{
"history": [
{
"added": 0,
"commit": "0e7c41b936218bd2401ab0f891c93bec10e2e8e4",
"date": "2026-11-01",
"dependencies": 651,
"errors": [],
"fixable": 19,
"go_version": null,
"in_binary": null,
"new_vulnerabilities": 0,
"osv_confirmed": 24,
"osv_only": 100,
"ref": "v2.2.1",
"release_changed": false,
"release_integrity": "no-assets",
"removed": 0,
"resolved_vulnerabilities": 0,
"scorecard": 6.5,
"upgraded": 0,
"vulnerabilities": {
"Critical": 0,
"High": 12,
"Low": 0,
"Medium": 9,
"Negligible": 0,
"Unknown": 4
},
"workflow": {
"High": 205,
"Low": 100,
"Medium": 39,
"files": 51
}
},
{
"added": 0,
"commit": "0e7c41b936218bd2401ab0f891c93bec10e2e8e4",
"date": "2026-11-02",
"dependencies": 650,
"errors": [],
"fixable": 19,
"go_version": null,
"in_binary": null,
"kev": 0,
"kev_new": 0,
"new_vulnerabilities": 0,
"osv_confirmed": 24,
"osv_only": 116,
"ref": "v2.2.1",
"release_changed": false,
"release_integrity": "no-assets",
"removed": 1,
"resolved_vulnerabilities": 0,
"scorecard": 6.5,
"scorecard_date": "2026-10-19",
"scorecard_note": null,
"scorecard_source": "openssf-api",
"upgraded": 0,
"vulnerabilities": {
"Critical": 0,
"High": 12,
"Low": 0,
"Medium": 9,
"Negligible": 0,
"Unknown": 4
},
"vulnerable_packages": 8,
"workflow": {
"High": 202,
"Low": 97,
"Medium": 39,
"files": 50
}
}
],
"latest": {
"archived": false,
"category": "Secret Management",
"changes": {
"added": [],
"any": true,
"baseline": false,
"integrity_drift": 0,
"license_changes": [],
"new_vulnerabilities": [],
"previous_ref": "v2.2.1",
"release_changed": false,
"removed": [
"sqlc-dev/setup-sqlc@v5.0.0"
],
"resolved_vulnerabilities": [],
"upgraded": [],
"workflow_new": 0,
"workflow_resolved": 2
},
"commit": "0e7c41b936218bd2401ab0f891c93bec10e2e8e4",
"compliance": {
"overall_score": 55,
"standards": {
"bsi_tr03183": {
"failed_checks": [
"Component Creator",
"Distribution Licences",
"SHA-512 Hash",
"Dependency Relationship",
"SBOM Creator Contact"
],
"passed": 4,
"score": 44,
"total": 9
},
"cisa": {
"failed_checks": [
"Software Producer",
"Dependency Relationship",
"License Information",
"Component Hash",
"SBOM Author"
],
"passed": 5,
"score": 50,
"total": 10
},
"ntia": {
"failed_checks": [
"Supplier Name",
"Dependency Relationship"
],
"passed": 5,
"score": 71,
"total": 7
}
}
},
"components": [
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/remove-labels.yml",
"name": "actions-ecosystem/action-remove-labels",
"purl": "pkg:github/actions-ecosystem/action-remove-labels@v1.3.0",
"version": "v1.3.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/oss.yml",
"name": "actions/add-to-project",
"purl": "pkg:github/actions/add-to-project@v2.0.0",
"version": "v2.0.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/git-heatmap.yml",
"name": "actions/cache",
"purl": "pkg:github/actions/cache@v5.0.5",
"version": "v5.0.5"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/build-ui/action.yml",
"name": "actions/cache",
"purl": "pkg:github/actions/cache@v6.1.0",
"version": "v6.1.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/install-tools/action.yml",
"name": "actions/cache/restore",
"purl": "pkg:github/actions/cache@v6.1.0#restore",
"version": "v6.1.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/install-tools/action.yml",
"name": "actions/cache/save",
"purl": "pkg:github/actions/cache@v6.1.0#save",
"version": "v6.1.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/git-heatmap.yml",
"name": "actions/checkout",
"purl": "pkg:github/actions/checkout@v7.0.0",
"version": "v7.0.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/checkout/action.yml",
"name": "actions/checkout",
"purl": "pkg:github/actions/checkout@v7.0.1",
"version": "v7.0.1"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "actions/download-artifact",
"purl": "pkg:github/actions/download-artifact@v8.0.1",
"version": "v8.0.1"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/test-go.yml",
"name": "actions/github-script",
"purl": "pkg:github/actions/github-script@v9.0.0",
"version": "v9.0.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/set-up-go/action.yml",
"name": "actions/setup-go",
"purl": "pkg:github/actions/setup-go@v7.0.0",
"version": "v7.0.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/build-ui/action.yml",
"name": "actions/setup-node",
"purl": "pkg:github/actions/setup-node@v7.0.0",
"version": "v7.0.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/security-scan.yml",
"name": "actions/setup-python",
"purl": "pkg:github/actions/setup-python@v7.0.0",
"version": "v7.0.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/build-vault/action.yml",
"name": "actions/upload-artifact",
"purl": "pkg:github/actions/upload-artifact@v7.0.1",
"version": "v7.0.1"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/test-ci-bootstrap.yml",
"name": "aws-actions/configure-aws-credentials",
"purl": "pkg:github/aws-actions/configure-aws-credentials@v6.2.4",
"version": "v6.2.4"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/test-enos-scenario-ui.yml",
"name": "browser-actions/setup-chrome",
"purl": "pkg:github/browser-actions/setup-chrome@v2.2.0",
"version": "v2.2.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/build-vault/action.yml",
"name": "docker/build-push-action",
"purl": "pkg:github/docker/build-push-action@v7.3.0",
"version": "v7.3.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/build-vault/action.yml",
"name": "docker/setup-buildx-action",
"purl": "pkg:github/docker/setup-buildx-action@v4.3.0",
"version": "v4.3.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/oss.yml",
"name": "dorny/paths-filter",
"purl": "pkg:github/dorny/paths-filter@v4.0.3",
"version": "v4.0.3"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/security-scan.yml",
"name": "github/codeql-action/upload-sarif",
"purl": "pkg:github/github/codeql-action@3096afedf9873361b2b2f65e1445b13272c83eb8#upload-sarif",
"version": "3096afedf9873361b2b2f65e1445b13272c83eb8"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "hashicorp-forge/actions-pao-tool/collect",
"purl": "pkg:github/hashicorp-forge/actions-pao-tool@v1.1.0#collect",
"version": "v1.1.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/build-vault/action.yml",
"name": "hashicorp-forge/actions-pao-tool/select-license",
"purl": "pkg:github/hashicorp-forge/actions-pao-tool@v1.1.0#select-license",
"version": "v1.1.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/run-enos-scenario/action.yml",
"name": "hashicorp/action-setup-enos",
"purl": "pkg:github/hashicorp/action-setup-enos@v1.54",
"version": "v1.54"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/containerize/action.yml",
"name": "hashicorp/actions-docker-build",
"purl": "pkg:github/hashicorp/actions-docker-build@4e0c63aad578fbc5d9dc5a88d108b8fc6253f769",
"version": "4e0c63aad578fbc5d9dc5a88d108b8fc6253f769"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "hashicorp/actions-generate-metadata",
"purl": "pkg:github/hashicorp/actions-generate-metadata@v1.1.4",
"version": "v1.1.4"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/build-vault/action.yml",
"name": "hashicorp/actions-packaging-linux",
"purl": "pkg:github/hashicorp/actions-packaging-linux@e6d9687e13bd55b1b3e3e5adb2e4d52789299025",
"version": "e6d9687e13bd55b1b3e3e5adb2e4d52789299025"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/enos-release-testing-oss.yml",
"name": "hashicorp/actions-persist-metadata",
"purl": "pkg:github/hashicorp/actions-persist-metadata@v3",
"version": "v3"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "hashicorp/actions-set-product-version",
"purl": "pkg:github/hashicorp/actions-set-product-version@v2.0.2",
"version": "v2.0.2"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/test-run-enos-scenario-matrix.yml",
"name": "hashicorp/actions-slack-status",
"purl": "pkg:github/hashicorp/actions-slack-status@v2.0.1",
"version": "v2.0.1"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/mend-pr-scan.yml",
"name": "hashicorp/oss-core-library-dashboard-metrics/mend-security/actions/mend-pr-scan",
"purl": "pkg:github/hashicorp/oss-core-library-dashboard-metrics@main#mend-security/actions/mend-pr-scan",
"version": "main"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/copywrite.yml",
"name": "hashicorp/setup-copywrite",
"purl": "pkg:github/hashicorp/setup-copywrite@v1.1.3",
"version": "v1.1.3"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/run-enos-scenario/action.yml",
"name": "hashicorp/setup-terraform",
"purl": "pkg:github/hashicorp/setup-terraform@v4.0.1",
"version": "v4.0.1"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/benchmark-prevent-performance-degradations.yml",
"name": "hashicorp/vault-action",
"purl": "pkg:github/hashicorp/vault-action@v4.0.0",
"version": "v4.0.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/ui-client-update.yml",
"name": "peter-evans/create-pull-request",
"purl": "pkg:github/peter-evans/create-pull-request@v8.1.1",
"version": "v8.1.1"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/copy-external-contributor-pull-request-ce.yml",
"name": "peter-evans/repository-dispatch",
"purl": "pkg:github/peter-evans/repository-dispatch@v4.0.1",
"version": "v4.0.1"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/test-enos-scenario-ui.yml",
"name": "pnpm/action-setup",
"purl": "pkg:github/pnpm/action-setup@v6.0.10",
"version": "v6.0.10"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/actions/build-ui/action.yml",
"name": "pnpm/action-setup",
"purl": "pkg:github/pnpm/action-setup@v6.0.9",
"version": "v6.0.9"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "slackapi/slack-github-action",
"purl": "pkg:github/slackapi/slack-github-action@v4.0.0",
"version": "v4.0.0"
},
{
"ecosystem": "github",
"licenses": [],
"location": ".github/workflows/test-ui.yml",
"name": "test-summary/action",
"purl": "pkg:github/test-summary/action@v2.6",
"version": "v2.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "cel.dev/expr",
"purl": "pkg:golang/cel.dev/expr@v0.25.2",
"version": "v0.25.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "cloud.google.com/go",
"purl": "pkg:golang/cloud.google.com/go@v0.123.0",
"version": "v0.123.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "cloud.google.com/go/auth",
"purl": "pkg:golang/cloud.google.com/go/auth@v0.23.3",
"version": "v0.23.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "cloud.google.com/go/auth/oauth2adapt",
"purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
"version": "v0.2.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "cloud.google.com/go/cloudsqlconn",
"purl": "pkg:golang/cloud.google.com/go/cloudsqlconn@v1.21.0",
"version": "v1.21.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "cloud.google.com/go/compute/metadata",
"purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.1",
"version": "v0.9.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "cloud.google.com/go/iam",
"purl": "pkg:golang/cloud.google.com/go/iam@v1.12.0",
"version": "v1.12.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "cloud.google.com/go/kms",
"purl": "pkg:golang/cloud.google.com/go/kms@v1.32.0",
"version": "v1.32.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "cloud.google.com/go/longrunning",
"purl": "pkg:golang/cloud.google.com/go/longrunning@v1.2.0",
"version": "v1.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "cloud.google.com/go/monitoring",
"purl": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0",
"version": "v1.30.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "cloud.google.com/go/spanner",
"purl": "pkg:golang/cloud.google.com/go/spanner@v1.91.0",
"version": "v1.91.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "cloud.google.com/go/storage",
"purl": "pkg:golang/cloud.google.com/go/storage@v1.62.3",
"version": "v1.62.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "dario.cat/mergo",
"purl": "pkg:golang/dario.cat/mergo@v1.0.2",
"version": "v1.0.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "filippo.io/edwards25519",
"purl": "pkg:golang/filippo.io/edwards25519@v1.2.0",
"version": "v1.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/99designs/go-keychain",
"purl": "pkg:golang/github.com/99designs/go-keychain@v0.0.0-20191008050251-8e49817e8af4",
"version": "v0.0.0-20191008050251-8e49817e8af4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aerospike/aerospike-client-go/v8",
"purl": "pkg:golang/github.com/aerospike/aerospike-client-go/v8@v8.5.0",
"version": "v8.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/agext/levenshtein",
"purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3",
"version": "v1.2.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/aliyun/alibaba-cloud-sdk-go",
"purl": "pkg:golang/github.com/aliyun/alibaba-cloud-sdk-go@v1.63.107",
"version": "v1.63.107"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aliyun/aliyun-oss-go-sdk",
"purl": "pkg:golang/github.com/aliyun/aliyun-oss-go-sdk@v0.0.0-20190307165228-86c17b95fcd5",
"version": "v0.0.0-20190307165228-86c17b95fcd5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/andybalholm/brotli",
"purl": "pkg:golang/github.com/andybalholm/brotli@v1.2.0",
"version": "v1.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/andybalholm/cascadia",
"purl": "pkg:golang/github.com/andybalholm/cascadia@v1.3.4",
"version": "v1.3.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/apache/arrow-go/v18",
"purl": "pkg:golang/github.com/apache/arrow-go/v18@v18.4.0",
"version": "v18.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/apache/thrift",
"purl": "pkg:golang/github.com/apache/thrift@v0.24.0",
"version": "v0.24.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/apparentlymart/go-textseg/v15",
"purl": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0",
"version": "v15.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/apparentlymart/go-textseg/v17",
"purl": "pkg:golang/github.com/apparentlymart/go-textseg/v17@v17.0.1",
"version": "v17.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/apple/foundationdb/bindings/go",
"purl": "pkg:golang/github.com/apple/foundationdb/bindings/go@v0.0.0-20190411004307-cd5c9d91fad2",
"version": "v0.0.0-20190411004307-cd5c9d91fad2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/armon/go-metrics",
"purl": "pkg:golang/github.com/armon/go-metrics@v0.4.1",
"version": "v0.4.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/armon/go-radix",
"purl": "pkg:golang/github.com/armon/go-radix@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/asaskevich/govalidator",
"purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
"version": "v0.0.0-20230301143203-a9d515a09cc2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/avast/retry-go/v4",
"purl": "pkg:golang/github.com/avast/retry-go/v4@v4.7.0",
"version": "v4.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.43.6",
"version": "v1.43.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.18",
"version": "v1.7.18"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/config",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.37",
"version": "v1.32.37"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/credentials",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.36",
"version": "v1.19.36"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue@v1.20.51",
"version": "v1.20.51"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.37",
"version": "v1.18.37"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/feature/rds/auth",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/rds/auth@v1.6.4",
"version": "v1.6.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/feature/s3/manager",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.22.28",
"version": "v1.22.28"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.37",
"version": "v1.4.37"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.37",
"version": "v2.7.37"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.38",
"version": "v1.4.38"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/dynamodb",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/dynamodb@v1.60.0",
"version": "v1.60.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/dynamodbstreams",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/dynamodbstreams@v1.35.0",
"version": "v1.35.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/ec2",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.200.0",
"version": "v1.200.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/ecs",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecs@v1.53.8",
"version": "v1.53.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/elasticache",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/elasticache@v1.52.2",
"version": "v1.52.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/iam",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/iam@v1.54.5",
"version": "v1.54.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.17",
"version": "v1.13.17"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.30",
"version": "v1.9.30"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery@v1.12.7",
"version": "v1.12.7"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.37",
"version": "v1.13.37"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.38",
"version": "v1.19.38"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/kms",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.50.5",
"version": "v1.50.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/s3",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.107.2",
"version": "v1.107.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/signin",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.5.6",
"version": "v1.5.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/sso",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.33.6",
"version": "v1.33.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.38.6",
"version": "v1.38.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/aws-sdk-go-v2/service/sts",
"purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.45.6",
"version": "v1.45.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/aws/smithy-go",
"purl": "pkg:golang/github.com/aws/smithy-go@v1.27.8",
"version": "v1.27.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/azure-pipeline-go",
"purl": "pkg:golang/github.com/Azure/azure-pipeline-go@v0.2.3",
"version": "v0.2.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.23.1",
"version": "v1.23.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.13.1",
"version": "v1.13.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0",
"version": "v1.12.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys@v0.10.0",
"version": "v0.10.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal@v0.7.1",
"version": "v0.7.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2@v2.2.0",
"version": "v2.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4@v4.2.1",
"version": "v4.2.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi@v1.3.0",
"version": "v1.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources@v1.2.0",
"version": "v1.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob",
"purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.4.1",
"version": "v1.4.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/azure-storage-blob-go",
"purl": "pkg:golang/github.com/Azure/azure-storage-blob-go@v0.15.0",
"version": "v0.15.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Azure/go-ansiterm",
"purl": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
"version": "v0.0.0-20250102033503-faa5f7b0171c"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/go-autorest",
"purl": "pkg:golang/github.com/Azure/go-autorest@v14.2.0%2Bincompatible",
"version": "v14.2.0+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/go-autorest/autorest",
"purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.30",
"version": "v0.11.30"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/go-autorest/autorest/adal",
"purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.24",
"version": "v0.9.24"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/go-autorest/autorest/date",
"purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.0",
"version": "v0.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/go-autorest/autorest/to",
"purl": "pkg:golang/github.com/Azure/go-autorest/autorest/to@v0.4.1",
"version": "v0.4.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/go-autorest/logger",
"purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.2.1",
"version": "v0.2.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Azure/go-autorest/tracing",
"purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.0",
"version": "v0.6.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/Azure/go-ntlmssp",
"purl": "pkg:golang/github.com/Azure/go-ntlmssp@v0.1.1",
"version": "v0.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/AzureAD/microsoft-authentication-library-for-go",
"purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.6.0",
"version": "v1.6.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/baiyubin/aliyun-sts-go-sdk",
"purl": "pkg:golang/github.com/baiyubin/aliyun-sts-go-sdk@v0.0.0-20180326062324-cfa1a18b161f",
"version": "v0.0.0-20180326062324-cfa1a18b161f"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/benbjohnson/immutable",
"purl": "pkg:golang/github.com/benbjohnson/immutable@v0.4.0",
"version": "v0.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/beorn7/perks",
"purl": "pkg:golang/github.com/beorn7/perks@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/bgentry/speakeasy",
"purl": "pkg:golang/github.com/bgentry/speakeasy@v0.2.0",
"version": "v0.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/boltdb/bolt",
"purl": "pkg:golang/github.com/boltdb/bolt@v1.3.1",
"version": "v1.3.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/boombuler/barcode",
"purl": "pkg:golang/github.com/boombuler/barcode@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "sdk/go.mod",
"name": "github.com/bufbuild/protocompile",
"purl": "pkg:golang/github.com/bufbuild/protocompile@v0.14.2-0.20260716165721-bb5762d29672",
"version": "v0.14.2-0.20260716165721-bb5762d29672"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/BurntSushi/toml",
"purl": "pkg:golang/github.com/BurntSushi/toml@v1.6.0",
"version": "v1.6.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/cenkalti/backoff",
"purl": "pkg:golang/github.com/cenkalti/backoff@v2.2.1%2Bincompatible",
"version": "v2.2.1+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/cenkalti/backoff/v4",
"purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
"version": "v4.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "github.com/cespare/xxhash/v2",
"purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
"version": "v2.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/chrismalek/oktasdk-go",
"purl": "pkg:golang/github.com/chrismalek/oktasdk-go@v0.0.0-20181212195951-3430665dfaa0",
"version": "v0.0.0-20181212195951-3430665dfaa0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/circonus-labs/circonus-gometrics",
"purl": "pkg:golang/github.com/circonus-labs/circonus-gometrics@v2.3.1%2Bincompatible",
"version": "v2.3.1+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/circonus-labs/circonusllhist",
"purl": "pkg:golang/github.com/circonus-labs/circonusllhist@v0.1.3",
"version": "v0.1.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/clipperhouse/uax29/v2",
"purl": "pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0",
"version": "v2.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/cloudflare/circl",
"purl": "pkg:golang/github.com/cloudflare/circl@v1.6.3",
"version": "v1.6.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/cloudfoundry-community/go-cfclient",
"purl": "pkg:golang/github.com/cloudfoundry-community/go-cfclient@v0.0.0-20220930021109-9c4e6c59ccf1",
"version": "v0.0.0-20220930021109-9c4e6c59ccf1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/cncf/xds/go",
"purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
"version": "v0.0.0-20260202195803-dba9d589def2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/cockroachdb/cockroach-go/v2",
"purl": "pkg:golang/github.com/cockroachdb/cockroach-go/v2@v2.4.0",
"version": "v2.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/coder/websocket",
"purl": "pkg:golang/github.com/coder/websocket@v1.8.14",
"version": "v1.8.14"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/containerd/continuity",
"purl": "pkg:golang/github.com/containerd/continuity@v0.4.5",
"version": "v0.4.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/containerd/errdefs",
"purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/containerd/errdefs/pkg",
"purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
"version": "v0.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/containerd/log",
"purl": "pkg:golang/github.com/containerd/log@v0.1.0",
"version": "v0.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/coreos/etcd",
"purl": "pkg:golang/github.com/coreos/etcd@v3.3.27%2Bincompatible",
"version": "v3.3.27+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/coreos/go-oidc/v3",
"purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.17.0",
"version": "v3.17.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/coreos/go-semver",
"purl": "pkg:golang/github.com/coreos/go-semver@v0.3.1",
"version": "v0.3.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/coreos/go-systemd",
"purl": "pkg:golang/github.com/coreos/go-systemd@v0.0.0-20191104093116-d3cd4ed1dbcf",
"version": "v0.0.0-20191104093116-d3cd4ed1dbcf"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/coreos/go-systemd/v22",
"purl": "pkg:golang/github.com/coreos/go-systemd/v22@v22.7.0",
"version": "v22.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/coreos/pkg",
"purl": "pkg:golang/github.com/coreos/pkg@v0.0.0-20220810130054-c7d1c02cb6cf",
"version": "v0.0.0-20220810130054-c7d1c02cb6cf"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/couchbase/gocb/v2",
"purl": "pkg:golang/github.com/couchbase/gocb/v2@v2.12.0",
"version": "v2.12.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/couchbase/gocbcore/v10",
"purl": "pkg:golang/github.com/couchbase/gocbcore/v10@v10.9.0",
"version": "v10.9.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/couchbase/gocbcoreps",
"purl": "pkg:golang/github.com/couchbase/gocbcoreps@v0.1.5-0.20260107140814-1c3a03f888f8",
"version": "v0.1.5-0.20260107140814-1c3a03f888f8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/couchbase/goprotostellar",
"purl": "pkg:golang/github.com/couchbase/goprotostellar@v1.0.5",
"version": "v1.0.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/couchbaselabs/gocbconnstr/v2",
"purl": "pkg:golang/github.com/couchbaselabs/gocbconnstr/v2@v2.0.0",
"version": "v2.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/danieljoos/wincred",
"purl": "pkg:golang/github.com/danieljoos/wincred@v1.2.3",
"version": "v1.2.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/DataDog/datadog-go",
"purl": "pkg:golang/github.com/DataDog/datadog-go@v4.8.3%2Bincompatible",
"version": "v4.8.3+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/davecgh/go-spew",
"purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
"version": "v1.1.2-0.20180830191138-d8f796af33cc"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
"purl": "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.2.0",
"version": "v4.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/denisenkom/go-mssqldb",
"purl": "pkg:golang/github.com/denisenkom/go-mssqldb@v0.12.3",
"version": "v0.12.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/denverdino/aliyungo",
"purl": "pkg:golang/github.com/denverdino/aliyungo@v0.0.0-20190125010748-a747050bb1ba",
"version": "v0.0.0-20190125010748-a747050bb1ba"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/digitalocean/godo",
"purl": "pkg:golang/github.com/digitalocean/godo@v1.109.0",
"version": "v1.109.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/distribution/reference",
"purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
"version": "v0.6.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/docker/cli",
"purl": "pkg:golang/github.com/docker/cli@v29.6.1%2Bincompatible",
"version": "v29.6.1+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/docker/go-connections",
"purl": "pkg:golang/github.com/docker/go-connections@v0.7.0",
"version": "v0.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/docker/go-units",
"purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
"version": "v0.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/duosecurity/duo_api_golang",
"purl": "pkg:golang/github.com/duosecurity/duo_api_golang@v0.0.0-20250430191550-ac36954387e7",
"version": "v0.0.0-20250430191550-ac36954387e7"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/dustin/go-humanize",
"purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/dvsekhvalnov/jose2go",
"purl": "pkg:golang/github.com/dvsekhvalnov/jose2go@v1.7.0",
"version": "v1.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/emicklei/go-restful/v3",
"purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.12.2",
"version": "v3.12.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/envoyproxy/go-control-plane/envoy",
"purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
"version": "v1.37.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/envoyproxy/protoc-gen-validate",
"purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
"version": "v1.3.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/evanphx/json-patch/v5",
"purl": "pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11",
"version": "v5.9.11"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/fatih/color",
"purl": "pkg:golang/github.com/fatih/color@v1.19.0",
"version": "v1.19.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/fatih/structs",
"purl": "pkg:golang/github.com/fatih/structs@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "github.com/felixge/httpsnoop",
"purl": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "sdk/go.mod",
"name": "github.com/frankban/quicktest",
"purl": "pkg:golang/github.com/frankban/quicktest@v1.14.6",
"version": "v1.14.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/fsnotify/fsnotify",
"purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
"version": "v1.9.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/fxamacker/cbor/v2",
"purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0",
"version": "v2.9.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/gabriel-vasile/mimetype",
"purl": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
"version": "v1.4.13"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/gammazero/deque",
"purl": "pkg:golang/github.com/gammazero/deque@v1.2.1",
"version": "v1.2.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/gammazero/workerpool",
"purl": "pkg:golang/github.com/gammazero/workerpool@v1.2.1",
"version": "v1.2.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/ghodss/yaml",
"purl": "pkg:golang/github.com/ghodss/yaml@v1.0.1-0.20190212211648-25d852aebe32",
"version": "v1.0.1-0.20190212211648-25d852aebe32"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/go-asn1-ber/asn1-ber",
"purl": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.8",
"version": "v1.5.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/go-errors/errors",
"purl": "pkg:golang/github.com/go-errors/errors@v1.5.1",
"version": "v1.5.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/go-jose/go-jose/v3",
"purl": "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.5",
"version": "v3.0.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/go-jose/go-jose/v4",
"purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.5",
"version": "v4.1.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/go-ldap/ldap/v3",
"purl": "pkg:golang/github.com/go-ldap/ldap/v3@v3.4.13",
"version": "v3.4.13"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/go-ldap/ldif",
"purl": "pkg:golang/github.com/go-ldap/ldif@v0.0.0-20250910174327-aa3bc3095c92",
"version": "v0.0.0-20250910174327-aa3bc3095c92"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "github.com/go-logr/logr",
"purl": "pkg:golang/github.com/go-logr/logr@v1.4.4",
"version": "v1.4.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "github.com/go-logr/stdr",
"purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
"version": "v1.2.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/go-ole/go-ole",
"purl": "pkg:golang/github.com/go-ole/go-ole@v1.3.0",
"version": "v1.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/analysis",
"purl": "pkg:golang/github.com/go-openapi/analysis@v0.26.0",
"version": "v0.26.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/errors",
"purl": "pkg:golang/github.com/go-openapi/errors@v0.22.8",
"version": "v0.22.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/jsonpointer",
"purl": "pkg:golang/github.com/go-openapi/jsonpointer@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/jsonreference",
"purl": "pkg:golang/github.com/go-openapi/jsonreference@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/loads",
"purl": "pkg:golang/github.com/go-openapi/loads@v0.25.0",
"version": "v0.25.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/runtime",
"purl": "pkg:golang/github.com/go-openapi/runtime@v0.33.0",
"version": "v0.33.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/runtime/server-middleware",
"purl": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.0",
"version": "v0.33.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/spec",
"purl": "pkg:golang/github.com/go-openapi/spec@v0.22.9",
"version": "v0.22.9"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/strfmt",
"purl": "pkg:golang/github.com/go-openapi/strfmt@v0.27.0",
"version": "v0.27.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag",
"purl": "pkg:golang/github.com/go-openapi/swag@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/cmdutils",
"purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/conv",
"purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/fileutils",
"purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/jsonutils",
"purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/loading",
"purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/mangling",
"purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/netutils",
"purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/pools",
"purl": "pkg:golang/github.com/go-openapi/swag/pools@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/stringutils",
"purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/typeutils",
"purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/swag/yamlutils",
"purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.28.0",
"version": "v0.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-openapi/validate",
"purl": "pkg:golang/github.com/go-openapi/validate@v0.26.3",
"version": "v0.26.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/go-resty/resty/v2",
"purl": "pkg:golang/github.com/go-resty/resty/v2@v2.17.2",
"version": "v2.17.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/go-sql-driver/mysql",
"purl": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.0",
"version": "v1.10.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/go.mod",
"name": "github.com/go-test/deep",
"purl": "pkg:golang/github.com/go-test/deep@v1.1.1",
"version": "v1.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/go-viper/mapstructure/v2",
"purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
"version": "v2.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/go-zookeeper/zk",
"purl": "pkg:golang/github.com/go-zookeeper/zk@v1.0.3",
"version": "v1.0.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/goccy/go-json",
"purl": "pkg:golang/github.com/goccy/go-json@v0.10.5",
"version": "v0.10.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/gocql/gocql",
"purl": "pkg:golang/github.com/gocql/gocql@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/gofrs/flock",
"purl": "pkg:golang/github.com/gofrs/flock@v0.13.0",
"version": "v0.13.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/golang-jwt/jwt/v4",
"purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
"version": "v4.5.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/golang-jwt/jwt/v5",
"purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
"version": "v5.3.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/golang-sql/civil",
"purl": "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9",
"version": "v0.0.0-20220223132316-b832511892a9"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/golang-sql/sqlexp",
"purl": "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0",
"version": "v0.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/golang/groupcache",
"purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
"version": "v0.0.0-20241129210726-2c02b8208cf8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/golang/mock",
"purl": "pkg:golang/github.com/golang/mock@v1.7.0-rc.1",
"version": "v1.7.0-rc.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/golang/protobuf",
"purl": "pkg:golang/github.com/golang/protobuf@v1.5.4",
"version": "v1.5.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/golang/snappy",
"purl": "pkg:golang/github.com/golang/snappy@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/google/certificate-transparency-go",
"purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
"version": "v1.3.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/google/flatbuffers",
"purl": "pkg:golang/github.com/google/flatbuffers@v25.2.10%2Bincompatible",
"version": "v25.2.10+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/google/gnostic-models",
"purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
"version": "v0.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/google/go-attestation",
"purl": "pkg:golang/github.com/google/go-attestation@v0.6.4",
"version": "v0.6.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/google/go-cmp",
"purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
"version": "v0.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/google/go-github/v83",
"purl": "pkg:golang/github.com/google/go-github/v83@v83.0.0",
"version": "v83.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/google/go-metrics-stackdriver",
"purl": "pkg:golang/github.com/google/go-metrics-stackdriver@v0.2.0",
"version": "v0.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/google/go-querystring",
"purl": "pkg:golang/github.com/google/go-querystring@v1.2.0",
"version": "v1.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/google/go-tpm",
"purl": "pkg:golang/github.com/google/go-tpm@v0.9.8",
"version": "v0.9.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/google/pprof",
"purl": "pkg:golang/github.com/google/pprof@v0.0.0-20250630185457-6e76a2b096b5",
"version": "v0.0.0-20250630185457-6e76a2b096b5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "github.com/google/s2a-go",
"purl": "pkg:golang/github.com/google/s2a-go@v0.1.10",
"version": "v0.1.10"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/google/shlex",
"purl": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510",
"version": "v0.0.0-20191202100458-e7afc7fbc510"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/google/uuid",
"purl": "pkg:golang/github.com/google/uuid@v1.6.0",
"version": "v1.6.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "github.com/googleapis/enterprise-certificate-proxy",
"purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22",
"version": "v0.3.22"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "github.com/googleapis/gax-go/v2",
"purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.24.1",
