{
  "history": [
    {
      "added": 0,
      "commit": "a5a667837d4b1ecd9018797994bb4e39b98702e1",
      "date": "2026-11-01",
      "dependencies": 220,
      "errors": [],
      "fixable": 0,
      "go_version": "go1.27.3",
      "in_binary": {
        "dependencies": 0,
        "stdlib": 0,
        "total": 0
      },
      "new_vulnerabilities": 0,
      "osv_confirmed": 5,
      "osv_only": 0,
      "ref": "v1.8.0",
      "release_changed": false,
      "release_integrity": "none",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": null,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 3,
        "Low": 0,
        "Medium": 2,
        "Negligible": 0,
        "Unknown": 0
      },
      "workflow": {
        "High": 33,
        "Low": 15,
        "Medium": 40,
        "files": 37
      }
    },
    {
      "added": 0,
      "commit": "a5a667837d4b1ecd9018797994bb4e39b98702e1",
      "date": "2026-11-02",
      "dependencies": 220,
      "errors": [],
      "fixable": 0,
      "go_version": "go1.27.3",
      "in_binary": {
        "dependencies": 0,
        "stdlib": 0,
        "total": 0
      },
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 5,
      "osv_only": 0,
      "ref": "v1.8.0",
      "release_changed": false,
      "release_integrity": "none",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": null,
      "scorecard_date": null,
      "scorecard_note": "the project is not in the OpenSSF public dataset; the Scorecard CLI fallback was skipped because this shard's weekly budget was used",
      "scorecard_source": null,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 3,
        "Low": 0,
        "Medium": 2,
        "Negligible": 0,
        "Unknown": 0
      },
      "vulnerable_packages": 1,
      "workflow": {
        "High": 33,
        "Low": 15,
        "Medium": 40,
        "files": 37
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "Container Security \u203a Runtime Security",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "in_binary_new": [],
      "in_binary_resolved": [],
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "v1.8.0",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "a5a667837d4b1ecd9018797994bb4e39b98702e1",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/renovate.yaml",
        "name": "actions/cache",
        "purl": "pkg:github/actions/cache@v6.1.0",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/download-file/action.yml",
        "name": "actions/cache/restore",
        "purl": "pkg:github/actions/cache@v6.1.0#restore",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/download-file/action.yml",
        "name": "actions/cache/save",
        "purl": "pkg:github/actions/cache@v6.1.0#save",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/bpf-unit-tests.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v7.0.1",
        "version": "v7.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-deploy-docs.yaml",
        "name": "actions/configure-pages",
        "purl": "pkg:github/actions/configure-pages@v6.0.0",
        "version": "v6.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-deploy-docs.yaml",
        "name": "actions/deploy-pages",
        "purl": "pkg:github/actions/deploy-pages@v5.0.1",
        "version": "v5.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/download-artifact/action.yml",
        "name": "actions/download-artifact",
        "purl": "pkg:github/actions/download-artifact@v8.0.2",
        "version": "v8.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/bpf-unit-tests.yml",
        "name": "actions/setup-go",
        "purl": "pkg:github/actions/setup-go@v7.0.0",
        "version": "v7.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/vmpolicytests.yaml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v7.0.1",
        "version": "v7.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/install-msi/action.yml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v7.0.2",
        "version": "v7.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-deploy-docs.yaml",
        "name": "actions/upload-pages-artifact",
        "purl": "pkg:github/actions/upload-pages-artifact@v5.0.0",
        "version": "v5.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-e2e-tests.yaml",
        "name": "azure/setup-helm",
        "purl": "pkg:github/azure/setup-helm@v5.0.1",
        "version": "v5.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-e2e-tests.yaml",
        "name": "azure/setup-kubectl",
        "purl": "pkg:github/azure/setup-kubectl@v5.2.0",
        "version": "v5.2.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/renovate.yaml",
        "name": "cilium/actions-app-token",
        "purl": "pkg:github/cilium/actions-app-token@v0.21.1",
        "version": "v0.21.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/bpf-unit-tests.yml",
        "name": "cilium/actions/remove-azure-apt-mirrors",
        "purl": "pkg:github/cilium/actions@687b48a0547e534dd7270d5069a5ab7967c0e907#remove-azure-apt-mirrors",
        "version": "687b48a0547e534dd7270d5069a5ab7967c0e907"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ariane-ci.yaml",
        "name": "cilium/actions/set-commit-status",
        "purl": "pkg:github/cilium/actions@687b48a0547e534dd7270d5069a5ab7967c0e907#set-commit-status",
        "version": "687b48a0547e534dd7270d5069a5ab7967c0e907"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-images-ci.yml",
        "name": "cilium/reusable-workflows/.github/actions/push-helm-chart",
        "purl": "pkg:github/cilium/reusable-workflows@v0.1.1#.github/actions/push-helm-chart",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-clang-image.yaml",
        "name": "docker/build-push-action",
        "purl": "pkg:github/docker/build-push-action@v7.4.0",
        "version": "v7.4.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-clang-image.yaml",
        "name": "docker/login-action",
        "purl": "pkg:github/docker/login-action@v4.6.0",
        "version": "v4.6.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-clang-image.yaml",
        "name": "docker/setup-buildx-action",
        "purl": "pkg:github/docker/setup-buildx-action@v4.4.1",
        "version": "v4.4.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-clang-image.yaml",
