diff --git a/ReleaseInstructions b/ReleaseInstructions
index f87c65ad5f..b89e642eef 100644
--- a/ReleaseInstructions
+++ b/ReleaseInstructions
@@ -158,7 +158,7 @@ Note: This document was adapted from the one created in the context of
b. Using gpg
$ for i in distribution/*/*.zip distribution/*/*.gz distribution/*/*.bz2 distribution/*/*.xz; do gpg --use-agent --detach-sign --armor $i; done
- $ for i in java-repository/org/apache/ant/ant*/*/*.jar java-repository/org/apache/ant/ant*/*/*.pom; do gpg --use-agent --detach-sign --armor $i; done
+ $ for i in java-repository/org/apache/ant/ant*/*/*.jar java-repository/org/apache/ant/ant*/*/*.pom java-repository/org/apache/ant/ant*/*/*-cyclonedx.*; do gpg --use-agent --detach-sign --armor $i; done
11. Convert the part of the WHATSNEW file covering the changes
since the last release into HTML for the README file on the
diff --git a/build.xml b/build.xml
index 5fd0edecfb..e9a739a97d 100644
--- a/build.xml
+++ b/build.xml
@@ -46,7 +46,7 @@
-
+
@@ -193,7 +193,7 @@
-
+
@@ -440,16 +440,16 @@
-
-
-
-
-
-
-
-
-
-
+
-
-
-
-
-
-
+
+
+
+
+
+
-
+
@@ -748,7 +748,7 @@
-
+
@@ -1030,7 +1030,7 @@
Create the essential distribution that can run Apache Ant
===================================================================
-->
-
@@ -1392,7 +1392,7 @@
-
@@ -1415,6 +1415,12 @@
+
+
+
+
+
+
@@ -1497,7 +1503,7 @@
-
@@ -1984,19 +1990,19 @@ ${antunit.reports}
+ unless="apache-bsf.present"/>
+ unless="apache-bsf.present"/>
+ unless="apache-bsf.present"/>
+ unless="apache-bsf.present"/>
@@ -2020,7 +2026,7 @@ ${antunit.reports}
+ unless="apache-resolver.present"/>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/fetch.xml b/fetch.xml
index d223ecb8d1..ed584f8232 100644
--- a/fetch.xml
+++ b/fetch.xml
@@ -388,8 +388,14 @@ Set -Ddest=LOCATION on the command line
+
+
+
+
+ javamail,jakartamail,jspc,jai,xz,junit-engine-vintage,junit-engine-jupiter,netrexx,ant-cyclonedx"/>
diff --git a/lib/libraries.properties b/lib/libraries.properties
index 99e63d1097..b065895cb2 100644
--- a/lib/libraries.properties
+++ b/lib/libraries.properties
@@ -35,6 +35,7 @@ m2.repo=https://repo1.maven.org/maven2/
# when a specific dependency forces them to be out-of-order
ivy.version=2.5.3
ant-antunit.version=1.4.1
+ant-cyclonedx.version=0.1
antlr.version=2.7.7
bcel.version=6.9.0
bsf.version=2.4.0
diff --git a/release/ivy.xml b/release/ivy.xml
index 1b414d9c7a..940f13d4d9 100644
--- a/release/ivy.xml
+++ b/release/ivy.xml
@@ -31,156 +31,260 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/sboms/ant-1.10.18alpha-cyclonedx.json b/sboms/ant-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..8760289bb6
--- /dev/null
+++ b/sboms/ant-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,355 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:2b3c6004-1754-4985-bbf1-27f088f2b856",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-antlr-1.10.18alpha-cyclonedx.json b/sboms/ant-antlr-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..5923a4d5d5
--- /dev/null
+++ b/sboms/ant-antlr-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,507 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:8517376b-4425-42e2-abab-058ac657c59b",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-antlr@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-antlr",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + ANTLR",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5823b62486a2afdb5fbb1867ecbf7902"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "326e814e77f3710fa0e604acd97e18ec1ff32978"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "0eb7a39c343bf1a067395ec8acee7398110f8bea8659964ec5a7a699137597a3"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "78080969df5a162725da8492efd753d68b4d8517f9f2acf75b830ec9126a8362dbd8039b92b5334ec1d36403d46f030a056824ab013f330228130b1e4df77bbb"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "f6084e939e875e673059f6f5d84031102ed77508ff76e77a09507e6fdbfe7986"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "256cb5cd09230e798851f0cba0924f613daf09ac6ce42d608e010793dcf9481c3cc61c0e59affb1623c0bff80c8ea8c6e7693a1ac2a107e2ef62c750b2938410"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "e331afb796c11c23dba9f3392e7855805625079f022a63b225a2a530f22c25afc613dcf276257a38785373391c20a801"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "998794e52b473bde0f5e64f140cc5835a95728472324d38ba5f47f21fa71acae1c5e03d9e63b7f69731fd52fa5192a06"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-antlr@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
+ "group" : "antlr",
+ "name" : "antlr",
+ "version" : "2.7.7",
+ "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "BSD License",
+ "url" : "http://www.antlr.org/license.html"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://www.antlr.org/"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-antlr@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/antlr/antlr@2.7.7?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-apache-bcel-1.10.18alpha-cyclonedx.json b/sboms/ant-apache-bcel-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..7a74155dfe
--- /dev/null
+++ b/sboms/ant-apache-bcel-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,575 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:def50c5c-d308-472d-8649-f06b7c1fa0d8",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:39Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-apache-bcel@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-apache-bcel",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + BCEL",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "3916d3f9310dd86eb7ae2c0f07bbb665"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "33a1c686bfe33cec77b11b20cc816146753c242b"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "6dd7d52d6af6fee6e87db783ca7d6976b0361475ab4caf94de200631be4bd5e7"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "cd956bd70b03890c2c66e587c4cce74e6e138fb6e2656c7babc97c02ab4b04a20fd2d0b066691e7da5e64b46005d3c816dfbaf6ba869ed245d83cd937941e933"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "49ba1b6438814e4fcfb2599342d8b3bfc57ad42ccbeabc37e8170d0269157a16"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "3cbf0c0beb94966fa582f6ee5099f2e6a31f31a0dd080c60822134e1ed9ab228d47568710a322a7474f4e1c18bcb93c70cf3ef2b8cb319d66e8f6e6d48219b80"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "28536d32d2d0ed4bcbd980e3f3b87fb7c985fd9b55fad0a0620a97998722e37bf6b46cf9329a7e74557469d954d512e5"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "15164807b5e910883b3209953f24c21652822063871368ad7a4de45c9045ee24450a6106ffc535559c5f9916e83803a9"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-apache-bcel@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.bcel/bcel@6.9.0?type=jar",
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.bcel",
+ "name" : "bcel",
+ "version" : "6.9.0",
+ "description" : "Apache Commons Bytecode Engineering Library",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.bcel/bcel@6.9.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-bcel"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://github.com/apache/commons-bcel/actions"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://issues.apache.org/jira/browse/BCEL"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+ },
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf?p=commons-bcel.git"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.commons",
+ "name" : "commons-lang3",
+ "version" : "3.14.0",
+ "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
