{
  "history": [
    {
      "added": 0,
      "commit": "e713f67f7d54decdcd9b3132c9751833dcced698",
      "date": "2026-11-01",
      "dependencies": 509,
      "errors": [],
      "fixable": 3,
      "go_version": "go1.27.3",
      "in_binary": {
        "dependencies": 3,
        "stdlib": 0,
        "total": 3
      },
      "new_vulnerabilities": 0,
      "osv_confirmed": 10,
      "osv_only": 0,
      "ref": "v0.76.1",
      "release_changed": false,
      "release_integrity": "verified",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 7.1,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 4,
        "Low": 0,
        "Medium": 3,
        "Negligible": 0,
        "Unknown": 3
      },
      "workflow": {
        "High": 1,
        "Low": 17,
        "Medium": 46,
        "files": 23
      }
    },
    {
      "added": 0,
      "commit": "e713f67f7d54decdcd9b3132c9751833dcced698",
      "date": "2026-11-02",
      "dependencies": 509,
      "errors": [],
      "fixable": 3,
      "go_version": "go1.27.3",
      "in_binary": {
        "dependencies": 3,
        "stdlib": 0,
        "total": 3
      },
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 10,
      "osv_only": 0,
      "ref": "v0.76.1",
      "release_changed": false,
      "release_integrity": "verified",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 7.1,
      "scorecard_date": "2026-11-02",
      "scorecard_note": null,
      "scorecard_source": "scorecard-cli",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 4,
        "Low": 0,
        "Medium": 3,
        "Negligible": 0,
        "Unknown": 3
      },
      "vulnerable_packages": 5,
      "workflow": {
        "High": 1,
        "Low": 17,
        "Medium": 46,
        "files": 23
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "Software Composition Analysis (SCA)",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "in_binary_new": [],
      "in_binary_resolved": [],
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "v0.76.1",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "e713f67f7d54decdcd9b3132c9751833dcced698",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/reusable-release.yaml",
        "name": "actions/attest",
        "purl": "pkg:github/actions/attest@v4.2.2",
        "version": "v4.2.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/cache-test-assets.yaml",
        "name": "actions/cache",
        "purl": "pkg:github/actions/cache@v6.1.0",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/auto-update-labels.yaml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v7.0.1",
        "version": "v7.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/backport.yaml",
        "name": "actions/create-github-app-token",
        "purl": "pkg:github/actions/create-github-app-token@v3.2.0",
        "version": "v3.2.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/trivy-triage/action.yaml",
        "name": "actions/github-script",
        "purl": "pkg:github/actions/github-script@v9.0.0",
        "version": "v9.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/setup-go/action.yaml",
        "name": "actions/setup-go",
        "purl": "pkg:github/actions/setup-go@v7.0.0",
        "version": "v7.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/mkdocs-dev.yaml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@v7.0.0",
        "version": "v7.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/stale-issues.yaml",
        "name": "actions/stale",
        "purl": "pkg:github/actions/stale@v11.0.0",
        "version": "v11.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/canary.yaml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v7.0.1",
        "version": "v7.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-chart.yaml",
        "name": "azure/setup-helm",
        "purl": "pkg:github/azure/setup-helm@v5.0.1",
        "version": "v5.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/reusable-release.yaml",
        "name": "CycloneDX/gh-gomod-generate-sbom",
        "purl": "pkg:github/CycloneDX/gh-gomod-generate-sbom@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/reusable-release.yaml",
        "name": "docker/build-push-action",
        "purl": "pkg:github/docker/build-push-action@v7.4.0",
        "version": "v7.4.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/reusable-release.yaml",
        "name": "docker/login-action",
        "purl": "pkg:github/docker/login-action@v4.6.0",
        "version": "v4.6.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/reusable-release.yaml",
        "name": "docker/setup-buildx-action",
        "purl": "pkg:github/docker/setup-buildx-action@v4.4.1",
        "version": "v4.4.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/test.yaml",
        "name": "docker/setup-docker-action",
        "purl": "pkg:github/docker/setup-docker-action@v5.5.0",
        "version": "v5.5.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/reusable-release.yaml",
        "name": "docker/setup-qemu-action",
        "purl": "pkg:github/docker/setup-qemu-action@v4.4.0",
        "version": "v4.4.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/cache-test-assets.yaml",
        "name": "golangci/golangci-lint-action",
        "purl": "pkg:github/golangci/golangci-lint-action@v9.3.0",
        "version": "v9.3.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-please.yaml",
        "name": "googleapis/release-please-action",
        "purl": "pkg:github/googleapis/release-please-action@v5.0.0",
        "version": "v5.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/reusable-release.yaml",
        "name": "goreleaser/goreleaser-action",
        "purl": "pkg:github/goreleaser/goreleaser-action@v7.2.3",
        "version": "v7.2.3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-chart.yaml",
        "name": "helm/chart-testing-action",
        "purl": "pkg:github/helm/chart-testing-action@v2.8.0",
        "version": "v2.8.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-chart.yaml",
        "name": "helm/kind-action",
        "purl": "pkg:github/helm/kind-action@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/reusable-release.yaml",
        "name": "sigstore/cosign-installer",
        "purl": "pkg:github/sigstore/cosign-installer@v4.1.2",
        "version": "v4.1.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/spdx-cron.yaml",
        "name": "slackapi/slack-github-action",
        "purl": "pkg:github/slackapi/slack-github-action@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/test.yaml",
        "name": "zizmorcore/zizmor-action",
        "purl": "pkg:github/zizmorcore/zizmor-action@v0.6.4",
        "version": "v0.6.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "sha256:4801cccc435a40cb8271138e83807724e9d0e493aca427fef51385b719f9f643",
          "sha256:ca1635ee734f8c339ca0550277534856938b94f5b19c3cb9d8ef921d4ce621d1"
        ],
        "location": "go.mod",
        "name": "buf.build/gen/go/bufbuild/bufplugin/protocolbuffers/go",
        "purl": "pkg:golang/buf.build/gen/go/bufbuild/bufplugin/protocolbuffers/go@v1.36.11-20250718181942-e35f9b667443.1",
        "version": "v1.36.11-20250718181942-e35f9b667443.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/gen/go/bufbuild/protodescriptor/protocolbuffers/go",
        "purl": "pkg:golang/buf.build/gen/go/bufbuild/protodescriptor/protocolbuffers/go@v1.36.11-20250109164928-1da0de137947.1",
        "version": "v1.36.11-20250109164928-1da0de137947.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go",
        "purl": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1",
        "version": "v1.36.11-20260415201107-50325440f8f2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/gen/go/bufbuild/registry/connectrpc/go",
        "purl": "pkg:golang/buf.build/gen/go/bufbuild/registry/connectrpc/go@v1.20.0-20260507063250-43b0c5a6cd08.1",
        "version": "v1.20.0-20260507063250-43b0c5a6cd08.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/gen/go/bufbuild/registry/protocolbuffers/go",
        "purl": "pkg:golang/buf.build/gen/go/bufbuild/registry/protocolbuffers/go@v1.36.11-20260507063250-43b0c5a6cd08.1",
        "version": "v1.36.11-20260507063250-43b0c5a6cd08.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/gen/go/pluginrpc/pluginrpc/protocolbuffers/go",
        "purl": "pkg:golang/buf.build/gen/go/pluginrpc/pluginrpc/protocolbuffers/go@v1.36.11-20241007202033-cf42259fcbfc.1",
        "version": "v1.36.11-20241007202033-cf42259fcbfc.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/go/app",
        "purl": "pkg:golang/buf.build/go/app@v0.2.1-0.20260407195847-833f8f978cda",
        "version": "v0.2.1-0.20260407195847-833f8f978cda"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "sha256:61aab78b4bee54cdadda95f2f6f21c3c2463ae9aa0d31b044a20ac16879328e3"
        ],
        "location": "go.mod",
        "name": "buf.build/go/bufplugin",
        "purl": "pkg:golang/buf.build/go/bufplugin@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/go/bufprivateusage",
        "purl": "pkg:golang/buf.build/go/bufprivateusage@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/go/interrupt",
        "purl": "pkg:golang/buf.build/go/interrupt@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/go/protovalidate",
        "purl": "pkg:golang/buf.build/go/protovalidate@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/go/protoyaml",
        "purl": "pkg:golang/buf.build/go/protoyaml@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/go/spdx",
        "purl": "pkg:golang/buf.build/go/spdx@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "buf.build/go/standard",
        "purl": "pkg:golang/buf.build/go/standard@v0.1.1-0.20260325175353-2b287e071df5",
        "version": "v0.1.1-0.20260325175353-2b287e071df5"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "cel.dev/expr",
        "purl": "pkg:golang/cel.dev/expr@v0.25.2",
        "version": "v0.25.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go",
        "purl": "pkg:golang/cloud.google.com/go@v0.123.0",
        "version": "v0.123.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/auth",
        "purl": "pkg:golang/cloud.google.com/go/auth@v0.23.3",
        "version": "v0.23.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/auth/oauth2adapt",
        "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
        "version": "v0.2.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/compute/metadata",
        "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/iam",
        "purl": "pkg:golang/cloud.google.com/go/iam@v1.13.0",
        "version": "v1.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/monitoring",
        "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0",
        "version": "v1.30.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/storage",
        "purl": "pkg:golang/cloud.google.com/go/storage@v1.68.0",
        "version": "v1.68.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "connectrpc.com/connect",
        "purl": "pkg:golang/connectrpc.com/connect@v1.20.0",
        "version": "v1.20.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "connectrpc.com/grpcreflect",
        "purl": "pkg:golang/connectrpc.com/grpcreflect@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "connectrpc.com/otelconnect",
        "purl": "pkg:golang/connectrpc.com/otelconnect@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "dario.cat/mergo",
        "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/agext/levenshtein",
        "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3",
        "version": "v1.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/agnivade/levenshtein",
        "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/chroma",
        "purl": "pkg:golang/github.com/alecthomas/chroma@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/alessio/shellescape",
