diff --git a/src/builders.ts b/src/builders.ts index 785cb4df1..f38376612 100644 --- a/src/builders.ts +++ b/src/builders.ts @@ -267,12 +267,25 @@ export class BomBuilder { for (const toolC of this.makeToolCs()) { bom.metadata.tools.components.add(toolC) } - if (!this.reproducible) { + if (this.reproducible) { + bom.metadata.properties.add( + new Models.Property( + PropertyNames.BomReproducible, + PropertyValueBool.True + ) + ) + } else { bom.serialNumber = Utils.BomUtility.randomSerialNumber() bom.metadata.timestamp = new Date() + bom.metadata.properties.add( + new Models.Property( + PropertyNames.BomReproducible, + PropertyValueBool.False + ) + ) } - // endregion metadata + // endregion metadata // region components if (this.flattenComponents) { for (const c of allComponents.values()) { diff --git a/src/properties.ts b/src/properties.ts index cb8b06772..7b1e47006 100644 --- a/src/properties.ts +++ b/src/properties.ts @@ -29,6 +29,7 @@ export const enum PropertyNames { PackagePrivate = 'cdx:npm:package:private', PackageDevelopment = 'cdx:npm:package:development', PackageInstallPath = 'cdx:npm:package:path', + BomReproducible = 'cdx:reproducible', } /** diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_macos-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_ubuntu-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_windows-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node22_windows-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm10_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_macos-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_ubuntu-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_windows-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node22_windows-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm11_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_macos-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_ubuntu-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_windows-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node22_windows-latest.snap.json index 514855e3f..3c3d36fe5 100644 --- a/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/alternative-package-registry_npm9_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_macos-latest.snap.json index d951a1585..6d9232ff2 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_ubuntu-latest.snap.json index d951a1585..6d9232ff2 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_windows-latest.snap.json index d951a1585..6d9232ff2 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node22_windows-latest.snap.json index d951a1585..6d9232ff2 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm10_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_macos-latest.snap.json index d951a1585..6d9232ff2 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_ubuntu-latest.snap.json index d951a1585..6d9232ff2 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_windows-latest.snap.json index d951a1585..6d9232ff2 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node22_windows-latest.snap.json index d951a1585..6d9232ff2 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm11_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_macos-latest.snap.json index 817fea1f6..670e3ba3f 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_ubuntu-latest.snap.json index 817fea1f6..670e3ba3f 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_windows-latest.snap.json index 817fea1f6..670e3ba3f 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node22_windows-latest.snap.json index 817fea1f6..670e3ba3f 100644 --- a/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/bundled-dependencies_npm9_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/deps-from-git_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/deps-from-git_npm10_node20_ubuntu-latest.snap.json index 6b6480a78..c58be9471 100644 --- a/tests/_data/sbom_demo-results/bare/deps-from-git_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/deps-from-git_npm10_node20_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/deps-from-git_npm10_node24_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/deps-from-git_npm10_node24_ubuntu-latest.snap.json index c001cfa1e..aad0294ab 100644 --- a/tests/_data/sbom_demo-results/bare/deps-from-git_npm10_node24_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/deps-from-git_npm10_node24_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/deps-from-git_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/deps-from-git_npm11_node20_ubuntu-latest.snap.json index 6b6480a78..c58be9471 100644 --- a/tests/_data/sbom_demo-results/bare/deps-from-git_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/deps-from-git_npm11_node20_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/deps-from-git_npm11_node24_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/deps-from-git_npm11_node24_ubuntu-latest.snap.json index c001cfa1e..aad0294ab 100644 --- a/tests/_data/sbom_demo-results/bare/deps-from-git_npm11_node24_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/deps-from-git_npm11_node24_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/deps-from-git_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/deps-from-git_npm9_node20_ubuntu-latest.snap.json index a236be5ad..7755c2f94 100644 --- a/tests/_data/sbom_demo-results/bare/deps-from-git_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/deps-from-git_npm9_node20_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/deps-from-git_npm9_node24_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/deps-from-git_npm9_node24_ubuntu-latest.snap.json index ff9d77b02..7b9a6a7ab 100644 --- a/tests/_data/sbom_demo-results/bare/deps-from-git_npm9_node24_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/deps-from-git_npm9_node24_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_macos-latest.snap.json index 1ddf88b7a..42f9dcbdf 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_ubuntu-latest.snap.json index 1ddf88b7a..42f9dcbdf 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_windows-latest.snap.json index 1ddf88b7a..42f9dcbdf 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node22_windows-latest.snap.json index 1ddf88b7a..42f9dcbdf 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm10_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_macos-latest.snap.json index 1ddf88b7a..42f9dcbdf 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_ubuntu-latest.snap.json index 1ddf88b7a..42f9dcbdf 