{
  "history": [
    {
      "added": 0,
      "commit": "b40091af2bfba4c90b109fc0817d6c3f49bfc9a4",
      "date": "2026-11-01",
      "dependencies": 425,
      "errors": [],
      "fixable": 0,
      "go_version": "go1.27.3",
      "in_binary": {
        "dependencies": 1,
        "stdlib": 0,
        "total": 1
      },
      "new_vulnerabilities": 0,
      "osv_confirmed": 1,
      "osv_only": 1,
      "ref": "v0.36.1",
      "release_changed": false,
      "release_integrity": "verified",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 7.5,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "Negligible": 0,
        "Unknown": 1
      },
      "workflow": {
        "High": 1,
        "Low": 0,
        "Medium": 0,
        "files": 9
      }
    },
    {
      "added": 0,
      "commit": "b40091af2bfba4c90b109fc0817d6c3f49bfc9a4",
      "date": "2026-11-02",
      "dependencies": 425,
      "errors": [],
      "fixable": 0,
      "go_version": "go1.27.3",
      "in_binary": {
        "dependencies": 1,
        "stdlib": 0,
        "total": 1
      },
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 1,
      "osv_only": 1,
      "ref": "v0.36.1",
      "release_changed": false,
      "release_integrity": "verified",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 7.5,
      "scorecard_date": "2026-11-02",
      "scorecard_note": null,
      "scorecard_source": "scorecard-cli",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "Negligible": 0,
        "Unknown": 1
      },
      "vulnerable_packages": 1,
      "workflow": {
        "High": 1,
        "Low": 0,
        "Medium": 0,
        "files": 9
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "Kubernetes Security",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "in_binary_new": [],
      "in_binary_resolved": [],
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "v0.36.1",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "b40091af2bfba4c90b109fc0817d6c3f49bfc9a4",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/zizmor.yaml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v6.0.2",
        "version": "v6.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-helm-chart.yaml",
        "name": "actions/create-github-app-token",
        "purl": "pkg:github/actions/create-github-app-token@v3.2.0",
        "version": "v3.2.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "actions/setup-go",
        "purl": "pkg:github/actions/setup-go@v6",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-docs.yaml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@5",
        "version": "5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/chart-testing.yaml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@v5.6.0",
        "version": "v5.6.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "aquaproj/aqua-installer",
        "purl": "pkg:github/aquaproj/aqua-installer@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-snapshot.yaml",
        "name": "aquasecurity/trivy-action",
        "purl": "pkg:github/aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478",
        "version": "97e0b3872f55f89b95b2f65b3dbab56962816478"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "codecov/codecov-action",
        "purl": "pkg:github/codecov/codecov-action@v5",
        "version": "v5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release.yaml",
        "name": "docker/login-action",
        "purl": "pkg:github/docker/login-action@v3.4.0",
        "version": "v3.4.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "docker/setup-buildx-action",
        "purl": "pkg:github/docker/setup-buildx-action@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "docker/setup-qemu-action",
        "purl": "pkg:github/docker/setup-qemu-action@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "engineerd/setup-kind",
        "purl": "pkg:github/engineerd/setup-kind@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "golangci/golangci-lint-action",
        "purl": "pkg:github/golangci/golangci-lint-action@v9.2.0",
        "version": "v9.2.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "goreleaser/goreleaser-action",
        "purl": "pkg:github/goreleaser/goreleaser-action@v6",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/chart-testing.yaml",
        "name": "helm/chart-testing-action",
        "purl": "pkg:github/helm/chart-testing-action@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build.yaml",
        "name": "ibiqlik/action-yamllint",
        "purl": "pkg:github/ibiqlik/action-yamllint@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/chart-testing.yaml",
        "name": "mikefarah/yq",
        "purl": "pkg:github/mikefarah/yq@88a31ae8c6b34aad77d2efdecc146113cb3315d0",
        "version": "88a31ae8c6b34aad77d2efdecc146113cb3315d0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release.yaml",
        "name": "peter-evans/repository-dispatch",
        "purl": "pkg:github/peter-evans/repository-dispatch@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-snapshot.yaml",
        "name": "sigstore/cosign-installer",
        "purl": "pkg:github/sigstore/cosign-installer@v3.8.2",
        "version": "v3.8.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/zizmor.yaml",
        "name": "zizmorcore/zizmor-action",
        "purl": "pkg:github/zizmorcore/zizmor-action@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cel.dev/expr",
        "purl": "pkg:golang/cel.dev/expr@v0.25.2",
        "version": "v0.25.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go",
        "purl": "pkg:golang/cloud.google.com/go@v0.123.0",
        "version": "v0.123.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/auth",
        "purl": "pkg:golang/cloud.google.com/go/auth@v0.23.3",
        "version": "v0.23.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/auth/oauth2adapt",
        "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
        "version": "v0.2.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/compute/metadata",
        "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/iam",
        "purl": "pkg:golang/cloud.google.com/go/iam@v1.13.0",
        "version": "v1.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/monitoring",
        "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0",
        "version": "v1.30.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/storage",
        "purl": "pkg:golang/cloud.google.com/go/storage@v1.68.0",
        "version": "v1.68.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "dario.cat/mergo",
        "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/agext/levenshtein",
        "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3",
        "version": "v1.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/agnivade/levenshtein",
        "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/chroma",
        "purl": "pkg:golang/github.com/alecthomas/chroma@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/anchore/go-struct-converter",
        "purl": "pkg:golang/github.com/anchore/go-struct-converter@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/apparentlymart/go-cidr",
        "purl": "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/apparentlymart/go-textseg/v15",
        "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0",
        "version": "v15.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/apparentlymart/go-textseg/v17",
        "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v17@v17.0.1",
        "version": "v17.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/go-gem-version",
        "purl": "pkg:golang/github.com/aquasecurity/go-gem-version@v0.0.0-20201115065557-8eed6fe000ce",
        "version": "v0.0.0-20201115065557-8eed6fe000ce"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/go-npm-version",
        "purl": "pkg:golang/github.com/aquasecurity/go-npm-version@v0.0.3-0.20261005070944-1f16ed76cf11",
        "version": "v0.0.3-0.20261005070944-1f16ed76cf11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/go-pep440-version",
        "purl": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.2-0.20260224065243-f9bba28c51a4",
        "version": "v0.0.2-0.20260224065243-f9bba28c51a4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/go-version",
        "purl": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1",
        "version": "v0.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/iamgo",
