{ "bomFormat": "CycloneDX", "specVersion": "1.4", "version": 1, "serialNumber": "urn:uuid:6af6c0e6-07e2-5fd1-bd28-05920655b7d3", "metadata": { "tools": [ { "name": "decode-sbom", "vendor": "coreboot" } ], "component": { "type": "firmware", "bom-ref": "a9032c9d-2aaa-5a25-a0e6-6d865b24e6d2", "name": "coreboot", "purl": "pkg:generic/org.coreboot.rocks/coreboot@2026-08-11_77504cc471006e478ce876c13ba9b869580f66d7", "version": "2026-08-11_77504cc471006e478ce876c13ba9b869580f66d7", "supplier": { "name": "coreboot" } }, "properties": [ { "name": "fsp_path", "value": "TigerLakeFspBinPkg/TGL_IOT/Fsp.fd" } ] }, "components": [ { "type": "firmware", "bom-ref": "a9032c9d-2aaa-5a25-a0e6-6d865b24e6d2", "name": "coreboot", "purl": "pkg:generic/org.coreboot.rocks/coreboot@2026-08-11_77504cc471006e478ce876c13ba9b869580f66d7", "cpe": "cpe:2.3:o:coreboot:coreboot:2026-08-11_77504cc471006e478ce876c13ba9b869580f66d7:*:*:*:*:*:*:*", "version": "2026-08-11_77504cc471006e478ce876c13ba9b869580f66d7", "description": "coreboot is a project to develop open source boot firmware for various architectures", "supplier": { "name": "coreboot" }, "pedigree": { "commits": [ { "uid": "24.12" } ] }, "externalReferences": [ { "type": "vcs", "url": "https://github.com/coreboot/coreboot" } ], "licenses": [ { "license": { "id": "Apache-2.0" } }, { "license": { "id": "BSD-2-Clause-Patent" } }, { "license": { "id": "BSD-2-Clause" } }, { "license": { "id": "BSD-3-Clause" } }, { "license": { "id": "BSD-4-Clause-UC" } }, { "license": { "id": "CC-BY-4.0" } }, { "license": { "id": "CC-BY-SA-3.0" } }, { "license": { "id": "CC-PDDC" } }, { "license": { "id": "GPL-2.0-only" } }, { "license": { "id": "GPL-2.0-or-later" } }, { "license": { "id": "GPL-3.0-only" } }, { "license": { "id": "GPL-3.0-or-later" } }, { "license": { "id": "HPND-sell-variant" } }, { "license": { "id": "HPND" } }, { "license": { "id": "ISC" } }, { "license": { "id": "LGPL-2.1-or-later" } }, { "license": { "id": "MIT" } }, { "license": { "id": "X11" } }, { "license": { "url": "https://spdx.org/licenses/exceptions.html" } } ] }, { "type": "firmware", "bom-ref": "9579af2b-39d8-59f1-ac5a-5b1fd4c03bd0", "name": "Intel Management Engine", "purl": "pkg:generic/com.intel.me/intel-management-engine@15.0.47.2473", "cpe": "cpe:2.3:o:intel:management_engine_firmware:15.0.47.2473:*:*:*:*:*:*:*", "version": "15.0.47.2473", "description": "Intel Management Engine firmware", "supplier": { "name": "Intel" } }, { "type": "firmware", "bom-ref": "a1b2c3d4-e5f6-7890-abcd-ef1234567890", "name": "edk2", "purl": "pkg:generic/org.tianocore.edk2/edk2@2026-07-24_93bc0155479d2e153264ffcd8be37fc2847490a1", "cpe": "cpe:2.3:a:tianocore:edk2:2026-07-24_93bc0155479d2e153264ffcd8be37fc2847490a1:*:*:*:*:*:*:*", "version": "2026-07-24_93bc0155479d2e153264ffcd8be37fc2847490a1", "description": "EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and UEFI Platform Initialization (PI) specifications. It is used as a coreboot payload to provide a UEFI environment.", "supplier": { "name": "TianoCore" }, "pedigree": { "commits": [ { "uid": "edk2-stable202502" } ] }, "externalReferences": [ { "type": "vcs", "url": "https://github.com/tianocore/edk2" } ] }, { "type": "firmware", "bom-ref": "5fdab36c-0e41-54ff-a2bc-b9cf0aa59451", "name": "Intel-Microcode-06-8c-01", "purl": "pkg:generic/com.intel.microcode/intel-microcode-06-8c-01@0xbe", "cpe": "cpe:2.3:o:intel:microcode:0xbe:*:*:*:*:*:*:*", "version": "0xbe", "description": "Microcode Updates for Intel Processors", "supplier": { "name": "Intel" }, "pedigree": { "commits": [ { "uid": "2025-07-24" } ] }, "properties": [ { "name": "coreboot:coswid:edition", "value": "0x806c1" } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files" } ] }, { "type": "firmware", "bom-ref": "9dd811e4-97b2-5d37-ae9c-74a525c41feb", "name": "Intel-Microcode-06-8c-02", "purl": "pkg:generic/com.intel.microcode/intel-microcode-06-8c-02@0x3e", "cpe": "cpe:2.3:o:intel:microcode:0x3e:*:*:*:*:*:*:*", "version": "0x3e", "description": "Microcode Updates for Intel Processors", "supplier": { "name": "Intel" }, "pedigree": { "commits": [ { "uid": "2025-07-24" } ] }, "properties": [ { "name": "coreboot:coswid:edition", "value": "0x806c2" } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files" } ] }, { "type": "firmware", "bom-ref": "719e6299-4355-5beb-b182-9cf47928515a", "name": "Intel Firmware Support Package", "purl": "pkg:generic/com.intel.fsp/intel-firmware-support-package@A.0.88.71", "version": "A.0.88.71", "description": "Intel Firmware Support Package (FSP) is a binary blob providing memory initialization and silicon bring-up for Intel platforms", "supplier": { "name": "Intel" }, "properties": [ { "name": "coreboot:coswid:edition", "value": "TGL_IOT" } ], "externalReferences": [ { "type": "vcs", "url": "https://github.com/intel/FSP" } ] }, { "type": "firmware", "bom-ref": "9a5e8734-7068-5502-9f6a-6e1bcffb77dd", "name": "Intel Flash Descriptor", "purl": "pkg:generic/intel-flash-descriptor@2026-05-12_cc5549a841bdf7a444a6cbacae0dc47c377c07b8", "version": "2026-05-12_cc5549a841bdf7a444a6cbacae0dc47c377c07b8", "description": "The Intel Flash Descriptor defines the flash layout and hardware strap settings for Intel platforms", "supplier": { "name": "coreboot" }, "pedigree": { "commits": [ { "uid": "v1.0" } ] } }, { "type": "firmware", "bom-ref": "cb643972-4544-525e-a25e-31651fe9fcbe", "name": "Embedded Controller Firmware", "purl": "pkg:generic/embedded-controller-firmware@2026-08-03_a3c183f", "version": "2026-08-03_a3c183f", "description": "The Embedded Controller is a microcontroller which handles various tasks such as power management and keyboard control", "supplier": { "name": "coreboot" } }, { "type": "firmware", "bom-ref": "5f700e15-4845-57b5-a4bb-44e698ce4947", "name": "iPXE", "purl": "pkg:generic/org.ipxe/ipxe", "description": "iPXE is an open source network boot firmware. It provides a full PXE implementation enhanced with additional features", "supplier": { "name": "iPXE" }, "externalReferences": [ { "type": "vcs", "url": "https://github.com/ipxe/ipxe" } ] }, { "type": "firmware", "bom-ref": "7d6f330b-8561-54ac-b507-a143b12e1d32", "name": "vboot", "purl": "pkg:generic/org.chromium.vboot/vboot@2026-03-11_5c360ef458b0a013d8a6d47724bb0fffb5accbcf", "version": "2026-03-11_5c360ef458b0a013d8a6d47724bb0fffb5accbcf", "description": "Chromium OS Verified Boot reference implementation, used by coreboot for firmware verification and anti-rollback protection.", "supplier": { "name": "Google" }, "externalReferences": [ { "type": "vcs", "url": "https://chromium.googlesource.com/chromiumos/platform/vboot_reference" } ] } ], "dependencies": [ { "ref": "a9032c9d-2aaa-5a25-a0e6-6d865b24e6d2", "dependsOn": [ "9579af2b-39d8-59f1-ac5a-5b1fd4c03bd0", "a1b2c3d4-e5f6-7890-abcd-ef1234567890", "5fdab36c-0e41-54ff-a2bc-b9cf0aa59451", "9dd811e4-97b2-5d37-ae9c-74a525c41feb", "719e6299-4355-5beb-b182-9cf47928515a", "9a5e8734-7068-5502-9f6a-6e1bcffb77dd", "cb643972-4544-525e-a25e-31651fe9fcbe", "5f700e15-4845-57b5-a4bb-44e698ce4947", "7d6f330b-8561-54ac-b507-a143b12e1d32" ] } ], "platform": "Notebook ns50mu", "firmware_version": "v1.6.0" }