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_windows-latest.snap.json index 1ddf88b7a..42f9dcbdf 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node22_windows-latest.snap.json index 1ddf88b7a..42f9dcbdf 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm11_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_macos-latest.snap.json index 603a7a379..7be014cc3 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_ubuntu-latest.snap.json index 603a7a379..7be014cc3 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_windows-latest.snap.json index 603a7a379..7be014cc3 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node22_windows-latest.snap.json index 603a7a379..7be014cc3 100644 --- a/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/dev-dependencies_npm9_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_macos-latest.snap.json index ac6e73fc8..43187112d 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_ubuntu-latest.snap.json index 56056de3f..387715822 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_windows-latest.snap.json index 56056de3f..387715822 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_macos-latest.snap.json index 27200e55c..134afac1a 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_ubuntu-latest.snap.json index 21078aaba..9a061abe1 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_windows-latest.snap.json index 21078aaba..9a061abe1 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm10_node24_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_macos-latest.snap.json index ac6e73fc8..43187112d 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_ubuntu-latest.snap.json index 56056de3f..387715822 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_windows-latest.snap.json index 56056de3f..387715822 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_macos-latest.snap.json index 27200e55c..134afac1a 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_ubuntu-latest.snap.json index 27200e55c..134afac1a 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_windows-latest.snap.json index 27200e55c..134afac1a 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm11_node24_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_macos-latest.snap.json index 5dd4a359b..b41d85eea 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_ubuntu-latest.snap.json index ce4804373..ac4408d82 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_windows-latest.snap.json index ce4804373..ac4408d82 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_macos-latest.snap.json index b5e957317..ba8ee6f11 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_ubuntu-latest.snap.json index 5e888cb4c..c531683eb 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_windows-latest.snap.json index 5e888cb4c..c531683eb 100644 --- a/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/juice-shop_npm9_node24_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_macos-latest.snap.json index cd0d6e088..5ae1715fd 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_ubuntu-latest.snap.json index cd0d6e088..5ae1715fd 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_windows-latest.snap.json index cd0d6e088..5ae1715fd 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node22_windows-latest.snap.json index cd0d6e088..5ae1715fd 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm10_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_macos-latest.snap.json index cd0d6e088..5ae1715fd 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_ubuntu-latest.snap.json index cd0d6e088..5ae1715fd 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_windows-latest.snap.json index cd0d6e088..5ae1715fd 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node22_windows-latest.snap.json index cd0d6e088..5ae1715fd 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm11_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_macos-latest.snap.json index e3523cb5c..7b84175c0 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_ubuntu-latest.snap.json index e3523cb5c..7b84175c0 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_windows-latest.snap.json index e3523cb5c..7b84175c0 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node22_windows-latest.snap.json index e3523cb5c..7b84175c0 100644 --- a/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-dependencies_npm9_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces--no-workspaces_npm11_node22_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces--no-workspaces_npm11_node22_ubuntu-latest.snap.json index 082a9e0eb..cf0c260cc 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces--no-workspaces_npm11_node22_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces--no-workspaces_npm11_node22_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces--workspace=my-local --workspace=my-local-e_npm11_node22_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces--workspace=my-local --workspace=my-local-e_npm11_node22_ubuntu-latest.snap.json index 78b56a74a..2e9f5aaca 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces--workspace=my-local --workspace=my-local-e_npm11_node22_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces--workspace=my-local --workspace=my-local-e_npm11_node22_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces--workspace=my-local-e_npm11_node22_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces--workspace=my-local-e_npm11_node22_ubuntu-latest.snap.json index 78b56a74a..2e9f5aaca 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces--workspace=my-local-e_npm11_node22_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces--workspace=my-local-e_npm11_node22_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_macos-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_ubuntu-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_windows-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node22_windows-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm10_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_macos-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_ubuntu-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_windows-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node22_windows-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm11_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_macos-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_ubuntu-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_windows-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node22_windows-latest.snap.json