        "purl": "pkg:golang/github.com/aquasecurity/iamgo@v0.0.10",
        "version": "v0.0.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/jfather",
        "purl": "pkg:golang/github.com/aquasecurity/jfather@v0.0.8",
        "version": "v0.0.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/table",
        "purl": "pkg:golang/github.com/aquasecurity/table@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/tml",
        "purl": "pkg:golang/github.com/aquasecurity/tml@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy",
        "purl": "pkg:golang/github.com/aquasecurity/trivy@v0.76.1",
        "version": "v0.76.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy-checks",
        "purl": "pkg:golang/github.com/aquasecurity/trivy-checks@v1.12.2-0.20261012053351-ac85645895ed",
        "version": "v1.12.2-0.20261012053351-ac85645895ed"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy-db",
        "purl": "pkg:golang/github.com/aquasecurity/trivy-db@v0.0.0-20261012084708-cbebf2ecd6df",
        "version": "v0.0.0-20261012084708-cbebf2ecd6df"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy-java-db",
        "purl": "pkg:golang/github.com/aquasecurity/trivy-java-db@v0.0.0-20240109071736-184bd7481d48",
        "version": "v0.0.0-20240109071736-184bd7481d48"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy-kubernetes",
        "purl": "pkg:golang/github.com/aquasecurity/trivy-kubernetes@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/asaskevich/govalidator",
        "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
        "version": "v0.0.0-20230301143203-a9d515a09cc2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.3",
        "version": "v1.47.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.22",
        "version": "v1.7.22"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/config",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.9",
        "version": "v1.33.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/credentials",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.9",
        "version": "v1.20.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.3",
        "version": "v1.20.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.6",
        "version": "v1.5.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.6",
        "version": "v2.8.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.6",
        "version": "v1.5.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ebs",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ebs@v1.22.1",
        "version": "v1.22.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ec2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.338.4",
        "version": "v1.338.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.66.4",
        "version": "v1.66.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.21",
        "version": "v1.13.21"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.11.7",
        "version": "v1.11.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.6",
        "version": "v1.14.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.20.6",
        "version": "v1.20.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/s3",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.114.3",
        "version": "v1.114.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/signin",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.4",
        "version": "v1.10.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sso",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.4",
        "version": "v1.38.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.4",
        "version": "v1.43.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sts",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.4",
        "version": "v1.51.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/smithy-go",
        "purl": "pkg:golang/github.com/aws/smithy-go@v1.28.5",
        "version": "v1.28.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.23.3",
        "version": "v1.23.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.1",
        "version": "v1.14.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry@v0.2.3",
        "version": "v0.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.13.0",
        "version": "v1.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/go-ansiterm",
        "purl": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
        "version": "v0.0.0-20250102033503-faa5f7b0171c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
        "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.8.0",
        "version": "v1.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/beorn7/perks",
        "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bgentry/go-netrc",
        "purl": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d",
        "version": "v0.0.0-20140422174119-9fd32a8b3d3d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bitnami/go-version",
        "purl": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20231130084017-bb00604d650c",
        "version": "v0.0.0-20231130084017-bb00604d650c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/blang/semver/v4",
        "purl": "pkg:golang/github.com/blang/semver/v4@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bluele/gcache",
        "purl": "pkg:golang/github.com/bluele/gcache@v0.0.2",
        "version": "v0.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bmatcuk/doublestar/v4",
        "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.2",
        "version": "v4.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/briandowns/spinner",
        "purl": "pkg:golang/github.com/briandowns/spinner@v1.23.0",
        "version": "v1.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/BurntSushi/toml",
        "purl": "pkg:golang/github.com/BurntSushi/toml@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/caarlos0/env/v6",
        "purl": "pkg:golang/github.com/caarlos0/env/v6@v6.10.1",
        "version": "v6.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cenkalti/backoff/v5",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
        "version": "v5.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cenkalti/backoff/v6",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v6@v6.0.1",
        "version": "v6.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cespare/xxhash/v2",
        "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/chai2010/gettext-go",
        "purl": "pkg:golang/github.com/chai2010/gettext-go@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cheggaaa/pb/v3",
        "purl": "pkg:golang/github.com/cheggaaa/pb/v3@v3.2.1",
        "version": "v3.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/clipperhouse/uax29/v2",
        "purl": "pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cloudflare/circl",
        "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.4",
        "version": "v1.6.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cncf/xds/go",
        "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
        "version": "v0.0.0-20260202195803-dba9d589def2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/cgroups/v3",
        "purl": "pkg:golang/github.com/containerd/cgroups/v3@v3.1.3",
        "version": "v3.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/containerd/api",
        "purl": "pkg:golang/github.com/containerd/containerd/api@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/containerd/v2",
        "purl": "pkg:golang/github.com/containerd/containerd/v2@v2.4.1",
        "version": "v2.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/continuity",
        "purl": "pkg:golang/github.com/containerd/continuity@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs",
        "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs/pkg",
        "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/fifo",
        "purl": "pkg:golang/github.com/containerd/fifo@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/log",
        "purl": "pkg:golang/github.com/containerd/log@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/log/otel",
        "purl": "pkg:golang/github.com/containerd/log/otel@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/platforms",
        "purl": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5",
