{"SPDXID":"SPDXRef-DOCUMENT","creationInfo":{"created":"2026-10-14T11:18:37Z","creators":["Tool: kadet-hub release/sbom.py"]},"dataLicense":"CC0-1.0","documentDescribes":["SPDXRef-Package"],"documentNamespace":"https://kadet-hub.org/spdx/flux/1.0.1/2d92417b8066d3f2317e5029402bfb7a4869a4f65ab34cb4e0c68dfdf1eb4a89","files":[{"SPDXID":"SPDXRef-File-06572a96a58dc510","checksums":[{"algorithm":"SHA1","checksumValue":"674c5c7fda7b5c4162b282218cbe6f2f9325ac7c"},{"algorithm":"SHA256","checksumValue":"f38bba21de29e4cffda402c6ded98b29b14cbd76846872dcc7594fa5bcd18669"}],"copyrightText":"NOASSERTION","fileName":"./CHANGELOG.md","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-b335630551682c19","checksums":[{"algorithm":"SHA1","checksumValue":"ea258f9e9bec6b1b2cb9979f14b94b25ff1e2758"},{"algorithm":"SHA256","checksumValue":"7ae931aed67e11eae3ef25d94c97b76264c6e254730750638ed494a00e076da6"}],"copyrightText":"NOASSERTION","fileName":"./README.md","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-8e2c1f727276d30c","checksums":[{"algorithm":"SHA1","checksumValue":"1308cc657441322ec96f34701d4eb590666929f9"},{"algorithm":"SHA256","checksumValue":"d2f5c94ea4847acb15af0044a6f6a424cef8350c8fd9f8bc8d1cdd58e047f186"}],"copyrightText":"NOASSERTION","fileName":"./__init__.py","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-e0ddc7392950f797","checksums":[{"algorithm":"SHA1","checksumValue":"0dd16bbd07a35494db3a31e9e2f32cea5ec0f18c"},{"algorithm":"SHA256","checksumValue":"2b80a82e3210e228ae389c828ddd3700a72b11c8712cb06fc71e307ef613bf98"}],"copyrightText":"NOASSERTION","fileName":"./kapitan-generator.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-bb9f9752406ec6a1","checksums":[{"algorithm":"SHA1","checksumValue":"97217bca6e386723c5e30517d58af64d0bd4f099"},{"algorithm":"SHA256","checksumValue":"aa8638ac68465ceac1f93a617baf5be833c589c51fd78a7384a4a274c252becc"}],"copyrightText":"NOASSERTION","fileName":"./schemas/helm.toolkit.fluxcd.io/crds/helmreleases.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-06038ce211333d08","checksums":[{"algorithm":"SHA1","checksumValue":"b34883b7fadedfcfaf5e59427c600dc939f2583a"},{"algorithm":"SHA256","checksumValue":"e386d5419d5a1a9914c18ecc5cc6f6b3a1a797c3111acdfe84cb0dc0fab3f830"}],"copyrightText":"NOASSERTION","fileName":"./schemas/helm.toolkit.fluxcd.io/helmrelease_v2.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-3c45ea2a47fd1081","checksums":[{"algorithm":"SHA1","checksumValue":"65280db8001be419e9fe3d230abec2239376502f"},{"algorithm":"SHA256","checksumValue":"da23ca0e6b4c80d3d26a91583137491e147ef4ef1e2208aece0d0af4ef851974"}],"copyrightText":"NOASSERTION","fileName":"./schemas/kustomize.toolkit.fluxcd.io/crds/kustomizations.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-c3b1c0a8db1a00dc","checksums":[{"algorithm":"SHA1","checksumValue":"4e37605f83b0edf65b40f4ea0c39315091b6f517"},{"algorithm":"SHA256","checksumValue":"efae0faab85147ea64087308f85dfd7cac7c06f65e09b2bcc4f1982bbe2b7f17"}],"copyrightText":"NOASSERTION","fileName":"./schemas/kustomize.toolkit.fluxcd.io/kustomization_v1.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-50f80a167085c45b","checksums":[{"algorithm":"SHA1","checksumValue":"795414e4f259495111e64718031e78177e8e6a35"},{"algorithm":"SHA256","checksumValue":"bd0c08183287b2eea0d885751fc686bc4b2b583e919de6bd57859170b8d1727f"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/crds/gitrepositories.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-b2f354e30fc2c5a9","checksums":[{"algorithm":"SHA1","checksumValue":"23beb6283d40f45ac6685eb9f223ceb2e1133af4"},{"algorithm":"SHA256","checksumValue":"0f3c34df4a25c88c7ad7825ada26d696aa53d92ec2c0ca540e1f9a05db247fa9"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/crds/helmrepositories.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-de1b1c4c96bedc54","checksums":[{"algorithm":"SHA1","checksumValue":"1732c1dd9e495b8a065b4e9d20585185f76cc588"},{"algorithm":"SHA256","checksumValue":"80c7c6e5c8de0764cc83acd4de5c74bea8e51186085304d22cecc5f2eb35500e"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/crds/ocirepositories.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-aa5c88f6bd25e195","checksums":[{"algorithm":"SHA1","checksumValue":"c8b152d34f579e4d74c346ee76ad7bf0383972cf"},{"algorithm":"SHA256","checksumValue":"b0f41940813cdc62db544349d3a40f7be4f9645fac591a0867f09e4cf27cc37c"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/gitrepository_v1.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-1f0176d9b467042d","checksums":[{"algorithm":"SHA1","checksumValue":"e190754296a7c44576fee3da60b5cf5558e7c883"},{"algorithm":"SHA256","checksumValue":"0a9efe26a2f26be40a8f11b4d610a807f33a0d612d8a9f0ea1c8d08d5e351bcd"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/helmrepository_v1.