index 1e5e1e260..1be82159e 100644 --- a/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/local-workspaces_npm9_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_macos-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_macos-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_ubuntu-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_ubuntu-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_windows-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node20_windows-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node22_windows-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm10_node22_windows-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_macos-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_macos-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_ubuntu-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_ubuntu-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_windows-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node20_windows-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node22_windows-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm11_node22_windows-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_macos-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_macos-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_ubuntu-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_ubuntu-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_windows-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node20_windows-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node22_windows-latest.snap.json index 96c325575..708ca3105 100644 --- a/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-integrity_npm9_node22_windows-latest.snap.json @@ -88,7 +88,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_macos-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_macos-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_ubuntu-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_windows-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node20_windows-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node22_windows-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm10_node22_windows-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_macos-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_macos-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_ubuntu-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_windows-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node20_windows-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node22_windows-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm11_node22_windows-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_macos-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_macos-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_ubuntu-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_ubuntu-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_windows-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node20_windows-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node22_windows-latest.snap.json index 29d2ea5e8..886cdff02 100644 --- a/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/bare/package-with-build-id_npm9_node22_windows-latest.snap.json @@ -89,7 +89,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [], "dependencies": [ diff --git a/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_macos-latest.snap.json index f9340d105..b3e3e8924 100644 --- a/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_ubuntu-latest.snap.json index f9340d105..b3e3e8924 100644 --- a/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_windows-latest.snap.json index f9340d105..b3e3e8924 100644 --- a/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node22_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node22_windows-latest.snap.json index f9340d105..b3e3e8924 100644 --- a/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node22_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/bundled-dependencies_npm9_node22_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_macos-latest.snap.json index 86e9836cf..299190408 100644 --- a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_ubuntu-latest.snap.json index c6264fd43..e92633682 100644 --- a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_windows-latest.snap.json index c6264fd43..e92633682 100644 --- a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node20_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_macos-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_macos-latest.snap.json index 0b2151142..afb0a0e92 100644 --- a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_macos-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_macos-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_ubuntu-latest.snap.json index cd032c273..bb864e04f 100644 --- a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_windows-latest.snap.json b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_windows-latest.snap.json index cd032c273..bb864e04f 100644 --- a/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_windows-latest.snap.json +++ b/tests/_data/sbom_demo-results/flatten-components/juice-shop_npm9_node24_windows-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_demo-results/suppressed-error-on-non-zero-exit/dev-dependencies_npm9_node20_ubuntu-latest.snap.json b/tests/_data/sbom_demo-results/suppressed-error-on-non-zero-exit/dev-dependencies_npm9_node20_ubuntu-latest.snap.json index 603a7a379..7be014cc3 100644 --- a/tests/_data/sbom_demo-results/suppressed-error-on-non-zero-exit/dev-dependencies_npm9_node20_ubuntu-latest.snap.json +++ b/tests/_data/sbom_demo-results/suppressed-error-on-non-zero-exit/dev-dependencies_npm9_node20_ubuntu-latest.snap.json @@ -97,7 +97,13 @@ "value": "" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/bare/with-prepared.snap.json b/tests/_data/sbom_dummy-results/bare/with-prepared.snap.json index 5d9c4437c..2e2aff9d6 100644 --- a/tests/_data/sbom_dummy-results/bare/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/bare/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/bare/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/bare/with-prepared.snap.xml index a94c8414c..b95a2a630 100644 --- a/tests/_data/sbom_dummy-results/bare/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/bare/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/flat/with-prepared.snap.json b/tests/_data/sbom_dummy-results/flat/with-prepared.snap.json