+ "scope" : "required",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-lang/"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://github.com/apache/commons-parent/actions"
+ },
+ {
+ "type" : "distribution-intake",
+ "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://issues.apache.org/jira/browse/LANG"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+ },
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-apache-bcel@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/org.apache.bcel/bcel@6.9.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.bcel/bcel@6.9.0?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
+ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-apache-bsf-1.10.18alpha-cyclonedx.json b/sboms/ant-apache-bsf-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..a4c93bda19
--- /dev/null
+++ b/sboms/ant-apache-bsf-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,496 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:c2d0b70f-662a-4b84-9649-914b01bf5cc9",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:39Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-apache-bsf@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-apache-bsf",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + BSF",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "9624e66b92c76e2345871aec28083dfb"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "316244ba824bd32eb5040e41458880d26b48e913"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "3a270ebd414e817ae00dfd14291042945d3a006f8bd83892555ed8c004c0aa83"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ef2d195bc8d731ceeae8ca8858871cddcacfe937cb84b1f89898961b08d3920ec985f4f49f431aaad922c8dcf374899f7797eb4d4bbb76f42b1b51a2bc5aa02e"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20009fc51096774c13b46a626884882d32f4a2be04865ed20a419b016848df99"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "b5ac3ed7ec37922cb06fbeec98bd88bc4559e676b4c4231fa59b385d235ef1fb388d6677e9fc7b513a0059c9f98d774d4c8d42fb37f7c67c9b1a465de47a29f0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "c7859835384e1d158245cf2b9b8e7734187cfabe49adc65d47cc28bb38d5cdf6da9243d4276e3ac63c911aa7bba74162"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "bcbf93b51e9b7ef380ba9e74e9d59d258a7e11a62d5b2cf00de1523dfd76d4d68ee55fcfe055bf5c8a012377c06bb7f5"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-apache-bsf@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/bsf/bsf@2.4.0?type=jar",
+ "group" : "bsf",
+ "name" : "bsf",
+ "version" : "2.4.0",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/bsf/bsf@2.4.0?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-apache-bsf@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/bsf/bsf@2.4.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-apache-log4j-1.10.18alpha-cyclonedx.json b/sboms/ant-apache-log4j-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..f1fff90420
--- /dev/null
+++ b/sboms/ant-apache-log4j-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,500 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:38e65c6f-86e3-4d5b-bb14-eebf2a76c61d",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:39Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-apache-log4j@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-apache-log4j",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + Log4J 1.x",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "df728f7b35c0f14eb9777c28b795c157"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "7b5e33f656a9af74819a7efa8275298a7d2be3b9"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "9934a7cc2a65b5ec9a268e791a7ec3bb64657bf696f6679cdcd6d8d3825fb49c"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5d766b106f74517b5cd3e9261b3eb951a98991cee4bce3edc7bbe5e4905c10ac000358ae19c83795549f8581b622ca154616dd621fde7504a0c6f85b043df1e6"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ac915f0a0c5efb5f1994841571dc0f207f2247bc8ec9a2c82d54e77593989f46"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "9c48d96ab4ebd97e5e1b04becf008c10ec046a34400036828fb75d7d2986166d684e01b27d119094bae8862d8357f9e241829c0add0d286b4dd00740712a8eac"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "55b8c972b11f5f8d73d01a9a8be95d076231e95ba9cb704fa45a9656e22330b704900942a4555f967024e1e800b79cf4"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ba488f5ecd11c2d20a631bbe87ec65fa97a736101b8ae3454bbfc6ab500f50e645239647e3bdd3a0065b680b41a58c6e"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-apache-log4j@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/log4j/log4j@1.2.14?type=jar",
+ "group" : "log4j",
+ "name" : "log4j",
+ "version" : "1.2.14",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/log4j/log4j@1.2.14?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-apache-log4j@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/log4j/log4j@1.2.14?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/log4j/log4j@1.2.14?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-apache-oro-1.10.18alpha-cyclonedx.json b/sboms/ant-apache-oro-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..9381564efb
--- /dev/null
+++ b/sboms/ant-apache-oro-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,496 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:585de2b2-489c-4a54-9a3b-5572a9f787b1",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-apache-oro@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-apache-oro",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + Apache Oro",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "83da5fc9cdd6acdbba7a996d4fff0b79"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "428d69dd469228161733437e292405c147365a70"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "15c70d1308bc6c5c78e151b9bbef27c8f0b83234ea449871b866d5149b271fb4"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "876ff5ed6458c4b4cc3855a6c7e26562cdd42cfe70c7169d9e939a3a8b69356a3a2e942ddc8b964a0aa55015a488824553d83ac4c85e032c542347a7cc2d61d5"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "74d5875fdd710992426b21891f4a7dfc286e1e9cb439074f464441f636c6b099"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "dc83a4efc1a4c45031ccd613d3d1f4a3f7f8d6351bf92e619410fff5a5877aeb93910be51f129fd3a5fb6bd2b03d6a6a2e5be16f353c3c9dbdd09aa2b9c1d2df"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "c8932259c229752cd5c8719fd4f45f2b787f5985a1eaa2f01a9b16dc908f0f1fd78b9890476139dc3b59c264262d0f71"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "dbc192f77e39480ec23a51d4de16a1d1db14a2e771c03506810e47dd6ef0764cbf4a436c26c7cf7dda73aebc9aaea53d"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-apache-oro@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
+ "group" : "oro",
+ "name" : "oro",
+ "version" : "2.0.8",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/oro/oro@2.0.8?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-apache-oro@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/oro/oro@2.0.8?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-apache-regexp-1.10.18alpha-cyclonedx.json b/sboms/ant-apache-regexp-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..ffe138c1a9
--- /dev/null
