Honey Caipirinha: Sipping Bill of Materials

Curious what this is about? In honor of the NTIA Software Transparency / Software Bill of Materials (SBOM) project, we have chosen to make these Sipping Bill of Materials available. Please consult your local hacker economist to learn how you can get involved with the NTIA SBOM project.

CycloneDX Format

<?xml version="1.0"?>
<bom serialNumber="url:https://narwhal.be/2019/sbom/honeycaipirinha/" version="1" xmlns="http://cyclonedx.org/schema/bom/1.1" xmlns:prep="urn:prep:instructions">
    <components>  
        <component type="library">
            <publisher>Novo Fogo</publisher>
            <name>Barrel-Aged Cachaça</name>
            <description></description>
            <scope>2 oz</scope>
        </component>  
        <component type="library">
            <publisher>Narwhal</publisher>
            <name>Honey Syrup</name>
            <description>Constructed with a 1:1 ratio of Kirkland Signature honey and water.</description>
            <scope>1 oz</scope>
        </component>  
        <component type="library">
            <publisher>Narwhal</publisher>
            <name>Lime Wedges</name>
            <description>Honestly these are lime wedges. Did you expect deep insight?</description>
            <scope>4 count</scope>
        </component>  
        <component type="library">
            <publisher>Flamingo Hotel and Casino</publisher>
            <name>Hotel Ice</name>
            <description>Locally manufactured by an ice machine on this very floor.</description>
            <scope>1 amount</scope>
        </component> 
    </components>
    <prep:instructions>Muddle lime into syrup, add ice, add cachaca, stir.</prep:instructions>
</bom>

SWID Format

<?xml version="1.0"?>
<SoftwareIdentity
    name="Honey Caipirinha"
    tagId="urn:honey-caipirinha"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
  
    <Link rel="requires" href="urn:novo-fogo-barrel-aged-cachaça" />   
    <Link rel="requires" href="urn:narwhal-honey-syrup" />   
    <Link rel="requires" href="urn:narwhal-lime-wedges" />   
    <Link rel="requires" href="urn:flamingo-hotel-and-casino-hotel-ice" /> 
    <Meta entitlementDataRequired="false" summary="Muddle lime into syrup, add ice, add cachaca, stir." />
</SoftwareIdentity>

 
<SoftwareIdentity
    name="Barrel-Aged Cachaça"
    tagId="urn:novo-fogo-barrel-aged-cachaça"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Novo Fogo" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="2 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Honey Syrup"
    tagId="urn:narwhal-honey-syrup"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Narwhal" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="1 oz" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Lime Wedges"
    tagId="urn:narwhal-lime-wedges"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Narwhal" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="4 count" />
</SoftwareIdentity>
 
<SoftwareIdentity
    name="Hotel Ice"
    tagId="urn:flamingo-hotel-and-casino-hotel-ice"
    tagVersion="1"
    xml:lang="en"	
    xmlns:vTag="http://tagvault.org/xsd/swid-extensions-2015.xsd"
    xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" 
    xmlns:n8060="http://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd">
    <Entity name="Narwhal" role="tagCreator" />
    <Entity name="Flamingo Hotel and Casino" role="softwareCreator" />
    <Meta entitlementDataRequired="false" summary="1 amount" />
</SoftwareIdentity>

SPDX Format

DocumentName: Honey Caipirinha
SPDXID: honey-caipirinha
DocumentComment: <text>Muddle lime into syrup, add ice, add cachaca, stir.</text>
## Creation Information
Creator: Tool: Jekyll
Creator: Organization: Narwhal
 
FileName: Barrel-Aged Cachaça
SPDXID: barrel-aged-cachaça
FileComment: <text>2 oz</text>
FileContributor: Novo Fogo
 
FileName: Honey Syrup
SPDXID: honey-syrup
FileComment: <text>1 oz</text>
FileContributor: Narwhal
 
FileName: Lime Wedges
SPDXID: lime-wedges
FileComment: <text>4 count</text>
FileContributor: Narwhal
 
FileName: Hotel Ice
SPDXID: hotel-ice
FileComment: <text>1 amount</text>
FileContributor: Flamingo Hotel and Casino

JSON Format

{
    "shortname": "honeycaipirinha",
    "name": "Honey Caipirinha",
    "ingredients": [  
        {
            "name": "Barrel-Aged Cachaça",
            "manufacturer": "Novo Fogo",
            "notes": "",
            "quantity": 2,
            "unit": "oz"
        },  
        {
            "name": "Honey Syrup",
            "manufacturer": "Narwhal",
            "notes": "Constructed with a 1:1 ratio of Kirkland Signature honey and water.",
            "quantity": 1,
            "unit": "oz"
        },  
        {
            "name": "Lime Wedges",
            "manufacturer": "Narwhal",
            "notes": "Honestly these are lime wedges. Did you expect deep insight?",
            "quantity": 4,
            "unit": "count"
        },  
        {
            "name": "Hotel Ice",
            "manufacturer": "Flamingo Hotel and Casino",
            "notes": "Locally manufactured by an ice machine on this very floor.",
            "quantity": 1,
            "unit": "amount"
        }, 
    ],
    "instructions": "Muddle lime into syrup, add ice, add cachaca, stir."
}