        "version": "v1.0.0-rc.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/plugin",
        "purl": "pkg:golang/github.com/containerd/plugin@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/ttrpc",
        "purl": "pkg:golang/github.com/containerd/ttrpc@v1.2.10",
        "version": "v1.2.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/typeurl/v2",
        "purl": "pkg:golang/github.com/containerd/typeurl/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/CycloneDX/cyclonedx-go",
        "purl": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cyphar/filepath-securejoin",
        "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/DataDog/zstd",
        "purl": "pkg:golang/github.com/DataDog/zstd@v1.5.5",
        "version": "v1.5.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/davecgh/go-spew",
        "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "version": "v1.1.2-0.20180830191138-d8f796af33cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
        "purl": "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1",
        "version": "v4.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/distribution/reference",
        "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dlclark/regexp2",
        "purl": "pkg:golang/github.com/dlclark/regexp2@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/cli",
        "purl": "pkg:golang/github.com/docker/cli@v29.8.2%2Bincompatible",
        "version": "v29.8.2+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/docker-credential-helpers",
        "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.9",
        "version": "v0.9.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-connections",
        "purl": "pkg:golang/github.com/docker/go-connections@v0.8.1",
        "version": "v0.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-units",
        "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dsnet/compress",
        "purl": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707",
        "version": "v0.0.2-0.20230904184137-39efe44ab707"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dustin/go-humanize",
        "purl": "pkg:golang/github.com/dustin/go-humanize@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dylibso/observe-sdk/go",
        "purl": "pkg:golang/github.com/dylibso/observe-sdk/go@v0.0.0-20240819160327-2d926c5d788a",
        "version": "v0.0.0-20240819160327-2d926c5d788a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emicklei/go-restful/v3",
        "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
        "version": "v3.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emirpasic/gods",
        "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
        "version": "v1.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/go-control-plane/envoy",
        "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
        "version": "v1.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/protoc-gen-validate",
        "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
        "version": "v1.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/evanphx/json-patch",
        "purl": "pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible",
        "version": "v5.9.11+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/evanphx/json-patch/v5",
        "purl": "pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11",
        "version": "v5.9.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/exponent-io/jsonpath",
        "purl": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f",
        "version": "v0.0.0-20210407135951-1de76d718b3f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/extism/go-sdk",
        "purl": "pkg:golang/github.com/extism/go-sdk@v1.7.1",
        "version": "v1.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fatih/color",
        "purl": "pkg:golang/github.com/fatih/color@v1.19.0",
        "version": "v1.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/felixge/httpsnoop",
        "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fluxcd/cli-utils",
        "purl": "pkg:golang/github.com/fluxcd/cli-utils@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fsnotify/fsnotify",
        "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1",
        "version": "v1.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fvbommel/sortorder",
        "purl": "pkg:golang/github.com/fvbommel/sortorder@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fxamacker/cbor/v2",
        "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.4",
        "version": "v2.9.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-errors/errors",
        "purl": "pkg:golang/github.com/go-errors/errors@v1.5.1",
        "version": "v1.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/gcfg",
        "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
        "version": "v1.5.1-0.20230307220236-3a3c6141e376"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-billy/v5",
        "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.9.2",
        "version": "v5.9.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-git/v5",
        "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.19.3",
        "version": "v5.19.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-gorp/gorp/v3",
        "purl": "pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0",
        "version": "v3.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-jose/go-jose/v4",
        "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.6",
        "version": "v4.1.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/logr",
        "purl": "pkg:golang/github.com/go-logr/logr@v1.4.4",
        "version": "v1.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/stdr",
        "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/zapr",
        "purl": "pkg:golang/github.com/go-logr/zapr@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/analysis",
        "purl": "pkg:golang/github.com/go-openapi/analysis@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/errors",
        "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.9",
        "version": "v0.22.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonpointer",
        "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonreference",
        "purl": "pkg:golang/github.com/go-openapi/jsonreference@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/loads",
        "purl": "pkg:golang/github.com/go-openapi/loads@v0.25.2",
        "version": "v0.25.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/runtime",
        "purl": "pkg:golang/github.com/go-openapi/runtime@v0.33.2",
        "version": "v0.33.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/runtime/server-middleware",
        "purl": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.2",
        "version": "v0.33.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/spec",
        "purl": "pkg:golang/github.com/go-openapi/spec@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/strfmt",
        "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.27.2",
        "version": "v0.27.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag",
        "purl": "pkg:golang/github.com/go-openapi/swag@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/cmdutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/conv",
        "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/fileutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/jsonutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/loading",
        "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/mangling",
        "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/netutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/pools",
        "purl": "pkg:golang/github.com/go-openapi/swag/pools@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/stringutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/typeutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/yamlutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/validate",
        "purl": "pkg:golang/github.com/go-openapi/validate@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-task/slim-sprig/v3",
        "purl": "pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0",
        "version": "v3.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-viper/mapstructure/v2",
