Are there examples of SBOM where the "component" type is "file"?

[VladimirBoiko]

Hello, I can't find examples of SBOM where the "component" type is "file" and some component has related components. Could you please provide such examples?

[sschuberth]

I'm also interested in such examples, esp. in best practices for file-typed components name fields: The spec's description to use

The name of the component. This will often be a shortened, single name of the component. Examples: commons-lang3 and jquery

does not seem to apply well here. I'd rather expect the name of a file-typed component to be the path to the file relative to the component root.

[rudsberg]

I would also be interested in such examples.

[jkowalleck]

there is a feature-request for the webpack SBOM generator, to produce file-components with hashes: https://github.com/CycloneDX/cyclonedx-webpack-plugin/issues/1235

as soon as this one is done, i might publish an example here.