"version": "v2.24.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp",
"purl": "pkg:golang/github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp@v1.6.0",
"version": "v1.6.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp",
"purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.34.0",
"version": "v1.34.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric",
"purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.56.0",
"version": "v0.56.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping",
"purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.56.0",
"version": "v0.56.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/gophercloud/gophercloud",
"purl": "pkg:golang/github.com/gophercloud/gophercloud@v1.14.1",
"version": "v1.14.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/gopherjs/gopherjs",
"purl": "pkg:golang/github.com/gopherjs/gopherjs@v1.17.2",
"version": "v1.17.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/gorilla/websocket",
"purl": "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674",
"version": "v1.5.4-0.20250319132907-e064f32e3674"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.30.0",
"version": "v2.30.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hailocab/go-hostpool",
"purl": "pkg:golang/github.com/hailocab/go-hostpool@v0.0.0-20160125115350-e80d13ce29ed",
"version": "v0.0.0-20160125115350-e80d13ce29ed"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/cap",
"purl": "pkg:golang/github.com/hashicorp/cap@v0.13.0",
"version": "v0.13.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/cap/ldap",
"purl": "pkg:golang/github.com/hashicorp/cap/ldap@v0.0.0-20250911140431-44d01434c285",
"version": "v0.0.0-20250911140431-44d01434c285"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/cli",
"purl": "pkg:golang/github.com/hashicorp/cli@v1.1.7",
"version": "v1.1.7"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/consul-template",
"purl": "pkg:golang/github.com/hashicorp/consul-template@v0.42.2-0.20260928065529-0a3d8a62f7ab",
"version": "v0.42.2-0.20260928065529-0a3d8a62f7ab"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/consul/api",
"purl": "pkg:golang/github.com/hashicorp/consul/api@v1.34.4",
"version": "v1.34.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/cronexpr",
"purl": "pkg:golang/github.com/hashicorp/cronexpr@v1.1.3",
"version": "v1.1.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/errwrap",
"purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/eventlogger",
"purl": "pkg:golang/github.com/hashicorp/eventlogger@v0.2.11",
"version": "v0.2.11"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-bexpr",
"purl": "pkg:golang/github.com/hashicorp/go-bexpr@v0.1.15",
"version": "v0.1.15"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/go-cleanhttp",
"purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
"version": "v0.5.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-discover",
"purl": "pkg:golang/github.com/hashicorp/go-discover@v1.5.0",
"version": "v1.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-discover/provider/gce",
"purl": "pkg:golang/github.com/hashicorp/go-discover/provider/gce@v0.0.0-20260914175500-8f14004e9a7f",
"version": "v0.0.0-20260914175500-8f14004e9a7f"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-gcp-common",
"purl": "pkg:golang/github.com/hashicorp/go-gcp-common@v0.9.2",
"version": "v0.9.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/hashicorp/go-hclog",
"purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.6.3",
"version": "v1.6.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-hmac-drbg",
"purl": "pkg:golang/github.com/hashicorp/go-hmac-drbg@v0.0.0-20210916214228-a6e5a68489f6",
"version": "v0.0.0-20210916214228-a6e5a68489f6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-immutable-radix",
"purl": "pkg:golang/github.com/hashicorp/go-immutable-radix@v1.3.1",
"version": "v1.3.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/entropy/v2",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/entropy/v2@v2.0.1",
"version": "v2.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/v2",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/v2@v2.0.26",
"version": "v2.0.26"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/wrappers/aead/v2",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/wrappers/aead/v2@v2.0.10",
"version": "v2.0.10"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/wrappers/alicloudkms/v2",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/wrappers/alicloudkms/v2@v2.0.5",
"version": "v2.0.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/wrappers/awskms/v4",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/wrappers/awskms/v4@v4.0.4",
"version": "v4.0.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/wrappers/azurekeyvault/v2",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/wrappers/azurekeyvault/v2@v2.0.16",
"version": "v2.0.16"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/wrappers/gcpckms/v2",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/wrappers/gcpckms/v2@v2.0.14",
"version": "v2.0.14"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/wrappers/ocikms/v2",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/wrappers/ocikms/v2@v2.0.11",
"version": "v2.0.11"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-kms-wrapping/wrappers/transit/v2",
"purl": "pkg:golang/github.com/hashicorp/go-kms-wrapping/wrappers/transit/v2@v2.0.13",
"version": "v2.0.13"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-memdb",
"purl": "pkg:golang/github.com/hashicorp/go-memdb@v1.3.5",
"version": "v1.3.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-metrics",
"purl": "pkg:golang/github.com/hashicorp/go-metrics@v0.6.1",
"version": "v0.6.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-msgpack/v2",
"purl": "pkg:golang/github.com/hashicorp/go-msgpack/v2@v2.1.5",
"version": "v2.1.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/go-multierror",
"purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
"version": "v1.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-pgmultiauth",
"purl": "pkg:golang/github.com/hashicorp/go-pgmultiauth@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-plugin",
"purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.8.0",
"version": "v1.8.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-raftchunking",
"purl": "pkg:golang/github.com/hashicorp/go-raftchunking@v0.6.3-0.20191002164813-7e9e8525653a",
"version": "v0.6.3-0.20191002164813-7e9e8525653a"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/go-retryablehttp",
"purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
"version": "v0.7.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/go-rootcerts",
"purl": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2",
"version": "v1.0.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/awsutil/v2",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/awsutil/v2@v2.1.2",
"version": "v2.1.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/base62",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/base62@v0.1.2",
"version": "v0.1.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/cryptoutil",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/cryptoutil@v0.1.1",
"version": "v0.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/fileutil",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/fileutil@v0.1.0",
"version": "v0.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/gatedwriter",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/gatedwriter@v0.1.1",
"version": "v0.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/httputil",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/httputil@v0.1.0",
"version": "v0.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/kv-builder",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/kv-builder@v0.1.2",
"version": "v0.1.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/mlock",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/mlock@v0.1.4-0.20261005181433-49bfb1561b96",
"version": "v0.1.4-0.20261005181433-49bfb1561b96"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/nonceutil",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/nonceutil@v0.1.0",
"version": "v0.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/parseutil",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0",
"version": "v0.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/password",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/password@v0.1.6-0.20261005181433-49bfb1561b96",
"version": "v0.1.6-0.20261005181433-49bfb1561b96"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/permitpool",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/permitpool@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/plugincontainer",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/plugincontainer@v0.5.0",
"version": "v0.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/regexp",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/regexp@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/reloadutil",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/reloadutil@v0.1.1",
"version": "v0.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/strutil",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2",
"version": "v0.1.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-secure-stdlib/tlsutil",
"purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/tlsutil@v0.1.3",
"version": "v0.1.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-slug",
"purl": "pkg:golang/github.com/hashicorp/go-slug@v0.16.8",
"version": "v0.16.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/go-sockaddr",
"purl": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7",
"version": "v1.0.7"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/go-syslog",
"purl": "pkg:golang/github.com/hashicorp/go-syslog@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/go-tfe",
"purl": "pkg:golang/github.com/hashicorp/go-tfe@v1.101.0",
"version": "v1.101.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "github.com/hashicorp/go-uuid",
"purl": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.4",
"version": "v1.0.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/go-version",
"purl": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
"version": "v1.9.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/golang-lru",
"purl": "pkg:golang/github.com/hashicorp/golang-lru@v1.0.2",
"version": "v1.0.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/golang-lru/v2",
"purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
"version": "v2.0.7"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/hcl",
"purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7",
"version": "v1.0.1-vault-7"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/hcl/v2",
"purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.24.0",
"version": "v2.24.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/hcp-sdk-go",
"purl": "pkg:golang/github.com/hashicorp/hcp-sdk-go@v0.138.0",
"version": "v0.138.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/jsonapi",
"purl": "pkg:golang/github.com/hashicorp/jsonapi@v1.4.3-0.20250220162346-81a76b606f3e",
"version": "v1.4.3-0.20250220162346-81a76b606f3e"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/logutils",
"purl": "pkg:golang/github.com/hashicorp/logutils@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/mdns",
"purl": "pkg:golang/github.com/hashicorp/mdns@v1.0.7",
"version": "v1.0.7"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/nomad/api",
"purl": "pkg:golang/github.com/hashicorp/nomad/api@v0.0.0-20260410071528-9e6d492b59a8",
"version": "v0.0.0-20260410071528-9e6d492b59a8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/raft",
"purl": "pkg:golang/github.com/hashicorp/raft@v1.7.3",
"version": "v1.7.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/raft-autopilot",
"purl": "pkg:golang/github.com/hashicorp/raft-autopilot@v0.3.0",
"version": "v0.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/raft-boltdb/v2",
"purl": "pkg:golang/github.com/hashicorp/raft-boltdb/v2@v2.3.0",
"version": "v2.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/raft-snapshot",
"purl": "pkg:golang/github.com/hashicorp/raft-snapshot@v1.0.4",
"version": "v1.0.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/raft-wal",
"purl": "pkg:golang/github.com/hashicorp/raft-wal@v0.4.0",
"version": "v0.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/hashicorp/releases-api",
"purl": "pkg:golang/github.com/hashicorp/releases-api@v0.4.14",
"version": "v0.4.14"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/serf",
"purl": "pkg:golang/github.com/hashicorp/serf@v0.10.4",
"version": "v0.10.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "internalshared/go.mod",
"name": "github.com/hashicorp/vault",
"purl": "pkg:golang/github.com/hashicorp/vault",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-envelope-encryption-sdk",
"purl": "pkg:golang/github.com/hashicorp/vault-envelope-encryption-sdk@v0.1.1",
"version": "v0.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/vault-hcp-lib",
"purl": "pkg:golang/github.com/hashicorp/vault-hcp-lib@v0.0.0-20250306185756-615fe2449b16",
"version": "v0.0.0-20250306185756-615fe2449b16"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/vault-plugin-auth-alicloud",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-auth-alicloud@v0.24.0",
"version": "v0.24.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-auth-azure",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-auth-azure@v0.25.1",
"version": "v0.25.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/vault-plugin-auth-cf",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-auth-cf@v0.24.0",
"version": "v0.24.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/vault-plugin-auth-gcp",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-auth-gcp@v0.24.1",
"version": "v0.24.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/vault-plugin-auth-jwt",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-auth-jwt@v0.27.1",
"version": "v0.27.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/vault-plugin-auth-kerberos",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-auth-kerberos@v0.18.0",
"version": "v0.18.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-auth-kubernetes",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-auth-kubernetes@v0.25.0",
"version": "v0.25.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/vault-plugin-auth-oci",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-auth-oci@v0.22.0",
"version": "v0.22.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-database-couchbase",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-database-couchbase@v0.17.0",
"version": "v0.17.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-database-elasticsearch",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-database-elasticsearch@v0.21.0",
"version": "v0.21.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-database-mongodbatlas",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-database-mongodbatlas@v0.18.0",
"version": "v0.18.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-database-redis",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-database-redis@v0.9.0",
"version": "v0.9.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-database-redis-elasticache",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-database-redis-elasticache@v0.10.0",
"version": "v0.10.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-database-snowflake",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-database-snowflake@v0.17.0",
"version": "v0.17.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-ad",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-ad@v0.23.0",
"version": "v0.23.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-alicloud",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-alicloud@v0.23.0",
"version": "v0.23.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-azure",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-azure@v0.25.1",
"version": "v0.25.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-gcp",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-gcp@v0.25.0",
"version": "v0.25.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-gcpkms",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-gcpkms@v0.25.0",
"version": "v0.25.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-kubernetes",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-kubernetes@v0.14.0",
"version": "v0.14.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-kv",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-kv@v0.27.0",
"version": "v0.27.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-mongodbatlas",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-mongodbatlas@v0.18.0",
"version": "v0.18.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-openldap",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-openldap@v0.19.0",
"version": "v0.19.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-plugin-secrets-terraform",
"purl": "pkg:golang/github.com/hashicorp/vault-plugin-secrets-terraform@v0.15.0",
"version": "v0.15.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault-testing-stepwise",
"purl": "pkg:golang/github.com/hashicorp/vault-testing-stepwise@v0.3.4",
"version": "v0.3.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/vault/api",
"purl": "pkg:golang/github.com/hashicorp/vault/api",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "sdk/go.mod",
"name": "github.com/hashicorp/vault/api",
"purl": "pkg:golang/github.com/hashicorp/vault/api@v1.16.0",
"version": "v1.16.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/hashicorp/vault/api",
"purl": "pkg:golang/github.com/hashicorp/vault/api@v1.23.0",
"version": "v1.23.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault/api/auth/approle",
"purl": "pkg:golang/github.com/hashicorp/vault/api/auth/approle",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/vault/api/auth/kubernetes",
"purl": "pkg:golang/github.com/hashicorp/vault/api/auth/kubernetes",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault/api/auth/userpass",
"purl": "pkg:golang/github.com/hashicorp/vault/api/auth/userpass",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/hashicorp/vault/command/base",
"purl": "pkg:golang/github.com/hashicorp/vault/command/base",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/hashicorp/vault/command/client",
"purl": "pkg:golang/github.com/hashicorp/vault/command/client",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/vault/internalshared",
"purl": "pkg:golang/github.com/hashicorp/vault/internalshared",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/vault/sdk",
"purl": "pkg:golang/github.com/hashicorp/vault/sdk",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/vault/version",
"purl": "pkg:golang/github.com/hashicorp/vault/version",
"version": "UNKNOWN"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/hashicorp/yamux",
"purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.2",
"version": "v0.1.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/hasura/go-graphql-client",
"purl": "pkg:golang/github.com/hasura/go-graphql-client@v0.16.0",
"version": "v0.16.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/huandu/xstrings",
"purl": "pkg:golang/github.com/huandu/xstrings@v1.5.0",
"version": "v1.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/imdario/mergo",
"purl": "pkg:golang/github.com/imdario/mergo@v0.3.16",
"version": "v0.3.16"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/inconshreveable/mousetrap",
"purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/influxdata/influxdb1-client",
"purl": "pkg:golang/github.com/influxdata/influxdb1-client@v0.0.0-20200827194710-b269163b24ab",