        "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "version": "v2.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gobwas/glob",
        "purl": "pkg:golang/github.com/gobwas/glob@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/goccy/go-json",
        "purl": "pkg:golang/github.com/goccy/go-json@v0.11.2",
        "version": "v0.11.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gocsaf/csaf/v3",
        "purl": "pkg:golang/github.com/gocsaf/csaf/v3@v3.6.0",
        "version": "v3.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gofrs/flock",
        "purl": "pkg:golang/github.com/gofrs/flock@v0.13.1",
        "version": "v0.13.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gogo/protobuf",
        "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2",
        "version": "v1.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-jwt/jwt/v5",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
        "version": "v5.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/groupcache",
        "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "version": "v0.0.0-20241129210726-2c02b8208cf8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/btree",
        "purl": "pkg:golang/github.com/google/btree@v1.1.3",
        "version": "v1.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/gnostic-models",
        "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-cmp",
        "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-containerregistry",
        "purl": "pkg:golang/github.com/google/go-containerregistry@v0.22.1",
        "version": "v0.22.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-github/v62",
        "purl": "pkg:golang/github.com/google/go-github/v62@v62.0.0",
        "version": "v62.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-querystring",
        "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/jsonschema-go",
        "purl": "pkg:golang/github.com/google/jsonschema-go@v0.4.3",
        "version": "v0.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/licenseclassifier/v2",
        "purl": "pkg:golang/github.com/google/licenseclassifier/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/pprof",
        "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20260402051712-545e8a4df936",
        "version": "v0.0.0-20260402051712-545e8a4df936"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/s2a-go",
        "purl": "pkg:golang/github.com/google/s2a-go@v0.1.10",
        "version": "v0.1.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/uuid",
        "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/googleapis/enterprise-certificate-proxy",
        "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22",
        "version": "v0.3.22"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/googleapis/gax-go/v2",
        "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.24.1",
        "version": "v2.24.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/docker-credential-gcr/v2",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/docker-credential-gcr/v2@v2.2.1",
        "version": "v2.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.34.0",
        "version": "v1.34.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gorhill/cronexpr",
        "purl": "pkg:golang/github.com/gorhill/cronexpr@v0.0.0-20180427100037-88b0669f7d75",
        "version": "v0.0.0-20180427100037-88b0669f7d75"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gosuri/uitable",
        "purl": "pkg:golang/github.com/gosuri/uitable@v0.0.4",
        "version": "v0.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.31.0",
        "version": "v2.31.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/aws-sdk-go-base/v2",
        "purl": "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.74",
        "version": "v2.0.0-beta.74"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/errwrap",
        "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-cleanhttp",
        "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-getter",
        "purl": "pkg:golang/github.com/hashicorp/go-getter@v1.8.10",
        "version": "v1.8.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-multierror",
        "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-retryablehttp",
        "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
        "version": "v0.7.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-uuid",
        "purl": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-version",
        "purl": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
        "version": "v1.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/golang-lru/v2",
        "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "version": "v2.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/hcl/v2",
        "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.25.0",
        "version": "v2.25.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/huandu/xstrings",
        "purl": "pkg:golang/github.com/huandu/xstrings@v1.6.2",
        "version": "v1.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ianlancetaylor/demangle",
        "purl": "pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20250417193237-f615e6bd150b",
        "version": "v0.0.0-20250417193237-f615e6bd150b"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/in-toto/attestation",
        "purl": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/in-toto/in-toto-golang",
        "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/inconshreveable/mousetrap",
        "purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Intevation/gval",
        "purl": "pkg:golang/github.com/Intevation/gval@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Intevation/jsonpath",
        "purl": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jbenet/go-context",
        "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
        "version": "v0.0.0-20150711004518-d14ea06fba99"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jmoiron/sqlx",
        "purl": "pkg:golang/github.com/jmoiron/sqlx@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/josephburnett/jd/v2",
        "purl": "pkg:golang/github.com/josephburnett/jd/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/json-iterator/go",
        "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
        "version": "v1.1.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kevinburke/ssh_config",
        "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/klauspost/compress",
        "purl": "pkg:golang/github.com/klauspost/compress@v1.20.1",
        "version": "v1.20.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/go-apk-version",
        "purl": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f",
        "version": "v0.0.0-20200609155635-041fdbb8563f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/go-deb-version",
        "purl": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23",
        "version": "v0.0.0-20241115132648-6f4aee6ccd23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/go-rpm-version",
        "purl": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20260811110310-1815e1f1b790",
        "version": "v0.0.0-20260811110310-1815e1f1b790"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/go-rpmdb",
        "purl": "pkg:golang/github.com/knqyf263/go-rpmdb@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/nested",
        "purl": "pkg:golang/github.com/knqyf263/nested@v0.0.1",
        "version": "v0.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kylelemons/godebug",
        "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lann/builder",
        "purl": "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0",
        "version": "v0.0.0-20180802200727-47ae307949d0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lann/ps",
        "purl": "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0",
        "version": "v0.0.0-20150810152359-62de8c46ede0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/blackmagic",
        "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/dsig",
        "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/dsig-secp256k1",
        "purl": "pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/httpcc",
        "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/httprc/v3",
        "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.6",
