Bee’s Knees: Sipping Bill of Materials

Curious what this is about? In honor of the NTIA Software Transparency / Software Bill of Materials (SBOM) project, we have chosen to make these Sipping Bill of Materials available. Please consult your local hacker economist to learn how you can get involved with the NTIA SBOM project.

CycloneDX Format

<?xml version="1.0"?>
<bom serialNumber="url:https://narwhal.be/2019/sbom/beesknees/" version="1" xmlns="http://cyclonedx.org/schema/bom/1.1" xmlns:prep="urn:prep:instructions">
    <components>  
        <component type="library">
            <publisher>The Hendrick's Gin Distillery Ltd</publisher>
            <name>Hendrick's Gin</name>
            <description></description>
            <scope>2 oz</scope>
        </component>  
        <component type="library">
            <publisher>Narwhal</publisher>
            <name>Lemon Juice</name>
            <description>Fresh squeezed.</description>
            <scope>0.75 oz</scope>
        </component>  
        <component type="library">
            <publisher>Narwhal</publisher>
            <name>Honey Syrup</name>
            <description>Constructed with a 1:1 ratio of Kirkland Signature honey and water.</description>
            <scope>0.5 oz</scope>
        </component>  
        <component type="library">
            <publisher>Flamingo Hotel and Casino</publisher>
            <name>Hotel Ice</name>
            <description>Locally manufactured by an ice machine on this very floor.</description>
            <scope>1 amount</scope>
        </component> 
    </components>
    <prep:instructions>Shake ingredients, strain into glass.</prep:instructions>
</bom>

SWID Format

<?xml version="1.0"?>
<SoftwareIdentity
    name="Bee's Knees"
    tagId="urn:bee-s-knees"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
  
    <Link rel="requires" href="urn:the-hendrick-s-gin-distillery-ltd-hendrick-s-gin" />   
    <Link rel="requires" href="urn:narwhal-lemon-juice" />   
    <Link rel="requires" href="urn:narwhal-honey-syrup" />   
    <Link rel="requires" href="urn:flamingo-hotel-and-casino-hotel-ice" /> 
    <Meta entitlementDataRequired="false" summary="Shake ingredients, strain into glass." />
</SoftwareIdentity>

 
<SoftwareIdentity
    name="Hendrick's Gin"
    tagId="urn:the-hendrick-s-gin-distillery-ltd-hendrick-s-gin"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="The Hendrick's Gin Distillery Ltd" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="2 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Lemon Juice"
    tagId="urn:narwhal-lemon-juice"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Narwhal" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="0.75 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Honey Syrup"
    tagId="urn:narwhal-honey-syrup"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Narwhal" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="0.5 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Hotel Ice"
    tagId="urn:flamingo-hotel-and-casino-hotel-ice"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Flamingo Hotel and Casino" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="1 amount" />
</SoftwareIdentity>

SPDX Format

DocumentName: Bee's Knees
SPDXID: bee-s-knees
DocumentComment: <text>Shake ingredients, strain into glass.</text>
## Creation Information
Creator: Tool: Jekyll
Creator: Organization: Narwhal
 
FileName: Hendrick's Gin
SPDXID: hendrick-s-gin
FileComment: <text>2 oz</text>
FileContributor: The Hendrick's Gin Distillery Ltd
 
FileName: Lemon Juice
SPDXID: lemon-juice
FileComment: <text>0.75 oz</text>
FileContributor: Narwhal
 
FileName: Honey Syrup
SPDXID: honey-syrup
FileComment: <text>0.5 oz</text>
FileContributor: Narwhal
 
FileName: Hotel Ice
SPDXID: hotel-ice
FileComment: <text>1 amount</text>
FileContributor: Flamingo Hotel and Casino

JSON Format

{
    "shortname": "beesknees",
    "name": "Bee's Knees",
    "ingredients": [  
        {
            "name": "Hendrick's Gin",
            "manufacturer": "The Hendrick's Gin Distillery Ltd",
            "notes": "",
            "quantity": 2,
            "unit": "oz"
        },  
        {
            "name": "Lemon Juice",
            "manufacturer": "Narwhal",
            "notes": "Fresh squeezed.",
            "quantity": 0.75,
            "unit": "oz"
        },  
        {
            "name": "Honey Syrup",
            "manufacturer": "Narwhal",
            "notes": "Constructed with a 1:1 ratio of Kirkland Signature honey and water.",
            "quantity": 0.5,
            "unit": "oz"
        },  
        {
            "name": "Hotel Ice",
            "manufacturer": "Flamingo Hotel and Casino",
            "notes": "Locally manufactured by an ice machine on this very floor.",
            "quantity": 1,
            "unit": "amount"
        }, 
    ],
    "instructions": "Shake ingredients, strain into glass."
}