+++ b/sboms/ant-apache-regexp-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,496 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:7c7a2794-1fe7-4591-9c79-c1b4d5d5b5c8",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-apache-regexp@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-apache-regexp",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + Apache Regexp",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "e105b7b6e866b0d0a42246643d42ae08"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e988b6383f4ea427a8915d4a1642de504c30215b"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "638900345893e381a94cefb0b3bcd68f1403493e1d0d23e15e8d67cc42a29734"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "3db9108d50fe64ccd232ebfadbd8dbc142a925d666033a93a4a5444b0a0c176cc8a5e19b89d979d724792fa916cd13104f4e18d8c96a4f1105c42b767ba2510d"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "bceebd2bcf9572249d1eb5d438aaef9e37ddb73f379b43782b768bd7f5cf3cdd"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "9390ef53e119bfb8a513e4340b0ac230a967dd59c37ce53541f49b52d75f8d11f8d4a987c8cd9760ed5abcaba915e33d510e418cb71988a270fc9596143d2ee0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "dc224c357cd571f2ca17b1a4c4e51b2726e87ab853230225e1f2968a212fe18f2926c277de367ee92a9c5b2533a16755"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "85a92f73bae8fc1edbe98c1b7c8e11bb6bc084d9297dbdffb6df1fa6f87fc754efafeab003cbc00127b447bfcf6e3fc8"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-apache-regexp@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/jakarta-regexp/jakarta-regexp@1.4?type=jar",
+ "group" : "jakarta-regexp",
+ "name" : "jakarta-regexp",
+ "version" : "1.4",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/jakarta-regexp/jakarta-regexp@1.4?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-apache-regexp@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/jakarta-regexp/jakarta-regexp@1.4?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-apache-resolver-1.10.18alpha-cyclonedx.json b/sboms/ant-apache-resolver-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..dacfa9d3fb
--- /dev/null
+++ b/sboms/ant-apache-resolver-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,508 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:9b9ad947-8229-42fc-840a-d1ac6bebe3fb",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-apache-resolver@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-apache-resolver",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + Apache Resolver",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "267be30a4d5465f896a5b382cb860dc3"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "56f0f149edf93f96e9a0ec4642c38ccb1a947510"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "25b9ef9aa9425c34911bed113e8c9a1c20bc76bf8a9ad9659b32d1cc902f4914"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "cfca8b43c68793683dff35ae89bd77a2ebe1d61da7bb264c0db5a9c9d4955106ba3ae3fc9abe24598f30d05523f33d9f88c078851cbc7c6757bfa64a15d0caae"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "b162c87a045bf646369bf6d8833c56c84744cb4bea123f16f1ce36edb0222a2c"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "cea2843e325a7fc3d8375c668e083de1716bf89f58af2ab261fe0120bcfe77f9e5b764813c3f7c34a4f054f481ccecca6ebaca02e502424904278ca1c1afc4a9"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "efb40dae090f07698ef62d33e0c3bd4782679fcf6891205a5cac9136ce6edea28a41252b31b3d60d87e00c1c88856b92"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "e8a6005412d0e098048f2674ed44f7c9c8f8884bd14106378073c6024b3fcd05b9129a41f73267f69c0d8d5f43e76fd9"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-apache-resolver@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
+ "publisher" : "The Apache Software Foundation",
+ "group" : "xml-resolver",
+ "name" : "xml-resolver",
+ "version" : "1.2",
+ "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://xml.apache.org/commons/components/resolver/"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-apache-resolver@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-apache-xalan2-1.10.18alpha-cyclonedx.json b/sboms/ant-apache-xalan2-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..5ecbfb94bd
--- /dev/null
+++ b/sboms/ant-apache-xalan2-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,500 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:644d5c46-6c18-4f70-8b36-3b0ca42175d3",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-apache-xalan2@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-apache-xalan2",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + Xalan 2",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "c575e0f5c0c056b8a3b6301033db9e72"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "e4959c426c8ebb6c2a20d08b0637bd7c7e796fbb"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "327afd380a3185b08a6052fdc48f3f54f226a23c8d7da38aa0b72aab3722cd9d"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "024cc704aa04bbd86c85e943fa8bf33ba8db4cdb2a0c49b7351ed752d01a34920e24d017d9f8dac945bc9f818d24a8c7fe7f69c11be442ebf6ccbe6e672f9ddb"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "61bae24aa8c480f80ab53167ae213783176481b5970e814df364dd794987a7c3"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "22e03cca0fc8bfbbbd477ed4beee5eb59c3523ab83cb8c4874c0dc398f3f3463aac8df1d140734574e0299e6f649bfb1fac3b44e1fa18a490d68fd3f389f6cb8"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "82f987d7943058a858b226126e7de37e862cf50bea3c6b9017ffd8e469ea7f98ca67970d161977f504c07d14958aa3d1"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "e47be5cd5e4c753e0f3941acdf847f6b72ed4a1ee50589cf0787aedbecddf8778fa603c78088cfada2bc8eb090abc076"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-apache-xalan2@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/xalan/xalan@2.7.3?type=jar",
+ "group" : "xalan",
+ "name" : "xalan",
+ "version" : "2.7.3",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/xalan/xalan@2.7.3?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-apache-xalan2@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/xalan/xalan@2.7.3?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/xalan/xalan@2.7.3?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-commons-logging-1.10.18alpha-cyclonedx.json b/sboms/ant-commons-logging-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..8c8af5797a
--- /dev/null
+++ b/sboms/ant-commons-logging-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,501 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:4153ecc3-08c9-472d-9513-e273b67a5a7c",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:39Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-commons-logging@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-commons-logging",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + Commons Logging",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "c65125679bafb4da2b4ea0ded5b0da53"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "8eeb1c93cf34937c2c6b03a7c2a22a10fa8e30a2"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "793d3b504456890f89e426bf987487200d5cd8eebd4e86c000b8d6a2c074fa27"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "200eca28072faa39b97eef93b142fb657ca39cb71388c338712f843729ba797039f1c7bee5146323091e73a352502df27e09789b5c4f9a43cb78037e2dab1744"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "638b7712a0943d466306078d5531599f35ca2660cbc360e0feee1ae04a7e1296"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "6618f4655b814159301bdb01353d5a83d58ec3c270126fb2b9294fbb559eae8c142e7af2c0ae1f5410a5e8f761cd29c126493281ec3730a3ffdc43c8b10cd70b"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "6b0f143d27d39e3415c0d9db7920c32254899935ad26c5b0abc8acd296b20cd48ccad6590a5a3ef5a07f4159a68a0343"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "fda5386686e69560085855c3dc714514f141a4489cec6149817e6be9751e91a88ee2f48e0fe20e4cd4efc0936624181e"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-commons-logging@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/commons-logging/commons-logging-api@1.1?type=jar",
+ "group" : "commons-logging",
+ "name" : "commons-logging-api",
