{
 "bomFormat": "CycloneDX",
 "specVersion": "1.6",
 "serialNumber": "urn:uuid:24a27a57-ac5a-5d92-bb70-662ea3e5712b",
 "version": 1,
 "metadata": {
  "timestamp": "2026-09-14T08:31:22Z",
  "tools": {
   "components": [
    {
     "type": "application",
     "name": "corecp-sbom",
     "version": "1",
     "description": "scripts/sbom.py, from supply-chain/inventory.json"
    }
   ]
  },
  "component": {
   "type": "application",
   "bom-ref": "pkg:deb/ubuntu/corecp-pebble@2.10.1+corecp2?arch=amd64",
   "name": "corecp-pebble",
   "version": "2.10.1+corecp2",
   "purl": "pkg:deb/ubuntu/corecp-pebble@2.10.1+corecp2?arch=amd64",
   "description": "corecp-pebble 2.10.1+corecp2 for amd64, built by corecp-sbuild",
   "licenses": [
    {
     "license": {
      "name": "the licences of the upstream sources listed as components"
     }
    }
   ],
   "hashes": [
    {
     "alg": "SHA-512",
     "content": "3813a3bede88e8f2589357380254b2ea1feaa5339222c0f42a9040a730dfaf1f0131ec22691c86842ccdb343b06bbf1c2adbb68e70f2e91a39a5730ef18623bd"
    },
    {
     "alg": "SHA-256",
     "content": "7494c2de157d944d7673ca3ac0571695640d6661e7bfc7bfc3d6bff4f3411c03"
    }
   ],
   "properties": [
    {
     "name": "corecp:artifact:length",
     "value": "3473004"
    },
    {
     "name": "corecp:source:commit",
     "value": "b2dd8b8d780f3b973050222ceb7054ab8b8c68c3"
    },
    {
     "name": "corecp:build:installed-build-depends",
     "value": "115"
    }
   ]
  },
  "properties": [
   {
    "name": "corecp:population",
    "value": "The upstream sources this package was built or repackaged from, each fetched and verified before the build started (infra/build-server/sbuild/recipes/pebble.sh)."
   }
  ]
 },
 "components": [
  {
   "type": "library",
   "bom-ref": "pebble-challtestsrv-linux-amd64.tar.gz@2.10.1",
   "name": "pebble-challtestsrv-linux-amd64.tar.gz",
   "version": "2.10.1",
   "purl": "pkg:generic/pebble-challtestsrv-linux-amd64.tar.gz@2.10.1?download_url=https://github.com/letsencrypt/pebble/releases/download/v2.10.1/pebble-challtestsrv-linux-amd64.tar.gz",
   "hashes": [
    {
     "alg": "SHA-256",
     "content": "e93a5aa25ecdf3af2f9fbb2de32b0173e64a2eae81002a4ccfe35fa6f4f60b92"
    }
   ],
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://github.com/letsencrypt/pebble/releases/download/v2.10.1/pebble-challtestsrv-linux-amd64.tar.gz"
    }
   ],
   "licenses": [
    {
     "license": {
      "id": "MPL-2.0"
     }
    }
   ],
   "properties": [
    {
     "name": "corecp:source:verified",
     "value": "sha256 pinned in packages/pebble/CHECKSUMS.sha256 (staged under /srv/corecp/vendor/pebble)"
    },
    {
     "name": "corecp:licence:source",
     "value": "declared by the recipe — no fingerprint matched"
    }
   ]
  },
  {
   "type": "library",
   "bom-ref": "pebble-linux-amd64.tar.gz@2.10.1",
   "name": "pebble-linux-amd64.tar.gz",
   "version": "2.10.1",
   "purl": "pkg:generic/pebble-linux-amd64.tar.gz@2.10.1?download_url=https://github.com/letsencrypt/pebble/releases/download/v2.10.1/pebble-linux-amd64.tar.gz",
   "hashes": [
    {
     "alg": "SHA-256",
     "content": "4f2fcb5bca8c85c9cf73ad140fccfc0d2be40bd81ab99879c79b7b8a0b4f70ed"
    }
   ],
   "externalReferences": [
    {
     "type": "distribution",
     "url": "https://github.com/letsencrypt/pebble/releases/download/v2.10.1/pebble-linux-amd64.tar.gz"
    }
   ],
   "licenses": [
    {
     "license": {
      "id": "MPL-2.0"
     }
    }
   ],
   "properties": [
    {
     "name": "corecp:source:verified",
     "value": "sha256 pinned in packages/pebble/CHECKSUMS.sha256 (staged under /srv/corecp/vendor/pebble)"
    },
    {
     "name": "corecp:licence:source",
     "value": "declared by the recipe — no fingerprint matched"
    }
   ]
  }
 ]
}