"version": "v0.0.0-20200827194710-b269163b24ab"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/instana/go-sensor",
"purl": "pkg:golang/github.com/instana/go-sensor@v1.68.0",
"version": "v1.68.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/jackc/pgerrcode",
"purl": "pkg:golang/github.com/jackc/pgerrcode@v0.0.0-20240316143900-6e2875d9b438",
"version": "v0.0.0-20240316143900-6e2875d9b438"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jackc/pgpassfile",
"purl": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jackc/pgservicefile",
"purl": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
"version": "v0.0.0-20240606120523-5a60cdf6a761"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jackc/pgx/v5",
"purl": "pkg:golang/github.com/jackc/pgx/v5@v5.10.0",
"version": "v5.10.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jackc/puddle/v2",
"purl": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2",
"version": "v2.2.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jcmturner/aescts/v2",
"purl": "pkg:golang/github.com/jcmturner/aescts/v2@v2.0.0",
"version": "v2.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jcmturner/dnsutils/v2",
"purl": "pkg:golang/github.com/jcmturner/dnsutils/v2@v2.0.0",
"version": "v2.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jcmturner/gofork",
"purl": "pkg:golang/github.com/jcmturner/gofork@v1.7.6",
"version": "v1.7.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jcmturner/goidentity/v6",
"purl": "pkg:golang/github.com/jcmturner/goidentity/v6@v6.0.1",
"version": "v6.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jcmturner/gokrb5/v8",
"purl": "pkg:golang/github.com/jcmturner/gokrb5/v8@v8.4.4",
"version": "v8.4.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jcmturner/rpc/v2",
"purl": "pkg:golang/github.com/jcmturner/rpc/v2@v2.0.3",
"version": "v2.0.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/jedib0t/go-pretty/v6",
"purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.8.3",
"version": "v6.8.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Jeffail/gabs/v2",
"purl": "pkg:golang/github.com/Jeffail/gabs/v2@v2.1.0",
"version": "v2.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Jeffail/keyring",
"purl": "pkg:golang/github.com/Jeffail/keyring@v1.2.3",
"version": "v1.2.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/jeffchao/backoff",
"purl": "pkg:golang/github.com/jeffchao/backoff@v0.0.0-20140404060208-9d7fd7aa17f2",
"version": "v0.0.0-20140404060208-9d7fd7aa17f2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jefferai/isbadcipher",
"purl": "pkg:golang/github.com/jefferai/isbadcipher@v0.0.0-20190226160619-51d2077c035f",
"version": "v0.0.0-20190226160619-51d2077c035f"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/jefferai/jsonx",
"purl": "pkg:golang/github.com/jefferai/jsonx@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/jellydator/ttlcache/v3",
"purl": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.2-0.20260813123107-3b64b9cd34ac",
"version": "v3.4.2-0.20260813123107-3b64b9cd34ac"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/jessevdk/go-flags",
"purl": "pkg:golang/github.com/jessevdk/go-flags@v1.6.1",
"version": "v1.6.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "sdk/go.mod",
"name": "github.com/jimlambrt/gldap",
"purl": "pkg:golang/github.com/jimlambrt/gldap@v0.1.14",
"version": "v0.1.14"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/jmespath/go-jmespath",
"purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.1-0.20220621161143-b0104c826a24",
"version": "v0.4.1-0.20220621161143-b0104c826a24"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/joshlf/go-acl",
"purl": "pkg:golang/github.com/joshlf/go-acl@v0.0.0-20200411065538-eae00ae38531",
"version": "v0.0.0-20200411065538-eae00ae38531"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/json-iterator/go",
"purl": "pkg:golang/github.com/json-iterator/go@v1.1.13-0.20220915233716-71ac16282d12",
"version": "v1.1.13-0.20220915233716-71ac16282d12"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/kelseyhightower/envconfig",
"purl": "pkg:golang/github.com/kelseyhightower/envconfig@v1.4.0",
"version": "v1.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/klauspost/asmfmt",
"purl": "pkg:golang/github.com/klauspost/asmfmt@v1.3.2",
"version": "v1.3.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/klauspost/compress",
"purl": "pkg:golang/github.com/klauspost/compress@v1.19.1",
"version": "v1.19.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/klauspost/cpuid/v2",
"purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0",
"version": "v2.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/kr/pretty",
"purl": "pkg:golang/github.com/kr/pretty@v0.3.1",
"version": "v0.3.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/kr/text",
"purl": "pkg:golang/github.com/kr/text@v0.2.0",
"version": "v0.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/kylelemons/godebug",
"purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/lestrrat-go/backoff/v2",
"purl": "pkg:golang/github.com/lestrrat-go/backoff/v2@v2.0.8",
"version": "v2.0.8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/lestrrat-go/blackmagic",
"purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.2",
"version": "v1.0.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/lestrrat-go/httpcc",
"purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/lestrrat-go/iter",
"purl": "pkg:golang/github.com/lestrrat-go/iter@v1.0.2",
"version": "v1.0.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/lestrrat-go/jwx",
"purl": "pkg:golang/github.com/lestrrat-go/jwx@v1.2.29",
"version": "v1.2.29"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/lestrrat-go/option",
"purl": "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/lib/pq",
"purl": "pkg:golang/github.com/lib/pq@v1.11.2",
"version": "v1.11.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/linode/linodego",
"purl": "pkg:golang/github.com/linode/linodego@v1.68.0",
"version": "v1.68.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/looplab/fsm",
"purl": "pkg:golang/github.com/looplab/fsm@v1.0.3",
"version": "v1.0.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/lufia/plan9stats",
"purl": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20260216142805-b3301c5f2a88",
"version": "v0.0.0-20260216142805-b3301c5f2a88"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Masterminds/goutils",
"purl": "pkg:golang/github.com/Masterminds/goutils@v1.1.1",
"version": "v1.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/Masterminds/semver",
"purl": "pkg:golang/github.com/Masterminds/semver@v1.5.0",
"version": "v1.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Masterminds/semver/v3",
"purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.4.0",
"version": "v3.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Masterminds/sprig/v3",
"purl": "pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0",
"version": "v3.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/mattn/go-colorable",
"purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.15",
"version": "v0.1.15"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/mattn/go-ieproxy",
"purl": "pkg:golang/github.com/mattn/go-ieproxy@v0.0.1",
"version": "v0.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/mattn/go-isatty",
"purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.24",
"version": "v0.0.24"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/mattn/go-runewidth",
"purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27",
"version": "v0.0.27"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/mediocregopher/radix/v4",
"purl": "pkg:golang/github.com/mediocregopher/radix/v4@v4.1.4",
"version": "v4.1.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/michaelklishin/rabbit-hole/v2",
"purl": "pkg:golang/github.com/michaelklishin/rabbit-hole/v2@v2.12.0",
"version": "v2.12.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/Microsoft/go-winio",
"purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2",
"version": "v0.6.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoft/kiota-abstractions-go",
"purl": "pkg:golang/github.com/microsoft/kiota-abstractions-go@v1.11.0",
"version": "v1.11.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoft/kiota-authentication-azure-go",
"purl": "pkg:golang/github.com/microsoft/kiota-authentication-azure-go@v1.3.1",
"version": "v1.3.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoft/kiota-http-go",
"purl": "pkg:golang/github.com/microsoft/kiota-http-go@v1.5.6",
"version": "v1.5.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoft/kiota-serialization-form-go",
"purl": "pkg:golang/github.com/microsoft/kiota-serialization-form-go@v1.1.3",
"version": "v1.1.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoft/kiota-serialization-json-go",
"purl": "pkg:golang/github.com/microsoft/kiota-serialization-json-go@v1.1.4",
"version": "v1.1.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoft/kiota-serialization-multipart-go",
"purl": "pkg:golang/github.com/microsoft/kiota-serialization-multipart-go@v1.1.2",
"version": "v1.1.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoft/kiota-serialization-text-go",
"purl": "pkg:golang/github.com/microsoft/kiota-serialization-text-go@v1.1.3",
"version": "v1.1.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoftgraph/msgraph-sdk-go",
"purl": "pkg:golang/github.com/microsoftgraph/msgraph-sdk-go@v1.97.0",
"version": "v1.97.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/microsoftgraph/msgraph-sdk-go-core",
"purl": "pkg:golang/github.com/microsoftgraph/msgraph-sdk-go-core@v1.4.1",
"version": "v1.4.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/miekg/dns",
"purl": "pkg:golang/github.com/miekg/dns@v1.1.73",
"version": "v1.1.73"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/mikesmitty/edkey",
"purl": "pkg:golang/github.com/mikesmitty/edkey@v0.0.0-20170222072505-3356ea4e686a",
"version": "v0.0.0-20170222072505-3356ea4e686a"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/minio/asm2plan9s",
"purl": "pkg:golang/github.com/minio/asm2plan9s@v0.0.0-20200509001527-cdd76441f9d8",
"version": "v0.0.0-20200509001527-cdd76441f9d8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/minio/c2goasm",
"purl": "pkg:golang/github.com/minio/c2goasm@v0.0.0-20190812172519-36a3d3bbc4f3",
"version": "v0.0.0-20190812172519-36a3d3bbc4f3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/mitchellh/colorstring",
"purl": "pkg:golang/github.com/mitchellh/colorstring@v0.0.0-20190213212951-d06e56a500db",
"version": "v0.0.0-20190213212951-d06e56a500db"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/mitchellh/copystructure",
"purl": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0",
"version": "v1.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/mitchellh/go-homedir",
"purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/mitchellh/go-wordwrap",
"purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/mitchellh/hashstructure",
"purl": "pkg:golang/github.com/mitchellh/hashstructure@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/mitchellh/mapstructure",
"purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
"version": "v1.5.1-0.20231216201459-8508981c8b6c"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/mitchellh/pointerstructure",
"purl": "pkg:golang/github.com/mitchellh/pointerstructure@v1.2.1",
"version": "v1.2.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/mitchellh/reflectwalk",
"purl": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2",
"version": "v1.0.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/moby/docker-image-spec",
"purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
"version": "v1.3.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/moby/go-archive",
"purl": "pkg:golang/github.com/moby/go-archive@v0.3.0",
"version": "v0.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/moby/moby/api",
"purl": "pkg:golang/github.com/moby/moby/api@v1.56.0",
"version": "v1.56.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/moby/moby/client",
"purl": "pkg:golang/github.com/moby/moby/client@v0.6.0",
"version": "v0.6.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/moby/patternmatcher",
"purl": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
"version": "v0.6.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/moby/sys/sequential",
"purl": "pkg:golang/github.com/moby/sys/sequential@v0.7.0",
"version": "v0.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/moby/sys/user",
"purl": "pkg:golang/github.com/moby/sys/user@v0.4.1",
"version": "v0.4.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/moby/sys/userns",
"purl": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
"version": "v0.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/moby/term",
"purl": "pkg:golang/github.com/moby/term@v0.5.2",
"version": "v0.5.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/modern-go/concurrent",
"purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
"version": "v0.0.0-20180306012644-bacd9c7ef1dd"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/modern-go/reflect2",
"purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
"version": "v1.0.3-0.20250322232337-35a7c28c31ee"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/mongodb-forks/digest",
"purl": "pkg:golang/github.com/mongodb-forks/digest@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/montanaflynn/stats",
"purl": "pkg:golang/github.com/montanaflynn/stats@v0.7.1",
"version": "v0.7.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/moov-io/signedxml",
"purl": "pkg:golang/github.com/moov-io/signedxml@v1.1.1",
"version": "v1.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/mtibben/percent",
"purl": "pkg:golang/github.com/mtibben/percent@v0.2.1",
"version": "v0.2.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/munnerz/goautoneg",
"purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
"version": "v0.0.0-20191010083416-a7dc8b61c822"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/go.mod",
"name": "github.com/natefinch/atomic",
"purl": "pkg:golang/github.com/natefinch/atomic@v1.0.1",
"version": "v1.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/ncw/swift",
"purl": "pkg:golang/github.com/ncw/swift@v1.0.47",
"version": "v1.0.47"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/nicolai86/scaleway-sdk",
"purl": "pkg:golang/github.com/nicolai86/scaleway-sdk@v1.10.2-0.20180628010248-798f60e20bb2",
"version": "v1.10.2-0.20180628010248-798f60e20bb2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Nvveen/Gotty",
"purl": "pkg:golang/github.com/Nvveen/Gotty@v0.0.0-20120604004816-cd527374f1e5",
"version": "v0.0.0-20120604004816-cd527374f1e5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/oklog/run",
"purl": "pkg:golang/github.com/oklog/run@v1.2.0",
"version": "v1.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/oklog/ulid/v2",
"purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.2",
"version": "v2.1.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/okta/okta-sdk-golang/v5",
"purl": "pkg:golang/github.com/okta/okta-sdk-golang/v5@v5.0.2",
"version": "v5.0.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/opencontainers/go-digest",
"purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/opencontainers/image-spec",
"purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
"version": "v1.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/opencontainers/runc",
"purl": "pkg:golang/github.com/opencontainers/runc@v1.3.6",
"version": "v1.3.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/opentracing/opentracing-go",
"purl": "pkg:golang/github.com/opentracing/opentracing-go@v1.2.1-0.20220228012449-10b1cf09e00b",
"version": "v1.2.1-0.20220228012449-10b1cf09e00b"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/oracle/oci-go-sdk",
"purl": "pkg:golang/github.com/oracle/oci-go-sdk@v24.3.0%2Bincompatible",
"version": "v24.3.0+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/oracle/oci-go-sdk/v65",
"purl": "pkg:golang/github.com/oracle/oci-go-sdk/v65@v65.123.0",
"version": "v65.123.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/ory/dockertest",
"purl": "pkg:golang/github.com/ory/dockertest@v3.3.5%2Bincompatible",
"version": "v3.3.5+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/ory/dockertest/v3",
"purl": "pkg:golang/github.com/ory/dockertest/v3@v3.12.0",
"version": "v3.12.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/owenrumney/go-sarif/v3",
"purl": "pkg:golang/github.com/owenrumney/go-sarif/v3@v3.3.1",
"version": "v3.3.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/packethost/packngo",
"purl": "pkg:golang/github.com/packethost/packngo@v0.1.1-0.20180711074735-b9cb5096f54c",
"version": "v0.1.1-0.20180711074735-b9cb5096f54c"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/patrickmn/go-cache",
"purl": "pkg:golang/github.com/patrickmn/go-cache@v2.1.0%2Bincompatible",
"version": "v2.1.0+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/pavlo-v-chernykh/keystore-go/v4",
"purl": "pkg:golang/github.com/pavlo-v-chernykh/keystore-go/v4@v4.5.0",
"version": "v4.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/petermattis/goid",
"purl": "pkg:golang/github.com/petermattis/goid@v0.0.0-20260716134002-a9b348f0a2b9",
"version": "v0.0.0-20260716134002-a9b348f0a2b9"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/pierrec/lz4",
"purl": "pkg:golang/github.com/pierrec/lz4@v2.6.1%2Bincompatible",
"version": "v2.6.1+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/pierrec/lz4/v4",
"purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.27",
"version": "v4.1.27"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/pires/go-proxyproto",
"purl": "pkg:golang/github.com/pires/go-proxyproto@v0.11.0",
"version": "v0.11.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/pkg/browser",
"purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
"version": "v0.0.0-20240102092130-5ac0b6a4141c"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/pkg/errors",
"purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
"version": "v0.9.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/planetscale/vtprotobuf",
"purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
"version": "v0.6.1-0.20240319094008-0393e58bdf10"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/pmezard/go-difflib",
"purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
"version": "v1.0.1-0.20181226105442-5d4384ee4fb2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/posener/complete",
"purl": "pkg:golang/github.com/posener/complete@v1.2.3",
"version": "v1.2.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/power-devops/perfstat",
"purl": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
"version": "v0.0.0-20240221224432-82ca36839d55"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/pquerna/otp",
"purl": "pkg:golang/github.com/pquerna/otp@v1.5.0",
"version": "v1.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/prometheus/client_golang",
"purl": "pkg:golang/github.com/prometheus/client_golang@v1.24.1",
"version": "v1.24.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/prometheus/client_model",
"purl": "pkg:golang/github.com/prometheus/client_model@v0.6.2",
"version": "v0.6.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/prometheus/common",
"purl": "pkg:golang/github.com/prometheus/common@v0.70.1",
"version": "v0.70.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/prometheus/procfs",
"purl": "pkg:golang/github.com/prometheus/procfs@v0.21.1",
"version": "v0.21.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/ProtonMail/go-crypto",
"purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.0",
"version": "v1.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/ProtonMail/gopenpgp/v3",