        "purl": "pkg:golang/github.com/alessio/shellescape@v1.4.1",
        "version": "v1.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alicebob/miniredis/v2",
        "purl": "pkg:golang/github.com/alicebob/miniredis/v2@v2.39.0",
        "version": "v2.39.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/anchore/go-struct-converter",
        "purl": "pkg:golang/github.com/anchore/go-struct-converter@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/antlr4-go/antlr/v4",
        "purl": "pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.1",
        "version": "v4.13.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/apparentlymart/go-cidr",
        "purl": "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/apparentlymart/go-textseg/v15",
        "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0",
        "version": "v15.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/apparentlymart/go-textseg/v17",
        "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v17@v17.0.1",
        "version": "v17.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/bolt-fixtures",
        "purl": "pkg:golang/github.com/aquasecurity/bolt-fixtures@v0.0.0-20200903104109-d34e7f983986",
        "version": "v0.0.0-20200903104109-d34e7f983986"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/go-gem-version",
        "purl": "pkg:golang/github.com/aquasecurity/go-gem-version@v0.0.0-20201115065557-8eed6fe000ce",
        "version": "v0.0.0-20201115065557-8eed6fe000ce"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/go-npm-version",
        "purl": "pkg:golang/github.com/aquasecurity/go-npm-version@v0.0.3-0.20261005070944-1f16ed76cf11",
        "version": "v0.0.3-0.20261005070944-1f16ed76cf11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/go-pep440-version",
        "purl": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.2-0.20260224065243-f9bba28c51a4",
        "version": "v0.0.2-0.20260224065243-f9bba28c51a4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/go-version",
        "purl": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1",
        "version": "v0.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/iamgo",
        "purl": "pkg:golang/github.com/aquasecurity/iamgo@v0.0.10",
        "version": "v0.0.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/jfather",
        "purl": "pkg:golang/github.com/aquasecurity/jfather@v0.0.8",
        "version": "v0.0.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/table",
        "purl": "pkg:golang/github.com/aquasecurity/table@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/testdocker",
        "purl": "pkg:golang/github.com/aquasecurity/testdocker@v0.0.0-20260423080828-99e7cbfdbe56",
        "version": "v0.0.0-20260423080828-99e7cbfdbe56"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/tml",
        "purl": "pkg:golang/github.com/aquasecurity/tml@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy-checks",
        "purl": "pkg:golang/github.com/aquasecurity/trivy-checks@v1.12.2-0.20261012053351-ac85645895ed",
        "version": "v1.12.2-0.20261012053351-ac85645895ed"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy-db",
        "purl": "pkg:golang/github.com/aquasecurity/trivy-db@v0.0.0-20261012084708-cbebf2ecd6df",
        "version": "v0.0.0-20261012084708-cbebf2ecd6df"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy-java-db",
        "purl": "pkg:golang/github.com/aquasecurity/trivy-java-db@v0.0.0-20240109071736-184bd7481d48",
        "version": "v0.0.0-20240109071736-184bd7481d48"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aquasecurity/trivy-kubernetes",
        "purl": "pkg:golang/github.com/aquasecurity/trivy-kubernetes@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/asaskevich/govalidator",
        "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
        "version": "v0.0.0-20230301143203-a9d515a09cc2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.3",
        "version": "v1.47.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.22",
        "version": "v1.7.22"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/config",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.9",
        "version": "v1.33.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/credentials",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.9",
        "version": "v1.20.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.3",
        "version": "v1.20.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.6",
        "version": "v1.5.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.6",
        "version": "v2.8.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.6",
        "version": "v1.5.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ebs",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ebs@v1.22.1",
        "version": "v1.22.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ec2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.338.4",
        "version": "v1.338.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.66.4",
        "version": "v1.66.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.21",
        "version": "v1.13.21"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.11.7",
        "version": "v1.11.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.6",
        "version": "v1.14.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.20.6",
        "version": "v1.20.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/s3",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.114.3",
        "version": "v1.114.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/signin",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.4",
        "version": "v1.10.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sso",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.4",
        "version": "v1.38.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.4",
        "version": "v1.43.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sts",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.4",
        "version": "v1.51.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/smithy-go",
        "purl": "pkg:golang/github.com/aws/smithy-go@v1.28.5",
        "version": "v1.28.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.23.3",
        "version": "v1.23.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.1",
        "version": "v1.14.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry@v0.2.3",
        "version": "v0.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.13.0",
        "version": "v1.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/go-ansiterm",
        "purl": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
        "version": "v0.0.0-20250102033503-faa5f7b0171c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
        "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.8.0",
        "version": "v1.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bgentry/go-netrc",
        "purl": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d",
        "version": "v0.0.0-20140422174119-9fd32a8b3d3d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bitnami/go-version",
        "purl": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20231130084017-bb00604d650c",
        "version": "v0.0.0-20231130084017-bb00604d650c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/blang/semver/v4",
        "purl": "pkg:golang/github.com/blang/semver/v4@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/bmatcuk/doublestar/v4",
        "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.2",
        "version": "v4.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/briandowns/spinner",
        "purl": "pkg:golang/github.com/briandowns/spinner@v1.23.0",
        "version": "v1.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/brianvoe/gofakeit/v6",
        "purl": "pkg:golang/github.com/brianvoe/gofakeit/v6@v6.28.0",
        "version": "v6.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/bufbuild/buf",
        "purl": "pkg:golang/github.com/bufbuild/buf@v1.70.0",
        "version": "v1.70.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/bufbuild/protocompile",
        "purl": "pkg:golang/github.com/bufbuild/protocompile@v0.14.2-0.20260522222248-64e6ad034132",
        "version": "v0.14.2-0.20260522222248-64e6ad034132"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/bufbuild/protoplugin",
        "purl": "pkg:golang/github.com/bufbuild/protoplugin@v0.0.0-20260414125817-25d1d281b46b",
        "version": "v0.0.0-20260414125817-25d1d281b46b"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/BurntSushi/toml",
        "purl": "pkg:golang/github.com/BurntSushi/toml@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cenkalti/backoff/v4",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
        "version": "v4.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cenkalti/backoff/v5",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
        "version": "v5.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cenkalti/backoff/v6",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v6@v6.0.1",
        "version": "v6.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/cespare/xxhash/v2",
        "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/chai2010/gettext-go",
        "purl": "pkg:golang/github.com/chai2010/gettext-go@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cheggaaa/pb/v3",
        "purl": "pkg:golang/github.com/cheggaaa/pb/v3@v3.2.1",
        "version": "v3.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/cli/browser",
        "purl": "pkg:golang/github.com/cli/browser@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/clipperhouse/uax29/v2",
        "purl": "pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cloudflare/circl",
        "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.4",
        "version": "v1.6.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cncf/xds/go",
        "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
        "version": "v0.0.0-20260202195803-dba9d589def2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/cgroups/v3",
        "purl": "pkg:golang/github.com/containerd/cgroups/v3@v3.1.3",
        "version": "v3.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/containerd/api",
        "purl": "pkg:golang/github.com/containerd/containerd/api@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/containerd/v2",
        "purl": "pkg:golang/github.com/containerd/containerd/v2@v2.4.1",
        "version": "v2.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/continuity",
        "purl": "pkg:golang/github.com/containerd/continuity@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs",
        "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs/pkg",
        "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/fifo",
        "purl": "pkg:golang/github.com/containerd/fifo@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/log",
        "purl": "pkg:golang/github.com/containerd/log@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/log/otel",
        "purl": "pkg:golang/github.com/containerd/log/otel@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/platforms",
        "purl": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5",
        "version": "v1.0.0-rc.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/plugin",
        "purl": "pkg:golang/github.com/containerd/plugin@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/ttrpc",
        "purl": "pkg:golang/github.com/containerd/ttrpc@v1.2.10",
        "version": "v1.2.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/typeurl/v2",
        "purl": "pkg:golang/github.com/containerd/typeurl/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cpuguy83/dockercfg",