        "version": "v3.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/jwx/v3",
        "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.3.0",
        "version": "v3.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/option/v2",
        "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/liamg/memoryfs",
        "purl": "pkg:golang/github.com/liamg/memoryfs@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lib/pq",
        "purl": "pkg:golang/github.com/lib/pq@v1.12.3",
        "version": "v1.12.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/liggitt/tabwriter",
        "purl": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de",
        "version": "v0.0.0-20181228230101-89fcab3d43de"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lunixbochs/struc",
        "purl": "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20200707160740-784aaebc1d40",
        "version": "v0.0.0-20200707160740-784aaebc1d40"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/magefile/mage",
        "purl": "pkg:golang/github.com/magefile/mage@v1.17.2",
        "version": "v1.17.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/MakeNowJust/heredoc",
        "purl": "pkg:golang/github.com/MakeNowJust/heredoc@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-disk",
        "purl": "pkg:golang/github.com/masahiro331/go-disk@v0.0.0-20260423015231-f7a470ebd472",
        "version": "v0.0.0-20260423015231-f7a470ebd472"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-ebs-file",
        "purl": "pkg:golang/github.com/masahiro331/go-ebs-file@v0.0.0-20260422020928-9d24e29aac27",
        "version": "v0.0.0-20260422020928-9d24e29aac27"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-ext4-filesystem",
        "purl": "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20260423010602-fe51f5b5e52b",
        "version": "v0.0.0-20260423010602-fe51f5b5e52b"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-mvn-version",
        "purl": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20260119054159-d21fcd2e7de1",
        "version": "v0.0.0-20260119054159-d21fcd2e7de1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-vmdk-parser",
        "purl": "pkg:golang/github.com/masahiro331/go-vmdk-parser@v0.0.0-20260423020818-08305fa668d2",
        "version": "v0.0.0-20260423020818-08305fa668d2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-xfs-filesystem",
        "purl": "pkg:golang/github.com/masahiro331/go-xfs-filesystem@v0.0.0-20260422061116-d21e5e4481bb",
        "version": "v0.0.0-20260422061116-d21e5e4481bb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/goutils",
        "purl": "pkg:golang/github.com/Masterminds/goutils@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/semver/v3",
        "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.5.0",
        "version": "v3.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/sprig/v3",
        "purl": "pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0",
        "version": "v3.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/squirrel",
        "purl": "pkg:golang/github.com/Masterminds/squirrel@v1.5.4",
        "version": "v1.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-colorable",
        "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.15",
        "version": "v0.1.15"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-isatty",
        "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.24",
        "version": "v0.0.24"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-runewidth",
        "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.30",
        "version": "v0.0.30"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-shellwords",
        "purl": "pkg:golang/github.com/mattn/go-shellwords@v1.0.16",
        "version": "v1.0.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Microsoft/go-winio",
        "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29",
        "version": "v0.6.3-0.20251027160822-ad3df93bed29"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Microsoft/hcsshim",
        "purl": "pkg:golang/github.com/Microsoft/hcsshim@v0.15.0-rc.4",
        "version": "v0.15.0-rc.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/copystructure",
        "purl": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/go-homedir",
        "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/go-wordwrap",
        "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/hashstructure/v2",
        "purl": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
        "version": "v2.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/mapstructure",
        "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
        "version": "v1.5.1-0.20231216201459-8508981c8b6c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/reflectwalk",
        "purl": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/buildkit",
        "purl": "pkg:golang/github.com/moby/buildkit@v0.34.0",
        "version": "v0.34.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/docker-image-spec",
        "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/locker",
        "purl": "pkg:golang/github.com/moby/locker@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/moby/api",
        "purl": "pkg:golang/github.com/moby/moby/api@v1.56.1",
        "version": "v1.56.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/moby/client",
        "purl": "pkg:golang/github.com/moby/moby/client@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/atomicwriter",
        "purl": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/mountinfo",
        "purl": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2",
        "version": "v0.7.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/sequential",
        "purl": "pkg:golang/github.com/moby/sys/sequential@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/signal",
        "purl": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
        "version": "v0.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/user",
        "purl": "pkg:golang/github.com/moby/sys/user@v0.4.1",
        "version": "v0.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/userns",
        "purl": "pkg:golang/github.com/moby/sys/userns@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/term",
        "purl": "pkg:golang/github.com/moby/term@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/concurrent",
        "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
        "version": "v0.0.0-20180306012644-bacd9c7ef1dd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/reflect2",
        "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
        "version": "v1.0.3-0.20250322232337-35a7c28c31ee"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/monochromegane/go-gitignore",
        "purl": "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00",
        "version": "v0.0.0-20200626010858-205db1a8cc00"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/morikuni/aec",
        "purl": "pkg:golang/github.com/morikuni/aec@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/munnerz/goautoneg",
        "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
        "version": "v0.0.0-20191010083416-a7dc8b61c822"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/nikolalohinski/gonja/v2",
        "purl": "pkg:golang/github.com/nikolalohinski/gonja/v2@v2.9.1",
        "version": "v2.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/oklog/ulid/v2",
        "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.2",
        "version": "v2.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/onsi/ginkgo/v2",
        "purl": "pkg:golang/github.com/onsi/ginkgo/v2@v2.33.1",
        "version": "v2.33.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/onsi/gomega",
        "purl": "pkg:golang/github.com/onsi/gomega@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/open-policy-agent/opa",
        "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.21.1",
        "version": "v1.21.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/go-digest",
        "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/image-spec",
        "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/runtime-spec",
        "purl": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/openshift/api",
        "purl": "pkg:golang/github.com/openshift/api@v0.0.0-20231025170628-b8a18fdc040d",