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-f7fd5d907e544821","checksums":[{"algorithm":"SHA1","checksumValue":"1fc17e85a431d21375d8d084e4862dffcc05a1bd"},{"algorithm":"SHA256","checksumValue":"f01bfa52236f65c8426f7bdf0a77f7970bacd93d241096dcb3779d93ee3435f8"}],"copyrightText":"NOASSERTION","fileName":"./schemas/source.toolkit.fluxcd.io/ocirepository_v1.json","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-8939ee57aa7eb3b0","checksums":[{"algorithm":"SHA1","checksumValue":"f679d8cd90f1ab637b17ee18c4cb05c592b3e791"},{"algorithm":"SHA256","checksumValue":"32265903b4ddf9e00f86ad736b2ae66865a51bd72017df5bf51530da8a17424c"}],"copyrightText":"NOASSERTION","fileName":"./schemas/sources.yaml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-837bf4e01a453d47","checksums":[{"algorithm":"SHA1","checksumValue":"da39a3ee5e6b4b0d3255bfef95601890afd80709"},{"algorithm":"SHA256","checksumValue":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"}],"copyrightText":"NOASSERTION","fileName":"./tests/fixtures/inventory/classes/.gitkeep","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-4a169fec4a5ee765","checksums":[{"algorithm":"SHA1","checksumValue":"7c8fe2856a4b397f5ba0bb77aa710697acc368e6"},{"algorithm":"SHA256","checksumValue":"b0bda65e44384d3392838a6c481734072e87016d2f94dfa765a519f01343abce"}],"copyrightText":"NOASSERTION","fileName":"./tests/fixtures/inventory/targets/complete.yml","licenseConcluded":"NOASSERTION"},{"SPDXID":"SPDXRef-File-f8a4edaedb8f3f37","checksums":[{"algorithm":"SHA1","checksumValue":"085311f36308efadda86992292c54bacc2560e89"},{"algorithm":"SHA256","checksumValue":"17c81fcd1be407bb8acba03ff6181bc159d03c0d9899b524159f983ae39411b1"}],"copyrightText":"NOASSERTION","fileName":"./tests/fixtures/inventory/targets/minimal.yml","licenseConcluded":"NOASSERTION"}],"name":"ghcr.io/kadet-hub/flux@sha256:2d92417b8066d3f2317e5029402bfb7a4869a4f65ab34cb4e0c68dfdf1eb4a89","packages":[{"SPDXID":"SPDXRef-Package","copyrightText":"NOASSERTION","downloadLocation":"git+https://github.com/kadet-hub/generators.git@e4891e8fd85ca0a19ebf361e8b54fd6473fd8a2f#flux","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceLocator":"pkg:oci/flux@sha256%3A2d92417b8066d3f2317e5029402bfb7a4869a4f65ab34cb4e0c68dfdf1eb4a89?repository_url=ghcr.io/kadet-hub/flux\u0026tag=1.0.1","referenceType":"purl"}],"filesAnalyzed":true,"hasFiles":["SPDXRef-File-06572a96a58dc510","SPDXRef-File-b335630551682c19","SPDXRef-File-8e2c1f727276d30c","SPDXRef-File-e0ddc7392950f797","SPDXRef-File-bb9f9752406ec6a1","SPDXRef-File-06038ce211333d08","SPDXRef-File-3c45ea2a47fd1081","SPDXRef-File-c3b1c0a8db1a00dc","SPDXRef-File-50f80a167085c45b","SPDXRef-File-b2f354e30fc2c5a9","SPDXRef-File-de1b1c4c96bedc54","SPDXRef-File-aa5c88f6bd25e195","SPDXRef-File-1f0176d9b467042d","SPDXRef-File-f7fd5d907e544821","SPDXRef-File-8939ee57aa7eb3b0","SPDXRef-File-837bf4e01a453d47","SPDXRef-File-4a169fec4a5ee765","SPDXRef-File-f8a4edaedb8f3f37"],"licenseConcluded":"NOASSERTION","licenseDeclared":"Apache-2.0","name":"flux","packageVerificationCode":{"packageVerificationCodeValue":"b37ed1b9145f2ae8734e2ae95e9ae7d59de26437"},"summary":"Renders Flux GitRepositories, OCIRepositories, HelmRepositories, Kustomizations and HelmReleases from inventory parameters, linking each consumer to its source by name.","versionInfo":"1.0.1"}],"relationships":[{"relatedSpdxElement":"SPDXRef-Package","relationshipType":"DESCRIBES","spdxElementId":"SPDXRef-DOCUMENT"},{"relatedSpdxElement":"SPDXRef-File-06572a96a58dc510","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-b335630551682c19","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-8e2c1f727276d30c","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-e0ddc7392950f797","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-bb9f9752406ec6a1","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-06038ce211333d08","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-3c45ea2a47fd1081","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-c3b1c0a8db1a00dc","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-50f80a167085c45b","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-b2f354e30fc2c5a9","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-de1b1c4c96bedc54","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-aa5c88f6bd25e195","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-1f0176d9b467042d","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-f7fd5d907e544821","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-8939ee57aa7eb3b0","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-837bf4e01a453d47","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-4a169fec4a5ee765","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"},{"relatedSpdxElement":"SPDXRef-File-f8a4edaedb8f3f37","relationshipType":"CONTAINS","spdxElementId":"SPDXRef-Package"}],"spdxVersion":"SPDX-2.3"}