        "name": "docker/setup-qemu-action",
        "purl": "pkg:github/docker/setup-qemu-action@v4.4.0",
        "version": "v4.4.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/lint-codeql.yml",
        "name": "dorny/paths-filter",
        "purl": "pkg:github/dorny/paths-filter@v4.0.3",
        "version": "v4.0.3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/vmpolicytests.yaml",
        "name": "geekyeggo/delete-artifact",
        "purl": "pkg:github/geekyeggo/delete-artifact@v6.0.0",
        "version": "v6.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/lint-codeql.yml",
        "name": "github/codeql-action/analyze",
        "purl": "pkg:github/github/codeql-action@v4.39.0#analyze",
        "version": "v4.39.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/lint-codeql.yml",
        "name": "github/codeql-action/init",
        "purl": "pkg:github/github/codeql-action@v4.39.0#init",
        "version": "v4.39.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/static-checks.yaml",
        "name": "golangci/golangci-lint-action",
        "purl": "pkg:github/golangci/golangci-lint-action@v9.3.0",
        "version": "v9.3.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-e2e-tests.yaml",
        "name": "helm/kind-action",
        "purl": "pkg:github/helm/kind-action@v1.15.1",
        "version": "v1.15.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-links-cron.yaml",
        "name": "lycheeverse/lychee-action",
        "purl": "pkg:github/lycheeverse/lychee-action@v2.9.0",
        "version": "v2.9.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/lint-helm.yaml",
        "name": "marocchino/sticky-pull-request-comment",
        "purl": "pkg:github/marocchino/sticky-pull-request-comment@v3.0.5",
        "version": "v3.0.5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/lint-helm.yaml",
        "name": "mathiasvr/command-output",
        "purl": "pkg:github/mathiasvr/command-output@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/tetragon-rthook-pr.yaml",
        "name": "medyagh/setup-minikube",
        "purl": "pkg:github/medyagh/setup-minikube@v0.0.21",
        "version": "v0.0.21"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/windows-build-smoke-test.yml",
        "name": "microsoft/setup-msbuild",
        "purl": "pkg:github/microsoft/setup-msbuild@v3.0.0",
        "version": "v3.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/gotests.yml",
        "name": "mtardy/setup-bpftool",
        "purl": "pkg:github/mtardy/setup-bpftool@v1.0.5",
        "version": "v1.0.5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/veristat-compare.yaml",
        "name": "mtardy/veristat-action",
        "purl": "pkg:github/mtardy/veristat-action@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-links-pr.yaml",
        "name": "nick-fields/retry",
        "purl": "pkg:github/nick-fields/retry@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-links-pr.yaml",
        "name": "peaceiris/actions-hugo",
        "purl": "pkg:github/peaceiris/actions-hugo@v3.2.1",
        "version": "v3.2.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-links-cron.yaml",
        "name": "peter-evans/close-issue",
        "purl": "pkg:github/peter-evans/close-issue@v3.0.2",
        "version": "v3.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-links-cron.yaml",
        "name": "peter-evans/create-issue-from-file",
        "purl": "pkg:github/peter-evans/create-issue-from-file@v6.0.0",
        "version": "v6.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/renovate.yaml",
        "name": "renovatebot/github-action",
        "purl": "pkg:github/renovatebot/github-action@v46.3.8",
        "version": "v46.3.8"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-clang-image.yaml",
        "name": "sigstore/cosign-installer",
        "purl": "pkg:github/sigstore/cosign-installer@v3.1.2",
        "version": "v3.1.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/build-images-releases.yml",
        "name": "softprops/action-gh-release",
        "purl": "pkg:github/softprops/action-gh-release@v3.0.3",
        "version": "v3.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "cel.dev/cel-go",
        "purl": "pkg:golang/cel.dev/cel-go@v0.33.1",
        "version": "v0.33.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "cel.dev/expr",
        "purl": "pkg:golang/cel.dev/expr@v0.25.3",
        "version": "v0.25.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "dario.cat/mergo",
        "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/alecthomas/kong",
        "purl": "pkg:golang/github.com/alecthomas/kong@v1.16.1",
        "version": "v1.16.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/antlr4-go/antlr/v4",
        "purl": "pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.1",
        "version": "v4.13.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/go-ansiterm",
        "purl": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
        "version": "v0.0.0-20250102033503-faa5f7b0171c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/beorn7/perks",
        "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/blang/semver/v4",
        "purl": "pkg:golang/github.com/blang/semver/v4@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/BurntSushi/toml",
        "purl": "pkg:golang/github.com/BurntSushi/toml@v1.5.0",
        "version": "v1.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cespare/xxhash/v2",
        "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cilium/ebpf",
        "purl": "pkg:golang/github.com/cilium/ebpf@v0.22.1-0.20260708150823-a5b2e206f9ed",
        "version": "v0.22.1-0.20260708150823-a5b2e206f9ed"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cilium/little-vm-helper",
        "purl": "pkg:golang/github.com/cilium/little-vm-helper@v0.0.33",
        "version": "v0.0.33"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/cilium/lumberjack/v2",
        "purl": "pkg:golang/github.com/cilium/lumberjack/v2@v2.4.2",
        "version": "v2.4.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "github.com/cilium/tetragon",
