{
  "spec_version": "1.0.0",
  "build": {
    "variant": "fips",
    "derivation": "kms-cli-fips-dynamic-openssl",
    "output_path": "/nix/store/2cjx8dj98d9rnylyra7r7cn90f6y1sp4-cosmian-kms-cli-dynamic-5.27.1",
    "sbomnix_target": "/nix/store/2cjx8dj98d9rnylyra7r7cn90f6y1sp4-cosmian-kms-cli-dynamic-5.27.1",
    "timestamp": "2026-09-08T14:25:42Z",
    "generator": {
      "tool": "sbomnix",
      "version": "v1.8.0"
    }
  },
  "component_count": 1,
  "vulnerability_count": 6,
  "notes": [
    "OpenSSL is dynamically linked in the binary",
    "All dependencies are from Nix store with pinned versions",
    "SBOM reflects the exact Nix build output (derivation closure)",
    "sbomnix used store-path target with --exclude-meta; heuristic CPE matching retained; full CPE coverage via enrich_cpe.py"
  ]
}