        "version": "v0.0.0-20231025170628-b8a18fdc040d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/openvex/go-vex",
        "purl": "pkg:golang/github.com/openvex/go-vex@v0.2.9",
        "version": "v0.2.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/owenrumney/go-sarif/v2",
        "purl": "pkg:golang/github.com/owenrumney/go-sarif/v2@v2.3.3",
        "version": "v2.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/owenrumney/squealer",
        "purl": "pkg:golang/github.com/owenrumney/squealer@v1.2.12",
        "version": "v1.2.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/package-url/packageurl-go",
        "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.7",
        "version": "v0.1.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pandatix/go-cvss",
        "purl": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pelletier/go-toml/v2",
        "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3",
        "version": "v2.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/peterbourgon/diskv",
        "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible",
        "version": "v2.0.1+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pjbgf/sha1cd",
        "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/browser",
        "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
        "version": "v0.0.0-20240102092130-5ac0b6a4141c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/errors",
        "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/planetscale/vtprotobuf",
        "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
        "version": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pmezard/go-difflib",
        "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
        "version": "v1.0.1-0.20181226105442-5d4384ee4fb2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/client_golang",
        "purl": "pkg:golang/github.com/prometheus/client_golang@v1.25.0",
        "version": "v1.25.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/client_model",
        "purl": "pkg:golang/github.com/prometheus/client_model@v0.6.3",
        "version": "v0.6.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/common",
        "purl": "pkg:golang/github.com/prometheus/common@v0.72.0",
        "version": "v0.72.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/procfs",
        "purl": "pkg:golang/github.com/prometheus/procfs@v0.22.0",
        "version": "v0.22.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ProtonMail/go-crypto",
        "purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.5.2",
        "version": "v1.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/quasilyte/go-ruleguard/dsl",
        "purl": "pkg:golang/github.com/quasilyte/go-ruleguard/dsl@v0.3.23",
        "version": "v0.3.23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rcrowley/go-metrics",
        "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
        "version": "v0.0.0-20250401214520-65e299d6c5c9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/redis/go-redis/extra/rediscmd/v9",
        "purl": "pkg:golang/github.com/redis/go-redis/extra/rediscmd/v9@v9.5.3",
        "version": "v9.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/redis/go-redis/v9",
        "purl": "pkg:golang/github.com/redis/go-redis/v9@v9.23.0",
        "version": "v9.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rubenv/sql-migrate",
        "purl": "pkg:golang/github.com/rubenv/sql-migrate@v1.8.1",
        "version": "v1.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/russross/blackfriday/v2",
        "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0",
        "version": "v2.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rust-secure-code/go-rustaudit",
        "purl": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c",
        "version": "v0.0.0-20250226111315-e20ec32e963c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sagikazarmark/locafero",
        "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/samber/lo",
        "purl": "pkg:golang/github.com/samber/lo@v1.53.0",
        "version": "v1.53.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/samber/oops",
        "purl": "pkg:golang/github.com/samber/oops@v1.18.1",
        "version": "v1.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3",
        "version": "v6.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sassoftware/go-rpmutils",
        "purl": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/secure-systems-lab/go-securesystemslib",
        "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.1",
        "version": "v0.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/segmentio/asm",
        "purl": "pkg:golang/github.com/segmentio/asm@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sergi/go-diff",
        "purl": "pkg:golang/github.com/sergi/go-diff@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shibumi/go-pathspec",
        "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shopspring/decimal",
        "purl": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sigstore/protobuf-specs",
        "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "version": "v0.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sigstore/rekor",
        "purl": "pkg:golang/github.com/sigstore/rekor@v1.5.4",
        "version": "v1.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sigstore/sigstore",
        "purl": "pkg:golang/github.com/sigstore/sigstore@v1.10.9",
        "version": "v1.10.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sirupsen/logrus",
        "purl": "pkg:golang/github.com/sirupsen/logrus@v1.10.2",
        "version": "v1.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/skeema/knownhosts",
        "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spdx/tools-golang",
        "purl": "pkg:golang/github.com/spdx/tools-golang@v0.5.7",
        "version": "v0.5.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/afero",
        "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/cast",
        "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
        "version": "v1.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/cobra",
        "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "version": "v1.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/pflag",
        "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "version": "v1.0.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/viper",
        "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
        "version": "v1.21.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spiffe/go-spiffe/v2",
        "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.8.1",
        "version": "v2.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/stretchr/objx",
        "purl": "pkg:golang/github.com/stretchr/objx@v0.5.3",
        "version": "v0.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/stretchr/testify",
        "purl": "pkg:golang/github.com/stretchr/testify@v1.12.1",
        "version": "v1.12.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/subosito/gotenv",
        "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tchap/go-patricia/v2",
        "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
        "version": "v2.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tetratelabs/wabin",
        "purl": "pkg:golang/github.com/tetratelabs/wabin@v0.0.0-20230304001439-f6f874872834",
        "version": "v0.0.0-20230304001439-f6f874872834"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tetratelabs/wazero",
        "purl": "pkg:golang/github.com/tetratelabs/wazero@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tonistiigi/go-csvvalue",
        "purl": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
        "version": "v0.0.0-20240814133006-030d3b2625d0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/toqueteos/webbrowser",
        "purl": "pkg:golang/github.com/toqueteos/webbrowser@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/twitchtv/twirp",
        "purl": "pkg:golang/github.com/twitchtv/twirp@v8.1.3%2Bincompatible",
        "version": "v8.1.3+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ulikunitz/xz",
        "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.17",
        "version": "v0.5.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/valyala/fastjson",
