{
  "stage": "stage2a-sbom",
  "generated_at": "2026-04-01T02:49:13.972Z",
  "sbom_generation": {
    "syft": {
      "componentCount": 0,
      "directDeps": 0,
      "transitiveDeps": 0,
      "licenses": {},
      "toolVersion": "syft 1.42.1",
      "durationMs": 17873,
      "cdxPath": "C:\\Users\\scott\\Desktop\\Projects\\contract-pipeline\\pipeline\\data\\capabilities\\trailofbits-claude-config\\trailofbits-claude-config.cdx.json",
      "spdxPath": "C:\\Users\\scott\\Desktop\\Projects\\contract-pipeline\\pipeline\\data\\capabilities\\trailofbits-claude-config\\trailofbits-claude-config.spdx.json"
    },
    "cdxgen": {
      "componentCount": 0,
      "durationMs": 7095,
      "cdxgenPath": "C:\\Users\\scott\\Desktop\\Projects\\contract-pipeline\\pipeline\\data\\capabilities\\trailofbits-claude-config\\trailofbits-claude-config-cdxgen.cdx.json"
    }
  },
  "contract_supply_chain_sbom": {
    "format": "CycloneDX",
    "version": "1.5",
    "generated_at": "2026-04-01T02:49:13.972Z",
    "component_count": 0,
    "direct_dependencies": 0,
    "transitive_dependencies": 0,
    "vulnerability_summary": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "none": 0,
      "total": 0
    },
    "flagged_components": []
  }
}