        "purl": "pkg:golang/github.com/cilium/tetragon",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/cilium/tetragon/api",
        "purl": "pkg:golang/github.com/cilium/tetragon/api",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "github.com/cilium/tetragon/pkg/k8s",
        "purl": "pkg:golang/github.com/cilium/tetragon/pkg/k8s",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/containerd/containerd/v2",
        "purl": "pkg:golang/github.com/containerd/containerd/v2@v2.4.2",
        "version": "v2.4.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/containerd/errdefs",
        "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs/pkg",
        "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/containerd/log",
        "purl": "pkg:golang/github.com/containerd/log@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/containerd/nri",
        "purl": "pkg:golang/github.com/containerd/nri@v0.12.5",
        "version": "v0.12.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/containerd/plugin",
        "purl": "pkg:golang/github.com/containerd/plugin@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/containerd/ttrpc",
        "purl": "pkg:golang/github.com/containerd/ttrpc@v1.2.9",
        "version": "v1.2.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/coreos/go-systemd/v22",
        "purl": "pkg:golang/github.com/coreos/go-systemd/v22@v22.7.0",
        "version": "v22.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cpuguy83/go-md2man/v2",
        "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.6",
        "version": "v2.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/cyphar/filepath-securejoin",
        "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/davecgh/go-spew",
        "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "version": "v1.1.2-0.20180830191138-d8f796af33cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/distribution/reference",
        "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/docker",
        "purl": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
        "version": "v28.5.2+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-connections",
        "purl": "pkg:golang/github.com/docker/go-connections@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-units",
        "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emicklei/go-restful/v3",
        "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
        "version": "v3.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/evanphx/json-patch",
        "purl": "pkg:golang/github.com/evanphx/json-patch@v5.9.0%2Bincompatible",
        "version": "v5.9.0+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/evanphx/json-patch/v5",
        "purl": "pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11",
        "version": "v5.9.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fatih/color",
        "purl": "pkg:golang/github.com/fatih/color@v1.19.0",
        "version": "v1.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/felixge/httpsnoop",
        "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fsnotify/fsnotify",
        "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1",
        "version": "v1.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fxamacker/cbor/v2",
        "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1",
        "version": "v2.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "github.com/go-logr/logr",
        "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "version": "v1.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/logr",
        "purl": "pkg:golang/github.com/go-logr/logr@v1.4.4",
        "version": "v1.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/stdr",
        "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonpointer",
        "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonreference",
        "purl": "pkg:golang/github.com/go-openapi/jsonreference@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag",
        "purl": "pkg:golang/github.com/go-openapi/swag@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/cmdutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/conv",
        "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/fileutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/jsonutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/loading",
        "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/mangling",
        "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/netutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/pools",
        "purl": "pkg:golang/github.com/go-openapi/swag/pools@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/stringutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/typeutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/yamlutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.27.1",
        "version": "v0.27.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-viper/mapstructure/v2",
        "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "version": "v2.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "github.com/gobuffalo/flect",
        "purl": "pkg:golang/github.com/gobuffalo/flect@v1.0.3",
        "version": "v1.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/godbus/dbus/v5",
        "purl": "pkg:golang/github.com/godbus/dbus/v5@v5.1.1-0.20230522191255-76236955d466",
        "version": "v5.1.1-0.20230522191255-76236955d466"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/cel-go",
        "purl": "pkg:golang/github.com/google/cel-go@v0.30.0",
        "version": "v0.30.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/gnostic-models",
        "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.1",
        "version": "v0.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "github.com/google/go-cmp",
        "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/gops",
        "purl": "pkg:golang/github.com/google/gops@v0.3.29",
        "version": "v0.3.29"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/uuid",
        "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gorilla/websocket",
        "purl": "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674",
        "version": "v1.5.4-0.20250319132907-e064f32e3674"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus",
