{
  "history": [
    {
      "added": 0,
      "commit": "61e84743356275f6ffca23b1b2f2cb945e19eb96",
      "date": "2026-11-01",
      "dependencies": 694,
      "errors": [],
      "fixable": 12,
      "go_version": "go1.27.2",
      "in_binary": {
        "dependencies": 3,
        "stdlib": 1,
        "total": 4
      },
      "new_vulnerabilities": 0,
      "osv_confirmed": 14,
      "osv_only": 0,
      "ref": "v5.6.0",
      "release_changed": false,
      "release_integrity": "verified",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 8.6,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 1,
        "High": 5,
        "Low": 0,
        "Medium": 2,
        "Negligible": 0,
        "Unknown": 6
      },
      "workflow": {
        "High": 4,
        "Low": 0,
        "Medium": 2,
        "files": 15
      }
    },
    {
      "added": 0,
      "commit": "61e84743356275f6ffca23b1b2f2cb945e19eb96",
      "date": "2026-11-02",
      "dependencies": 694,
      "errors": [],
      "fixable": 12,
      "go_version": "go1.27.2",
      "in_binary": {
        "dependencies": 3,
        "stdlib": 1,
        "total": 4
      },
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 14,
      "osv_only": 0,
      "ref": "v5.6.0",
      "release_changed": false,
      "release_integrity": "verified",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 8.6,
      "scorecard_date": "2026-10-31",
      "scorecard_note": null,
      "scorecard_source": "openssf-api",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 1,
        "High": 5,
        "Low": 0,
        "Medium": 2,
        "Negligible": 0,
        "Unknown": 6
      },
      "vulnerable_packages": 5,
      "workflow": {
        "High": 4,
        "Low": 0,
        "Medium": 2,
        "files": 15
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "Supply Chain Compliance",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "in_binary_new": [],
      "in_binary_resolved": [],
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "v5.6.0",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "61e84743356275f6ffca23b1b2f2cb945e19eb96",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/gitlab.yml",
        "name": "actions/cache",
        "purl": "pkg:github/actions/cache@v6.1.0",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v7.0.1",
        "version": "v7.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/depsreview.yml",
        "name": "actions/dependency-review-action",
        "purl": "pkg:github/actions/dependency-review-action@v5.0.0",
        "version": "v5.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/scdiff.yml",
        "name": "actions/github-script",
        "purl": "pkg:github/actions/github-script@v9.0.0",
        "version": "v9.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "actions/setup-go",
        "purl": "pkg:github/actions/setup-go@v7.0.0",
        "version": "v7.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/stale.yml",
        "name": "actions/stale",
        "purl": "pkg:github/actions/stale@v11.0.0",
        "version": "v11.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/osps-baseline.yml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v7.0.2",
        "version": "v7.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/gitlab.yml",
        "name": "codecov/codecov-action",
        "purl": "pkg:github/codecov/codecov-action@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "github/codeql-action/analyze",
        "purl": "pkg:github/github/codeql-action@v4.38.3#analyze",
        "version": "v4.38.3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "github/codeql-action/autobuild",
        "purl": "pkg:github/github/codeql-action@v4.38.3#autobuild",
        "version": "v4.38.3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "github/codeql-action/init",
        "purl": "pkg:github/github/codeql-action@v4.38.3#init",
        "version": "v4.38.3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/scorecard-analysis.yml",
        "name": "github/codeql-action/upload-sarif",
        "purl": "pkg:github/github/codeql-action@v4.38.3#upload-sarif",
        "version": "v4.38.3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/lint.yml",
        "name": "golangci/golangci-lint-action",
        "purl": "pkg:github/golangci/golangci-lint-action@v8.0.0",
        "version": "v8.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/goreleaser.yaml",
        "name": "goreleaser/goreleaser-action",
        "purl": "pkg:github/goreleaser/goreleaser-action@v7.2.3",
        "version": "v7.2.3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publishimage.yml",
        "name": "ko-build/setup-ko",
        "purl": "pkg:github/ko-build/setup-ko@v0.10",
        "version": "v0.10"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/main.yml",
        "name": "nick-invision/retry",
        "purl": "pkg:github/nick-invision/retry@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/scorecard-analysis.yml",
        "name": "ossf/scorecard-action",
        "purl": "pkg:github/ossf/scorecard-action@v2.4.4",