"purl": "pkg:golang/github.com/ProtonMail/gopenpgp/v3@v3.3.0",
"version": "v3.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/PuerkitoBio/goquery",
"purl": "pkg:golang/github.com/PuerkitoBio/goquery@v1.12.0",
"version": "v1.12.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/rboyer/safeio",
"purl": "pkg:golang/github.com/rboyer/safeio@v0.2.3",
"version": "v0.2.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/richardlehane/mscfb",
"purl": "pkg:golang/github.com/richardlehane/mscfb@v1.0.7",
"version": "v1.0.7"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/richardlehane/msoleps",
"purl": "pkg:golang/github.com/richardlehane/msoleps@v1.0.6",
"version": "v1.0.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/robfig/cron/v3",
"purl": "pkg:golang/github.com/robfig/cron/v3@v3.0.1",
"version": "v3.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/rogpeppe/go-internal",
"purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
"version": "v1.14.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/ryancragun/triton-go/v2",
"purl": "pkg:golang/github.com/ryancragun/triton-go/v2@v2.0.0-20260514164147-e8b61dd0652d",
"version": "v2.0.0-20260514164147-e8b61dd0652d"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/ryanuber/columnize",
"purl": "pkg:golang/github.com/ryanuber/columnize@v2.1.2%2Bincompatible",
"version": "v2.1.2+incompatible"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/ryanuber/go-glob",
"purl": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/SAP/go-hdb",
"purl": "pkg:golang/github.com/SAP/go-hdb@v1.10.1",
"version": "v1.10.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/sasha-s/go-deadlock",
"purl": "pkg:golang/github.com/sasha-s/go-deadlock@v0.3.5",
"version": "v0.3.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/Sectorbob/mlab-ns2",
"purl": "pkg:golang/github.com/Sectorbob/mlab-ns2@v0.0.0-20171030222938-d3aa0c295a8a",
"version": "v0.0.0-20171030222938-d3aa0c295a8a"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/segmentio/fasthash",
"purl": "pkg:golang/github.com/segmentio/fasthash@v1.0.3",
"version": "v1.0.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/sethvargo/go-limiter",
"purl": "pkg:golang/github.com/sethvargo/go-limiter@v0.7.1",
"version": "v0.7.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/shirou/gopsutil/v3",
"purl": "pkg:golang/github.com/shirou/gopsutil/v3@v3.22.6",
"version": "v3.22.6"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/shirou/gopsutil/v4",
"purl": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.2",
"version": "v4.26.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/shopspring/decimal",
"purl": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
"version": "v1.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/shurcooL/githubv4",
"purl": "pkg:golang/github.com/shurcooL/githubv4@v0.0.0-20260209031235-2402fdf4a9ed",
"version": "v0.0.0-20260209031235-2402fdf4a9ed"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/shurcooL/graphql",
"purl": "pkg:golang/github.com/shurcooL/graphql@v0.0.0-20240915155400-7ee5256398cf",
"version": "v0.0.0-20240915155400-7ee5256398cf"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/sirupsen/logrus",
"purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
"version": "v1.9.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/skratchdot/open-golang",
"purl": "pkg:golang/github.com/skratchdot/open-golang@v0.0.0-20200116055534-eef842397966",
"version": "v0.0.0-20200116055534-eef842397966"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/slack-go/slack",
"purl": "pkg:golang/github.com/slack-go/slack@v0.27.0",
"version": "v0.27.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/smartystreets/assertions",
"purl": "pkg:golang/github.com/smartystreets/assertions@v1.13.1",
"version": "v1.13.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/smartystreets/goconvey",
"purl": "pkg:golang/github.com/smartystreets/goconvey@v1.8.0",
"version": "v1.8.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/snowflakedb/gosnowflake",
"purl": "pkg:golang/github.com/snowflakedb/gosnowflake@v1.19.0",
"version": "v1.19.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/softlayer/softlayer-go",
"purl": "pkg:golang/github.com/softlayer/softlayer-go@v1.2.1",
"version": "v1.2.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/softlayer/xmlrpc",
"purl": "pkg:golang/github.com/softlayer/xmlrpc@v0.0.0-20200409220501-5f089df7cb7e",
"version": "v0.0.0-20200409220501-5f089df7cb7e"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/sony/gobreaker/v2",
"purl": "pkg:golang/github.com/sony/gobreaker/v2@v2.4.0",
"version": "v2.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/spf13/cast",
"purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
"version": "v1.10.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/spf13/cobra",
"purl": "pkg:golang/github.com/spf13/cobra@v1.10.2",
"version": "v1.10.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/spf13/pflag",
"purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
"version": "v1.0.10"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/spiffe/go-spiffe/v2",
"purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.8.2",
"version": "v2.8.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/std-uritemplate/std-uritemplate/go/v2",
"purl": "pkg:golang/github.com/std-uritemplate/std-uritemplate/go/v2@v2.0.12",
"version": "v2.0.12"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/stretchr/objx",
"purl": "pkg:golang/github.com/stretchr/objx@v0.5.3",
"version": "v0.5.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "github.com/stretchr/testify",
"purl": "pkg:golang/github.com/stretchr/testify@v1.12.1",
"version": "v1.12.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common",
"purl": "pkg:golang/github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common@v1.3.83",
"version": "v1.3.83"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cvm",
"purl": "pkg:golang/github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cvm@v1.0.480",
"version": "v1.0.480"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/tiendc/go-deepcopy",
"purl": "pkg:golang/github.com/tiendc/go-deepcopy@v1.7.2",
"version": "v1.7.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/tilinna/clock",
"purl": "pkg:golang/github.com/tilinna/clock@v1.1.0",
"version": "v1.1.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/tink-crypto/tink-go/v2",
"purl": "pkg:golang/github.com/tink-crypto/tink-go/v2@v2.7.0",
"version": "v2.7.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/tklauser/go-sysconf",
"purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16",
"version": "v0.3.16"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/tklauser/numcpus",
"purl": "pkg:golang/github.com/tklauser/numcpus@v0.11.0",
"version": "v0.11.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/tv42/httpunix",
"purl": "pkg:golang/github.com/tv42/httpunix@v0.0.0-20191220191345-2ba4b9c3382c",
"version": "v0.0.0-20191220191345-2ba4b9c3382c"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/veqryn/slog-context",
"purl": "pkg:golang/github.com/veqryn/slog-context@v0.9.0",
"version": "v0.9.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/vmware/govmomi",
"purl": "pkg:golang/github.com/vmware/govmomi@v0.55.1",
"version": "v0.55.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/wadey/gocovmerge",
"purl": "pkg:golang/github.com/wadey/gocovmerge@v0.0.0-20160331181800-b5bfa59ec0ad",
"version": "v0.0.0-20160331181800-b5bfa59ec0ad"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/x448/float16",
"purl": "pkg:golang/github.com/x448/float16@v0.8.4",
"version": "v0.8.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/xdg-go/pbkdf2",
"purl": "pkg:golang/github.com/xdg-go/pbkdf2@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/xdg-go/scram",
"purl": "pkg:golang/github.com/xdg-go/scram@v1.1.2",
"version": "v1.1.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/xdg-go/stringprep",
"purl": "pkg:golang/github.com/xdg-go/stringprep@v1.0.4",
"version": "v1.0.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/xeipuuv/gojsonpointer",
"purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
"version": "v0.0.0-20190905194746-02993c407bfb"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/xeipuuv/gojsonreference",
"purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
"version": "v0.0.0-20180127040603-bd5ef7bd5415"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/xeipuuv/gojsonschema",
"purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0",
"version": "v1.2.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/xuri/efp",
"purl": "pkg:golang/github.com/xuri/efp@v0.0.1",
"version": "v0.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/xuri/excelize/v2",
"purl": "pkg:golang/github.com/xuri/excelize/v2@v2.11.0",
"version": "v2.11.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "tools/pipeline/go.mod",
"name": "github.com/xuri/nfp",
"purl": "pkg:golang/github.com/xuri/nfp@v0.0.2-0.20250530014748-2ddeb826f9a9",
"version": "v0.0.2-0.20250530014748-2ddeb826f9a9"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "github.com/youmark/pkcs8",
"purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
"version": "v0.0.0-20240726163527-a2c0da244d78"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/yuin/gopher-lua",
"purl": "pkg:golang/github.com/yuin/gopher-lua@v1.1.1",
"version": "v1.1.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/yusufpapurcu/wmi",
"purl": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
"version": "v1.2.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "github.com/zclconf/go-cty",
"purl": "pkg:golang/github.com/zclconf/go-cty@v1.19.0",
"version": "v1.19.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "github.com/zeebo/xxh3",
"purl": "pkg:golang/github.com/zeebo/xxh3@v1.0.2",
"version": "v1.0.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "go.etcd.io/bbolt",
"purl": "pkg:golang/go.etcd.io/bbolt@v1.5.0",
"version": "v1.5.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.etcd.io/etcd/api/v3",
"purl": "pkg:golang/go.etcd.io/etcd/api/v3@v3.7.1",
"version": "v3.7.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.etcd.io/etcd/client/pkg/v3",
"purl": "pkg:golang/go.etcd.io/etcd/client/pkg/v3@v3.7.1",
"version": "v3.7.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.etcd.io/etcd/client/v2",
"purl": "pkg:golang/go.etcd.io/etcd/client/v2@v2.305.33",
"version": "v2.305.33"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.etcd.io/etcd/client/v3",
"purl": "pkg:golang/go.etcd.io/etcd/client/v3@v3.7.1",
"version": "v3.7.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.mongodb.org/atlas",
"purl": "pkg:golang/go.mongodb.org/atlas@v0.38.0",
"version": "v0.38.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.mongodb.org/mongo-driver",
"purl": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.9",
"version": "v1.17.9"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "go.opencensus.io",
"purl": "pkg:golang/go.opencensus.io@v0.24.0",
"version": "v0.24.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "go.opentelemetry.io/auto/sdk",
"purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
"version": "v1.2.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.opentelemetry.io/contrib/detectors/gcp",
"purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0",
"version": "v1.44.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
"purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.70.0",
"version": "v0.70.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0",
"version": "v0.70.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "go.opentelemetry.io/otel",
"purl": "pkg:golang/go.opentelemetry.io/otel@v1.46.0",
"version": "v1.46.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "go.opentelemetry.io/otel/metric",
"purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0",
"version": "v1.46.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.opentelemetry.io/otel/sdk",
"purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.45.0",
"version": "v1.45.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.opentelemetry.io/otel/sdk/metric",
"purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.45.0",
"version": "v1.45.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "go.opentelemetry.io/otel/trace",
"purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0",
"version": "v1.46.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "go.uber.org/atomic",
"purl": "pkg:golang/go.uber.org/atomic@v1.12.0",
"version": "v1.12.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.uber.org/multierr",
"purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
"version": "v1.11.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.uber.org/zap",
"purl": "pkg:golang/go.uber.org/zap@v1.28.0",
"version": "v1.28.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "go.yaml.in/yaml/v2",
"purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
"version": "v2.4.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/go.mod",
"name": "go.yaml.in/yaml/v3",
"purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5",
"version": "v3.0.5"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "golang.org/x/crypto",
"purl": "pkg:golang/golang.org/x/crypto@v0.57.0",
"version": "v0.57.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "golang.org/x/crypto",
"purl": "pkg:golang/golang.org/x/crypto@v0.58.0",
"version": "v0.58.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "golang.org/x/exp",
"purl": "pkg:golang/golang.org/x/exp@v0.0.0-20260709172345-9ea1abe57597",
"version": "v0.0.0-20260709172345-9ea1abe57597"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "golang.org/x/mod",
"purl": "pkg:golang/golang.org/x/mod@v0.41.0",
"version": "v0.41.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "golang.org/x/net",
"purl": "pkg:golang/golang.org/x/net@v0.60.0",
"version": "v0.60.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "golang.org/x/oauth2",
"purl": "pkg:golang/golang.org/x/oauth2@v0.37.0",
"version": "v0.37.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "golang.org/x/sync",
"purl": "pkg:golang/golang.org/x/sync@v0.23.0",
"version": "v0.23.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "golang.org/x/sync",
"purl": "pkg:golang/golang.org/x/sync@v0.24.0",
"version": "v0.24.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/aws/go.mod",
"name": "golang.org/x/sys",
"purl": "pkg:golang/golang.org/x/sys@v0.48.0",
"version": "v0.48.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "golang.org/x/sys",
"purl": "pkg:golang/golang.org/x/sys@v0.49.0",
"version": "v0.49.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "golang.org/x/telemetry",
"purl": "pkg:golang/golang.org/x/telemetry@v0.0.0-20260924152758-ed294f943157",
"version": "v0.0.0-20260924152758-ed294f943157"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "golang.org/x/term",
"purl": "pkg:golang/golang.org/x/term@v0.46.0",
"version": "v0.46.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "golang.org/x/term",
"purl": "pkg:golang/golang.org/x/term@v0.47.0",
"version": "v0.47.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "golang.org/x/text",
"purl": "pkg:golang/golang.org/x/text@v0.42.0",
"version": "v0.42.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "golang.org/x/text",
"purl": "pkg:golang/golang.org/x/text@v0.43.0",
"version": "v0.43.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/approle/go.mod",
"name": "golang.org/x/time",
"purl": "pkg:golang/golang.org/x/time@v0.16.0",
"version": "v0.16.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "golang.org/x/tools",
"purl": "pkg:golang/golang.org/x/tools@v0.49.0",
"version": "v0.49.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "golang.org/x/tools",
"purl": "pkg:golang/golang.org/x/tools@v0.51.0",
"version": "v0.51.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "golang.org/x/xerrors",
"purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da",
"version": "v0.0.0-20240903120638-7835f813f4da"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "google.golang.org/api",
"purl": "pkg:golang/google.golang.org/api@v0.299.0",
"version": "v0.299.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "google.golang.org/genproto",
"purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d",
"version": "v0.0.0-20260715232425-e75dac1f907d"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "google.golang.org/genproto/googleapis/api",
"purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688",
"version": "v0.0.0-20260819154853-08b0e4226688"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "google.golang.org/genproto/googleapis/rpc",
"purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260921155816-b14227669459",
"version": "v0.0.0-20260921155816-b14227669459"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "google.golang.org/grpc",
"purl": "pkg:golang/google.golang.org/grpc@v1.83.2",
"version": "v1.83.2"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "google.golang.org/grpc",
"purl": "pkg:golang/google.golang.org/grpc@v1.84.0",
"version": "v1.84.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "api/auth/gcp/go.mod",
"name": "google.golang.org/protobuf",
"purl": "pkg:golang/google.golang.org/protobuf@v1.36.12",
"version": "v1.36.12"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "gopkg.in/evanphx/json-patch.v4",
"purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
"version": "v4.13.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "gopkg.in/inf.v0",
"purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
"version": "v0.9.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "gopkg.in/ini.v1",
"purl": "pkg:golang/gopkg.in/ini.v1@v1.67.1",
"version": "v1.67.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "gopkg.in/jcmturner/goidentity.v3",
"purl": "pkg:golang/gopkg.in/jcmturner/goidentity.v3@v3.0.0",
"version": "v3.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "gopkg.in/ory-am/dockertest.v3",
"purl": "pkg:golang/gopkg.in/ory-am/dockertest.v3@v3.3.4",
"version": "v3.3.4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/base/go.mod",
"name": "gopkg.in/yaml.v2",
"purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0",
"version": "v2.4.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "gopkg.in/yaml.v3",
"purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
"version": "v3.0.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "k8s.io/api",
"purl": "pkg:golang/k8s.io/api@v0.35.3",
"version": "v0.35.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "k8s.io/apimachinery",
"purl": "pkg:golang/k8s.io/apimachinery@v0.35.3",
"version": "v0.35.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "k8s.io/client-go",
"purl": "pkg:golang/k8s.io/client-go@v0.35.3",
"version": "v0.35.3"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "k8s.io/klog/v2",
"purl": "pkg:golang/k8s.io/klog/v2@v2.130.1",
"version": "v2.130.1"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "k8s.io/kube-openapi",
"purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20250910181357-589584f1c912",
"version": "v0.0.0-20250910181357-589584f1c912"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "command/client/go.mod",
"name": "k8s.io/utils",
"purl": "pkg:golang/k8s.io/utils@v0.0.0-20251002143259-bc988d571ff4",
"version": "v0.0.0-20251002143259-bc988d571ff4"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "layeh.com/radius",
"purl": "pkg:golang/layeh.com/radius@v0.0.0-20231213012653-1006025d24f8",
"version": "v0.0.0-20231213012653-1006025d24f8"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "sigs.k8s.io/json",
"purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
"version": "v0.0.0-20250730193827-2d320260d730"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "sigs.k8s.io/randfill",
"purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
"version": "v1.0.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "sigs.k8s.io/structured-merge-diff/v6",
"purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0",
"version": "v6.3.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "sigs.k8s.io/yaml",
"purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
"version": "v1.6.0"
},
{
"ecosystem": "golang",
"licenses": [],
"location": "go.mod",
"name": "software.sslmate.com/src/go-pkcs12",
"purl": "pkg:golang/software.sslmate.com/src/go-pkcs12@v0.7.2",
"version": "v0.7.2"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/actions/build-ui",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build-artifacts-ce.yml",
"name": "./.github/actions/build-vault",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/actions/changed-files",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/actions/checkout",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/actions/build-vault/action.yml",
"name": "./.github/actions/containerize",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/test-run-enos-scenario-matrix.yml",
"name": "./.github/actions/create-dynamic-config",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/actions/build-vault/action.yml",
"name": "./.github/actions/install-tools",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/benchmark-prevent-performance-degradations.yml",
"name": "./.github/actions/metadata",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/ci.yml",
"name": "./.github/actions/run-apupgrade-tests",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/test-run-enos-scenario-containers.yml",
"name": "./.github/actions/run-enos-scenario",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/actions/build-vault/action.yml",
"name": "./.github/actions/set-up-go",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/test-go.yml",
"name": "./.github/actions/set-up-gvisor",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/actions/changed-files/action.yml",
"name": "./.github/actions/set-up-pipeline",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/test-ui.yml",
"name": "./.github/actions/set-up-pnpm",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/workflows/build-artifacts-ce.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/workflows/build-artifacts-ent.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/workflows/build-hcp-image.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/ci.yml",
"name": "./.github/workflows/test-go.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/test-acc-dockeronly-nightly.yml",
"name": "./.github/workflows/test-run-acc-tests-for-path.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/workflows/test-run-enos-scenario-cloud.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/workflows/test-run-enos-scenario-containers.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/build.yml",
"name": "./.github/workflows/test-run-enos-scenario-matrix.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/ci.yml",
"name": "./.github/workflows/test-ui.yml",
"purl": "",
"version": "UNKNOWN"
},
{
"ecosystem": "unknown",
"licenses": [],
"location": ".github/workflows/security-scan.yml",
"name": "./security-scanner",
"purl": "",
"version": "UNKNOWN"
}
],
"description": "Manage secrets, encryption, and privileged access",
"errors": [],
"id": "hashicorp__vault",
"manifests": [
".github/actions/build-ui/action.yml",
".github/actions/build-vault/action.yml",
".github/actions/changed-files/action.yml",
".github/actions/checkout/action.yml",
".github/actions/containerize/action.yml",
".github/actions/create-dynamic-config/action.yml",
".github/actions/install-tools/action.yml",
".github/actions/metadata/action.yml",
".github/actions/run-enos-scenario/action.yml",
".github/actions/set-up-go/action.yml",
".github/actions/set-up-gvisor/action.yml",
".github/actions/set-up-pipeline/action.yml",
".github/actions/set-up-pnpm/action.yml",
".github/workflows/actionlint.yml",
".github/workflows/add-hashicorp-contributed-label.yml",
".github/workflows/benchmark-prevent-performance-degradations.yml",
".github/workflows/bob-review-approval-gate.yml",
".github/workflows/bob-review-gate.yml",
".github/workflows/build-artifacts-ce.yml",
".github/workflows/build-artifacts-ent.yml",
".github/workflows/build-hcp-image.yml",
".github/workflows/build.yml",
".github/workflows/changelog-checker.yml",
".github/workflows/ci.yml",
".github/workflows/code-checker.yml",
".github/workflows/copy-external-contributor-pull-request-ce.yml",
".github/workflows/copywrite.yml",
".github/workflows/do-not-merge-checker.yml",
".github/workflows/enos-lint.yml",
".github/workflows/enos-release-testing-oss.yml",
".github/workflows/git-heatmap.yml",
".github/workflows/mend-pr-scan.yml",
".github/workflows/milestone-checker.yml",
".github/workflows/oss.yml",
".github/workflows/plugin-update-check.yml",
".github/workflows/plugin-update.yml",
".github/workflows/remove-labels.yml",
".github/workflows/security-scan.yml",
".github/workflows/test-acc-dockeronly-nightly.yml",
".github/workflows/test-ci-bootstrap.yml",
".github/workflows/test-ci-cleanup.yml",
".github/workflows/test-enos-scenario-ui.yml",
".github/workflows/test-go.yml",
".github/workflows/test-run-acc-tests-for-path.yml",
".github/workflows/test-run-enos-scenario-cloud.yml",
".github/workflows/test-run-enos-scenario-containers.yml",
".github/workflows/test-run-enos-scenario-matrix.yml",
".github/workflows/test-run-enos-scenario.yml",
".github/workflows/test-ui.yml",
".github/workflows/ui-client-update.yml",
"api/auth/approle/go.mod",
"api/auth/approle/go.sum",
"api/auth/aws/go.mod",
"api/auth/aws/go.sum",
"api/auth/azure/go.mod",
"api/auth/azure/go.sum",
"api/auth/cert/go.mod",
"api/auth/cert/go.sum",
"api/auth/gcp/go.mod",
"api/auth/gcp/go.sum",
"api/auth/kubernetes/go.mod",
"api/auth/kubernetes/go.sum",
"api/auth/ldap/go.mod",
"api/auth/ldap/go.sum",
"api/auth/userpass/go.mod",
"api/auth/userpass/go.sum",
"api/go.mod",
"api/go.sum",
"command/base/go.mod",
"command/base/go.sum",
"command/client/go.mod",
"command/client/go.sum",
"go.mod",
"go.sum",
"internalshared/go.mod",
"internalshared/go.sum",
"sdk/go.mod",
"sdk/go.sum",
"tools/pipeline/go.mod",
"tools/pipeline/go.sum",
"ui/lib/config-ui/package.json",
"ui/lib/core/package.json",
"ui/lib/keep-gitkeep/package.json",
"ui/lib/kmip/package.json",
"ui/lib/kubernetes/package.json",
"ui/lib/kv/package.json",
"ui/lib/ldap/package.json",
"ui/lib/open-api-explorer/package.json",
"ui/lib/pki/package.json",
"ui/lib/replication/package.json",
"ui/lib/service-worker-authenticated-download/package.json",
"ui/lib/sync/package.json",
"ui/package.json",
"ui/pnpm-lock.yaml",
"version/go.mod",
"version/go.sum"
],
"name": "vault",
"osv": {
"advisories": 189,
"available": true,
"confirmed": 24,
"osv_only": [
{
"ecosystem": "Go",
"ids": [
"CVE-2026-12681",
"GHSA-9r4w-jg96-92mv",
"GO-2026-5298"
],
"package": "github.com/google/go-attestation",
"score": "",
"severity": "Unknown",
"version": "0.6.4"
},
{
"ecosystem": "Go",
"ids": [
"CVE-2026-12681",
"GHSA-9r4w-jg96-92mv",
"GO-2026-5298"
],
"package": "github.com/google/go-attestation",
"score": "",
"severity": "Unknown",
"version": "0.6.4"
},
{
"ecosystem": "Go",
"ids": [
"CVE-2026-12681",
"GHSA-9r4w-jg96-92mv",
"GO-2026-5298"
],
"package": "github.com/google/go-attestation",
"score": "",
"severity": "Unknown",
"version": "0.6.4"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-49356",
"GHSA-4x5r-pxfx-6jf8"
],
"package": "@babel/core",
"score": "3.2",
"severity": "Low",
"version": "7.26.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83608",
"GHSA-27p8-2357-5qqv"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83609",
"GHSA-3px3-54cx-rmw9"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83605",
"GHSA-4w3w-2rp5-g8jm"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83610",
"GHSA-6gmq-8vp8-gcm6"
],
"package": "@xmldom/xmldom",
"score": "6.3",
"severity": "Medium",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83611",
"GHSA-6h8r-xr42-gp59"
],
"package": "@xmldom/xmldom",
"score": "6.9",
"severity": "Medium",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83612",
"GHSA-6mj3-qw4j-hgrw"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83613",
"GHSA-8344-3jmq-59r6"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83614",
"GHSA-93r5-fhx6-vmg9"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83615",
"GHSA-965w-775f-mr7g"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83616",
"GHSA-c7q8-3ch8-vqpv"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83606",
"GHSA-g53g-w8rj-fmg7"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83618",
"GHSA-vr34-hp96-76pp"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-83607",
"GHSA-w2rr-34g9-rvrj"
],
"package": "@xmldom/xmldom",
"score": "8.7",
"severity": "High",
"version": "0.9.10"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-45819",
"GHSA-w5vr-8v7q-w6rv"
],
"package": "baseline-browser-mapping",
"score": "6.6",
"severity": "Medium",
"version": "2.10.32"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-111181",
"GHSA-27r3-jxmh-p828"
],
"package": "body-parser",
"score": "7.5",
"severity": "High",
"version": "1.20.5"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-12590",
"GHSA-v422-hmwv-36x6"
],
"package": "body-parser",
"score": "3.7",
"severity": "Low",
"version": "1.20.5"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-111181",
"GHSA-27r3-jxmh-p828"
],
"package": "body-parser",
"score": "7.5",
"severity": "High",
"version": "2.2.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-12590",
"GHSA-v422-hmwv-36x6"
],
"package": "body-parser",
"score": "3.7",
"severity": "Low",
"version": "2.2.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-13149",
"GHSA-3jxr-9vmj-r5cp"
],
"package": "brace-expansion",
"score": "7.7",
"severity": "High",
"version": "1.1.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102276",
"GHSA-6j4f-fj2g-mc7p"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "1.1.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-14257",
"GHSA-mh99-v99m-4gvg"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "1.1.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102277",
"GHSA-q2hr-2g5m-vwhr"
],
"package": "brace-expansion",
"score": "5.3",
"severity": "Medium",
"version": "1.1.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102278",
"GHSA-qhr7-859c-m2p7"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "1.1.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-69152",
"GHSA-rgw5-rvv9-x895"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "1.1.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-13149",
"GHSA-3jxr-9vmj-r5cp"
],
"package": "brace-expansion",
"score": "7.7",
"severity": "High",
"version": "2.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102276",
"GHSA-6j4f-fj2g-mc7p"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "2.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-14257",
"GHSA-mh99-v99m-4gvg"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "2.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102277",
"GHSA-q2hr-2g5m-vwhr"
],
"package": "brace-expansion",
"score": "5.3",
"severity": "Medium",
"version": "2.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102278",
"GHSA-qhr7-859c-m2p7"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "2.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-69152",
"GHSA-rgw5-rvv9-x895"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "2.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-13149",
"GHSA-3jxr-9vmj-r5cp"
],
"package": "brace-expansion",
"score": "7.7",
"severity": "High",
"version": "5.0.6"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102276",
"GHSA-6j4f-fj2g-mc7p"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "5.0.6"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-14257",
"GHSA-mh99-v99m-4gvg"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "5.0.6"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102277",
"GHSA-q2hr-2g5m-vwhr"
],
"package": "brace-expansion",
"score": "5.3",
"severity": "Medium",
"version": "5.0.6"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102278",
"GHSA-qhr7-859c-m2p7"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "5.0.6"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-69152",
"GHSA-rgw5-rvv9-x895"
],
"package": "brace-expansion",
"score": "7.5",
"severity": "High",
"version": "5.0.6"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-73088",
"GHSA-73wf-gq98-2v4g"
],
"package": "browserslist",
"score": "7.5",
"severity": "High",
"version": "4.28.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-73089",
"GHSA-c83g-rgw3-j3cx"
],
"package": "browserslist",
"score": "7.5",
"severity": "High",
"version": "4.28.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-85062",
"GHSA-2wm5-q62r-hmrv"
],
"package": "colord",
"score": "6.9",
"severity": "Medium",
"version": "2.9.3"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-87776",
"GHSA-vc2v-76pw-4v95"
],
"package": "compression",
"score": "7.5",
"severity": "High",
"version": "1.8.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-24001",
"GHSA-73rr-hh4g-fpgx"
],
"package": "diff",
"score": "2.7",
"severity": "Low",
"version": "7.0.0"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-109345",
"GHSA-6688-9rhm-gjv2"
],
"package": "dompurify",
"score": "",
"severity": "Unknown",
"version": "3.4.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-116802",
"GHSA-c6gr-qvv4-5v3f"
],
"package": "dompurify",
"score": "",
"severity": "Unknown",
"version": "3.4.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-116804",
"GHSA-cg2g-xh64-v4q7"
],
"package": "dompurify",
"score": "9.2",
"severity": "Critical",
"version": "3.4.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-116803",
"GHSA-mrv2-3pqr-j5jr"
],
"package": "dompurify",
"score": "7.6",
"severity": "High",
"version": "3.4.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-109344",
"GHSA-p98j-92pf-mc4p"
],
"package": "dompurify",
"score": "2.3",
"severity": "Low",
"version": "3.4.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102599",
"GHSA-2gc4-cqfq-p2gv"
],
"package": "engine.io",
"score": "7.5",
"severity": "High",
"version": "6.6.8"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-110725",
"GHSA-333x-w4r6-6crp"
],
"package": "fast-uri",
"score": "3.7",
"severity": "Low",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-13676",
"GHSA-4c8g-83qw-93j6"
],
"package": "fast-uri",
"score": "7.5",
"severity": "High",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-18446",
"GHSA-7p8r-x3mc-p8w7"
],
"package": "fast-uri",
"score": "7.5",
"severity": "High",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-75975",
"GHSA-f65p-4m7j-42xc"
],
"package": "fast-uri",
"score": "7.5",
"severity": "High",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-75899",
"GHSA-fph4-wmhf-6fwf"
],
"package": "fast-uri",
"score": "7.5",
"severity": "High",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-86472",
"GHSA-hrr3-gc8f-f4qj"
],
"package": "fast-uri",
"score": "4.8",
"severity": "Medium",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-76172",
"GHSA-jqff-g426-hqxp"
],
"package": "fast-uri",
"score": "7.5",
"severity": "High",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-84292",
"GHSA-qw65-cvwx-89v3"
],
"package": "fast-uri",
"score": "7.5",
"severity": "High",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-16221",
"GHSA-v2hh-gcrm-f6hx"
],
"package": "fast-uri",
"score": "7.5",
"severity": "High",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-110306",
"GHSA-w74x-v6f9-j3xg"
],
"package": "fast-uri",
"score": "6.1",
"severity": "Medium",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-110095",
"GHSA-xhq7-xmqj-769h"
],
"package": "fast-uri",
"score": "3.7",
"severity": "Low",
"version": "3.1.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-45820",
"GHSA-px8p-9vwx-vf98"
],
"package": "fflate",
"score": "7.5",
"severity": "High",
"version": "0.4.8"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-111755",
"GHSA-8r9p-f939-6h3c"
],
"package": "follow-redirects",
"score": "8.2",
"severity": "High",
"version": "1.16.0"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-116689",
"GHSA-mrwp-f3q8-3g9p"
],
"package": "follow-redirects",
"score": "8.2",
"severity": "High",
"version": "1.16.0"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-111756",
"GHSA-q3jh-wrc6-jgq8"
],
"package": "follow-redirects",
"score": "8.2",
"severity": "High",
"version": "1.16.0"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118773",
"GHSA-3g3m-2fjr-6pw4"
],
"package": "glob",
"score": "6.3",
"severity": "Medium",
"version": "10.5.0"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118773",
"GHSA-3g3m-2fjr-6pw4"
],
"package": "glob",
"score": "6.3",
"severity": "Medium",
"version": "13.0.6"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118773",
"GHSA-3g3m-2fjr-6pw4"
],
"package": "glob",
"score": "6.3",
"severity": "Medium",
"version": "9.3.5"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-106446",
"GHSA-8r5x-fm3f-whwj"
],
"package": "handlebars",
"score": "9.8",
"severity": "Critical",
"version": "4.7.9"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-106445",
"GHSA-p8wg-vrv2-v86f"
],
"package": "handlebars",
"score": "9.2",
"severity": "Critical",
"version": "4.7.9"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-106444",
"GHSA-xw65-4hp5-5hc7"
],
"package": "handlebars",
"score": "4.7",
"severity": "Medium",
"version": "4.7.9"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-59879",
"GHSA-v56q-mh7h-f735"
],
"package": "immutable",
"score": "8.7",
"severity": "High",
"version": "5.1.5"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-59880",
"GHSA-xvcm-6775-5m9r"
],
"package": "immutable",
"score": "8.7",
"severity": "High",
"version": "5.1.5"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-84375",
"GHSA-2883-xcg3-v3hh"
],
"package": "js-yaml",
"score": "7.5",
"severity": "High",
"version": "4.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-59869",
"GHSA-52cp-r559-cp3m"
],
"package": "js-yaml",
"score": "7.5",
"severity": "High",
"version": "4.1.1"
},
{
"ecosystem": "npm",
"ids": [
"GHSA-5p4m-2wfm-xmqj"
],
"package": "js-yaml",
"score": "7.5",
"severity": "High",
"version": "4.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-53550",
"GHSA-h67p-54hq-rp68"
],
"package": "js-yaml",
"score": "5.3",
"severity": "Medium",
"version": "4.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-8657",
"GHSA-j4fx-xxwh-2485"
],
"package": "jsondiffpatch",
"score": "8.2",
"severity": "High",
"version": "0.7.3"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-59887",
"GHSA-v245-v573-v5vm"
],
"package": "linkify-it",
"score": "7.5",
"severity": "High",
"version": "5.0.1"
},
{
"ecosystem": "npm",
"ids": [
"GHSA-253c-mchw-3w2r"
],
"package": "markdown-it",
"score": "6.3",
"severity": "Medium",
"version": "14.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-48988",
"GHSA-6v5v-wf23-fmfq"
],
"package": "markdown-it",
"score": "5.3",
"severity": "Medium",
"version": "14.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-111758",
"GHSA-gfr2-rv44-r23c"
],
"package": "markdown-it",
"score": "7.5",
"severity": "High",
"version": "14.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-111759",
"GHSA-r7fv-28h4-cvq7"
],
"package": "markdown-it",
"score": "7.5",
"severity": "High",
"version": "14.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-111766",
"GHSA-vfgh-jcmw-g37q"
],
"package": "markdown-it",
"score": "3.7",
"severity": "Low",
"version": "14.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118764",
"GHSA-g3hv-75wg-m249"
],
"package": "minimatch",
"score": "6.9",
"severity": "Medium",