index 1b01002b8..e0adb105c 100644 --- a/tests/_data/sbom_dummy-results/flat/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/flat/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/flat/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/flat/with-prepared.snap.xml index 004b8a8f3..5e19822d0 100644 --- a/tests/_data/sbom_dummy-results/flat/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/flat/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/omit-dev-optional-peer/with-prepared.snap.json b/tests/_data/sbom_dummy-results/omit-dev-optional-peer/with-prepared.snap.json index d6c1cf668..af7551de4 100644 --- a/tests/_data/sbom_dummy-results/omit-dev-optional-peer/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/omit-dev-optional-peer/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/omit-dev-optional-peer/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/omit-dev-optional-peer/with-prepared.snap.xml index 49c0736f9..c49303d9f 100644 --- a/tests/_data/sbom_dummy-results/omit-dev-optional-peer/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/omit-dev-optional-peer/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/omit-dev-optional/with-prepared.snap.json b/tests/_data/sbom_dummy-results/omit-dev-optional/with-prepared.snap.json index d6c1cf668..af7551de4 100644 --- a/tests/_data/sbom_dummy-results/omit-dev-optional/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/omit-dev-optional/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/omit-dev-optional/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/omit-dev-optional/with-prepared.snap.xml index 49c0736f9..c49303d9f 100644 --- a/tests/_data/sbom_dummy-results/omit-dev-optional/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/omit-dev-optional/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/omit-dev-peer/with-prepared.snap.json b/tests/_data/sbom_dummy-results/omit-dev-peer/with-prepared.snap.json index a15beb8b1..03ecfc697 100644 --- a/tests/_data/sbom_dummy-results/omit-dev-peer/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/omit-dev-peer/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/omit-dev-peer/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/omit-dev-peer/with-prepared.snap.xml index 8692cde4f..26059acfe 100644 --- a/tests/_data/sbom_dummy-results/omit-dev-peer/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/omit-dev-peer/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/omit-dev/with-prepared.snap.json b/tests/_data/sbom_dummy-results/omit-dev/with-prepared.snap.json index a15beb8b1..03ecfc697 100644 --- a/tests/_data/sbom_dummy-results/omit-dev/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/omit-dev/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/omit-dev/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/omit-dev/with-prepared.snap.xml index 8692cde4f..26059acfe 100644 --- a/tests/_data/sbom_dummy-results/omit-dev/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/omit-dev/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/omit-optional-peer/with-prepared.snap.json b/tests/_data/sbom_dummy-results/omit-optional-peer/with-prepared.snap.json index 702ba8498..58248b467 100644 --- a/tests/_data/sbom_dummy-results/omit-optional-peer/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/omit-optional-peer/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/omit-optional-peer/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/omit-optional-peer/with-prepared.snap.xml index 127657c20..dd10abb69 100644 --- a/tests/_data/sbom_dummy-results/omit-optional-peer/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/omit-optional-peer/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/omit-optional/with-prepared.snap.json b/tests/_data/sbom_dummy-results/omit-optional/with-prepared.snap.json index 702ba8498..58248b467 100644 --- a/tests/_data/sbom_dummy-results/omit-optional/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/omit-optional/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/omit-optional/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/omit-optional/with-prepared.snap.xml index 127657c20..dd10abb69 100644 --- a/tests/_data/sbom_dummy-results/omit-optional/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/omit-optional/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/omit-peer/with-prepared.snap.json b/tests/_data/sbom_dummy-results/omit-peer/with-prepared.snap.json index 5d9c4437c..2e2aff9d6 100644 --- a/tests/_data/sbom_dummy-results/omit-peer/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/omit-peer/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/omit-peer/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/omit-peer/with-prepared.snap.xml index a94c8414c..b95a2a630 100644 --- a/tests/_data/sbom_dummy-results/omit-peer/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/omit-peer/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/package-lock-only/with-prepared.snap.json b/tests/_data/sbom_dummy-results/package-lock-only/with-prepared.snap.json index a2144460c..14823be17 100644 --- a/tests/_data/sbom_dummy-results/package-lock-only/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/package-lock-only/with-prepared.snap.json @@ -93,7 +93,13 @@ "value": "true" } ] - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/package-lock-only/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/package-lock-only/with-prepared.snap.xml index a284504b2..904a5f5d4 100644 --- a/tests/_data/sbom_dummy-results/package-lock-only/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/package-lock-only/with-prepared.snap.xml @@ -70,6 +70,9 @@ true + + true + diff --git a/tests/_data/sbom_dummy-results/with-licenses/with-prepared.snap.json b/tests/_data/sbom_dummy-results/with-licenses/with-prepared.snap.json index 27568624b..9995f2660 100644 --- a/tests/_data/sbom_dummy-results/with-licenses/with-prepared.snap.json +++ b/tests/_data/sbom_dummy-results/with-licenses/with-prepared.snap.json @@ -107,7 +107,13 @@ } ] } - } + }, + "properties": [ + { + "name": "cdx:reproducible", + "value": "true" + } + ] }, "components": [ { diff --git a/tests/_data/sbom_dummy-results/with-licenses/with-prepared.snap.xml b/tests/_data/sbom_dummy-results/with-licenses/with-prepared.snap.xml index f6045fb57..0489a8b54 100644 --- a/tests/_data/sbom_dummy-results/with-licenses/with-prepared.snap.xml +++ b/tests/_data/sbom_dummy-results/with-licenses/with-prepared.snap.xml @@ -78,6 +78,9 @@ + + true +