        "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/grpc-ecosystem/go-grpc-middleware/v2",
        "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware/v2@v2.3.3",
        "version": "v2.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/golang-lru/v2",
        "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "version": "v2.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/inconshreveable/mousetrap",
        "purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/isovalent/metricstool",
        "purl": "pkg:golang/github.com/isovalent/metricstool@v0.1.4",
        "version": "v0.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/json-iterator/go",
        "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
        "version": "v1.1.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kballard/go-shellquote",
        "purl": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51",
        "version": "v0.0.0-20180428030007-95032a82bc51"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/knqyf263/go-plugin",
        "purl": "pkg:golang/github.com/knqyf263/go-plugin@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kylelemons/godebug",
        "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-colorable",
        "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
        "version": "v0.1.14"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-isatty",
        "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
        "version": "v0.0.20"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mennanov/fieldmask-utils",
        "purl": "pkg:golang/github.com/mennanov/fieldmask-utils@v1.1.6",
        "version": "v1.1.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Microsoft/go-winio",
        "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/docker-image-spec",
        "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/spdystream",
        "purl": "pkg:golang/github.com/moby/spdystream@v0.5.1",
        "version": "v0.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/moby/sys/mountinfo",
        "purl": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2",
        "version": "v0.7.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/sequential",
        "purl": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/moby/sys/userns",
        "purl": "pkg:golang/github.com/moby/sys/userns@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/term",
        "purl": "pkg:golang/github.com/moby/term@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/concurrent",
        "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
        "version": "v0.0.0-20180306012644-bacd9c7ef1dd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/reflect2",
        "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
        "version": "v1.0.3-0.20250322232337-35a7c28c31ee"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/morikuni/aec",
        "purl": "pkg:golang/github.com/morikuni/aec@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/munnerz/goautoneg",
        "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
        "version": "v0.0.0-20191010083416-a7dc8b61c822"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/opencontainers/cgroups",
        "purl": "pkg:golang/github.com/opencontainers/cgroups@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/opencontainers/go-digest",
        "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/opencontainers/image-spec",
        "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/opencontainers/runtime-spec",
        "purl": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pandatix/go-abnf",
        "purl": "pkg:golang/github.com/pandatix/go-abnf@v0.5.3",
        "version": "v0.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/pelletier/go-toml",
        "purl": "pkg:golang/github.com/pelletier/go-toml@v1.9.5",
        "version": "v1.9.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pelletier/go-toml/v2",
        "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
        "version": "v2.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/pelletier/go-toml/v2",
        "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3",
        "version": "v2.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/errors",
        "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pmezard/go-difflib",
        "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
        "version": "v1.0.1-0.20181226105442-5d4384ee4fb2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/client_golang",
        "purl": "pkg:golang/github.com/prometheus/client_golang@v1.25.0",
        "version": "v1.25.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/client_model",
        "purl": "pkg:golang/github.com/prometheus/client_model@v0.6.3",
        "version": "v0.6.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/common",
        "purl": "pkg:golang/github.com/prometheus/common@v0.73.1",
        "version": "v0.73.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/procfs",
        "purl": "pkg:golang/github.com/prometheus/procfs@v0.23.0",
        "version": "v0.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/russross/blackfriday/v2",
        "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0",
        "version": "v2.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sagikazarmark/locafero",
        "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3",
        "version": "v6.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/sirupsen/logrus",
        "purl": "pkg:golang/github.com/sirupsen/logrus@v1.10.2",
        "version": "v1.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sourcegraph/conc",
        "purl": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8",
        "version": "v0.3.1-0.20240121214520-5f936abd7ae8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/afero",
        "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/cast",
        "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
        "version": "v1.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/cobra",