+ "version" : "1.1",
+ "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/commons-logging/commons-logging-api@1.1?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-commons-logging@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/commons-logging/commons-logging-api@1.1?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/commons-logging/commons-logging-api@1.1?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-commons-net-1.10.18alpha-cyclonedx.json b/sboms/ant-commons-net-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..868911ad61
--- /dev/null
+++ b/sboms/ant-commons-net-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,528 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:9c3c4c5d-cc4f-417c-8e0a-2d63963141d1",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-commons-net@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-commons-net",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + Commons Net",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "1bdb3271dd1a2422d9fa44465a6fa70b"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "6fe07eb05b8d47a0b487847adf76b6c707c834f6"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "d4f2e0bd237d9ebfa6db6c6e8679bc50b70d00b45331d2b3078e38c26f71ef3d"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "7dfb20d58a4ed976763c669ece2513bf5f7ed3ba43ce8acdd6480c4840f28f77429d1f3f79f4a09234bfd51a2670525a270d17ff616331a6b0cb2372a474c636"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ffd1e674e9dca0fc5c1ef499b627f5919d3034038a63c53dd73993dca61b0e5b"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f35701543594a4f9e1f851eef0d4c0e330428e91e62ec77ce44428b07dca589a0daffff00d911ce6165785d9b39361070afe64caf450242f4b43deadf7f9d1da"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "0e2b8a436e3e2999b8bc0ac01835ab4b3d2a539ed2240a386243ad4302adb7118599858bca37fa7c63d6738955b6be16"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "04ba27bf48088a0e9d1790bdb5b02bdd93de4b23a38da76bfb61c33b432a3f63b9b56090d86f0fd90436bffab77fbcf3"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-commons-net@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/commons-net/commons-net@3.10.0?type=jar",
+ "publisher" : "The Apache Software Foundation",
+ "group" : "commons-net",
+ "name" : "commons-net",
+ "version" : "3.10.0",
+ "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/commons-net/commons-net@3.10.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://commons.apache.org/proper/commons-net/"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://github.com/apache/commons-parent/actions"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://issues.apache.org/jira/browse/NET"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
+ },
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/commons-net"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-commons-net@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/commons-net/commons-net@3.10.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/commons-net/commons-net@3.10.0?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-imageio-1.10.18alpha-cyclonedx.json b/sboms/ant-imageio-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..94d83a1376
--- /dev/null
+++ b/sboms/ant-imageio-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,479 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:b80c8c05-3bca-4440-8ef0-7e84d768737c",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-imageio@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-imageio",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + ImageIO",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "e1ad011bc2ea2218b5fe6208556750b1"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "ed99936adbca26894545935992dbcf96b0ffddd8"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "99e3b5f6fddacbb7c20955e1520f9bf4ffd27d939b664fd80492acf036830df3"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "6ca1df6e8368f76b9115556b70e217ef5acfe12b4288cc5f9b1320b286887d6f30731cffdd0e6275a20b25e55503dcd62b7af7c00eb83a0df71ce136267a8f95"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "540cefde9ae035ec439f6e5970ebda87f2fdae63b6aa154c60051ff0e1d46d0b"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "c7294631a54cb103b9d394a42aff70ab1d2874b4dbd0dd8c53fbeb163fa53c87609be7848ff99ec19a6cf1249cd690198c8be4ac6f934e32c98d99bfc383bea3"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "70021da36240cb84dad11375e42384e145b95914b91a72c6b2bf1e776aab2d8795f5802663180817b6dc580b964e26c2"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "480368c856791ebd9675582c38b817b66f04b56ee9d7f213bc2590d502c8bcf2efe9ffc512cd6c0f6ad103e5e80d3ef4"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-imageio@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-imageio@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-jai-1.10.18alpha-cyclonedx.json b/sboms/ant-jai-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..dfb8bf76f3
--- /dev/null
+++ b/sboms/ant-jai-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,496 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:fbc0a56c-6347-44e7-9616-89d889adf5f3",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-jai@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-jai",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JAI",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "ae38566000fe6d6d5bfa6a7f869c885b"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "67f6eac19189778819018d38ec43f60dc91d9595"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "3ccb094d0a65a8705d3df7513d4d5d4e2d5d945387c50932f99566ee4cddb763"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "6e720bad634c003cc9ecee7e27c2236f7a08817896f5450b083db50d080180b8e497a7ecdca27589393b0dab777149b29744c7e2131a907798a540ef18349bb4"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "7195a2f290b4afb5e651c67db23c3cbab9aa7a1ae41560404390f02e40dad466"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "8fb2e067cd6feba8270ab57e0f3f353b6f1826cd147d57d9d0e3d34cd7c7f3fdb89e08fbee2240209208dda597a7f500b02dde156996f7c6b959bbc646a0cfda"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "66027f5b3799c20508e190cf9f2186583f607025981687075daa563b871b63316d43d90691452f563c584f5d6fa7ff84"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "7cfe8c741b972897bedec7c8cb2fc2b88d0fd2dab6f78584135d12ab5028645fc48bee0876f390d81c778449709ad351"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-jai@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/javax.media/jai-core@1.1.3?type=jar",
+ "group" : "javax.media",
+ "name" : "jai-core",
+ "version" : "1.1.3",
+ "description" : "The Java Advanced Imaging API extends the Java 2 platform by allowing sophisticated, high-performance image processing to be incorporated into Java applets and applications. It is a set of classes providing imaging functionality beyond that of Java 2D and the Java Foundation classes, though it is designed for compatibility with those APIs. This API implements a set of core image processing capabilities including image tiling, regions of interest, deferred execution and a set of core image processing operators, including many common point, area, and frequency domain operators.",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Sun Microsystems, Inc. Binary Code License Agreement"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/javax.media/jai-core@1.1.3?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-jai@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/javax.media/jai-core@1.1.3?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-jakartamail-1.10.18alpha-cyclonedx.json b/sboms/ant-jakartamail-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..4664992f76