        "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.10",
        "version": "v1.6.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vektah/gqlparser/v2",
        "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.59",
        "version": "v2.5.59"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/VividCortex/ewma",
        "purl": "pkg:golang/github.com/VividCortex/ewma@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vmihailenco/msgpack/v5",
        "purl": "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1",
        "version": "v5.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vmihailenco/tagparser/v2",
        "purl": "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/x448/float16",
        "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
        "version": "v0.8.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xanzy/ssh-agent",
        "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
        "version": "v0.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonpointer",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
        "version": "v0.0.0-20190905194746-02993c407bfb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonreference",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
        "version": "v0.0.0-20180127040603-bd5ef7bd5415"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xi2/xz",
        "purl": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8",
        "version": "v0.0.0-20171230120015-48954b6210f8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xlab/treeprint",
        "purl": "pkg:golang/github.com/xlab/treeprint@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yashtewari/glob-intersection",
        "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/youmark/pkcs8",
        "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
        "version": "v0.0.0-20240726163527-a2c0da244d78"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zclconf/go-cty",
        "purl": "pkg:golang/github.com/zclconf/go-cty@v1.19.0",
        "version": "v1.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zclconf/go-cty-yaml",
        "purl": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.etcd.io/bbolt",
        "purl": "pkg:golang/go.etcd.io/bbolt@v1.5.0",
        "version": "v1.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/auto/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/detectors/gcp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.71.0",
        "version": "v0.71.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.71.0",
        "version": "v0.71.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel",
        "purl": "pkg:golang/go.opentelemetry.io/otel@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
        "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/trace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/proto/otlp",
        "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.1",
        "version": "v1.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/atomic",
        "purl": "pkg:golang/go.uber.org/atomic@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/automaxprocs",
        "purl": "pkg:golang/go.uber.org/automaxprocs@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/multierr",
        "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/zap",
        "purl": "pkg:golang/go.uber.org/zap@v1.28.0",
        "version": "v1.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v2",
        "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
        "version": "v2.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v3",
        "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5",
        "version": "v3.0.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v4",
        "purl": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.3",
        "version": "v4.0.0-rc.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/crypto",
        "purl": "pkg:golang/golang.org/x/crypto@v0.58.0",
        "version": "v0.58.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/exp",
        "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20260908205506-85c1c2202aba",
        "version": "v0.0.0-20260908205506-85c1c2202aba"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.41.0",
        "version": "v0.41.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/net",
        "purl": "pkg:golang/golang.org/x/net@v0.62.0",
        "version": "v0.62.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/oauth2",
        "purl": "pkg:golang/golang.org/x/oauth2@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/sync",
        "purl": "pkg:golang/golang.org/x/sync@v0.24.0",
        "version": "v0.24.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/sys",
        "purl": "pkg:golang/golang.org/x/sys@v0.49.0",
        "version": "v0.49.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/term",
        "purl": "pkg:golang/golang.org/x/term@v0.47.0",
        "version": "v0.47.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/text",
        "purl": "pkg:golang/golang.org/x/text@v0.43.0",
        "version": "v0.43.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/time",
        "purl": "pkg:golang/golang.org/x/time@v0.16.0",
        "version": "v0.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.51.0",
        "version": "v0.51.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/xerrors",
        "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da",
        "version": "v0.0.0-20240903120638-7835f813f4da"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gomodules.xyz/jsonpatch/v2",
        "purl": "pkg:golang/gomodules.xyz/jsonpatch/v2@v2.4.0",
        "version": "v2.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/api",
        "purl": "pkg:golang/google.golang.org/api@v0.299.0",
        "version": "v0.299.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto",
        "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d",
        "version": "v0.0.0-20260715232425-e75dac1f907d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/api",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260928230214-8a89bd6388cc",
        "version": "v0.0.0-20260928230214-8a89bd6388cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260928230214-8a89bd6388cc",
        "version": "v0.0.0-20260928230214-8a89bd6388cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/grpc",
        "purl": "pkg:golang/google.golang.org/grpc@v1.84.0",
        "version": "v1.84.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/protobuf",
        "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12",
        "version": "v1.36.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/evanphx/json-patch.v4",
        "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
        "version": "v4.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/inf.v0",
        "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/ini.v1",
        "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.3",
        "version": "v1.67.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/warnings.v0",
        "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/yaml.v3",
        "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "helm.sh/helm/v4",
        "purl": "pkg:golang/helm.sh/helm/v4@v4.3.0",
        "version": "v4.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/api",
        "purl": "pkg:golang/k8s.io/api@v0.37.1",
        "version": "v0.37.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apiextensions-apiserver",
        "purl": "pkg:golang/k8s.io/apiextensions-apiserver@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apimachinery",
        "purl": "pkg:golang/k8s.io/apimachinery@v0.37.1",
        "version": "v0.37.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apiserver",
        "purl": "pkg:golang/k8s.io/apiserver@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/cli-runtime",
        "purl": "pkg:golang/k8s.io/cli-runtime@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/client-go",
        "purl": "pkg:golang/k8s.io/client-go@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/component-base",
        "purl": "pkg:golang/k8s.io/component-base@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/klog/v2",
        "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "version": "v2.140.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/kube-openapi",