        "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "version": "v1.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/pflag",
        "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "version": "v1.0.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/viper",
        "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
        "version": "v1.21.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sryoya/protorand",
        "purl": "pkg:golang/github.com/sryoya/protorand@v0.0.0-20250114120907-8c1a8e3138f2",
        "version": "v0.0.0-20250114120907-8c1a8e3138f2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "github.com/stretchr/testify",
        "purl": "pkg:golang/github.com/stretchr/testify@v1.12.1",
        "version": "v1.12.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/subosito/gotenv",
        "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "github.com/tetratelabs/wazero",
        "purl": "pkg:golang/github.com/tetratelabs/wazero@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vishvananda/netlink",
        "purl": "pkg:golang/github.com/vishvananda/netlink@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vishvananda/netns",
        "purl": "pkg:golang/github.com/vishvananda/netns@v0.0.5",
        "version": "v0.0.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vladimirvivien/gexe",
        "purl": "pkg:golang/github.com/vladimirvivien/gexe@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/x448/float16",
        "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
        "version": "v0.8.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/auto/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0",
        "version": "v0.69.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel",
        "purl": "pkg:golang/go.opentelemetry.io/otel@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/trace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "go.yaml.in/yaml/v2",
        "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
        "version": "v2.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "go.yaml.in/yaml/v3",
        "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5",
        "version": "v3.0.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "golang.org/x/exp",
        "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20250103183323-7d7fa50e5329",
        "version": "v0.0.0-20250103183323-7d7fa50e5329"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/exp",
        "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f",
        "version": "v0.0.0-20260410095643-746e56fc9e2f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.41.0",
        "version": "v0.41.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "tools/go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "golang.org/x/net",
        "purl": "pkg:golang/golang.org/x/net@v0.62.0",
        "version": "v0.62.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "golang.org/x/oauth2",
        "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "version": "v0.36.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/oauth2",
        "purl": "pkg:golang/golang.org/x/oauth2@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "go.mod",
        "name": "golang.org/x/sync",
        "purl": "pkg:golang/golang.org/x/sync@v0.24.0",
        "version": "v0.24.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "golang.org/x/sys",
        "purl": "pkg:golang/golang.org/x/sys@v0.49.0",
        "version": "v0.49.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "tools/go.mod",
        "name": "golang.org/x/telemetry",
        "purl": "pkg:golang/golang.org/x/telemetry@v0.0.0-20261009151841-97e8ea77aa2a",
        "version": "v0.0.0-20261009151841-97e8ea77aa2a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/term",
        "purl": "pkg:golang/golang.org/x/term@v0.47.0",
        "version": "v0.47.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "golang.org/x/text",
        "purl": "pkg:golang/golang.org/x/text@v0.43.0",
        "version": "v0.43.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "golang.org/x/time",
        "purl": "pkg:golang/golang.org/x/time@v0.15.0",
        "version": "v0.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/time",
        "purl": "pkg:golang/golang.org/x/time@v0.16.0",
        "version": "v0.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.51.0",
        "version": "v0.51.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "tools/go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.52.0",
        "version": "v0.52.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gomodules.xyz/jsonpatch/v2",
        "purl": "pkg:golang/gomodules.xyz/jsonpatch/v2@v2.4.0",
        "version": "v2.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto",
        "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20241118233622-e639e219e697",
        "version": "v0.0.0-20241118233622-e639e219e697"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/api",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260817212433-ac3dfec99bb1",
        "version": "v0.0.0-20260817212433-ac3dfec99bb1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "google.golang.org/genproto/googleapis/api",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260825221802-da73d73af1c5",
        "version": "v0.0.0-20260825221802-da73d73af1c5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260817212433-ac3dfec99bb1",
        "version": "v0.0.0-20260817212433-ac3dfec99bb1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "contrib/tetragon-rthooks/go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260825221802-da73d73af1c5",
        "version": "v0.0.0-20260825221802-da73d73af1c5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "google.golang.org/grpc",
        "purl": "pkg:golang/google.golang.org/grpc@v1.85.0",
        "version": "v1.85.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "google.golang.org/protobuf",
        "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12",
        "version": "v1.36.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "google.golang.org/protobuf",
        "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af",
        "version": "v1.36.12-0.20260120151049-f2248ac996af"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/evanphx/json-patch.v4",