--- /dev/null
+++ b/sboms/ant-jakartamail-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,488 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:8c8ad392-5d3a-46e5-bc77-8778d2725eab",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-jakartamail@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-jakartamail",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JakartaMail",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "830e2c1b4955266f1f46231255d9c5ba"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "8461507b314db26c70e0e587f3fff7dbd18e1eef"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "98ba05e7f236b954275a36970245b0116be4c86e49b620305330b60f213b784b"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "6cc979ac69facf0d0abf0e46e64b9692fa864361e97cc3211b54a3df52611754d98094c1b9a5b09a79c24d0bc2ba9ee9613aecb53db999804af46a0e1abcfac5"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "e901302452bcc2a183246437a34b23c65b802ae49275c1755ef3fbb254bb591a"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "8e446642c1462ddecba83653ed66c17bae6a9cf1fca21b03ffedb2eda921ca19b484542e3b57daa09b3fe2f478ddab8744e2a0ee7f88e2c0dae0dd2f97f74b42"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "ba403f8433cc340c1ec909994a9b9ed2538fb19dd6ee7476f80361d2f5a237f64dcede2077a9594005197d317c3d35e2"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "16bd215be5f3d8e33ff29fc491c7828fd67ab7a0656a8cece3efd1485f0110b93d6878d32138a8ab720a6b018690dce4"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-jakartamail@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.sun.mail/jakarta.mail@2.0.2?type=jar",
+ "group" : "com.sun.mail",
+ "name" : "jakarta.mail",
+ "version" : "2.0.2",
+ "purl" : "pkg:maven/com.sun.mail/jakarta.mail@2.0.2?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-jakartamail@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/com.sun.mail/jakarta.mail@2.0.2?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-javamail-1.10.18alpha-cyclonedx.json b/sboms/ant-javamail-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..c99d740d37
--- /dev/null
+++ b/sboms/ant-javamail-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,488 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:c938055c-bbd6-4a76-be94-ef599b489aeb",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-javamail@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-javamail",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JavaMail",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "31b4d8269c7218ba5bccc8c1654dad1d"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "a84b0405105a8549e0fe2965c3b1c55944766ade"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "2e275a3dd99e112dc26660a06dff444f5a63fdf2b7fddb5d1b8618cffae70be9"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "28658212e81765559817ae20d86a74881a7e38974ace2f40f62fb51a33e35f126cae186cad9079cb1f721d3834628d11bb4d938120b16d31a67cfe2724e8286f"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "0141f0f7a70aee262843a9f2e24fc3f59043fa37ad343c48d73542cf078efacf"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "43652a226e7e6e98d53c682308a07a25fea3cb5f85426e13650489a368323dd3dddb883c8baabbf41083e4170c9b473b882ee7d9cf37bd1b3e1423c1e42011d3"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "dd0cb7fbe904241e2fb107d01fc9254aa7bddf3ff6ad1f798de14bcbea578c474c1eb7ef7e9ff650ee20083ffee0ff95"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "16d091ffd083cf66c022b9749d81a17e34ecad434c6fdab6bacfaf53cb89f416f2c11831759ec3796a8cf8961824b9d9"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-javamail@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar",
+ "group" : "com.sun.mail",
+ "name" : "javax.mail",
+ "version" : "1.6.2",
+ "purl" : "pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-javamail@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-jdepend-1.10.18alpha-cyclonedx.json b/sboms/ant-jdepend-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..a271e2d356
--- /dev/null
+++ b/sboms/ant-jdepend-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,488 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:fcdc709a-2bba-4d46-a899-71f8ad20c942",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-jdepend@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-jdepend",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JDepend",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "8e124db052009596c1d8495ccc4daaf5"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "9afe06cbfe887d51c16c27a6f9c4417dd1a40349"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "b0f7a9b7034e064929134b8f67502f7f499468bd4c0993de9956d0814448a195"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "2dd0858353132f8c3846ae6d1a5a116efd14bbe84d6c945ddf1226a69552bd95f04743dbd2a7c2a59b69add4ac3b0afbb72f9dff06211669d5963e13ad2f9f8c"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "bfaedad985309cddc53873df8173430b8a9dea7c6f18b26f58d38fa7b791254b"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "a995a7b94745a8bd42051ccde11206dfd2002eb85ba74991af4e77045de9e459928116ca6083a8f394b681d0cece346a85ad8cb952ef425f6339d8bcc821319e"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "0297974f600e35f0a42c24e98690db31fdd2eff6aedfce2699db347e15b5eb686b8bcd47156aabf921961b6797ea4953"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "b36afe10827e468525753afa788335457a24e07f6f50cce985dcc63065b921a6917188552823fe672ba3738b3eea94db"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-jdepend@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/jdepend/jdepend@2.9.1?type=jar",
+ "group" : "jdepend",
+ "name" : "jdepend",
+ "version" : "2.9.1",
+ "purl" : "pkg:maven/jdepend/jdepend@2.9.1?type=jar"
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-jdepend@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/jdepend/jdepend@2.9.1?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-jmf-1.10.18alpha-cyclonedx.json b/sboms/ant-jmf-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..a44bf0f02f
--- /dev/null
+++ b/sboms/ant-jmf-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,479 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:b8c596b0-b95c-4fcc-a408-e0cf580c94bd",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-jmf@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-jmf",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JMF",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "dc7e10d3f4a462b5a9e97a5ca5eba382"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "af946b1c4fd760e0c04fac220ffae7d15ab1a574"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "a9e3b1bd2d29cf117332be89d6bd5675744817f5fda849f08d06c4c18961bd1b"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "9b46256d89660fb1ce41acf74ef107fe30a5308baf849b91a31eebe2f9946c1520960dee2a3c4b2947de1cacc704d4df1bdec58a49d9a4cd0817820794fa8530"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "ce275dd9e84e9af4a8d082776a3a8361fd74e8a42cc92953a9dd1686a36522d1"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "ff65307438aec45a10bdfc822dea3047b9e07442f72e9c2ee8b48dec9539080791e16eb7b4c51421cb5f0fa32a949283351fd4ecd96695866f500893d94b0c0c"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "b8b3548295c8a8a41bf0102d93a47221acf3d3928c99f848e63d5b99bd7606dcaf1d9af624f4d1d49a00988868ffdb5e"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "7cd0950099dc5c4f30923f7bb3e4af17924208fe67bc2f2ac813a21cad26bd065ef6d1215e67df9fc3745605424797e3"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-jmf@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-jmf@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-jsch-1.10.18alpha-cyclonedx.json b/sboms/ant-jsch-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..75afc85a9a
