From aed3c056e287295b0900158b5ccb6783667f51b0 Mon Sep 17 00:00:00 2001
From: Richard Hughes <richard@hughsie.com>
Date: Thu, 21 Nov 2024 11:57:26 +0000
Subject: [PATCH] Add more fallback SBOM data

https://github.com/tianocore/edk2/pull/6455
---
 edk2.cdx.json | 72 +++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 72 insertions(+)
 create mode 100644 edk2.cdx.json

diff --git a/edk2.cdx.json b/edk2.cdx.json
new file mode 100644
index 0000000..53758e6
--- /dev/null
+++ b/edk2.cdx.json
@@ -0,0 +1,72 @@
+{
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.6",
+  "version": 1,
+  "metadata": {
+    "authors": [
+      {
+        "name": "@VCS_SBOM_AUTHORS@"
+      }
+    ]
+  },
+  "components": [
+    {
+      "type": "firmware",
+      "bom-ref": "pkg:github/tianocore/edk2@@VCS_TAG@",
+      "cpe": "cpe:2.3:a:tianocore:edk2:@VCS_TAG@:*:*:*:*:*:*:*",
+      "name": "EDK II",
+      "version": "@VCS_VERSION@",
+      "description": "A cross-platform firmware development environment for UEFI and PI specifications",
+      "authors": [
+        {
+          "name": "@VCS_AUTHORS@"
+        }
+      ],
+      "supplier": {
+        "name": "EDK II developers"
+      },
+      "licenses": [
+        {
+          "license": {
+            "id": "Apache-2.0"
+          }
+        },
+        {
+          "license": {
+            "id": "BSD-2-Clause"
+          }
+        },
+        {
+          "license": {
+            "id": "BSD-3-Clause"
+          }
+        },
+        {
+          "license": {
+            "id": "MIT"
+          }
+        },
+        {
+          "license": {
+            "id": "PSF-2.0"
+          }
+        },
+        {
+          "license": {
+            "id": "Zlib"
+          }
+        }
+      ],
+      "externalReferences": [
+        {
+          "type": "website",
+          "url": "https://www.tianocore.org/"
+        },
+        {
+          "type": "vcs",
+          "url": "https://github.com/tianocore/edk2"
+        }
+      ]
+    }
+  ]
+}