        "purl": "pkg:golang/github.com/cpuguy83/dockercfg@v0.3.2",
        "version": "v0.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/cpuguy83/go-md2man/v2",
        "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7",
        "version": "v2.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/CycloneDX/cyclonedx-go",
        "purl": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cyphar/filepath-securejoin",
        "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/DataDog/zstd",
        "purl": "pkg:golang/github.com/DataDog/zstd@v1.5.5",
        "version": "v1.5.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/davecgh/go-spew",
        "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "version": "v1.1.2-0.20180830191138-d8f796af33cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
        "purl": "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1",
        "version": "v4.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/distribution/reference",
        "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dlclark/regexp2",
        "purl": "pkg:golang/github.com/dlclark/regexp2@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "sha256:a8c869fbda819afb8d80e0ac19bac52e766bc6c19cb38cf94f52d64c4be2aab6"
        ],
        "location": "go.mod",
        "name": "github.com/docker/cli",
        "purl": "pkg:golang/github.com/docker/cli@v29.8.2%2Bincompatible",
        "version": "v29.8.2+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/distribution",
        "purl": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible",
        "version": "v2.8.3+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/docker",
        "purl": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
        "version": "v28.5.2+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/docker/docker-credential-helpers",
        "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.9",
        "version": "v0.9.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/docker/go-connections",
        "purl": "pkg:golang/github.com/docker/go-connections@v0.8.1",
        "version": "v0.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/docker/go-units",
        "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dsnet/compress",
        "purl": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707",
        "version": "v0.0.2-0.20230904184137-39efe44ab707"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dustin/go-humanize",
        "purl": "pkg:golang/github.com/dustin/go-humanize@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dylibso/observe-sdk/go",
        "purl": "pkg:golang/github.com/dylibso/observe-sdk/go@v0.0.0-20240819160327-2d926c5d788a",
        "version": "v0.0.0-20240819160327-2d926c5d788a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ebitengine/purego",
        "purl": "pkg:golang/github.com/ebitengine/purego@v0.10.1",
        "version": "v0.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emicklei/go-restful/v3",
        "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
        "version": "v3.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emirpasic/gods",
        "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
        "version": "v1.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/go-control-plane/envoy",
        "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
        "version": "v1.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/protoc-gen-validate",
        "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
        "version": "v1.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/evanphx/json-patch/v5",
        "purl": "pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11",
        "version": "v5.9.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/exponent-io/jsonpath",
        "purl": "pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f",
        "version": "v0.0.0-20210407135951-1de76d718b3f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/extism/go-sdk",
        "purl": "pkg:golang/github.com/extism/go-sdk@v1.7.1",
        "version": "v1.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fatih/color",
        "purl": "pkg:golang/github.com/fatih/color@v1.19.0",
        "version": "v1.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/felixge/httpsnoop",
        "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fluxcd/cli-utils",
        "purl": "pkg:golang/github.com/fluxcd/cli-utils@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fsnotify/fsnotify",
        "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1",
        "version": "v1.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fvbommel/sortorder",
        "purl": "pkg:golang/github.com/fvbommel/sortorder@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fxamacker/cbor/v2",
        "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.4",
        "version": "v2.9.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-errors/errors",
        "purl": "pkg:golang/github.com/go-errors/errors@v1.5.1",
        "version": "v1.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/gcfg",
        "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
        "version": "v1.5.1-0.20230307220236-3a3c6141e376"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-billy/v5",
        "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.9.2",
        "version": "v5.9.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-git/v5",
        "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.19.3",
        "version": "v5.19.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-gorp/gorp/v3",
        "purl": "pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0",
        "version": "v3.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-jose/go-jose/v4",
        "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.5",
        "version": "v4.1.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/go-logr/logr",
        "purl": "pkg:golang/github.com/go-logr/logr@v1.4.4",
        "version": "v1.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/go-logr/stdr",
        "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-ole/go-ole",
        "purl": "pkg:golang/github.com/go-ole/go-ole@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/analysis",
        "purl": "pkg:golang/github.com/go-openapi/analysis@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/errors",
        "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.9",
        "version": "v0.22.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonpointer",
        "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonreference",
        "purl": "pkg:golang/github.com/go-openapi/jsonreference@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/loads",
        "purl": "pkg:golang/github.com/go-openapi/loads@v0.25.2",
        "version": "v0.25.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/runtime",
        "purl": "pkg:golang/github.com/go-openapi/runtime@v0.33.2",
        "version": "v0.33.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/runtime/server-middleware",
        "purl": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.2",
        "version": "v0.33.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/spec",
        "purl": "pkg:golang/github.com/go-openapi/spec@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/strfmt",
        "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.27.2",
        "version": "v0.27.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag",
        "purl": "pkg:golang/github.com/go-openapi/swag@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/cmdutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/conv",
        "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/fileutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/jsonutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/loading",
        "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/mangling",
        "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/netutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/pools",
        "purl": "pkg:golang/github.com/go-openapi/swag/pools@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/stringutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/typeutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/yamlutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.29.2",
        "version": "v0.29.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/validate",
        "purl": "pkg:golang/github.com/go-openapi/validate@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-viper/mapstructure/v2",
        "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "version": "v2.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gobwas/glob",
        "purl": "pkg:golang/github.com/gobwas/glob@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/goccy/go-json",
        "purl": "pkg:golang/github.com/goccy/go-json@v0.11.2",
        "version": "v0.11.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/goccy/go-yaml",
        "purl": "pkg:golang/github.com/goccy/go-yaml@v1.19.0",
        "version": "v1.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gocsaf/csaf/v3",
        "purl": "pkg:golang/github.com/gocsaf/csaf/v3@v3.6.0",
        "version": "v3.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/gofrs/flock",
        "purl": "pkg:golang/github.com/gofrs/flock@v0.13.1",
        "version": "v0.13.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gofrs/uuid",
        "purl": "pkg:golang/github.com/gofrs/uuid@v4.3.1%2Bincompatible",
        "version": "v4.3.1+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-jwt/jwt/v4",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
        "version": "v4.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-jwt/jwt/v5",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
        "version": "v5.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/groupcache",
        "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "version": "v0.0.0-20241129210726-2c02b8208cf8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/btree",
        "purl": "pkg:golang/github.com/google/btree@v1.1.3",
        "version": "v1.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/google/cel-go",
        "purl": "pkg:golang/github.com/google/cel-go@v0.30.0",
        "version": "v0.30.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/gnostic-models",
        "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/google/go-cmp",
        "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/google/go-containerregistry",
        "purl": "pkg:golang/github.com/google/go-containerregistry@v0.22.1",
        "version": "v0.22.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause",
          "sha256:1dd7c237a96b83e00dce51d86f7ec4f704b69498469df9ebd07025d9fca08748",
          "sha256:c38e205995236a865c31a447a2fe148a24fe9e4492dc695738884809f9b9dd74"
        ],
        "location": "go.mod",
        "name": "github.com/google/go-github/v31",
        "purl": "pkg:golang/github.com/google/go-github/v31@v31.0.0",
        "version": "v31.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-github/v62",
        "purl": "pkg:golang/github.com/google/go-github/v62@v62.0.0",
        "version": "v62.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/google/go-querystring",
        "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/jsonschema-go",
        "purl": "pkg:golang/github.com/google/jsonschema-go@v0.4.3",
        "version": "v0.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/licenseclassifier/v2",
        "purl": "pkg:golang/github.com/google/licenseclassifier/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/s2a-go",
        "purl": "pkg:golang/github.com/google/s2a-go@v0.1.10",