        "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260721132016-d427ff9ee9ad",
        "version": "v0.0.0-20260721132016-d427ff9ee9ad"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/kubectl",
        "purl": "pkg:golang/k8s.io/kubectl@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/utils",
        "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260626114624-be93311217bd",
        "version": "v0.0.0-20260626114624-be93311217bd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "mvdan.cc/sh/v3",
        "purl": "pkg:golang/mvdan.cc/sh/v3@v3.13.1",
        "version": "v3.13.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "oras.land/oras-go/v2",
        "purl": "pkg:golang/oras.land/oras-go/v2@v2.6.2",
        "version": "v2.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/controller-runtime",
        "purl": "pkg:golang/sigs.k8s.io/controller-runtime@v0.24.1",
        "version": "v0.24.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/json",
        "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
        "version": "v0.0.0-20250730193827-2d320260d730"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/kustomize/api",
        "purl": "pkg:golang/sigs.k8s.io/kustomize/api@v0.21.1",
        "version": "v0.21.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/kustomize/kyaml",
        "purl": "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.21.1",
        "version": "v0.21.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/randfill",
        "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/structured-merge-diff/v6",
        "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.4.2",
        "version": "v6.4.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/yaml",
        "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "version": "v1.6.0"
      }
    ],
    "description": "Generate Kubernetes-native security reports",
    "errors": [],
    "go_binary": {
      "asset": "trivy_operator_Linux_x86_64.tar.gz",
      "binary": "trivy-operator",
      "db": "https://vuln.go.dev",
      "db_last_modified": "2026-10-27T21:16:18Z",
      "findings": [
        {
          "aliases": [],
          "epss": null,
          "fixed_version": "",
          "id": "GO-2026-5932",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/crypto",
          "summary": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues",
          "version": "v0.58.0"
        },
        {
          "aliases": [
            "CVE-2026-33634",
            "GHSA-69fq-xp46-6x23"
          ],
          "epss": {
            "cve": "CVE-2026-33634",
            "percentile": 0.99129,
            "score": 0.59727
          },
          "fixed_version": "",
          "id": "GO-2026-4919",
          "kev": {
            "cve": "CVE-2026-33634",
            "date_added": "2026-03-26"
          },
          "level": "module",
          "module": "github.com/aquasecurity/trivy",
          "summary": "Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy",
          "version": "v0.76.1"
        }
      ],
      "go_version": "go1.27.3",
      "main_module": ""
    },
    "id": "aquasecurity__trivy-operator",
    "manifests": [
      ".github/workflows/build.yaml",
      ".github/workflows/chart-testing.yaml",
      ".github/workflows/publish-docs.yaml",
      ".github/workflows/publish-helm-chart.yaml",
      ".github/workflows/release-snapshot.yaml",
      ".github/workflows/release.yaml",
      ".github/workflows/title-validation.yaml",
      ".github/workflows/validate-chart-appVersion.yaml",
      ".github/workflows/zizmor.yaml",
      "go.mod",
      "go.sum"
    ],
    "name": "trivy-operator",
    "osv": {
      "advisories": 2,
      "available": true,
      "confirmed": 1,
      "osv_only": [
        {
          "ecosystem": "Go",
          "ids": [
            "CVE-2026-33634",
            "GHSA-69fq-xp46-6x23",
            "GO-2026-4919"
          ],
          "package": "github.com/aquasecurity/trivy",
          "score": "",
          "severity": "Unknown",
          "version": "0.76.1"
        }
      ],
      "warning": null
    },
    "ref": "v0.36.1",
    "ref_kind": "release",
    "release_integrity": {
      "asset": "trivy_operator_Linux_x86_64.tar.gz",
      "assets": 18,
      "build_provenance": null,
      "checksums_published": true,
      "digest_matches_github": true,
      "immutable_release": true,
      "methods": [
        {
          "covers": "asset",
          "identity": "GitHub Actions workflow in aquasecurity/trivy-operator",
          "method": "cosign",
          "signer": "URI:https://github.com/aquasecurity/trivy-operator/.github/workflows/release.yaml@refs/tags/v0.36.1",
          "status": "verified"
        },
        {
          "detail": "GitHub attests the file is unchanged since the release was published",
          "method": "github-immutable-release",
          "status": "verified"
        }
      ],
      "provenance_published": false,
      "sbom_published": false,
      "signature": "own-workflow",
      "signatures_published": true,
      "signer": "URI:https://github.com/aquasecurity/trivy-operator/.github/workflows/release.yaml@refs/tags/v0.36.1",
      "verdict": "verified"
    },
    "released_at": "2026-10-29T07:35:21Z",
    "repository": "aquasecurity/trivy-operator",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [
        "0 version changes among 456 shared packages \u2014 no actual upgrades",
        "Core system packages stable: golang (404), github (43) unchanged"
      ],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:06:08+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "CII-Best-Practices",
          "reason": "no effort to earn an OpenSSF best practices badge detected",
          "score": 0
        },
        {
          "name": "Fuzzing",
          "reason": "project is not fuzzed",
          "score": 0
        },
        {
          "name": "SAST",
          "reason": "SAST tool is not run on all commits -- score normalized to 0",
          "score": 0
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file not detected",
          "score": 0
        },
        {
          "name": "Branch-Protection",
          "reason": "branch protection is not maximal on development and all release branches",
          "score": 5
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 8",
          "score": 8
        },
        {
          "name": "Signed-Releases",
          "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
          "score": 8
        },
        {
          "name": "Vulnerabilities",
          "reason": "2 existing vulnerabilities detected",
          "score": 8
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 9
        },
        {
          "name": "Binary-Artifacts",
          "reason": "no binaries found in the repo",
          "score": 10
        },
        {
          "name": "CI-Tests",
          "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Code-Review",
          "reason": "all changesets reviewed",
          "score": 10
        },
        {
          "name": "Contributors",
          "reason": "project has 42 contributing companies or organizations",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "Dependency-Update-Tool",
          "reason": "update tool detected",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "21 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow detected",
          "score": 10
        }
      ],
      "date": "2026-11-02",
      "score": 7.5,
      "source": "scorecard-cli",
      "version": "v5.6.0"
    },
    "vulnerabilities": [
      {
        "aliases": [],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-5932",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "Unknown",
        "summary": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained f",
        "url": "https://go.dev/issue/44226",
        "version": "v0.58.0"
      }
    ],
    "workflow_audit": {
      "files": 9,
      "findings": [
        {
          "confidence": "High",
          "description": "dangerous use of GitHub App tokens",
          "file": ".github/workflows/publish-helm-chart.yaml",
          "line": 24,
          "note": "app token inherits blanket installation permissions",
          "rule": "github-app",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#github-app"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}