{
  "components": [
    {
      "bom-ref": "cffi==2.1.1",
      "description": "Foreign Function Interface for Python calling C code.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Download",
          "type": "distribution",
          "url": "https://github.com/python-cffi/cffi/releases"
        },
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://cffi.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Issue Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python-cffi/cffi/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/python-cffi/cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Contact",
          "type": "other",
          "url": "https://groups.google.com/forum/#!forum/python-cffi"
        },
        {
          "comment": "from packaging metadata Project-URL: Changelog",
          "type": "release-notes",
          "url": "https://cffi.readthedocs.io/en/latest/whatsnew.html"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "MIT-0"
          }
        }
      ],
      "name": "cffi",
      "purl": "pkg:pypi/cffi@2.1.1",
      "type": "library",
      "version": "2.1.1"
    },
    {
      "bom-ref": "cryptography==50.0.2",
      "description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: documentation",
          "type": "documentation",
          "url": "https://cryptography.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: issues",
          "type": "issue-tracker",
          "url": "https://github.com/pyca/cryptography/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: source",
          "type": "other",
          "url": "https://github.com/pyca/cryptography/"
        },
        {
          "comment": "from packaging metadata Project-URL: changelog",
          "type": "release-notes",
          "url": "https://cryptography.io/en/latest/changelog/"
        },
        {
          "comment": "from packaging metadata Project-URL: homepage",
          "type": "website",
          "url": "https://github.com/pyca/cryptography"
        }
      ],
      "licenses": [
        {
          "acknowledgement": "declared",
          "expression": "Apache-2.0 OR BSD-3-Clause"
        }
      ],
      "name": "cryptography",
      "purl": "pkg:pypi/cryptography@50.0.2",
      "type": "library",
      "version": "50.0.2"
    },
    {
      "bom-ref": "grpcio==1.84.1",
      "description": "HTTP/2-based RPC framework",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://grpc.github.io/grpc/python"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/grpc/grpc/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Source Code",
          "type": "other",
          "url": "https://github.com/grpc/grpc"
        },
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://grpc.io"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "grpcio",
      "purl": "pkg:pypi/grpcio@1.84.1",
      "type": "library",
      "version": "1.84.1"
    },
    {
      "bom-ref": "protobuf==7.36.2",
      "externalReferences": [
        {
          "comment": "from packaging metadata: Home-page",
          "type": "website",
          "url": "https://developers.google.com/protocol-buffers/"
        }
      ],
      "name": "protobuf",
      "purl": "pkg:pypi/protobuf@7.36.2",
      "type": "library",
      "version": "7.36.2",
      "licenses": [
        {
          "license": {
            "name": "3-Clause BSD License"
          }
        }
      ]
    },
    {
      "bom-ref": "pycparser==3.12",
      "description": "C parser in Python",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Homepage",
          "type": "website",
          "url": "https://github.com/eliben/pycparser"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "pycparser",
      "purl": "pkg:pypi/pycparser@3.12",
      "type": "library",
      "version": "3.12"
    },
    {
      "bom-ref": "typing_extensions==4.16.0",
      "description": "Backported and Experimental Type Hints for Python 3.9+",
      "externalReferences": [
        {
          "comment": "from packaging metadata Project-URL: Documentation",
          "type": "documentation",
          "url": "https://typing-extensions.readthedocs.io/"
        },
        {
          "comment": "from packaging metadata Project-URL: Bug Tracker",
          "type": "issue-tracker",
          "url": "https://github.com/python/typing_extensions/issues"
        },
        {
          "comment": "from packaging metadata Project-URL: Q & A",
          "type": "other",
          "url": "https://github.com/python/typing/discussions"
        },
        {
          "comment": "from packaging metadata Project-URL: Changes",
          "type": "release-notes",
          "url": "https://github.com/python/typing_extensions/blob/main/CHANGELOG.md"
        },
        {
          "comment": "from packaging metadata Project-URL: Repository",
          "type": "vcs",
          "url": "https://github.com/python/typing_extensions"
        },
        {
          "comment": "from packaging metadata Project-URL: Home",
          "type": "website",
          "url": "https://github.com/python/typing_extensions"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "PSF-2.0"
          }
        }
      ],
      "name": "typing_extensions",
      "purl": "pkg:pypi/typing-extensions@4.16.0",
      "type": "library",
      "version": "4.16.0"
    }
  ],
  "dependencies": [
    {
      "dependsOn": [
        "pycparser==3.12"
      ],
      "ref": "cffi==2.1.1"
    },
    {
      "dependsOn": [
        "cffi==2.1.1",
        "typing_extensions==4.16.0"
      ],
      "ref": "cryptography==50.0.2"
    },
    {
      "dependsOn": [
        "typing_extensions==4.16.0"
      ],
      "ref": "grpcio==1.84.1"
    },
    {
      "ref": "protobuf==7.36.2"
    },
    {
      "ref": "pycparser==3.12"
    },
    {
      "ref": "typing_extensions==4.16.0"
    },
    {
      "dependsOn": [
        "cryptography==50.0.2",
        "grpcio==1.84.1",
        "protobuf==7.36.2"
      ],
      "ref": "zerotruss==0.1.0"
    }
  ],
  "metadata": {
    "timestamp": "2026-11-07T20:14:52.954692+00:00",
    "tools": {
      "components": [
        {
          "description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-bom/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-bom-tool.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python/"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-py",
          "type": "application",
          "version": "7.5.0"
        },
        {
          "description": "Python library for CycloneDX",
          "externalReferences": [
            {
              "type": "build-system",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions"
            },
            {
              "type": "distribution",
              "url": "https://pypi.org/project/cyclonedx-python-lib/"
            },
            {
              "type": "documentation",
              "url": "https://cyclonedx-python-library.readthedocs.io/"
            },
            {
              "type": "issue-tracker",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
            },
            {
              "type": "license",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE"
            },
            {
              "type": "release-notes",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md"
            },
            {
              "type": "vcs",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
            },
            {
              "type": "website",
              "url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
            }
          ],
          "group": "CycloneDX",
          "licenses": [
            {
              "license": {
                "acknowledgement": "declared",
                "id": "Apache-2.0"
              }
            }
          ],
          "name": "cyclonedx-python-lib",
          "type": "library",
          "version": "11.12.0"
        }
      ]
    },
    "component": {
      "bom-ref": "zerotruss==0.1.0",
      "description": "An audit and boundary checkpoint for MCP tool calls, as an agentgateway guardrail",
      "externalReferences": [
        {
          "comment": "PackageSource: Archive",
          "hashes": [
            {
              "alg": "SHA-256",
              "content": "276ad7953425d1556e24fc89f8392602ec3dc3b757afba0fd773a713a61a233e"
            }
          ],
          "type": "distribution",
          "url": "file:///home/runner/work/zerotruss/zerotruss/dist/zerotruss-0.1.0-py3-none-any.whl"
        }
      ],
      "licenses": [
        {
          "license": {
            "acknowledgement": "declared",
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "zerotruss",
      "type": "application",
      "version": "0.1.0"
    }
  },
  "serialNumber": "urn:uuid:6b1e6fd8-c3de-4a10-bb97-5d488f889225",
  "version": 1,
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6"
}