"version": "10.2.5"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118764",
"GHSA-g3hv-75wg-m249"
],
"package": "minimatch",
"score": "6.9",
"severity": "Medium",
"version": "3.1.5"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118764",
"GHSA-g3hv-75wg-m249"
],
"package": "minimatch",
"score": "6.9",
"severity": "Medium",
"version": "5.1.9"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118764",
"GHSA-g3hv-75wg-m249"
],
"package": "minimatch",
"score": "6.9",
"severity": "Medium",
"version": "7.4.9"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118764",
"GHSA-g3hv-75wg-m249"
],
"package": "minimatch",
"score": "6.9",
"severity": "Medium",
"version": "8.0.7"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-118764",
"GHSA-g3hv-75wg-m249"
],
"package": "minimatch",
"score": "6.9",
"severity": "Medium",
"version": "9.0.9"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-5078",
"GHSA-4vj7-5mj6-jm8m"
],
"package": "morgan",
"score": "5.3",
"severity": "Medium",
"version": "1.10.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-87859",
"GHSA-9f6g-j8ch-79g4"
],
"package": "morgan",
"score": "5.3",
"severity": "Medium",
"version": "1.10.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-15603",
"GHSA-jxfw-x594-9x9m"
],
"package": "morgan",
"score": "5.3",
"severity": "Medium",
"version": "1.10.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-67214",
"GHSA-28wg-ghj8-5hjv"
],
"package": "nanoid",
"score": "8.2",
"severity": "High",
"version": "3.3.12"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-67213",
"GHSA-2v37-7h3g-55p8"
],
"package": "nanoid",
"score": "8.2",
"severity": "High",
"version": "3.3.12"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-69153",
"GHSA-fxqj-rqcc-2cmp"
],
"package": "postcss",
"score": "6.3",
"severity": "Medium",
"version": "8.5.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-73646",
"GHSA-r28c-9q8g-f849"
],
"package": "postcss",
"score": "7.5",
"severity": "High",
"version": "8.5.15"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-104844",
"GHSA-rj75-hqrm-r3gf"
],
"package": "postcss-selector-parser",
"score": "5.9",
"severity": "Medium",
"version": "7.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-9358",
"GHSA-w9m9-85wc-3x92"
],
"package": "postcss-selector-parser",
"score": "4.3",
"severity": "Medium",
"version": "7.1.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-90711",
"GHSA-jqcg-44mw-7w3h"
],
"package": "proxy-addr",
"score": "9.1",
"severity": "Critical",
"version": "2.0.7"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-82417",
"GHSA-4mjr-xmp4-gh2g"
],
"package": "qs",
"score": "6.3",
"severity": "Medium",
"version": "6.14.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-110816",
"GHSA-6pq8-jhm2-2vcw"
],
"package": "qs",
"score": "6.3",
"severity": "Medium",
"version": "6.14.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-8723",
"GHSA-q8mj-m7cp-5q26"
],
"package": "qs",
"score": "6.3",
"severity": "Medium",
"version": "6.14.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-2391",
"GHSA-w7fw-mjwx-w883"
],
"package": "qs",
"score": "3.7",
"severity": "Low",
"version": "6.14.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-82417",
"GHSA-4mjr-xmp4-gh2g"
],
"package": "qs",
"score": "6.3",
"severity": "Medium",
"version": "6.15.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-110816",
"GHSA-6pq8-jhm2-2vcw"
],
"package": "qs",
"score": "6.3",
"severity": "Medium",
"version": "6.15.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-82562",
"GHSA-x5fp-wj9c-mxmx"
],
"package": "qs",
"score": "6.3",
"severity": "Medium",
"version": "6.15.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-13311",
"GHSA-395f-4hp3-45gv"
],
"package": "shell-quote",
"score": "8.7",
"severity": "High",
"version": "1.8.4"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-102422",
"GHSA-pqg4-j6r4-53mv"
],
"package": "shell-quote",
"score": "9.2",
"severity": "Critical",
"version": "1.8.4"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-69185",
"GHSA-2m8v-j782-fhvr"
],
"package": "socket.io-parser",
"score": "7.5",
"severity": "High",
"version": "4.2.6"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-93749",
"GHSA-68fv-2mgg-jv7q"
],
"package": "source-map-js",
"score": "8.7",
"severity": "High",
"version": "1.2.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-41907",
"CVE-2026-41988",
"GHSA-w5hq-g745-h8pq"
],
"package": "uuid",
"score": "7.5",
"severity": "High",
"version": "8.3.2"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-41907",
"CVE-2026-41988",
"GHSA-w5hq-g745-h8pq"
],
"package": "uuid",
"score": "7.5",
"severity": "High",
"version": "9.0.1"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-54490",
"GHSA-mp7j-qc5w-4988"
],
"package": "websocket-driver",
"score": "6.3",
"severity": "Medium",
"version": "0.7.4"
},
{
"ecosystem": "npm",
"ids": [
"CVE-2026-54466",
"GHSA-xv26-6w52-cph6"
],
"package": "websocket-driver",
"score": "9.2",
"severity": "Critical",
"version": "0.7.4"
}
],
"warning": null
},
"ref": "v2.2.1",
"ref_kind": "release",
"release_integrity": {
"assets": 0,
"checksums_published": false,
"methods": [],
"provenance_published": false,
"sbom_published": false,
"signatures_published": false,
"verdict": "no-assets"
},
"released_at": "2026-10-22T21:59:36Z",
"repository": "hashicorp/vault",
"sbomlyze_diff": {
"added": 0,
"changed": 0,
"drift": {},
"findings": [
"Attack surface: -6 packages (-0.3%)",
"0 version changes among 2,003 shared packages \u2014 no actual upgrades",
"Core system packages stable: golang (1,743) unchanged"
],
"html": "sbomlyze-diff.html",
"removed": 2
},
"scanned_at": "2026-11-02T03:06:50+00:00",
"scorecard": {
"checks": [
{
"name": "CII-Best-Practices",
"reason": "no effort to earn an OpenSSF best practices badge detected",
"score": 0
},
{
"name": "Code-Review",
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"score": 0
},
{
"name": "SAST",
"reason": "no SAST tool detected",
"score": 0
},
{
"name": "Token-Permissions",
"reason": "detected GitHub workflow tokens with excessive permissions",
"score": 0
},
{
"name": "Branch-Protection",
"reason": "branch protection is not maximal on development and all release branches",
"score": 8
},
{
"name": "Pinned-Dependencies",
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"score": 8
},
{
"name": "License",
"reason": "license file detected",
"score": 9
},
{
"name": "Binary-Artifacts",
"reason": "no binaries found in the repo",
"score": 10
},
{
"name": "Dangerous-Workflow",
"reason": "no dangerous workflow patterns detected",
"score": 10
},
{
"name": "Fuzzing",
"reason": "project is fuzzed",
"score": 10
},
{
"name": "Maintained",
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"score": 10
},
{
"name": "Security-Policy",
"reason": "security policy file detected",
"score": 10
},
{
"name": "Packaging",
"reason": "packaging workflow not detected",
"score": -1
},
{
"name": "Signed-Releases",
"reason": "no releases found",
"score": -1
}
],
"date": "2026-10-19",
"score": 6.5,
"source": "openssf-api",
"version": "v5.6.0"
},
"vulnerabilities": [
{
"aliases": [
"CVE-2026-116587"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-116587",
"percentile": 0.3048,
"score": 0.00366
},
"fix_state": "not-fixed",
"fixed_in": [],
"id": "GHSA-mgcc-cww5-fp2q",
"kev": null,
"location": "go.mod",
"osv_confirmed": true,
"package": "github.com/go-jose/go-jose/v3",
"severity": "High",
"summary": "Go JOSE: DoS when parsing JWKs that contain RSA keys",
"url": "https://github.com/advisories/GHSA-mgcc-cww5-fp2q",
"version": "v3.0.5"
},
{
"aliases": [
"CVE-2026-116587"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-116587",
"percentile": 0.3048,
"score": 0.00366
},
"fix_state": "fixed",
"fixed_in": [
"4.1.6"
],
"id": "GHSA-mgcc-cww5-fp2q",
"kev": null,
"location": "api/auth/azure/go.mod",
"osv_confirmed": true,
"package": "github.com/go-jose/go-jose/v4",
"severity": "High",
"summary": "Go JOSE: DoS when parsing JWKs that contain RSA keys",
"url": "https://github.com/advisories/GHSA-mgcc-cww5-fp2q",
"version": "v4.1.5"
},
{
"aliases": [
"CVE-2026-113729"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-113729",
"percentile": 0.39775,
"score": 0.00459
},
"fix_state": "fixed",
"fixed_in": [
"1.4.1"
],
"id": "GHSA-5588-rp99-5fjh",
"kev": null,
"location": "go.mod",
"osv_confirmed": false,
"package": "github.com/moov-io/signedxml",
"severity": "High",
"summary": "Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization",
"url": "https://github.com/advisories/GHSA-5588-rp99-5fjh",
"version": "v1.1.1"
},
{
"aliases": [
"CVE-2026-107214"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107214",
"percentile": 0.15207,
"score": 0.0024
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260915055537-22f76f9acb94"
],
"id": "GHSA-2j4c-ffch-9f23",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks",
"url": "https://github.com/advisories/GHSA-2j4c-ffch-9f23",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107217"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107217",
"percentile": 0.30109,
"score": 0.00363
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260910071107-696050fbf14e"
],
"id": "GHSA-c85p-xxjj-2r75",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r=\"0\" rows",
"url": "https://github.com/advisories/GHSA-c85p-xxjj-2r75",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107223"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107223",
"percentile": 0.30959,
"score": 0.0037
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260807015645-a54c578af309"
],
"id": "GHSA-fq3v-74gv-27gm",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize: Unbounded attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process",
"url": "https://github.com/advisories/GHSA-fq3v-74gv-27gm",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107219"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107219",
"percentile": 0.30108,
"score": 0.00363
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260906004932-2badfcd5841d"
],
"id": "GHSA-jrfj-fhj2-jjvm",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile",
"url": "https://github.com/advisories/GHSA-jrfj-fhj2-jjvm",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107212"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107212",
"percentile": 0.30108,
"score": 0.00363
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260930021559-01a9ff32fb3c"
],
"id": "GHSA-jw42-f3rr-4cc3",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days",
"url": "https://github.com/advisories/GHSA-jw42-f3rr-4cc3",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107211"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107211",
"percentile": 0.14347,
"score": 0.00234
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20261003002531-6258dcebc4e2"
],
"id": "GHSA-mx22-3794-2vpv",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic",
"url": "https://github.com/advisories/GHSA-mx22-3794-2vpv",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107213"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107213",
"percentile": 0.14347,
"score": 0.00234
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260929015830-8ffeb07ec9a3"
],
"id": "GHSA-r7x5-4969-99p7",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element",
"url": "https://github.com/advisories/GHSA-r7x5-4969-99p7",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107216"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107216",
"percentile": 0.31504,
"score": 0.00375
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260911060113-ea12859e43c6"
],
"id": "GHSA-wp2g-vpjj-g53r",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow",
"url": "https://github.com/advisories/GHSA-wp2g-vpjj-g53r",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107215"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107215",
"percentile": 0.15207,
"score": 0.0024
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260912113515-5f636f9dcde5"
],
"id": "GHSA-x2q3-8cjh-766f",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "High",
"summary": "Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS",
"url": "https://github.com/advisories/GHSA-x2q3-8cjh-766f",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-116585"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-116585",
"percentile": 0.18368,
"score": 0.00264
},
"fix_state": "not-fixed",
"fixed_in": [],
"id": "GHSA-4w3g-jfj2-cw2q",
"kev": null,
"location": "go.mod",
"osv_confirmed": true,
"package": "github.com/go-jose/go-jose/v3",
"severity": "Medium",
"summary": "Go JOSE: Panic during CBC-HMAC processing",
"url": "https://github.com/advisories/GHSA-4w3g-jfj2-cw2q",
"version": "v3.0.5"
},
{
"aliases": [
"CVE-2026-116586"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-116586",
"percentile": 0.21769,
"score": 0.00292
},
"fix_state": "not-fixed",
"fixed_in": [],
"id": "GHSA-vvm8-gf78-28g4",
"kev": null,
"location": "go.mod",
"osv_confirmed": true,
"package": "github.com/go-jose/go-jose/v3",
"severity": "Medium",
"summary": "Go JOSE: Panics in JSON parsing",
"url": "https://github.com/advisories/GHSA-vvm8-gf78-28g4",
"version": "v3.0.5"
},
{
"aliases": [
"CVE-2026-86597"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-86597",
"percentile": 0.00389,
"score": 0.00089
},
"fix_state": "not-fixed",
"fixed_in": [],
"id": "GHSA-qqj6-54q6-cxv6",
"kev": null,
"location": "go.mod",
"osv_confirmed": true,
"package": "github.com/snowflakedb/gosnowflake",
"severity": "Medium",
"summary": "Snowflake drivers writes sensitive information to logs",
"url": "https://github.com/advisories/GHSA-qqj6-54q6-cxv6",
"version": "v1.19.0"
},
{
"aliases": [
"CVE-2026-107225"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107225",
"percentile": 0.1921,
"score": 0.0027
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260731010303-ae2113b410e5"
],
"id": "GHSA-5h23-36rv-pm65",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "Medium",
"summary": "Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml",
"url": "https://github.com/advisories/GHSA-5h23-36rv-pm65",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107218"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107218",
"percentile": 0.23769,
"score": 0.00309
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260908032718-ecd99d761fe0"
],
"id": "GHSA-8jjq-8j9w-m2v6",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "Medium",
"summary": "Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics",
"url": "https://github.com/advisories/GHSA-8jjq-8j9w-m2v6",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107221"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107221",
"percentile": 0.19209,
"score": 0.0027
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260816084418-46a5eb289448"
],
"id": "GHSA-8mcq-6wmr-jrjv",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "Medium",
"summary": "Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API",
"url": "https://github.com/advisories/GHSA-8mcq-6wmr-jrjv",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107224"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107224",
"percentile": 0.23473,
"score": 0.00306
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260805032953-db93f8d89de7"
],
"id": "GHSA-fw94-4wwp-w8pw",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "Medium",
"summary": "Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader",
"url": "https://github.com/advisories/GHSA-fw94-4wwp-w8pw",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107220"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107220",
"percentile": 0.18381,
"score": 0.00264
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260820023833-99903a3240e5"
],
"id": "GHSA-g27h-8qhm-6pff",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "Medium",
"summary": "Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref",
"url": "https://github.com/advisories/GHSA-g27h-8qhm-6pff",
"version": "v2.11.0"
},
{
"aliases": [
"CVE-2026-107222"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-107222",
"percentile": 0.1921,
"score": 0.0027
},
"fix_state": "fixed",
"fixed_in": [
"2.11.1-0.20260812075026-be7a16390fa6"
],
"id": "GHSA-rxcj-4pj5-74gr",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "github.com/xuri/excelize/v2",
"severity": "Medium",
"summary": "Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check",
"url": "https://github.com/advisories/GHSA-rxcj-4pj5-74gr",
"version": "v2.11.0"
},
{
"aliases": [],
"ecosystem": "golang",
"epss": null,
"fix_state": "unknown",
"fixed_in": [],
"id": "GO-2026-5932",
"kev": null,
"location": "api/auth/gcp/go.mod",
"osv_confirmed": true,
"package": "golang.org/x/crypto",
"severity": "Unknown",
"summary": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained f",
"url": "https://go.dev/issue/44226",
"version": "v0.57.0"
},
{
"aliases": [],
"ecosystem": "golang",
"epss": null,
"fix_state": "unknown",
"fixed_in": [],
"id": "GO-2026-5932",
"kev": null,
"location": "go.mod",
"osv_confirmed": true,
"package": "golang.org/x/crypto",
"severity": "Unknown",
"summary": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained f",
"url": "https://go.dev/issue/44226",
"version": "v0.58.0"
},
{
"aliases": [
"CVE-2026-78661"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-78661",
"percentile": 0.08063,
"score": 0.00185
},
"fix_state": "fixed",
"fixed_in": [
"0.62.0"
],
"id": "GO-2026-6860",
"kev": null,
"location": "api/auth/approle/go.mod",
"osv_confirmed": true,
"package": "golang.org/x/net",
"severity": "Unknown",
"summary": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a\") cau",
"url": "https://go.dev/cl/849365",
"version": "v0.60.0"
},
{
"aliases": [
"CVE-2026-97045"
],
"ecosystem": "golang",
"epss": {
"cve": "CVE-2026-97045",
"percentile": 0.10117,
"score": 0.00202
},
"fix_state": "fixed",
"fixed_in": [
"0.62.0"
],
"id": "GO-2026-6866",
"kev": null,
"location": "tools/pipeline/go.mod",
"osv_confirmed": true,
"package": "golang.org/x/net",
"severity": "Unknown",
"summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as or f",
"url": "https://go.dev/cl/855121",
"version": "v0.60.0"
}
],
"workflow_audit": {
"files": 50,
"findings": [
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/build-vault/action.yml",
"line": 223,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/changed-files/action.yml",
"line": 27,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/changed-files/action.yml",
"line": 27,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/changed-files/action.yml",
"line": 27,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/checkout/action.yml",
"line": 30,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/checkout/action.yml",
"line": 30,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/checkout/action.yml",
"line": 30,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 49,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 128,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 128,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 128,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/containerize/action.yml",
"line": 128,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/create-dynamic-config/action.yml",
"line": 19,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/create-dynamic-config/action.yml",
"line": 19,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/create-dynamic-config/action.yml",
"line": 48,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/create-dynamic-config/action.yml",
"line": 48,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/install-tools/action.yml",
"line": 28,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/install-tools/action.yml",
"line": 28,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/metadata/action.yml",
"line": 101,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/metadata/action.yml",