        "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
        "version": "v4.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/inf.v0",
        "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/api",
        "purl": "pkg:golang/k8s.io/api@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apiextensions-apiserver",
        "purl": "pkg:golang/k8s.io/apiextensions-apiserver@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apimachinery",
        "purl": "pkg:golang/k8s.io/apimachinery@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apiserver",
        "purl": "pkg:golang/k8s.io/apiserver@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/client-go",
        "purl": "pkg:golang/k8s.io/client-go@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "k8s.io/code-generator",
        "purl": "pkg:golang/k8s.io/code-generator@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/component-base",
        "purl": "pkg:golang/k8s.io/component-base@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/cri-api",
        "purl": "pkg:golang/k8s.io/cri-api@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "k8s.io/gengo/v2",
        "purl": "pkg:golang/k8s.io/gengo/v2@v2.0.0-20260408192533-25e2208e0dc3",
        "version": "v2.0.0-20260408192533-25e2208e0dc3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/klog/v2",
        "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "version": "v2.140.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/kube-openapi",
        "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260721132016-d427ff9ee9ad",
        "version": "v0.0.0-20260721132016-d427ff9ee9ad"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/streaming",
        "purl": "pkg:golang/k8s.io/streaming@v0.37.2",
        "version": "v0.37.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/utils",
        "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260626114624-be93311217bd",
        "version": "v0.0.0-20260626114624-be93311217bd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/controller-runtime",
        "purl": "pkg:golang/sigs.k8s.io/controller-runtime@v0.25.2",
        "version": "v0.25.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "pkg/k8s/go.mod",
        "name": "sigs.k8s.io/controller-tools",
        "purl": "pkg:golang/sigs.k8s.io/controller-tools@v0.23.0",
        "version": "v0.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/e2e-framework",
        "purl": "pkg:golang/sigs.k8s.io/e2e-framework@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/json",
        "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
        "version": "v0.0.0-20250730193827-2d320260d730"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/randfill",
        "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/structured-merge-diff/v6",
        "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.4.2",
        "version": "v6.4.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "api/go.mod",
        "name": "sigs.k8s.io/yaml",
        "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/tarball-tests.yaml",
        "name": "./.github/actions/build-tarball",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/windows-build-smoke-test.yml",
        "name": "./.github/actions/download-artifact",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/windows-build-smoke-test.yml",
        "name": "./.github/actions/download-file",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/windows-build-smoke-test.yml",
        "name": "./.github/actions/install-msi",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/ariane-ci.yaml",
        "name": "./.github/workflows/common-post-jobs.yml",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/tarball-tests.yaml",
        "name": "./.github/workflows/vmpolicytests.yaml",
        "purl": "",
        "version": "UNKNOWN"
      }
    ],
    "description": "Observe and enforce runtime security with eBPF",
    "errors": [],
    "go_binary": {
      "asset": "tetra-linux-amd64.tar.gz",
      "binary": "tetra",
      "db": "https://vuln.go.dev",
      "db_last_modified": "2026-10-27T21:16:18Z",
      "findings": [],
      "go_version": "go1.27.3",
      "main_module": "github.com/cilium/tetragon"
    },
    "id": "cilium__tetragon",
    "manifests": [
      ".github/actions/build-tarball/action.yml",
      ".github/actions/download-artifact/action.yml",
      ".github/actions/download-file/action.yml",
      ".github/actions/extract-msi/action.yml",
      ".github/actions/extract-zip/action.yml",
      ".github/actions/install-msi/action.yml",
      ".github/workflows/ariane-ci.yaml",
      ".github/workflows/bpf-unit-tests.yml",
      ".github/workflows/build-clang-image.yaml",
      ".github/workflows/build-deploy-docs.yaml",
      ".github/workflows/build-images-ci.yml",
      ".github/workflows/build-images-releases.yml",
      ".github/workflows/build-rthooks-images-releases.yml",
      ".github/workflows/check-links-cron.yaml",
      ".github/workflows/check-links-pr.yaml",
      ".github/workflows/checkpatch.yaml",
      ".github/workflows/common-post-jobs.yml",
      ".github/workflows/digestcheck.yaml",
      ".github/workflows/generated-docs.yaml",
      ".github/workflows/gotests.yml",
      ".github/workflows/integration-test.yaml",
      ".github/workflows/lint-codeql.yml",
      ".github/workflows/lint-helm.yaml",
      ".github/workflows/lint-k8s.yaml",
      ".github/workflows/lint-proto.yaml",
      ".github/workflows/pr-validation.yaml",
      ".github/workflows/renovate-config-validator.yaml",
      ".github/workflows/renovate.yaml",
      ".github/workflows/run-e2e-tests.yaml",
      ".github/workflows/static-checks.yaml",
      ".github/workflows/tarball-tests.yaml",
      ".github/workflows/tetragon-rthook-pr.yaml",
      ".github/workflows/veristat-compare.yaml",
      ".github/workflows/veristat.yaml",
      ".github/workflows/vmpolicytests.yaml",
      ".github/workflows/vmtests.yml",
      ".github/workflows/windows-build-smoke-test.yml",
      "api/go.mod",
      "api/go.sum",
      "contrib/tetragon-rthooks/go.mod",
      "contrib/tetragon-rthooks/go.sum",