        "version": "v0.1.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/google/safetext",
        "purl": "pkg:golang/github.com/google/safetext@v0.0.0-20220905092116-b49f7bc46da2",
        "version": "v0.0.0-20220905092116-b49f7bc46da2"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/google/uuid",
        "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/googleapis/enterprise-certificate-proxy",
        "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22",
        "version": "v0.3.22"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/googleapis/gax-go/v2",
        "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.24.1",
        "version": "v2.24.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/docker-credential-gcr/v2",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/docker-credential-gcr/v2@v2.2.1",
        "version": "v2.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.34.0",
        "version": "v1.34.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gorilla/mux",
        "purl": "pkg:golang/github.com/gorilla/mux@v1.8.1",
        "version": "v1.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gosuri/uitable",
        "purl": "pkg:golang/github.com/gosuri/uitable@v0.0.4",
        "version": "v0.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.31.0",
        "version": "v2.31.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/aws-sdk-go-base/v2",
        "purl": "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.74",
        "version": "v2.0.0-beta.74"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/errwrap",
        "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-cleanhttp",
        "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-getter",
        "purl": "pkg:golang/github.com/hashicorp/go-getter@v1.8.10",
        "version": "v1.8.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-multierror",
        "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-retryablehttp",
        "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
        "version": "v0.7.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-uuid",
        "purl": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-version",
        "purl": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
        "version": "v1.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/golang-lru/v2",
        "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "version": "v2.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/hc-install",
        "purl": "pkg:golang/github.com/hashicorp/hc-install@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/hcl/v2",
        "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.25.0",
        "version": "v2.25.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/terraform-exec",
        "purl": "pkg:golang/github.com/hashicorp/terraform-exec@v0.25.3",
        "version": "v0.25.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/terraform-json",
        "purl": "pkg:golang/github.com/hashicorp/terraform-json@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/huandu/xstrings",
        "purl": "pkg:golang/github.com/huandu/xstrings@v1.6.2",
        "version": "v1.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ianlancetaylor/demangle",
        "purl": "pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20240805132620-81f5be970eca",
        "version": "v0.0.0-20240805132620-81f5be970eca"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/in-toto/attestation",
        "purl": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/in-toto/in-toto-golang",
        "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/inconshreveable/mousetrap",
        "purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Intevation/gval",
        "purl": "pkg:golang/github.com/Intevation/gval@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Intevation/jsonpath",
        "purl": "pkg:golang/github.com/Intevation/jsonpath@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jbenet/go-context",
        "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
        "version": "v0.0.0-20150711004518-d14ea06fba99"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/jdx/go-netrc",
        "purl": "pkg:golang/github.com/jdx/go-netrc@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/jhump/protoreflect/v2",
        "purl": "pkg:golang/github.com/jhump/protoreflect/v2@v2.0.0-beta.2",
        "version": "v2.0.0-beta.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jmoiron/sqlx",
        "purl": "pkg:golang/github.com/jmoiron/sqlx@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/josephburnett/jd/v2",
        "purl": "pkg:golang/github.com/josephburnett/jd/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/json-iterator/go",
        "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
        "version": "v1.1.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kevinburke/ssh_config",
        "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause",
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/klauspost/compress",
        "purl": "pkg:golang/github.com/klauspost/compress@v1.20.1",
        "version": "v1.20.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/klauspost/pgzip",
        "purl": "pkg:golang/github.com/klauspost/pgzip@v1.2.6",
        "version": "v1.2.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/go-apk-version",
        "purl": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f",
        "version": "v0.0.0-20200609155635-041fdbb8563f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/go-deb-version",
        "purl": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23",
        "version": "v0.0.0-20241115132648-6f4aee6ccd23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/go-rpm-version",
        "purl": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20260811110310-1815e1f1b790",
        "version": "v0.0.0-20260811110310-1815e1f1b790"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/go-rpmdb",
        "purl": "pkg:golang/github.com/knqyf263/go-rpmdb@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/knqyf263/labeler",
        "purl": "pkg:golang/github.com/knqyf263/labeler@v0.0.0-20200423181506-7a6e545148c3",
        "version": "v0.0.0-20200423181506-7a6e545148c3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/knqyf263/nested",
        "purl": "pkg:golang/github.com/knqyf263/nested@v0.0.1",
        "version": "v0.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/kr/pretty",
        "purl": "pkg:golang/github.com/kr/pretty@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/kr/text",
        "purl": "pkg:golang/github.com/kr/text@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kylelemons/godebug",
        "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lann/builder",
        "purl": "pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0",
        "version": "v0.0.0-20180802200727-47ae307949d0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lann/ps",
        "purl": "pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0",
        "version": "v0.0.0-20150810152359-62de8c46ede0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/blackmagic",
        "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/dsig",
        "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/dsig-secp256k1",
        "purl": "pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/httpcc",
        "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/httprc/v3",
        "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.6",
        "version": "v3.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/jwx/v3",
        "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.3.0",
        "version": "v3.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/option/v2",
        "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lib/pq",
        "purl": "pkg:golang/github.com/lib/pq@v1.12.3",
        "version": "v1.12.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/liggitt/tabwriter",
        "purl": "pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de",
        "version": "v0.0.0-20181228230101-89fcab3d43de"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lufia/plan9stats",
        "purl": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20260330125221-c963978e514e",
        "version": "v0.0.0-20260330125221-c963978e514e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lunixbochs/struc",
        "purl": "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20200707160740-784aaebc1d40",
        "version": "v0.0.0-20200707160740-784aaebc1d40"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/magefile/mage",
        "purl": "pkg:golang/github.com/magefile/mage@v1.17.2",
        "version": "v1.17.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/magiconair/properties",
        "purl": "pkg:golang/github.com/magiconair/properties@v1.8.10",
        "version": "v1.8.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/MakeNowJust/heredoc",
        "purl": "pkg:golang/github.com/MakeNowJust/heredoc@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-disk",
        "purl": "pkg:golang/github.com/masahiro331/go-disk@v0.0.0-20260423015231-f7a470ebd472",
        "version": "v0.0.0-20260423015231-f7a470ebd472"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-ebs-file",
        "purl": "pkg:golang/github.com/masahiro331/go-ebs-file@v0.0.0-20260422020928-9d24e29aac27",
        "version": "v0.0.0-20260422020928-9d24e29aac27"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-ext4-filesystem",
        "purl": "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20260423010602-fe51f5b5e52b",
        "version": "v0.0.0-20260423010602-fe51f5b5e52b"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-mvn-version",
        "purl": "pkg:golang/github.com/masahiro331/go-mvn-version@v0.0.0-20260119054159-d21fcd2e7de1",
        "version": "v0.0.0-20260119054159-d21fcd2e7de1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-vmdk-parser",
        "purl": "pkg:golang/github.com/masahiro331/go-vmdk-parser@v0.0.0-20260423020818-08305fa668d2",
        "version": "v0.0.0-20260423020818-08305fa668d2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-xfs-filesystem",
        "purl": "pkg:golang/github.com/masahiro331/go-xfs-filesystem@v0.0.0-20260422061116-d21e5e4481bb",
        "version": "v0.0.0-20260422061116-d21e5e4481bb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/goutils",
        "purl": "pkg:golang/github.com/Masterminds/goutils@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/semver/v3",
        "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.5.0",
        "version": "v3.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/sprig/v3",
        "purl": "pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0",
        "version": "v3.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/squirrel",
        "purl": "pkg:golang/github.com/Masterminds/squirrel@v1.5.4",
        "version": "v1.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/mattn/go-colorable",
        "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.15",
        "version": "v0.1.15"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/mattn/go-isatty",
        "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.24",
        "version": "v0.0.24"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-runewidth",
        "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.30",
        "version": "v0.0.30"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-shellwords",
        "purl": "pkg:golang/github.com/mattn/go-shellwords@v1.0.16",
        "version": "v1.0.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Microsoft/go-winio",
        "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29",