--- /dev/null
+++ b/sboms/ant-jsch-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,507 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:aed2dbce-0712-44d6-888a-25b3d79f63fe",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-jsch@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-jsch",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JSch",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "4f18e460c0a241bc535275590c8c8163"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "445c084ba6cd39afb9a24a91d9965ff56759a991"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "fa3fe8ed8e42ff7c5b132581566da477562737c42879eb9c242ece7462466d02"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5ff204f8699c8928ac27dd7970c3bee93ebb2231739d7d5713750cb2b90fcf44585c42b299a9eae21232627efd940acfda1dfbc7ef774ec57790c12ed67a04c6"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "a4adf09eac6358eece237b9e8fc49c09333dc62d5933d09f03435c03adec6ed0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "bf08ef94624f90e5ef2719b3eccfc9bc2f22f5134ac454f4a5653b3f063cad99ddf108d3283de1e496547560655c27b108b5867db7654872c2f245489555bfa3"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "3457a5cc0c6892a73ba3cda577b1446db37f9b498fd321a26a4275800ded3d9630563d6dd9ca686943ab0236ecfe7f4e"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "130bf01d3e89bad7d24b44278bb5f8b89db07c9fa2d3ea372f8aa629c716e9e9f73b8d0cce49dac21aaec79c3ab6a6f9"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-jsch@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+ "group" : "com.jcraft",
+ "name" : "jsch",
+ "version" : "0.1.55",
+ "description" : "JSch is a pure Java implementation of SSH2",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Revised BSD",
+ "url" : "http://www.jcraft.com/jsch/LICENSE.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://www.jcraft.com/"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-jsch@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/com.jcraft/jsch@0.1.55?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-junit-1.10.18alpha-cyclonedx.json b/sboms/ant-junit-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..6317539fa7
--- /dev/null
+++ b/sboms/ant-junit-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,537 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:8be22008-82f3-4566-a0e9-6666048d91f5",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-junit@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-junit",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JUnit",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "547dac3fc3d633455a46e555c599d95d"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "c1014a079522a9e194d864ab3622781fbe9da641"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "ade143c363f0b641f20ea05e9d0ab71006c3868bdb460d8a8ab72686b833febd"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "5afbd8676797a6a6fbc1c7aca09abf7c7a97eb9b98ee323ad4104e07e526909037a42cb7d05e15e45adeff086f5d3f048d9ad91eb69975def063fb22bbcdefa2"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "091cb8b5f589363ab06e58645e18c842ff807e8d2ce2c294bc75b53d2119ed8a"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "966c4d217c1430e82183b95c7d5733001e119f93c5f15550b6238faa5ec15534b1ffbd0c462791fbc9e92c7a853ed26ab1716cccd0d325e0f64a4bc150287e5f"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79f270e79a590dc119a379ad908a506d373984025064dd98b8b4ff2adc2b7ac54f215fd0e356084ac36fc155e3213f82"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "d3a2484b2582342dfdcfe27657ad1751519ead19a8fe3fe1bd54ced21917c79f6a91c69a387031b98bf966eb25c9cb66"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-junit@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "publisher" : "JUnit",
+ "group" : "junit",
+ "name" : "junit",
+ "version" : "4.13.2",
+ "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "EPL-1.0",
+ "url" : "http://www.eclipse.org/legal/epl-v10.html"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://junit.org"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "group" : "org.hamcrest",
+ "name" : "hamcrest",
+ "version" : "3.0",
+ "description" : "Core API and libraries of hamcrest matcher framework.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "BSD-3-Clause",
+ "url" : "https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://hamcrest.org/JavaHamcrest/"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-junit@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/junit/junit@4.13.2?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-junit4-1.10.18alpha-cyclonedx.json b/sboms/ant-junit4-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..0e898dd9d3
--- /dev/null
+++ b/sboms/ant-junit4-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,537 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:cf7be91e-11b0-4618-80b3-c537435b1efd",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-junit4@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-junit4",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JUnit 4",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "afc0099f154087e88c21ad4bcbd81608"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "34c39e8fba6c81cc8a4129559ca12c92d7a832fa"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "0c95b8c0c06f80f357d21a017d89e8382b874f646b9a4f805fd8216d1e3fb9a9"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "a4343623911760d0e13a026df66fff7ad88ab06c7f6232f45210dfe4f27bccaf548b49537377631b57cbee24a03d11ae2cac2dca6abbb1d3a582f91130738043"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "4a3a435781914fcfe2139f8ab9f98569c198a39f33355a44d67f2d6e775dcd45"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "cca627a67d033d2230e3aa0d934770badcfa1b477dc18f34ba0baf448c0efd6237d58fbb0b90a6effbc797b06aa1b4b397bfb2553f814090c502d379fe5e3e70"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "dc8ee2bef14afeb47113768e9b2b83fca9af0c82bdf28101306b195f5f2143854d7a764a50a7ff4e679108bd7306be0b"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "a7b068186701b3a6fd5be731bc646dbca3fa739d3233ac2fc7b13d9c7477209bba396604c353f0c22d4a7ab1125e0122"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-junit4@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "publisher" : "JUnit",
+ "group" : "junit",
+ "name" : "junit",
+ "version" : "4.13.2",
+ "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "EPL-1.0",
+ "url" : "http://www.eclipse.org/legal/epl-v10.html"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://junit.org"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "group" : "org.hamcrest",
+ "name" : "hamcrest",
+ "version" : "3.0",
+ "description" : "Core API and libraries of hamcrest matcher framework.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "BSD-3-Clause",
+ "url" : "https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://hamcrest.org/JavaHamcrest/"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-junit4@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/junit/junit@4.13.2?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-junitlauncher-1.10.18alpha-cyclonedx.json b/sboms/ant-junitlauncher-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..08af910d3b
--- /dev/null