      "go.mod",
      "go.sum",
      "pkg/k8s/go.mod",
      "pkg/k8s/go.sum",
      "tools/go.mod",
      "tools/go.sum"
    ],
    "name": "tetragon",
    "osv": {
      "advisories": 5,
      "available": true,
      "confirmed": 5,
      "osv_only": [],
      "warning": null
    },
    "ref": "v1.8.0",
    "ref_kind": "release",
    "release_integrity": {
      "asset": "tetra-linux-amd64.tar.gz",
      "assets": 16,
      "build_provenance": null,
      "checksums_published": false,
      "digest_matches_github": true,
      "immutable_release": null,
      "methods": [],
      "provenance_published": false,
      "sbom_published": false,
      "signature": null,
      "signatures_published": false,
      "signer": null,
      "verdict": "none"
    },
    "released_at": "2026-10-30T17:18:17Z",
    "repository": "cilium/tetragon",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [
        "0 version changes among 484 shared packages \u2014 no actual upgrades",
        "Core system packages stable: golang (306), github (130), file (38) unchanged"
      ],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:07:20+00:00",
    "scorecard": null,
    "scorecard_note": "the project is not in the OpenSSF public dataset; the Scorecard CLI fallback was skipped because this shard's weekly budget was used",
    "vulnerabilities": [
      {
        "aliases": [
          "CVE-2026-42306"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-42306",
          "percentile": 0.01018,
          "score": 0.00104
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-rg2x-37c3-w2rh",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Docker: Race condition in docker cp allows bind mount redirection to host path",
        "url": "https://github.com/advisories/GHSA-rg2x-37c3-w2rh",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-41567"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-41567",
          "percentile": 0.04603,
          "score": 0.00155
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-x86f-5xw2-fm2r",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Docker: `PUT /containers/{id}/archive` executes container binary on the host",
        "url": "https://github.com/advisories/GHSA-x86f-5xw2-fm2r",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-34040",
          "GHSA-x744-4wpc-v9h2"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-34040",
          "percentile": 0.95361,
          "score": 0.0927
        },
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-4887",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker",
        "url": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-33997"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-33997",
          "percentile": 0.34433,
          "score": 0.00402
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-pxq6-2prw-chj9",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "Medium",
        "summary": "Moby has an Off-by-one error in its plugin privilege validation",
        "url": "https://github.com/advisories/GHSA-pxq6-2prw-chj9",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-41568"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-41568",
          "percentile": 0.01188,
          "score": 0.00108
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-vp62-88p7-qqf5",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "Medium",
        "summary": "Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap",
        "url": "https://github.com/advisories/GHSA-vp62-88p7-qqf5",
        "version": "v28.5.2+incompatible"
      }
    ],
    "workflow_audit": {
      "files": 37,
      "findings": [
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-artifact/action.yml",
          "line": 35,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-artifact/action.yml",
          "line": 35,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-artifact/action.yml",
          "line": 35,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-artifact/action.yml",
          "line": 35,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-artifact/action.yml",
          "line": 35,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-artifact/action.yml",
          "line": 35,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-file/action.yml",
          "line": 25,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-file/action.yml",
          "line": 25,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/download-file/action.yml",
          "line": 57,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/extract-msi/action.yml",
          "line": 30,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/extract-msi/action.yml",
          "line": 49,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/extract-msi/action.yml",
          "line": 49,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/extract-msi/action.yml",
          "line": 49,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/extract-msi/action.yml",
          "line": 49,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/extract-zip/action.yml",
          "line": 16,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/extract-zip/action.yml",
          "line": 35,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/extract-zip/action.yml",
          "line": 35,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/install-msi/action.yml",
          "line": 26,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/install-msi/action.yml",
          "line": 45,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/install-msi/action.yml",
          "line": 45,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/install-msi/action.yml",
          "line": 45,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/build-images-releases.yml",
          "line": 13,
          "note": "contents: write is overly broad at the workflow level",
          "rule": "excessive-permissions",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/build-rthooks-images-releases.yml",
          "line": 12,
          "note": "contents: write is overly broad at the workflow level",
          "rule": "excessive-permissions",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/check-links-pr.yaml",