        "version": "v0.6.3-0.20251027160822-ad3df93bed29"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Microsoft/hcsshim",
        "purl": "pkg:golang/github.com/Microsoft/hcsshim@v0.15.0-rc.4",
        "version": "v0.15.0-rc.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/miekg/dns",
        "purl": "pkg:golang/github.com/miekg/dns@v1.1.72",
        "version": "v1.1.72"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/copystructure",
        "purl": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/go-homedir",
        "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/go-wordwrap",
        "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/hashstructure/v2",
        "purl": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
        "version": "v2.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/mapstructure",
        "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
        "version": "v1.5.1-0.20231216201459-8508981c8b6c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/reflectwalk",
        "purl": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/buildkit",
        "purl": "pkg:golang/github.com/moby/buildkit@v0.34.0",
        "version": "v0.34.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/moby/docker-image-spec",
        "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/go-archive",
        "purl": "pkg:golang/github.com/moby/go-archive@v0.3.3",
        "version": "v0.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/locker",
        "purl": "pkg:golang/github.com/moby/locker@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/moby/moby/api",
        "purl": "pkg:golang/github.com/moby/moby/api@v1.56.1",
        "version": "v1.56.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/moby/moby/client",
        "purl": "pkg:golang/github.com/moby/moby/client@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/patternmatcher",
        "purl": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/atomicwriter",
        "purl": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/mountinfo",
        "purl": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2",
        "version": "v0.7.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/sequential",
        "purl": "pkg:golang/github.com/moby/sys/sequential@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/signal",
        "purl": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
        "version": "v0.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/user",
        "purl": "pkg:golang/github.com/moby/sys/user@v0.4.1",
        "version": "v0.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/userns",
        "purl": "pkg:golang/github.com/moby/sys/userns@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/term",
        "purl": "pkg:golang/github.com/moby/term@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/concurrent",
        "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
        "version": "v0.0.0-20180306012644-bacd9c7ef1dd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/reflect2",
        "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
        "version": "v1.0.3-0.20250322232337-35a7c28c31ee"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/monochromegane/go-gitignore",
        "purl": "pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00",
        "version": "v0.0.0-20200626010858-205db1a8cc00"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/morikuni/aec",
        "purl": "pkg:golang/github.com/morikuni/aec@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/munnerz/goautoneg",
        "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
        "version": "v0.0.0-20191010083416-a7dc8b61c822"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ncruces/go-strftime",
        "purl": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/nikolalohinski/gonja/v2",
        "purl": "pkg:golang/github.com/nikolalohinski/gonja/v2@v2.9.1",
        "version": "v2.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/NYTimes/gziphandler",
        "purl": "pkg:golang/github.com/NYTimes/gziphandler@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/oklog/ulid/v2",
        "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.2",
        "version": "v2.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/open-policy-agent/opa",
        "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.21.1",
        "version": "v1.21.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "CC-BY-SA-4.0"
        ],
        "location": "go.mod",
        "name": "github.com/opencontainers/go-digest",
        "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/opencontainers/image-spec",
        "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/runtime-spec",
        "purl": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/openvex/go-vex",
        "purl": "pkg:golang/github.com/openvex/go-vex@v0.2.9",
        "version": "v0.2.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/owenrumney/go-sarif/v2",
        "purl": "pkg:golang/github.com/owenrumney/go-sarif/v2@v2.3.3",
        "version": "v2.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/owenrumney/squealer",
        "purl": "pkg:golang/github.com/owenrumney/squealer@v1.2.12",
        "version": "v1.2.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/package-url/packageurl-go",
        "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.7",
        "version": "v0.1.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pandatix/go-cvss",
        "purl": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/pelletier/go-toml",
        "purl": "pkg:golang/github.com/pelletier/go-toml@v1.9.5",
        "version": "v1.9.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pelletier/go-toml/v2",
        "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3",
        "version": "v2.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/peterbourgon/diskv",
        "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible",
        "version": "v2.0.1+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/petermattis/goid",
        "purl": "pkg:golang/github.com/petermattis/goid@v0.0.0-20260330135022-df67b199bc81",
        "version": "v0.0.0-20260330135022-df67b199bc81"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pjbgf/sha1cd",
        "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/browser",
        "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
        "version": "v0.0.0-20240102092130-5ac0b6a4141c"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/pkg/errors",
        "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/planetscale/vtprotobuf",
        "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
        "version": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/pmezard/go-difflib",
        "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
        "version": "v1.0.1-0.20181226105442-5d4384ee4fb2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/power-devops/perfstat",
        "purl": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
        "version": "v0.0.0-20240221224432-82ca36839d55"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/protocolbuffers/protoscope",
        "purl": "pkg:golang/github.com/protocolbuffers/protoscope@v0.0.0-20221109213918-8e7a6aafa2c9",
        "version": "v0.0.0-20221109213918-8e7a6aafa2c9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ProtonMail/go-crypto",
        "purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.5.2",
        "version": "v1.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/quasilyte/go-ruleguard/dsl",
        "purl": "pkg:golang/github.com/quasilyte/go-ruleguard/dsl@v0.3.23",
        "version": "v0.3.23"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/quic-go/qpack",
        "purl": "pkg:golang/github.com/quic-go/qpack@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/quic-go/quic-go",
        "purl": "pkg:golang/github.com/quic-go/quic-go@v0.59.1",
        "version": "v0.59.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rcrowley/go-metrics",
        "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
        "version": "v0.0.0-20250401214520-65e299d6c5c9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/redis/go-redis/extra/redisotel/v9",
        "purl": "pkg:golang/github.com/redis/go-redis/extra/redisotel/v9@v9.5.3",
        "version": "v9.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/redis/go-redis/v9",
        "purl": "pkg:golang/github.com/redis/go-redis/v9@v9.23.0",
        "version": "v9.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/remyoudompheng/bigfft",
        "purl": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec",
        "version": "v0.0.0-20230129092748-24d4a6f8daec"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/rivo/uniseg",
        "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
        "version": "v0.4.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/rodaine/protogofakeit",
        "purl": "pkg:golang/github.com/rodaine/protogofakeit@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/rogpeppe/go-internal",
        "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.16.0",
        "version": "v1.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/rs/cors",
        "purl": "pkg:golang/github.com/rs/cors@v1.11.1",
        "version": "v1.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rubenv/sql-migrate",
        "purl": "pkg:golang/github.com/rubenv/sql-migrate@v1.8.1",
        "version": "v1.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/russross/blackfriday/v2",
        "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0",
        "version": "v2.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rust-secure-code/go-rustaudit",
        "purl": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c",
        "version": "v0.0.0-20250226111315-e20ec32e963c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sagikazarmark/locafero",
        "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/samber/lo",
        "purl": "pkg:golang/github.com/samber/lo@v1.53.0",
        "version": "v1.53.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/samber/oops",
        "purl": "pkg:golang/github.com/samber/oops@v1.18.1",
        "version": "v1.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3",
        "version": "v6.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sassoftware/go-rpmutils",
        "purl": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/secure-systems-lab/go-securesystemslib",
        "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.1",
        "version": "v0.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT-0"
        ],
        "location": "go.mod",
        "name": "github.com/segmentio/asm",
        "purl": "pkg:golang/github.com/segmentio/asm@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/segmentio/encoding",
        "purl": "pkg:golang/github.com/segmentio/encoding@v0.5.4",
        "version": "v0.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sergi/go-diff",
        "purl": "pkg:golang/github.com/sergi/go-diff@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shibumi/go-pathspec",
        "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shirou/gopsutil/v4",
        "purl": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.6",
        "version": "v4.26.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shopspring/decimal",
        "purl": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sigstore/protobuf-specs",
        "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "version": "v0.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sigstore/rekor",
        "purl": "pkg:golang/github.com/sigstore/rekor@v1.5.4",
        "version": "v1.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sigstore/sigstore",
