{ "bomFormat": "CycloneDX", "specVersion": "1.4", "version": 1, "serialNumber": "urn:uuid:fa77d49e-d996-59a3-82e1-6de87873215f", "metadata": { "tools": [ { "name": "decode-sbom", "vendor": "coreboot" } ], "manufacture": { "name": "3mdeb" }, "component": { "type": "firmware", "bom-ref": "a9032c9d-2aaa-5a25-a0e6-6d865b24e6d2", "name": "coreboot", "purl": "pkg:generic/org.coreboot.rocks/coreboot@2026-10-15_1de5aa934d11eae58935184a9a066fdade2bb1c0", "version": "2026-10-15_1de5aa934d11eae58935184a9a066fdade2bb1c0", "supplier": { "name": "coreboot" } }, "properties": [ { "name": "fsp_path", "value": "EagleStreamFspBinPkg/Fsp.fd" } ] }, "components": [ { "type": "firmware", "bom-ref": "a9032c9d-2aaa-5a25-a0e6-6d865b24e6d2", "name": "coreboot", "purl": "pkg:generic/org.coreboot.rocks/coreboot@2026-10-15_1de5aa934d11eae58935184a9a066fdade2bb1c0", "cpe": "cpe:2.3:o:coreboot:coreboot:2026-10-15_1de5aa934d11eae58935184a9a066fdade2bb1c0:*:*:*:*:*:*:*", "version": "2026-10-15_1de5aa934d11eae58935184a9a066fdade2bb1c0", "description": "coreboot is a project to develop open source boot firmware for various architectures", "supplier": { "name": "coreboot" }, "pedigree": { "commits": [ { "uid": "25.12" } ] }, "externalReferences": [ { "type": "vcs", "url": "https://github.com/coreboot/coreboot" } ], "licenses": [ { "license": { "id": "Apache-2.0" } }, { "license": { "id": "BSD-2-Clause-Patent" } }, { "license": { "id": "BSD-2-Clause" } }, { "license": { "id": "BSD-3-Clause" } }, { "license": { "id": "BSD-4-Clause-UC" } }, { "license": { "id": "CC-BY-4.0" } }, { "license": { "id": "CC-BY-SA-3.0" } }, { "license": { "id": "CC-PDDC" } }, { "license": { "id": "GPL-2.0-only" } }, { "license": { "id": "GPL-2.0-or-later" } }, { "license": { "id": "GPL-3.0-only" } }, { "license": { "id": "GPL-3.0-or-later" } }, { "license": { "id": "HPND-sell-variant" } }, { "license": { "id": "HPND" } }, { "license": { "id": "ISC" } }, { "license": { "id": "LGPL-2.1-or-later" } }, { "license": { "id": "MIT" } }, { "license": { "id": "X11" } }, { "license": { "url": "https://spdx.org/licenses/exceptions.html" } } ] }, { "type": "firmware", "bom-ref": "e51a1e53-b635-5702-8a53-34e516775f3e", "name": "Intel Server Platform Services", "purl": "pkg:generic/com.intel.sps/intel-server-platform-services@6.1.4.230", "version": "6.1.4.230", "description": "Intel Server Platform Services firmware", "hashes": [ { "alg": "SHA-256", "content": "322f207ad2aeeb45ba4ea5309a8711151b09cd09e2a81dc32ee275c9fca2eafe" } ], "supplier": { "name": "Intel" }, "licenses": [ { "license": { "url": "https://github.com/Dasharo/dasharo-blobs/blob/main/LICENSE" } } ] }, { "type": "firmware", "bom-ref": "a1b2c3d4-e5f6-7890-abcd-ef1234567890", "name": "edk2", "purl": "pkg:generic/org.tianocore.edk2/edk2@2026-09-11_bdb92c0e8f8fde2b25c350cdd1c4da5ff3e91749", "cpe": "cpe:2.3:a:tianocore:edk2:2026-09-11_bdb92c0e8f8fde2b25c350cdd1c4da5ff3e91749:*:*:*:*:*:*:*", "version": "2026-09-11_bdb92c0e8f8fde2b25c350cdd1c4da5ff3e91749", "description": "EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and UEFI Platform Initialization (PI) specifications. It is used as a coreboot payload to provide a UEFI environment.", "hashes": [ { "alg": "SHA-256", "content": "73282e730cf5a9d3e2399bba3304be72a7dff2d9df348f989f0d47ec797627d2" } ], "supplier": { "name": "TianoCore" }, "pedigree": { "commits": [ { "uid": "edk2-stable202602" } ] }, "externalReferences": [ { "type": "vcs", "url": "https://github.com/tianocore/edk2" } ], "licenses": [ { "license": { "id": "BSD-2-Clause-Patent" } } ] }, { "type": "firmware", "bom-ref": "c062f4db-917e-533a-8b42-c704759ec6d8", "name": "edk2-platforms", "purl": "pkg:generic/org.tianocore.edk2-platforms/edk2-platforms@2025-04-15_1002a59639f111a2f8178b77d1f5fde0ea8d976f", "version": "2025-04-15_1002a59639f111a2f8178b77d1f5fde0ea8d976f", "description": "edk2-platforms provides sample platform and silicon support packages for EDK II. This build uses the Dasharo fork (github.com/Dasharo/edk2-platforms), a fork of tianocore/edk2-platforms, integrated into the edk2 UEFI payload build.", "hashes": [ { "alg": "SHA-256", "content": "d8c064154c9d324d17c6bc9d039d6544678d46fc15875b7c3f24c6cf659969c9" } ], "supplier": { "name": "TianoCore" }, "pedigree": { "commits": [ { "uid": "v0.9.0" } ] }, "licenses": [ { "license": { "id": "BSD-2-Clause-Patent" } } ] }, { "type": "firmware", "bom-ref": "fb23e2f5-a1e8-55f1-8a2d-5de96bd93476", "name": "Intel-Microcode-06-8f-08", "purl": "pkg:generic/com.intel.microcode/intel-microcode-06-8f-08@0x2c000435", "cpe": "cpe:2.3:o:intel:microcode:0x2c000435:*:*:*:*:*:*:*", "version": "0x2c000435", "description": "Microcode Updates for Intel Processors", "hashes": [ { "alg": "SHA-256", "content": "5d687613225869161b4a8d9f93868135eae37b6d241fa054c7fe57fdf8a5b36d" } ], "supplier": { "name": "Intel" }, "pedigree": { "commits": [ { "uid": "2026-03-02" } ] }, "properties": [ { "name": "coreboot:coswid:edition", "value": "0x806f8" } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files" } ], "licenses": [ { "license": { "url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/main/license" } } ] }, { "type": "firmware", "bom-ref": "cfa698c2-ed98-5ba6-b3d2-cf0893bce233", "name": "Intel-Microcode-06-cf-02", "purl": "pkg:generic/com.intel.microcode/intel-microcode-06-cf-02@0x210002f4", "cpe": "cpe:2.3:o:intel:microcode:0x210002f4:*:*:*:*:*:*:*", "version": "0x210002f4", "description": "Microcode Updates for Intel Processors", "hashes": [ { "alg": "SHA-256", "content": "361e84cab00ebf178123fd754ff68fd096d5139393c1806083022aa17ef8d25f" } ], "supplier": { "name": "Intel" }, "pedigree": { "commits": [ { "uid": "2026-03-02" } ] }, "properties": [ { "name": "coreboot:coswid:edition", "value": "0xc06f2" } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files" } ], "licenses": [ { "license": { "url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/blob/main/license" } } ] }, { "type": "firmware", "bom-ref": "719e6299-4355-5beb-b182-9cf47928515a", "name": "Intel Firmware Support Package", "purl": "pkg:generic/com.intel.fsp/intel-firmware-support-package@1.1.1.395", "version": "1.1.1.395", "description": "Intel Firmware Support Package (FSP) is a binary blob providing memory initialization and silicon bring-up for Intel platforms", "hashes": [ { "alg": "SHA-256", "content": "2f31b08e7cebaedb0fae6ca569ef0b51b53e3c583ab01f7e21c7edf1e63881cd" } ], "supplier": { "name": "Intel" }, "pedigree": { "commits": [ { "uid": "1.1.1.395 Bios: " } ] }, "properties": [ { "name": "coreboot:coswid:edition", "value": "EagleStreamFspBinPkg" }, { "name": "coreboot:coswid:product-family", "value": "EagleStream" } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/intel/FSP" } ], "licenses": [ { "license": { "url": "https://github.com/intel/FSP/blob/master/LICENSE" } } ] }, { "type": "firmware", "bom-ref": "9a5e8734-7068-5502-9f6a-6e1bcffb77dd", "name": "Intel Flash Descriptor", "purl": "pkg:generic/intel-flash-descriptor@2026-09-10_69f6817e2f29bcba077e58e905c5d5b05f60c767", "version": "2026-09-10_69f6817e2f29bcba077e58e905c5d5b05f60c767", "description": "The Intel Flash Descriptor defines the flash layout and hardware strap settings for Intel platforms", "hashes": [ { "alg": "SHA-256", "content": "31db64792f0c446982c43863641748bce0542c4c8b2ecc92f23f40f892d13fcb" } ], "supplier": { "name": "coreboot" }, "pedigree": { "commits": [ { "uid": "v1.0" } ] }, "licenses": [ { "license": { "url": "https://github.com/Dasharo/dasharo-blobs/blob/main/LICENSE" } } ] }, { "type": "firmware", "bom-ref": "5f700e15-4845-57b5-a4bb-44e698ce4947", "name": "iPXE", "purl": "pkg:generic/org.ipxe/ipxe@2026-03-03_ad8cbcee950840547f87394179a7e712e1c3c06f", "version": "2026-03-03_ad8cbcee950840547f87394179a7e712e1c3c06f", "description": "iPXE is an open source network boot firmware. It provides a full PXE implementation enhanced with additional features", "hashes": [ { "alg": "SHA-256", "content": "69fcff4c4ee2adbdb740b87b68649f74a198ae8bfc229b8c23eab302b330f9bc" } ], "supplier": { "name": "iPXE" }, "pedigree": { "commits": [ { "uid": "v1.21.1" } ] }, "externalReferences": [ { "type": "vcs", "url": "https://github.com/ipxe/ipxe" } ], "licenses": [ { "license": { "id": "GPL-2.0-only" } } ] } ], "dependencies": [ { "ref": "a9032c9d-2aaa-5a25-a0e6-6d865b24e6d2", "dependsOn": [ "e51a1e53-b635-5702-8a53-34e516775f3e", "a1b2c3d4-e5f6-7890-abcd-ef1234567890", "c062f4db-917e-533a-8b42-c704759ec6d8", "fb23e2f5-a1e8-55f1-8a2d-5de96bd93476", "cfa698c2-ed98-5ba6-b3d2-cf0893bce233", "719e6299-4355-5beb-b182-9cf47928515a", "9a5e8734-7068-5502-9f6a-6e1bcffb77dd", "5f700e15-4845-57b5-a4bb-44e698ce4947" ] } ], "platform": "ASROCK SPC741D8-2L2T/BCM", "firmware_version": "v0.9.1" }