          "line": 31,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/integration-test.yaml",
          "line": 58,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/lint-proto.yaml",
          "line": 26,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/lint-proto.yaml",
          "line": 26,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/run-e2e-tests.yaml",
          "line": 75,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/static-checks.yaml",
          "line": 38,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/tetragon-rthook-pr.yaml",
          "line": 70,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/vmpolicytests.yaml",
          "line": 113,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/vmpolicytests.yaml",
          "line": 125,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/vmpolicytests.yaml",
          "line": 142,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/ariane-ci.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/ariane-ci.yaml",
          "line": 40,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/bpf-unit-tests.yml",
          "line": 14,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/build-clang-image.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/build-clang-image.yaml",
          "line": 16,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/build-clang-image.yaml",
          "line": 212,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/build-deploy-docs.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/build-deploy-docs.yaml",
          "line": 21,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/checkpatch.yaml",
          "line": 6,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/digestcheck.yaml",
          "line": 12,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/generated-docs.yaml",
          "line": 34,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/gotests.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/gotests.yml",
          "line": 12,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/gotests.yml",
          "line": 120,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/gotests.yml",
          "line": 172,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/gotests.yml",
          "line": 192,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/gotests.yml",
          "line": 215,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/lint-codeql.yml",
          "line": 17,
          "note": "uses read-all permissions",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/lint-k8s.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/lint-k8s.yaml",
          "line": 16,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/lint-k8s.yaml",
          "line": 41,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/lint-proto.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/lint-proto.yaml",
          "line": 20,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/lint-proto.yaml",
          "line": 37,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/pr-validation.yaml",
          "line": 22,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/renovate-config-validator.yaml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/renovate.yaml",
          "line": 19,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tarball-tests.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tarball-tests.yaml",
          "line": 15,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tarball-tests.yaml",
          "line": 51,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tarball-tests.yaml",
          "line": 209,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/veristat-compare.yaml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/veristat.yaml",
          "line": 14,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/vmtests.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/vmtests.yml",
          "line": 13,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/vmtests.yml",
          "line": 64,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/vmtests.yml",
          "line": 291,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 149,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 192,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/ariane-ci.yaml",
          "line": 49,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/build-images-ci.yml",
          "line": 311,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/integration-test.yaml",
          "line": 95,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/run-e2e-tests.yaml",
          "line": 170,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/tarball-tests.yaml",
          "line": 28,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/tarball-tests.yaml",
          "line": 209,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/tetragon-rthook-pr.yaml",
          "line": 167,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 43,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "usage of GitHub Actions misfeatures",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 73,
          "note": "Windows CMD shell limits analysis",
          "rule": "misfeature",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#misfeature"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 122,
          "note": "this step",
          "rule": "template-injection",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 122,
          "note": "this step",
          "rule": "template-injection",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 211,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 218,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 228,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/windows-build-smoke-test.yml",
          "line": 235,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "action functionality is already included by the runner",
          "file": ".github/workflows/build-images-releases.yml",
          "line": 288,
          "note": "this step",
          "rule": "superfluous-actions",
          "severity": "Informational",
          "url": "https://docs.zizmor.sh/audits/#superfluous-actions"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}