        "purl": "pkg:golang/github.com/sigstore/sigstore@v1.10.9",
        "version": "v1.10.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/sirupsen/logrus",
        "purl": "pkg:golang/github.com/sirupsen/logrus@v1.10.2",
        "version": "v1.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/skeema/knownhosts",
        "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sosedoff/gitkit",
        "purl": "pkg:golang/github.com/sosedoff/gitkit@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spdx/tools-golang",
        "purl": "pkg:golang/github.com/spdx/tools-golang@v0.5.7",
        "version": "v0.5.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/afero",
        "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/cast",
        "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
        "version": "v1.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "github.com/spf13/cobra",
        "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "version": "v1.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/spf13/pflag",
        "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "version": "v1.0.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/viper",
        "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
        "version": "v1.21.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spiffe/go-spiffe/v2",
        "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.8.1",
        "version": "v2.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/stretchr/objx",
        "purl": "pkg:golang/github.com/stretchr/objx@v0.5.3",
        "version": "v0.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause",
          "ISC",
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/stretchr/testify",
        "purl": "pkg:golang/github.com/stretchr/testify@v1.12.1",
        "version": "v1.12.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/subosito/gotenv",
        "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tchap/go-patricia/v2",
        "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
        "version": "v2.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/testcontainers/testcontainers-go",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go@v0.44.0",
        "version": "v0.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/testcontainers/testcontainers-go/modules/localstack",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go/modules/localstack@v0.44.0",
        "version": "v0.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tetratelabs/wabin",
        "purl": "pkg:golang/github.com/tetratelabs/wabin@v0.0.0-20230304001439-f6f874872834",
        "version": "v0.0.0-20230304001439-f6f874872834"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "sha256:e6f0c5c151a3ff1eba8f5930a31ec084ca6d7adda43c8675ab81f7d36af50b4f"
        ],
        "location": "go.mod",
        "name": "github.com/tetratelabs/wazero",
        "purl": "pkg:golang/github.com/tetratelabs/wazero@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/tidwall/btree",
        "purl": "pkg:golang/github.com/tidwall/btree@v1.8.1",
        "version": "v1.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tklauser/go-sysconf",
        "purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tklauser/numcpus",
        "purl": "pkg:golang/github.com/tklauser/numcpus@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "github.com/tonglil/versioning",
        "purl": "pkg:golang/github.com/tonglil/versioning@v0.0.0-20170205083536-8b2a4334bd1d",
        "version": "v0.0.0-20170205083536-8b2a4334bd1d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tonistiigi/go-csvvalue",
        "purl": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
        "version": "v0.0.0-20240814133006-030d3b2625d0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/toqueteos/webbrowser",
        "purl": "pkg:golang/github.com/toqueteos/webbrowser@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "sha256:79947e17139d654f5b2269f2a42183ee37a749b5149872bec5d57651f6f3a1d4",
          "sha256:ea129de346d4d3955bd2817f4710cb83c559f78cd62da01ad4ec85a46ebd42ef"
        ],
        "location": "go.mod",
        "name": "github.com/twitchtv/twirp",
        "purl": "pkg:golang/github.com/twitchtv/twirp@v8.1.3%2Bincompatible",
        "version": "v8.1.3+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ulikunitz/xz",
        "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.17",
        "version": "v0.5.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/valyala/fastjson",
        "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.10",
        "version": "v1.6.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vektah/gqlparser/v2",
        "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.59",
        "version": "v2.5.59"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/VividCortex/ewma",
        "purl": "pkg:golang/github.com/VividCortex/ewma@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vmihailenco/msgpack/v5",
        "purl": "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.4.1",
        "version": "v5.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vmihailenco/tagparser/v2",
        "purl": "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/x448/float16",
        "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
        "version": "v0.8.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xanzy/ssh-agent",
        "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
        "version": "v0.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonpointer",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
        "version": "v0.0.0-20190905194746-02993c407bfb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonreference",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
        "version": "v0.0.0-20180127040603-bd5ef7bd5415"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xi2/xz",
        "purl": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8",
        "version": "v0.0.0-20171230120015-48954b6210f8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xlab/treeprint",
        "purl": "pkg:golang/github.com/xlab/treeprint@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yashtewari/glob-intersection",
        "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/youmark/pkcs8",
        "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
        "version": "v0.0.0-20240726163527-a2c0da244d78"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yuin/gopher-lua",
        "purl": "pkg:golang/github.com/yuin/gopher-lua@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yusufpapurcu/wmi",
        "purl": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
        "version": "v1.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zclconf/go-cty",
        "purl": "pkg:golang/github.com/zclconf/go-cty@v1.19.0",
        "version": "v1.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zclconf/go-cty-yaml",
        "purl": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.etcd.io/bbolt",
        "purl": "pkg:golang/go.etcd.io/bbolt@v1.5.0",
        "version": "v1.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.lsp.dev/jsonrpc2",
        "purl": "pkg:golang/go.lsp.dev/jsonrpc2@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.lsp.dev/pkg",
        "purl": "pkg:golang/go.lsp.dev/pkg@v0.0.0-20210717090340-384b27a52fb2",
        "version": "v0.0.0-20210717090340-384b27a52fb2"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.lsp.dev/protocol",
        "purl": "pkg:golang/go.lsp.dev/protocol@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.lsp.dev/uri",
        "purl": "pkg:golang/go.lsp.dev/uri@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "go.opentelemetry.io/auto/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/detectors/gcp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.71.0",
        "version": "v0.71.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.71.0",
        "version": "v0.71.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel",
        "purl": "pkg:golang/go.opentelemetry.io/otel@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
        "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/trace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/proto/otlp",
        "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.1",
        "version": "v1.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/atomic",
        "purl": "pkg:golang/go.uber.org/atomic@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "go.uber.org/goleak",
        "purl": "pkg:golang/go.uber.org/goleak@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "go.uber.org/mock",
        "purl": "pkg:golang/go.uber.org/mock@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "go.uber.org/multierr",
        "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "go.mod",
        "name": "go.uber.org/zap",
        "purl": "pkg:golang/go.uber.org/zap@v1.28.0",
        "version": "v1.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "MIT"
        ],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v2",
        "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
        "version": "v2.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "MIT"
        ],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v3",
        "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5",
        "version": "v3.0.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v4",
        "purl": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.3",
        "version": "v4.0.0-rc.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/crypto",
        "purl": "pkg:golang/golang.org/x/crypto@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/exp",
        "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20260908205506-85c1c2202aba",
        "version": "v0.0.0-20260908205506-85c1c2202aba"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.41.0",
        "version": "v0.41.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/net",
        "purl": "pkg:golang/golang.org/x/net@v0.60.0",
        "version": "v0.60.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/oauth2",
        "purl": "pkg:golang/golang.org/x/oauth2@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/sync",
        "purl": "pkg:golang/golang.org/x/sync@v0.24.0",
        "version": "v0.24.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/sys",
        "purl": "pkg:golang/golang.org/x/sys@v0.48.0",
        "version": "v0.48.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/telemetry",
        "purl": "pkg:golang/golang.org/x/telemetry@v0.0.0-20260924152758-ed294f943157",
        "version": "v0.0.0-20260924152758-ed294f943157"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/term",
        "purl": "pkg:golang/golang.org/x/term@v0.46.0",
        "version": "v0.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/text",
        "purl": "pkg:golang/golang.org/x/text@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/time",
        "purl": "pkg:golang/golang.org/x/time@v0.16.0",
        "version": "v0.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.51.0",
        "version": "v0.51.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/vuln",
        "purl": "pkg:golang/golang.org/x/vuln@v1.8.0",
        "version": "v1.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/xerrors",
        "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da",
        "version": "v0.0.0-20240903120638-7835f813f4da"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/api",
        "purl": "pkg:golang/google.golang.org/api@v0.299.0",
        "version": "v0.299.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto",
        "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d",
