{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "skopeo-1.1.14.2-6.oe2403sp4.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-04T04:28:12.092529219Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/skopeo-1.1.14.2-6.oe2403sp4.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-skopeo-1.14.2",
      "name": "skopeo",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "f1e72d6ee8235764e9fcf57f808420cc789a7a3746be1057773fcefae51c4d1c"
        }
      ],
      "description": "A command line utility that performs various operations on container images and image repositories",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/skopeo@1.14.2-6.oe2403sp4?arch=aarch64&epoch=1&upstream=skopeo-1.14.2-6.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/containers/skopeo",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Work with remote images registries - retrieving information, images, signing content",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:1.14.2-6.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-containers-common-1",
      "name": "containers-common",
      "licenseConcluded": "Apache-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "639fd245300bc6168eb4bf7b87ebcd59b7df068dcdc3add3d9014e20cc8156be"
        }
      ],
      "description": "This package contains common configuration files and documentation for container\ntools ecosystem, such as Podman, Buildah and Skopeo.\n\nIt is required because the most of configuration files and docs come from projects\nwhich are vendored into Podman, Buildah, Skopeo, etc. but they are not packaged\nseparately.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/containers-common@1-4.oe2403sp4?arch=noarch&epoch=4&upstream=containers-common-1-4.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://github.com/containers/common",
      "licenseDeclared": "Apache-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Common configuration and documentation for containers.",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "4:1-4.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-device-mapper-1.02.195",
      "name": "device-mapper",
      "licenseConcluded": "LGPLv2",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "4f445917da51df02ae114a206eaf21bfd355ee9474b439782e69368ea0ec6dbc"
        }
      ],
      "description": "Manages logical devices that use the device-mapper driver.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/device-mapper@1.02.195-23.oe2403sp4?arch=aarch64&epoch=8&upstream=lvm2-2.03.21-23.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://sources.redhat.com/dm",
      "licenseDeclared": "LGPLv2",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Low level logical volume management",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "8:1.02.195-23.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "972f6f0ead2fbc0f525623aa566baec969734e89308b0c92aa05a9f8d3c7299f"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-107.oe2403sp4?arch=aarch64&epoch=0&upstream=glibc-2.38-107.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-107.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-gpgme-1.21.0",
      "name": "gpgme",
      "licenseConcluded": "GPLv2+ and LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "208796089a157e26482a946f3e9fd0a808899157e4e9bb091f1f0a04beda9c6d"
        }
      ],
      "description": "GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG\neasier for applications.  It provides a high-level crypto API for\nencryption, decryption, signing, signature verification and key\nmanagement.\nThis package provides C/C++/Qt/Python API support for GPGME.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/gpgme@1.21.0-3.oe2403sp4?arch=aarch64&epoch=0&upstream=gpgme-1.21.0-3.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://gnupg.org/related_software/gpgme/",
      "licenseDeclared": "GPLv2+ and LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "GnuPG Made Easy",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.21.0-3.oe2403sp4"
    },
    {
      "SPDXID": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "name": "shadow-subid-devel",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e6c01065a9ec10bd3e20b7189c1e5e4a09a2a3da1c5734e76e84d3c7ae9f80c5"
        }
      ],
      "description": "Development files for shadow-utils-subid.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shadow-subid-devel@4.14.3-8.oe2403sp4?arch=aarch64&epoch=2&upstream=shadow-4.14.3-8.oe2403sp4.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pkg-shadow.alioth.debian.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/f1f85c23079e7764ad00378a9fc5d660b89a03657290e75426caf7be5b7da462-primary.sqlite.bz2",
      "summary": "Development package for shadow-utils-subid",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:4.14.3-8.oe2403sp4"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-containers-common-1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-device-mapper-1.02.195"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-gpgme-1.21.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-skopeo-1.14.2",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shadow-subid-devel-4.14.3"
    }
  ]
}