{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:34f4ae2a-1702-4be5-a209-1a4e5c9b2e71",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-10T20:36:58Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.5",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "harness-github-copilot-bridge",
      "group": "",
      "version": "0.0.0",
      "purl": "pkg:npm/harness-github-copilot-bridge@0.0.0",
      "bom-ref": "pkg:npm/harness-github-copilot-bridge@0.0.0",
      "properties": [],
      "type": "application"
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@github"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "src/bridge/pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "group": "@github",
      "name": "copilot-darwin-arm64",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a9e69db85ce9e477bed1c519b93367154bfa463556e051f052f0fbdce47e2a1bdf642d56a5417c9c9fc4bd883283a94fd305b9baec0474dce2dbc44fa76fbb1"
        }
      ],
      "purl": "pkg:npm/%40github/copilot-darwin-arm64@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot-darwin-arm64@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@github",
      "name": "copilot-darwin-x64",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7276353c6288d0447f349a66326e346036b1c1e7ee07260966336592360dff3b945fabeaace7766bb70e2120a784b05796201ee32d4533ade5fae7f1f71ae8a1"
        }
      ],
      "purl": "pkg:npm/%40github/copilot-darwin-x64@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot-darwin-x64@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@github",
      "name": "copilot-linux-arm64",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7df40d319afaa2b213e716e78e000b4689f080a2d60e013fb13d3f9c36e0ae575f2fef90c1a16d743887373e9e851ad4af44dd1f938c0b9c7986163e4b0cd91"
        }
      ],
      "purl": "pkg:npm/%40github/copilot-linux-arm64@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot-linux-arm64@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "glibc"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@github",
      "name": "copilot-linux-x64",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff96d7ff5583742ecc59724c0077d7b254b39c57d9c5aa891127324a0ba8cef505c526fa40b9b6b9a3b43777512f0c6bf15e7b71ce036f69e20d3b37270676a"
        }
      ],
      "purl": "pkg:npm/%40github/copilot-linux-x64@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot-linux-x64@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "glibc"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@github",
      "name": "copilot-linuxmusl-arm64",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a910bbb36f5f584a702754f09bfe20ff698399fc0fd1286912b16445abe295394128a1249a8cfddb1377c2971a23556c281463f6097bd0db8ab679038d2cfa67"
        }
      ],
      "purl": "pkg:npm/%40github/copilot-linuxmusl-arm64@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot-linuxmusl-arm64@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "musl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@github",
      "name": "copilot-linuxmusl-x64",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e9538a7b7f50aa6bdd04cae91e5c9abf43b9bba50e5ea645341975dbc9255b449e4d58d19a8772e8fce16c361ccf0b2b5c9a54584eb44675fced000225bb54e"
        }
      ],
      "purl": "pkg:npm/%40github/copilot-linuxmusl-x64@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot-linuxmusl-x64@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "musl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@github",
      "name": "copilot-win32-arm64",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3daedbf3a52d65352a12a09c07bb4d839b97ada53062ee0061290d734dde2203f6ad16aaa8ea3c8d543d2969f41e5867e4c3b7a6910ad5774ffe268d3ef36858"
        }
      ],
      "purl": "pkg:npm/%40github/copilot-win32-arm64@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot-win32-arm64@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "win32"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@github",
      "name": "copilot-win32-x64",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9670412f1712f376afd4a67633b5f46e1ae6b26b37ddb88f8b4be5ccf6c13db7b7722f28d0116f180795fa8e2ef3ef180dd87ce59a39943fc3c381604eff2b6"
        }
      ],
      "purl": "pkg:npm/%40github/copilot-win32-x64@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot-win32-x64@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "win32"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@github",
      "name": "copilot",
      "version": "1.0.92",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3800cd146069e8a8d59ac67cb0e4cdc8a65aab8e999ea0ed098dc2704d3183a30d5f8b5e8629ebb763736ae619dfa7739285a5b4de04e78d1fd141acb100369d"
        }
      ],
      "purl": "pkg:npm/%40github/copilot@1.0.92",
      "type": "library",
      "bom-ref": "pkg:npm/@github/copilot@1.0.92",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-libc",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06d8f604e38ef37a375b21f9f5ef0c817b3111055c6ab9143a9118aee6c1d2eaf09cdd74c90dfae2bb22072535d67665a966199b4e62fe87fb8a8e26ce2841b5"
        }
      ],
      "purl": "pkg:npm/detect-libc@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "src/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "src/bridge/pnpm-lock.yaml"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/harness-github-copilot-bridge@0.0.0",
      "dependsOn": [
        "pkg:npm/@github/copilot@1.0.92"
      ]
    },
    {
      "ref": "pkg:npm/@github/copilot-darwin-arm64@1.0.92",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@github/copilot-darwin-x64@1.0.92",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@github/copilot-linux-arm64@1.0.92",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@github/copilot-linux-x64@1.0.92",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@github/copilot-linuxmusl-arm64@1.0.92",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@github/copilot-linuxmusl-x64@1.0.92",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@github/copilot-win32-arm64@1.0.92",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@github/copilot-win32-x64@1.0.92",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@github/copilot@1.0.92",
      "dependsOn": [
        "pkg:npm/detect-libc@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/detect-libc@2.1.2",
      "dependsOn": []
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/harness-github-copilot-bridge@0.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.5",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-10T20:36:58Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'harness-github-copilot-bridge' with version '0.0.0'. The package type in this SBOM is npm with a single purl namespace '@github' described under components. The components were identified from the source files: src/bridge/pnpm-lock.yaml."
    }
  ]
}