+++ b/sboms/ant-junitlauncher-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,503 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:e1850a66-a826-437e-b548-54a90f145871",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-junitlauncher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-junitlauncher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + JUnit 5",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "4f2d77f7ba112e91ecb217544e5a221d"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "b5bbe832a67b636a6c6a733b4f6fff8fb594eb0f"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "fc84a31cb070a40cb4dcb82e889aec193b8121ec792a5690da876176ced13781"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "b3844d29712228ff3124373b0ac43ebc74c229afa2213bb8f2f7f05c21505b598b23290597777c2c9f71f2b0bfc95b34d73e2af99bb869f1c5c791ea68750954"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "48cc43b4cb68eb5086a21cf94d95a85e4304e07c0eba564d1cc2ea1c10b11d39"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "a889287e05020b3f430afe53832b2e2e8d0a08b9a352667ce8dfef33f2e27b189505122adea7d7b8e2d926acf2287ba5f8b914f077121abadd751f13214c9978"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "bcaa96125f3030dd30e540578138c595eb72f59bbd87302565a8710f0dff005a9ab126dd78aeaadcb6b7d2c44fd60a8a"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "3fea0ae5271dd08e0d156cdc99b44bf2095d30d1444361fdbd9229adb3158255cdfaee0388120a539d77ff5af2e3e3d0"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-junitlauncher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar",
+ "group" : "org.junit.platform",
+ "name" : "junit-platform-launcher",
+ "version" : "1.10.2",
+ "description" : "Module \"junit-platform-launcher\" of JUnit 5.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "EPL-2.0",
+ "url" : "https://www.eclipse.org/legal/epl-v20.html"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://junit.org/junit5"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-junitlauncher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-launcher-1.10.18alpha-cyclonedx.json b/sboms/ant-launcher-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..4715087899
--- /dev/null
+++ b/sboms/ant-launcher-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,229 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:2a46b350-e47f-4d53-bb4e-fff561d0b210",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-netrexx-1.10.18alpha-cyclonedx.json b/sboms/ant-netrexx-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..00f2c6eca2
--- /dev/null
+++ b/sboms/ant-netrexx-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,504 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:2b03fac9-028d-407d-8441-d8a264bdf74b",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-netrexx@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-netrexx",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + NetRexx",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "789572a2eb626fedcf3f73124f423c0c"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "8197868f0f63584a89558a84cb7c0d20b3b9fdf7"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "1d56185bb14848d6f6faf0183335c49c467c7a56bcfc8efa5fd8e17c99513b98"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "8e44a652a4a8fa74150633c5c43476c910e60794746f2b3fd766ef5708e95c5efc18f261246de860bf42617f363350a2d2730f31ddede31454d9cc47fd9b7a0e"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "975d9a53c35377db429dfbe5bf86b4672589cd59fcbf0601e507cc868ac94c6f"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "a7add4eef2fd67740e051d6938811f85d6991c6d2a028753d9fa1c9935bed2f8a54dc1cb9d9d49bf4b6141688bdc258ce1a0acdc6748eb72805050d1ebb275aa"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "e66f450e24b54b1aafb5d653c5960aabd92e7d5591db05bf5ace246c6a3426f11338c91d73a885ff6f4011a0585f8145"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "eedd1d1c6706e7dc4052daf47c2dfa7e6bd03a3b687383b9188d0abae47d7928c189296e90177cf0b3af3e2f4d1c91e4"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-netrexx@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "https://www.netrexx.org/files/NetRexxC-2.05.jar",
+ "name" : "netrexx",
+ "version" : "2.05",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "ICU",
+ "url" : "https://github.com/RexxLA/NetRexx/blob/master/LICENSE"
+ }
+ }
+ ],
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://www.netrexx.org/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://www.netrexx.org/downloads.nsp"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-netrexx@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "https://www.netrexx.org/files/NetRexxC-2.05.jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-swing-1.10.18alpha-cyclonedx.json b/sboms/ant-swing-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..f52107e437
--- /dev/null
+++ b/sboms/ant-swing-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,479 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:4b419724-cd6a-4852-86fd-3fddabef200f",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-swing@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-swing",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + Swing",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "6c144082e3e137f45293f0c1a519501e"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "15b7c6dac2ba8d43c7dd9da3c3c60bde670dc9fe"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "b00e5cbf12ebaafa1bef9bf13b9e1694cc03b967e37c74ff961e5892d0667ec9"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "64e77d899a715e073609589864568f7f679f87cb9ac2eab2a2f8447a0fbf33f24e297893ae7468c4a1385debea5d7e74ea64fe0de5171d249998f063aafa928d"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "76c3970e2bb1d44307b3b8969bfdcfcfa8fbcd0ee0c3200a4a54ed64c2b1d398"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "d0d9edc0f985d3b1363a87b5a0fba994d5a3729d82e8bf1516c1209d5a9be16d1137a23e90714d80b69837496fcb3cd6682d275fedf54c5918fe2d46bce4dcac"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "a6e19ae8719cf8df64c337436b0361ed6733b0920aa2b459daad604a19f474f059aa9d880d8826d29916ef27e05dcf1d"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "78c990ae587db95ba19bdf34bd97dac3b68b6ed4c28dd1abfa61738818b3f148353861ada42c9520fcdbf1febaad214f"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-swing@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-swing@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-testutil-1.10.18alpha-cyclonedx.json b/sboms/ant-testutil-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..18334432a2
--- /dev/null
+++ b/sboms/ant-testutil-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,537 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:cb24ae59-2958-495f-923f-01b40e096f5f",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:41Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-testutil@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-testutil",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Test Utilities",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "1da26d9b4793ace7e54ae1c9f02ca818"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "fcd066552f098cfed1435d09d7ccc21a7bc4f1d6"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "f49f24eb236aca42f505c614cc1a78a808941f035ab36f00f548c8f9db8ebfc3"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "04ac9d891634a4784a6182b99c37fdf262e4370aa27e7b865d579a908dbf1757d84a6f6de9db619e5364c96d08b27a40f55243c47022f969a68bbd7914533767"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "d611db06d02d5ca4293aea75d9e065e344a2aba3c6ca34d0998f2f917bc4c13c"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "0d04eaf3b81bdb95587160e6e530d73573d03e5ac5d71709d71059c116241b58a154c171c80d18d609f82d9c70eb3207f42659d8581590e4d44d0f1483483be7"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "d6e5d1429187cc4a311e1c3d565e56ef9107f82a17ee42d17b8e99cdca06db90a5fe2bbf996e1d4ae645a944bc7ccc72"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "4a921e54e91aa6a3652a9f09f9231de0770e5f5b660af6ea26799a3399f7f0353cdfdad8c8ccdd433e007e7c828730cf"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-testutil@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "publisher" : "JUnit",