"line": 101,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/metadata/action.yml",
"line": 101,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/metadata/action.yml",
"line": 101,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/metadata/action.yml",
"line": 101,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/metadata/action.yml",
"line": 101,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/metadata/action.yml",
"line": 101,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 111,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 111,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 132,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 132,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 132,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 132,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 143,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 143,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 143,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 143,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 158,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 228,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 228,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 228,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 228,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 239,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 239,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 239,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 239,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 251,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 251,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 251,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/run-enos-scenario/action.yml",
"line": 251,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-go/action.yml",
"line": 37,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-go/action.yml",
"line": 37,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-go/action.yml",
"line": 88,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-go/action.yml",
"line": 88,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-gvisor/action.yml",
"line": 24,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-gvisor/action.yml",
"line": 52,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-gvisor/action.yml",
"line": 52,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-gvisor/action.yml",
"line": 52,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/set-up-gvisor/action.yml",
"line": 84,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/changelog-checker.yml",
"line": 30,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/changelog-checker.yml",
"line": 30,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/ci.yml",
"line": 704,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/copy-external-contributor-pull-request-ce.yml",
"line": 46,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/copy-external-contributor-pull-request-ce.yml",
"line": 56,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/enos-release-testing-oss.yml",
"line": 33,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/enos-release-testing-oss.yml",
"line": 33,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/enos-release-testing-oss.yml",
"line": 33,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/enos-release-testing-oss.yml",
"line": 33,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/enos-release-testing-oss.yml",
"line": 33,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/enos-release-testing-oss.yml",
"line": 33,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "unpinned action reference",
"file": ".github/workflows/mend-pr-scan.yml",
"line": 24,
"note": "this step",
"rule": "unpinned-uses",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#unpinned-uses"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update-check.yml",
"line": 48,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 56,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 56,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 70,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 70,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 78,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 78,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 78,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 90,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 90,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 90,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 111,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 111,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 111,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 111,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/plugin-update.yml",
"line": 111,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "use of fundamentally insecure workflow trigger",
"file": ".github/workflows/remove-labels.yml",
"line": 3,
"note": "this workflow",
"rule": "dangerous-triggers",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#dangerous-triggers"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-ci-cleanup.yml",
"line": 112,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-enos-scenario-ui.yml",
"line": 153,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-enos-scenario-ui.yml",
"line": 160,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-enos-scenario-ui.yml",
"line": 166,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-enos-scenario-ui.yml",
"line": 171,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 198,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 208,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 208,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 231,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 318,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 318,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 318,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 318,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 432,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 432,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 432,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 432,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 432,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 432,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 575,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 687,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 738,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-acc-tests-for-path.yml",
"line": 30,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-acc-tests-for-path.yml",
"line": 30,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-containers.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-containers.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-containers.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-containers.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-containers.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 86,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 86,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 86,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 86,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 86,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 86,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 216,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 216,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 216,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 58,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 134,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 134,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 134,
"note": "this step",
"rule": "template-injection",
"severity": "High",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/actionlint.yml",
"line": 14,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/add-hashicorp-contributed-label.yml",
"line": 17,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/benchmark-prevent-performance-degradations.yml",
"line": 14,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/build-artifacts-ce.yml",
"line": 1,
"note": "default permissions used due to no permissions: block",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/build-artifacts-ce.yml",
"line": 86,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/build-artifacts-ce.yml",
"line": 172,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/build.yml",
"line": 428,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/build.yml",
"line": 469,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/build.yml",
"line": 541,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/build.yml",
"line": 576,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/ci.yml",
"line": 190,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/ci.yml",
"line": 224,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/ci.yml",
"line": 264,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/ci.yml",
"line": 308,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/ci.yml",
"line": 341,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/code-checker.yml",
"line": 1,
"note": "default permissions used due to no permissions: block",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/code-checker.yml",
"line": 230,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/code-checker.yml",
"line": 246,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/copy-external-contributor-pull-request-ce.yml",
"line": 25,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/do-not-merge-checker.yml",
"line": 15,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "High",
"description": "secrets unconditionally inherited by called workflow",
"file": ".github/workflows/enos-release-testing-oss.yml",
"line": 46,
"note": "this reusable workflow",
"rule": "secrets-inherit",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#secrets-inherit"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/milestone-checker.yml",
"line": 18,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/oss.yml",
"line": 15,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/plugin-update-check.yml",
"line": 17,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/plugin-update.yml",
"line": 33,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/remove-labels.yml",
"line": 11,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/test-acc-dockeronly-nightly.yml",
"line": 1,
"note": "default permissions used due to no permissions: block",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/test-acc-dockeronly-nightly.yml",
"line": 14,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "overly broad permissions",
"file": ".github/workflows/test-acc-dockeronly-nightly.yml",
"line": 23,
"note": "this job",
"rule": "excessive-permissions",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#excessive-permissions"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-ci-cleanup.yml",
"line": 112,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-ci-cleanup.yml",
"line": 156,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 318,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 575,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 647,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 647,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 687,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 687,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 687,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "Medium",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 738,
"note": "this step",
"rule": "template-injection",
"severity": "Medium",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/actions/build-vault/action.yml",
"line": 70,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/actions/build-vault/action.yml",
"line": 74,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/actions/build-vault/action.yml",
"line": 319,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/actions/changed-files/action.yml",
"line": 23,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/actions/create-dynamic-config/action.yml",
"line": 44,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/actions/install-tools/action.yml",
"line": 80,
"note": "this step",
"rule": "template-injection",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/actions/set-up-pipeline/action.yml",
"line": 15,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/benchmark-prevent-performance-degradations.yml",
"line": 24,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/benchmark-prevent-performance-degradations.yml",
"line": 44,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build-artifacts-ce.yml",
"line": 103,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build-artifacts-ce.yml",
"line": 214,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 119,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 127,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 164,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 187,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 194,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 274,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 278,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 283,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 387,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 405,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 446,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 488,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 535,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 570,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 596,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/build.yml",
"line": 861,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/changelog-checker.yml",
"line": 29,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 68,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 70,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 88,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 91,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 99,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 165,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 188,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 222,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 262,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 291,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 334,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 411,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 414,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 418,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ci.yml",
"line": 701,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 37,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 52,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 58,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 62,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 95,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 99,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 135,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 139,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 178,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 182,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 216,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/code-checker.yml",
"line": 220,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/copy-external-contributor-pull-request-ce.yml",
"line": 42,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/enos-lint.yml",
"line": 27,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/enos-lint.yml",
"line": 43,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/enos-lint.yml",
"line": 51,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/enos-lint.yml",
"line": 55,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/enos-release-testing-oss.yml",
"line": 43,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "ad-hoc installation of packages",
"file": ".github/workflows/git-heatmap.yml",
"line": 65,
"note": "this step",
"rule": "adhoc-packages",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#adhoc-packages"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/plugin-update.yml",
"line": 49,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/plugin-update.yml",
"line": 51,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/security-scan.yml",
"line": 35,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/security-scan.yml",
"line": 51,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/security-scan.yml",
"line": 103,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-acc-dockeronly-nightly.yml",
"line": 14,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-acc-dockeronly-nightly.yml",
"line": 23,
"note": "this job",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-enos-scenario-ui.yml",
"line": 49,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-enos-scenario-ui.yml",
"line": 85,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-go.yml",
"line": 129,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-go.yml",
"line": 152,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-go.yml",
"line": 156,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-go.yml",
"line": 160,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-go.yml",
"line": 314,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-go.yml",
"line": 363,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-go.yml",
"line": 426,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "code injection via template expansion",
"file": ".github/workflows/test-go.yml",
"line": 738,
"note": "this step",
"rule": "template-injection",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#template-injection"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-acc-tests-for-path.yml",
"line": 25,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario-containers.yml",
"line": 57,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario-containers.yml",
"line": 103,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 75,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 81,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 246,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 256,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 270,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario-matrix.yml",
"line": 332,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 66,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 71,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-run-enos-scenario.yml",
"line": 121,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-ui.yml",
"line": 58,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-ui.yml",
"line": 62,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-ui.yml",
"line": 100,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/test-ui.yml",
"line": 149,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ui-client-update.yml",
"line": 20,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "use GitHub's dedicated self-repository syntax",
"file": ".github/workflows/ui-client-update.yml",
"line": 36,
"note": "this step",
"rule": "self-repository",
"severity": "Low",
"url": "https://docs.zizmor.sh/audits/#self-repository"
},
{
"confidence": "High",
"description": "action functionality is already included by the runner",
"file": ".github/workflows/remove-labels.yml",
"line": 15,
"note": "this step",
"rule": "superfluous-actions",
"severity": "Informational",
"url": "https://docs.zizmor.sh/audits/#superfluous-actions"
}
]
}
},
"updated": "2026-11-02"
}