        "version": "v0.0.0-20260715232425-e75dac1f907d"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/api",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260928230214-8a89bd6388cc",
        "version": "v0.0.0-20260928230214-8a89bd6388cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260928230214-8a89bd6388cc",
        "version": "v0.0.0-20260928230214-8a89bd6388cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/grpc",
        "purl": "pkg:golang/google.golang.org/grpc@v1.84.0",
        "version": "v1.84.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "google.golang.org/protobuf",
        "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12",
        "version": "v1.36.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "go.mod",
        "name": "gopkg.in/check.v1",
        "purl": "pkg:golang/gopkg.in/check.v1@v1.0.0-20201130134442-10cb98267c6c",
        "version": "v1.0.0-20201130134442-10cb98267c6c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/evanphx/json-patch.v4",
        "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
        "version": "v4.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/inf.v0",
        "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/ini.v1",
        "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.3",
        "version": "v1.67.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/warnings.v0",
        "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "MIT"
        ],
        "location": "go.mod",
        "name": "gopkg.in/yaml.v2",
        "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0",
        "version": "v2.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "MIT"
        ],
        "location": "go.mod",
        "name": "gopkg.in/yaml.v3",
        "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "gotest.tools/v3",
        "purl": "pkg:golang/gotest.tools/v3@v3.5.2",
        "version": "v3.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "helm.sh/helm/v4",
        "purl": "pkg:golang/helm.sh/helm/v4@v4.3.0",
        "version": "v4.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/api",
        "purl": "pkg:golang/k8s.io/api@v0.37.1",
        "version": "v0.37.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apiextensions-apiserver",
        "purl": "pkg:golang/k8s.io/apiextensions-apiserver@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apimachinery",
        "purl": "pkg:golang/k8s.io/apimachinery@v0.37.1",
        "version": "v0.37.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apiserver",
        "purl": "pkg:golang/k8s.io/apiserver@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/cli-runtime",
        "purl": "pkg:golang/k8s.io/cli-runtime@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/client-go",
        "purl": "pkg:golang/k8s.io/client-go@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/component-base",
        "purl": "pkg:golang/k8s.io/component-base@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/klog/v2",
        "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "version": "v2.140.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/kube-openapi",
        "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260721132016-d427ff9ee9ad",
        "version": "v0.0.0-20260721132016-d427ff9ee9ad"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/kubectl",
        "purl": "pkg:golang/k8s.io/kubectl@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/utils",
        "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260626114624-be93311217bd",
        "version": "v0.0.0-20260626114624-be93311217bd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "modernc.org/libc",
        "purl": "pkg:golang/modernc.org/libc@v1.77.1",
        "version": "v1.77.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "modernc.org/mathutil",
        "purl": "pkg:golang/modernc.org/mathutil@v1.7.1",
        "version": "v1.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "modernc.org/memory",
        "purl": "pkg:golang/modernc.org/memory@v1.12.1",
        "version": "v1.12.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "modernc.org/sqlite",
        "purl": "pkg:golang/modernc.org/sqlite@v1.60.1",
        "version": "v1.60.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "mvdan.cc/sh/v3",
        "purl": "pkg:golang/mvdan.cc/sh/v3@v3.13.1",
        "version": "v3.13.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "mvdan.cc/xurls/v2",
        "purl": "pkg:golang/mvdan.cc/xurls/v2@v2.6.0",
        "version": "v2.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "oras.land/oras-go/v2",
        "purl": "pkg:golang/oras.land/oras-go/v2@v2.6.2",
        "version": "v2.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "go.mod",
        "name": "pgregory.net/rapid",
        "purl": "pkg:golang/pgregory.net/rapid@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "pluginrpc.com/pluginrpc",
        "purl": "pkg:golang/pluginrpc.com/pluginrpc@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/controller-runtime",
        "purl": "pkg:golang/sigs.k8s.io/controller-runtime@v0.24.1",
        "version": "v0.24.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/json",
        "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
        "version": "v0.0.0-20250730193827-2d320260d730"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "go.mod",
        "name": "sigs.k8s.io/kind",
        "purl": "pkg:golang/sigs.k8s.io/kind@v0.19.0",
        "version": "v0.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/kustomize/api",
        "purl": "pkg:golang/sigs.k8s.io/kustomize/api@v0.21.1",
        "version": "v0.21.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/kustomize/kyaml",
        "purl": "pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.21.1",
        "version": "v0.21.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/randfill",
        "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/structured-merge-diff/v6",
        "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.4.2",
        "version": "v6.4.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "BSD-3-Clause",
          "MIT"
        ],
        "location": "go.mod",
        "name": "sigs.k8s.io/yaml",
        "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/auto-update-labels.yaml",
        "name": "./.github/actions/setup-go",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/triage.yaml",
        "name": "./.github/actions/trivy-triage",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/canary.yaml",
        "name": "./.github/workflows/reusable-release.yaml",
        "purl": "",
        "version": "UNKNOWN"
      }
    ],
    "description": "Scan operating-system and language dependencies for vulnerabilities",
    "errors": [],
    "go_binary": {
      "asset": "trivy_0.76.1_Linux-64bit.tar.gz",
      "binary": "trivy",
      "db": "https://vuln.go.dev",
      "db_last_modified": "2026-10-27T21:16:18Z",
      "findings": [
        {
          "aliases": [],
          "epss": null,
          "fixed_version": "",
          "id": "GO-2026-5932",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/crypto",
          "summary": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues",
          "version": "v0.57.0"
        },
        {
          "aliases": [
            "CVE-2026-78661"
          ],
          "epss": {
            "cve": "CVE-2026-78661",
            "percentile": 0.08063,
            "score": 0.00185
          },
          "fixed_version": "v0.62.0",
          "id": "GO-2026-6860",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/net",
          "summary": "Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net",
          "version": "v0.60.0"
        },
        {
          "aliases": [
            "CVE-2026-97045"
          ],
          "epss": {
            "cve": "CVE-2026-97045",
            "percentile": 0.10117,
            "score": 0.00202
          },
          "fixed_version": "v0.62.0",
          "id": "GO-2026-6866",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/net",
          "summary": "Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net",
          "version": "v0.60.0"
        },
        {
          "aliases": [
            "CVE-2026-33634",
            "GHSA-69fq-xp46-6x23"
          ],
          "epss": {
            "cve": "CVE-2026-33634",
            "percentile": 0.99129,
            "score": 0.59727
          },
          "fixed_version": "",
          "id": "GO-2026-4919",
          "kev": {
            "cve": "CVE-2026-33634",
            "date_added": "2026-03-26"
          },
          "level": "module",
          "module": "github.com/aquasecurity/trivy",
          "summary": "Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy",
          "version": "v0.76.1+dirty"
        }
      ],
      "go_version": "go1.27.3",
      "main_module": "github.com/aquasecurity/trivy"
    },
    "id": "aquasecurity__trivy",
    "manifests": [
      ".github/actions/setup-go/action.yaml",
      ".github/actions/trivy-triage/action.yaml",
      ".github/workflows/auto-close-issue.yaml",
      ".github/workflows/auto-ready-for-review.yaml",
      ".github/workflows/auto-update-labels.yaml",
      ".github/workflows/backport.yaml",
      ".github/workflows/bypass-cla.yaml",
      ".github/workflows/bypass-test.yaml",
      ".github/workflows/cache-test-assets.yaml",
      ".github/workflows/canary.yaml",
      ".github/workflows/mkdocs-dev.yaml",
      ".github/workflows/mkdocs-latest.yaml",
      ".github/workflows/publish-chart.yaml",
      ".github/workflows/release-please.yaml",
      ".github/workflows/release-pr-check.yaml",
      ".github/workflows/release.yaml",
      ".github/workflows/reusable-release.yaml",
      ".github/workflows/semantic-pr.yaml",
      ".github/workflows/spdx-cron.yaml",
      ".github/workflows/stale-issues.yaml",
      ".github/workflows/test-docs.yaml",
      ".github/workflows/test.yaml",
      ".github/workflows/triage.yaml",
      "go.mod",
      "go.sum"
    ],
    "name": "trivy",
    "osv": {
      "advisories": 10,
      "available": true,
      "confirmed": 10,
      "osv_only": [],
      "warning": null
    },
    "ref": "v0.76.1",
    "ref_kind": "release",
    "release_integrity": {
      "asset": "trivy_0.76.1_Linux-64bit.tar.gz",
      "assets": 47,
      "build_provenance": "verified",
      "checksums_published": true,
      "digest_matches_github": true,
      "immutable_release": true,
      "methods": [
        {
          "covers": "asset",
          "identity": "GitHub Actions workflow in aquasecurity/trivy",
          "method": "cosign",
          "signer": "URI:https://github.com/aquasecurity/trivy/.github/workflows/reusable-release.yaml@refs/tags/v0.76.1",
          "status": "verified"
        },
        {
          "method": "github-attestation",
          "predicates": [
            "https://slsa.dev/provenance/v1"
          ],
          "status": "verified"
        },
        {
          "detail": "GitHub attests the file is unchanged since the release was published",
          "method": "github-immutable-release",
          "status": "verified"
        }
      ],
      "provenance_published": false,
      "sbom_published": false,
      "signature": "own-workflow",
      "signatures_published": true,
      "signer": "URI:https://github.com/aquasecurity/trivy/.github/workflows/reusable-release.yaml@refs/tags/v0.76.1",
      "verdict": "verified"
    },
    "released_at": "2026-10-21T11:18:34Z",
    "repository": "aquasecurity/trivy",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [
        "0 version changes among 561 shared packages \u2014 no actual upgrades",
        "Core system packages stable: golang (482), github (50), file (20) unchanged"
      ],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:06:23+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "CII-Best-Practices",
