXRef-DOCUMENT","creationInfo":{"created":"2026-10-13T04:22:31Z","creators":["Tool: kadet-hub release/sbom.py"]},"dataLicense":"CC0-1.0","documentDescribes":["SPDXRef-Package"],"documentNamespace":"https://kadet-hub.org/spdx/flux/1.0.0/58203c7658e6a02c618b31d59c8f181f1471b5e550d3525e7a24de7e475e580a","files":[{"SPDXID":"SPDXRef-File-06572a96a58dc510","checksums":[{"algorithm":"SHA1","checksumValue":"9d988e7097073740346b189d6e8fbcf7d35f4b57"},{"algorithm":"SHA256","checksumValue":"91b7460ba1b8761432dbf104124d4bca9a9b88e3b87d75b8ade23a35b8c45c11"}],"copyrightText":"NOASSERTION","fileName":"./CHANGELOG.md","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-b335630551682c19","checksums":[{"algorithm":"SHA1","checksumValue":"ea258f9e9bec6b1b2cb9979f14b94b25ff1e2758"},{"algorithm":"SHA256","checksumValue":"7ae931aed67e11eae3ef25d94c97b76264c6e254730750638ed494a00e076da6"}],"copyrightText":"NOASSERTION","fileName":"./README.md","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-8e2c1f727276d30c","checksums":[{"algorithm":"SHA1","checksumValue":"15383dde93786e6d6ce67ee12e0acd4c2266c893"},{"algorithm":"SHA256","checksumValue":"1930c4d8264c1ff20fd9ca1cff70730189012141719b3b070cd933d451ddc2ea"}],"copyrightText":"NOASSERTION","fileName":"./__init__.py","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-e0ddc7392950f797","checksums":[{"algorithm":"SHA1","checksumValue":"0dd16bbd07a35494db3a31e9e2f32cea5ec0f18c"},{"algorithm":"SHA256","checksumValue":"2b80a82e3210e228ae389c828ddd3700a72b11c8712cb06fc71e307ef613bf98"}],"copyrightText":"NOASSERTION","fileName":"./kapitan-generator.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-06038ce211333d08","checksums":[{"algorithm":"SHA1","checksumValue":"b34883b7fadedfcfaf5e59427c600dc939f2583a"},{"algorithm":"SHA256","checksumValue":"e386d5419d5a1a9914c18ecc5cc6f6b3a1a797c3111acdfe84cb0dc0fab3f830"}],"copyrightText":"NOASSERTION","fileName":"./schemas/helm.toolkit.fluxcd.io/helmrelease_v2.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-c3b1c0a8db1a00dc","checksums":[{"algorithm":"SHA1","checksumValue":"4e37605f83b0edf65b40f4ea0c39315091b6f517"},{"algorithm":"SHA256","checksumValue":"efae0faab85147ea64087308f85dfd7cac7c06f65e09b2bcc4f1982bbe2b7f17"}],"copyrightText":"NOASSERTION","fileName":"./schemas/kustomize.toolkit.fluxcd.io/kustomization_v1.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-aa5c88f6bd25e195","checksums":[{"algorithm":"SHA1","checksumValue":"c8b152d34f579e4d74c346ee76ad7bf0383972cf"},{"algorithm":"SHA256","checksumValue":"b0f41940813cdc62db544349d3a40f7be4f9645fac591a0867f09e4cf27cc37c"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/gitrepository_v1.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-1f0176d9b467042d","checksums":[{"algorithm":"SHA1","checksumValue":"e190754296a7c44576fee3da60b5cf5558e7c883"},{"algorithm":"SHA256","checksumValue":"0a9efe26a2f26be40a8f11b4d610a807f33a0d612d8a9f0ea1c8d08d5e351bcd"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/helmrepository_v1.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-f7fd5d907e544821","checksums":[{"algorithm":"SHA1","checksumValue":"1fc17e85a431d21375d8d084e4862dffcc05a1bd"},{"algorithm":"SHA256","checksumValue":"f01bfa52236f65c8426f7bdf0a77f7970bacd93d241096dcb3779d93ee3435f8"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/ocirepository_v1.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-8939ee57aa7eb3b0","checksums":[{"algorithm":"SHA1","checksumValue":"f679d8cd90f1ab637b17ee18c4cb05c592b3e791"},{"algorithm":"SHA256","checksumValue":"32265903b4ddf9e00f86ad736b2ae66865a51bd72017df5bf51530da8a17424c"}],"copyrightText":"NOASSERTION","fileName":"./schemas/sources.