+ "group" : "junit",
+ "name" : "junit",
+ "version" : "4.13.2",
+ "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "EPL-1.0",
+ "url" : "http://www.eclipse.org/legal/epl-v10.html"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://junit.org"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "group" : "org.hamcrest",
+ "name" : "hamcrest",
+ "version" : "3.0",
+ "description" : "Core API and libraries of hamcrest matcher framework.",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "BSD-3-Clause",
+ "url" : "https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "http://hamcrest.org/JavaHamcrest/"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-testutil@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/junit/junit@4.13.2?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/junit/junit@4.13.2?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file
diff --git a/sboms/ant-xz-1.10.18alpha-cyclonedx.json b/sboms/ant-xz-1.10.18alpha-cyclonedx.json
new file mode 100644
index 0000000000..3f740ecee6
--- /dev/null
+++ b/sboms/ant-xz-1.10.18alpha-cyclonedx.json
@@ -0,0 +1,506 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:32c482f3-883d-4038-a425-de0d9dafbd74",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:40Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/antlibs/cyclonedx/"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/antlibs/bindownload.cgi"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ }
+ ]
+ }
+ ]
+ },
+ "component" : {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-xz@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-xz",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant + XZ for Java",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "22094a8c814d60f262f391ea9242eec4"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "b64709bd5adb20235a9d2d10cc102212c935d0ff"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "770be002c2593cd554d7d5c7db1547ed07f18454194f05122171b45520b321e5"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "f85c9484a3781375e07878fa979240f7ae171484ddd1d52d5133f3047f0cb5857256e4150f948e5d8658897425da6de54b8f9c3d122c8c02321bbe76af458b60"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "f674817f0c929c75b68425dc5bcb380fc6f7cd0f5b96af15eec4e3b73edae605"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5e0b73478f36f7ccb6840fc30bf66deaa4a29d93cfea49f0e4476c07d2594ced9c09de17571ad024f588b015d20f571381978b1ab41b8e65d69adf29f3747597"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "f43a3271e9e1ec6b053cb5daf23a15db4002a7d18ce9fb5ccbebacb2b1bdc54b58d1f9b8f5a3e6c1dfbbb492cae8fbe3"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "b56c0e3cdb920c93265ca545e7ff7f88def1ffa4c60d08d52caa324149ada89dac57dff3de4375ba9b7b0bdfc3d84871"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-xz@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ]
+ },
+ "components" : [
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Core",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "5dd4aa18b6dc9a769fddf456d23525be"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "abb46ac6ada0b6f0ecc7d2f8e10e0d1cd2011bac"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "db0d4a594c65a4cb170d851b4cd3fe36a82e3dee8f2a3738393349606a503621"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "ff48bfeb661736779287a6eb68b527793868e64f1da75e80649b3a6f7e0c29389f44bd17217fc0e0684761804388008f9b7c2e1d1112b79e8129b5fa5d0f1b91"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "20057d1b6fdd74af1a33a71f0494b88405931025d622979dcbccf4542565de9e"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "f9f4aceb500d8d4b15e6f0eec0c08c1d512682dc3edb2d51f5b6b9419e88d570e38e472328a2a0a0e685106d5266349878cea41dfdc4373911bd12f3b606c1d0"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "79442c31e2b1a325105079aa9d1491deef6433e831fabdbf3e2f48a8835b4dca8cb975a8342accfddc18ca343a9d50da"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "49cb7a152090ba86cff13b76eeeee08a33986695e9e14f16ebca4bb4672d62e3e476381875fc9587fd57b2f802260154"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/"
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-launcher",
+ "version" : "1.10.18-SNAPSHOT",
+ "description" : "Apache Ant Launcher",
+ "hashes" : [
+ {
+ "alg" : "MD5",
+ "content" : "652c42e30abc21d8f65631798bf83a59"
+ },
+ {
+ "alg" : "SHA-1",
+ "content" : "d00960e241743e8ebe6328ef887c461b8e16bbd4"
+ },
+ {
+ "alg" : "SHA-256",
+ "content" : "4757294429f9f087a9fc9f3fd2ac1c0f4cddc507bc732e184401192864fa0491"
+ },
+ {
+ "alg" : "SHA-512",
+ "content" : "e820da4498ff55bbf77d0bb43311903279d153b4322931d4d4c15df2f9d4747833941ce9df08ca2cfe2525343f40a4fa6f33ccad633f4f527002dc85e4f8e179"
+ },
+ {
+ "alg" : "SHA3-256",
+ "content" : "3d545b66f1216a64690ae91d34b7ff687b6f5e9d067b2c8d703c959098d396a0"
+ },
+ {
+ "alg" : "SHA3-512",
+ "content" : "5cac03f87bee7c0a2a4fbdfad7c3e35cd6266f140a90695173f93263c792e63662e33cdd5aaed9d2bbe625ee9c42f7f4eccb0f12b510094075acf3468a439b97"
+ },
+ {
+ "alg" : "SHA-384",
+ "content" : "942643635f7a5bb201f19f99caf0099285d2b93bf46605de13c1920a03efb64a619b5f7b82e03bfe64353de2ec58511f"
+ },
+ {
+ "alg" : "SHA3-384",
+ "content" : "ac3f8171353410ee6b9f454be024726516cfe531cf0e7041028ed82e60954d0e904b6fda09465754db283707984eba72"
+ }
+ ],
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" : "https://gitbox.apache.org/repos/asf/ant.git"
+ },
+ {
+ "type" : "issue-tracker",
+ "url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
+ },
+ {
+ "type" : "website",
+ "url" : "https://ant.apache.org/"
+ },
+ {
+ "type" : "advisories",
+ "url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
+ },
+ {
+ "type" : "mailing-list",
+ "url" : "https://ant.apache.org/mail.html"
+ },
+ {
+ "type" : "documentation",
+ "url" : "https://ant.apache.org/manual/"
+ },
+ {
+ "type" : "source-distribution",
+ "url" : "https://ant.apache.org/srcdownload.cgi"
+ },
+ {
+ "type" : "distribution",
+ "url" : "https://ant.apache.org/bindownload.cgi"
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
+ },
+ {
+ "type" : "build-system",
+ "url" : "https://ci-builds.apache.org/job/Ant/"
+ },
+ {
+ "type" : "release-notes",
+ "url" : "https://github.com/apache/ant/blob/master/WHATSNEW"
+ },
+ {
+ "type" : "security-contact",
+ "url" : "https://www.apache.org/security/"
+ },
+ {
+ "type" : "rfc-9116",
+ "url" : "https://ant.apache.org/.well-known/security.txt"
+ }
+ ]
+ },
+ {
+ "type" : "library",
+ "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
+ "group" : "org.tukaani",
+ "name" : "xz",
+ "version" : "1.9",
+ "description" : "XZ data compression",
+ "licenses" : [
+ {
+ "license" : {
+ "name" : "Public Domain"
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
+ "url" : "https://tukaani.org/xz/java.html"
+ }
+ ]
+ }
+ ],
+ "dependencies" : [
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-xz@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "pkg:maven/org.tukaani/xz@1.9?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [
+ "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar"
+ ]
+ },
+ {
+ "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.18-SNAPSHOT?type=jar",
+ "dependsOn" : [ ]
+ },
+ {
+ "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
+ "dependsOn" : [ ]
+ }
+ ]
+}
\ No newline at end of file