          "reason": "no effort to earn an OpenSSF best practices badge detected",
          "score": 0
        },
        {
          "name": "SAST",
          "reason": "SAST tool is not run on all commits -- score normalized to 0",
          "score": 0
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 0
        },
        {
          "name": "Vulnerabilities",
          "reason": "459 existing vulnerabilities detected",
          "score": 0
        },
        {
          "name": "Branch-Protection",
          "reason": "branch protection is not maximal on development and all release branches",
          "score": 4
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 7",
          "score": 7
        },
        {
          "name": "Signed-Releases",
          "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
          "score": 8
        },
        {
          "name": "Binary-Artifacts",
          "reason": "no binaries found in the repo",
          "score": 10
        },
        {
          "name": "CI-Tests",
          "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Code-Review",
          "reason": "all changesets reviewed",
          "score": 10
        },
        {
          "name": "Contributors",
          "reason": "project has 34 contributing companies or organizations",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "Dependency-Update-Tool",
          "reason": "update tool detected",
          "score": 10
        },
        {
          "name": "Fuzzing",
          "reason": "project is fuzzed",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow detected",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        }
      ],
      "date": "2026-11-02",
      "score": 7.1,
      "source": "scorecard-cli",
      "version": "v5.6.0"
    },
    "vulnerabilities": [
      {
        "aliases": [
          "CVE-2026-42306"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-42306",
          "percentile": 0.01018,
          "score": 0.00104
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-rg2x-37c3-w2rh",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Docker: Race condition in docker cp allows bind mount redirection to host path",
        "url": "https://github.com/advisories/GHSA-rg2x-37c3-w2rh",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-41567"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-41567",
          "percentile": 0.04603,
          "score": 0.00155
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-x86f-5xw2-fm2r",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Docker: `PUT /containers/{id}/archive` executes container binary on the host",
        "url": "https://github.com/advisories/GHSA-x86f-5xw2-fm2r",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-34040",
          "GHSA-x744-4wpc-v9h2"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-34040",
          "percentile": 0.95361,
          "score": 0.0927
        },
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-4887",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker",
        "url": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-116587"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116587",
          "percentile": 0.3048,
          "score": 0.00366
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.6"
        ],
        "id": "GHSA-mgcc-cww5-fp2q",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "High",
        "summary": "Go JOSE: DoS when parsing JWKs that contain RSA keys",
        "url": "https://github.com/advisories/GHSA-mgcc-cww5-fp2q",
        "version": "v4.1.5"
      },
      {
        "aliases": [
          "CVE-2026-85747"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-85747",
          "percentile": 0.12276,
          "score": 0.00218
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-685w-q87j-wqw3",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/distribution",
        "severity": "Medium",
        "summary": "Distribution: Client `manifests.Get()` does not verify returned content against requested digest",
        "url": "https://github.com/advisories/GHSA-685w-q87j-wqw3",
        "version": "v2.8.3+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-33997"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-33997",
          "percentile": 0.34433,
          "score": 0.00402
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-pxq6-2prw-chj9",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "Medium",
        "summary": "Moby has an Off-by-one error in its plugin privilege validation",
        "url": "https://github.com/advisories/GHSA-pxq6-2prw-chj9",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-41568"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-41568",
          "percentile": 0.01188,
          "score": 0.00108
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-vp62-88p7-qqf5",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "Medium",
        "summary": "Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap",
        "url": "https://github.com/advisories/GHSA-vp62-88p7-qqf5",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-5932",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "Unknown",
        "summary": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained f",
        "url": "https://go.dev/issue/44226",
        "version": "v0.57.0"
      },
      {
        "aliases": [
          "CVE-2026-78661"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78661",
          "percentile": 0.08063,
          "score": 0.00185
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6860",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") cau",
        "url": "https://go.dev/cl/849365",
        "version": "v0.60.0"
      },
      {
        "aliases": [
          "CVE-2026-97045"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97045",
          "percentile": 0.10117,
          "score": 0.00202
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6866",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> f",
        "url": "https://go.dev/cl/855121",
        "version": "v0.60.0"
      }
    ],
    "workflow_audit": {
      "files": 23,
      "findings": [
        {
          "confidence": "Medium",
          "description": "use of fundamentally insecure workflow trigger",
          "file": ".github/workflows/backport.yaml",
          "line": 3,
          "note": "this workflow",
          "rule": "dangerous-triggers",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#dangerous-triggers"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/auto-close-issue.yaml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/auto-ready-for-review.yaml",
          "line": 12,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/auto-update-labels.yaml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/backport.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/backport.yaml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/backport.yaml",
          "line": 27,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/bypass-cla.yaml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/bypass-test.yaml",
          "line": 3,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/bypass-test.yaml",
          "line": 22,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/bypass-test.yaml",
          "line": 31,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/cache-test-assets.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/cache-test-assets.yaml",
          "line": 13,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/cache-test-assets.yaml",
          "line": 45,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/cache-test-assets.yaml",
          "line": 77,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/canary.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/canary.yaml",
          "line": 14,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/mkdocs-dev.yaml",
          "line": 10,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/mkdocs-latest.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/mkdocs-latest.yaml",
          "line": 12,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/mkdocs-latest.yaml",
          "line": 44,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/publish-chart.yaml",
          "line": 2,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/publish-chart.yaml",
          "line": 21,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/publish-chart.yaml",
          "line": 58,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-please.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-please.yaml",
          "line": 16,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-please.yaml",
          "line": 38,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-please.yaml",
          "line": 68,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-pr-check.yaml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yaml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yaml",
          "line": 22,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yaml",
          "line": 48,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yaml",
          "line": 87,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/semantic-pr.yaml",
          "line": 11,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/spdx-cron.yaml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/stale-issues.yaml",
          "line": 6,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test-docs.yaml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test.yaml",
          "line": 15,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test.yaml",
          "line": 68,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test.yaml",
          "line": 111,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test.yaml",
          "line": 129,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test.yaml",
          "line": 163,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test.yaml",
          "line": 196,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/test.yaml",
          "line": 214,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/triage.yaml",
          "line": 10,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/auto-update-labels.yaml",
          "line": 18,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/cache-test-assets.yaml",
          "line": 22,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/cache-test-assets.yaml",
          "line": 54,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/cache-test-assets.yaml",
          "line": 86,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/canary.yaml",
          "line": 15,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release.yaml",
          "line": 9,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release.yaml",
          "line": 75,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/reusable-release.yaml",
          "line": 85,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/spdx-cron.yaml",
          "line": 17,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/test.yaml",
          "line": 26,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/test.yaml",
          "line": 88,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/test.yaml",
          "line": 120,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/test.yaml",
          "line": 138,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/test.yaml",
          "line": 172,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/test.yaml",
          "line": 205,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/test.yaml",
          "line": 239,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/triage.yaml",
          "line": 16,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}