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-837bf4e01a453d47","checksums":[{"algorithm":"SHA1","checksumValue":"da39a3ee5e6b4b0d3255bfef95601890afd80709"},{"algorithm":"SHA256","checksumValue":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"}],"copyrightText":"NOASSERTION","fileName":"./tests/fixtures/inventory/classes/.gitkeep","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-4a169fec4a5ee765","checksums":[{"algorithm":"SHA1","checksumValue":"7c8fe2856a4b397f5ba0bb77aa710697acc368e6"},{"algorithm":"SHA256","checksumValue":"b0bda65e44384d3392838a6c481734072e87016d2f94dfa765a519f01343abce"}],"copyrightText":"NOASSERTION","fileName":"./tests/fixtures/inventory/targets/complete.yml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-f8a4edaedb8f3f37","checksums":[{"algorithm":"SHA1","checksumValue":"085311f36308efadda86992292c54bacc2560e89"},{"algorithm":"SHA256","checksumValue":"17c81fcd1be407bb8acba03ff6181bc159d03c0d9899b524159f983ae39411b1"}],"copyrightText":"NOASSERTION","fileName":"./tests/fixtures/inventory/targets/minimal.yml","licenseConcluded":"NOASSERTION"}],"name":"ghcr.io/kadet-hub/flux@sha256:58203c7658e6a02c618b31d59c8f181f1471b5e550d3525e7a24de7e475e580a","packages":[{"SPDXID":"SPDXRef-Package","copyrightText":"NOASSERTION","downloadLocation":"git+https://github.com/kadet-hub/generators.git@572dda58b592673020f4a8d97142d1cdd2125440#flux","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceLocator":"pkg:oci/flux@sha256%3A58203c7658e6a02c618b31d59c8f181f1471b5e550d3525e7a24de7e475e580a?repository_url=ghcr.io/kadet-hub/flux\u0026tag=1.0.0","referenceType":"purl"}],"filesAnalyzed":true,"hasFiles":["SPDXRef-File-06572a96a58dc510","SPDXRef-File-b335630551682c19","SPDXRef-File-8e2c1f727276d30c","SPDXRef-File-e0ddc7392950f797","SPDXRef-File-06038ce211333d08","SPDXRef-File-c3b1c0a8db1a00dc","SPDXRef-File-aa5c88f6bd25e195","SPDXRef-File-1f0176d9b467042d","SPDXRef-File-f7fd5d907e544821","SPDXRef-File-8939ee57aa7eb3b0","SPDXRef-File-837bf4e01a453d47","SPDXRef-File-4a169fec4a5ee765","SPDXRef-File-f8a4edaedb8f3f37"],"licenseConcluded":"NOASSERTION","licenseDeclared":"Apache-2.0","name":"flux","packageVerificationCode":{"packageVerificationCodeValue":"7bcdfc2f5ab18fa19d6dbf2d5f5fb2586b0a86c5"},"summary":"Renders Flux GitRepositories, OCIRepositories, HelmRepositories, Kustomizations and HelmReleases from inventory parameters, linking each consumer to its source by name.","versionInfo":"1.0.0"}],"relationships":[{"relatedSpdxElement":"SPDXRef-Package","relationshipType":"DESCRIBES","spdxElementId":"SPDXRef-DOCUMENT"},{"relatedSpdxElement":"SPDXRef-File-06572a96a58dc510","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-b335630551682c19","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-8e2c1f727276d30c","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-e0ddc7392950f797","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-06038ce211333d08","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-c3b1c0a8db1a00dc","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-aa5c88f6bd25e195","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-1f0176d9b467042d","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-f7fd5d907e544821","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-8939ee57aa7eb3b0","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-837bf4e01a453d47","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-4a169fec4a5ee765","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-f8a4edaedb8f3f37","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"}],"spdxVersion":"SPDX-2.3"}