        "version": "v2.4.4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/osps-baseline.yml",
        "name": "revanite-io/osps-baseline-action",
        "purl": "pkg:github/revanite-io/osps-baseline-action@v1.5.2",
        "version": "v1.5.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/security-insights.yml",
        "name": "revanite-io/security-insights-action",
        "purl": "pkg:github/revanite-io/security-insights-action@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publishimage.yml",
        "name": "sigstore/cosign-installer",
        "purl": "pkg:github/sigstore/cosign-installer@v4.1.2",
        "version": "v4.1.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/goreleaser.yaml",
        "name": "slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml",
        "purl": "pkg:github/slsa-framework/slsa-github-generator@v2.1.0#.github/workflows/generator_generic_slsa3.yml",
        "version": "v2.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/goreleaser.yaml",
        "name": "slsa-framework/slsa-verifier/actions/installer",
        "purl": "pkg:github/slsa-framework/slsa-verifier@v2.7.1#actions/installer",
        "version": "v2.7.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "step-security/harden-runner",
        "purl": "pkg:github/step-security/harden-runner@v2.22.1",
        "version": "v2.22.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "4d63.com/gocheckcompilerdirectives",
        "purl": "pkg:golang/4d63.com/gocheckcompilerdirectives@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "4d63.com/gochecknoglobals",
        "purl": "pkg:golang/4d63.com/gochecknoglobals@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "actionlint.kjanat.dev",
        "purl": "pkg:golang/actionlint.kjanat.dev@v1.17.0",
        "version": "v1.17.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "al.essio.dev/pkg/shellescape",
        "purl": "pkg:golang/al.essio.dev/pkg/shellescape@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "bitbucket.org/creachadair/stringset",
        "purl": "pkg:golang/bitbucket.org/creachadair/stringset@v0.0.14",
        "version": "v0.0.14"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cel.dev/expr",
        "purl": "pkg:golang/cel.dev/expr@v0.25.2",
        "version": "v0.25.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "charm.land/lipgloss/v2",
        "purl": "pkg:golang/charm.land/lipgloss/v2@v2.0.6",
        "version": "v2.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go",
        "purl": "pkg:golang/cloud.google.com/go@v0.123.0",
        "version": "v0.123.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/auth",
        "purl": "pkg:golang/cloud.google.com/go/auth@v0.20.0",
        "version": "v0.20.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "cloud.google.com/go/auth",
        "purl": "pkg:golang/cloud.google.com/go/auth@v0.23.2",
        "version": "v0.23.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/auth/oauth2adapt",
        "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
        "version": "v0.2.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/compute/metadata",
        "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/containeranalysis",
        "purl": "pkg:golang/cloud.google.com/go/containeranalysis@v0.19.0",
        "version": "v0.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/iam",
        "purl": "pkg:golang/cloud.google.com/go/iam@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/kms",
        "purl": "pkg:golang/cloud.google.com/go/kms@v1.32.0",
        "version": "v1.32.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "cloud.google.com/go/kms",
        "purl": "pkg:golang/cloud.google.com/go/kms@v1.33.0",
        "version": "v1.33.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/longrunning",
        "purl": "pkg:golang/cloud.google.com/go/longrunning@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/monitoring",
        "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0",
        "version": "v1.30.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/storage",
        "purl": "pkg:golang/cloud.google.com/go/storage@v1.69.0",
        "version": "v1.69.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "code.gitea.io/sdk/gitea",
        "purl": "pkg:golang/code.gitea.io/sdk/gitea@v0.25.1",
        "version": "v0.25.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "codeberg.org/chavacava/garif",
        "purl": "pkg:golang/codeberg.org/chavacava/garif@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "codeberg.org/polyfloyd/go-errorlint",
        "purl": "pkg:golang/codeberg.org/polyfloyd/go-errorlint@v1.9.0",
        "version": "v1.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "dario.cat/mergo",
        "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "deps.dev/api/v3",
        "purl": "pkg:golang/deps.dev/api/v3@v3.0.0-20260727054525-2946ae4a6141",
        "version": "v3.0.0-20260727054525-2946ae4a6141"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "deps.dev/api/v3alpha",
        "purl": "pkg:golang/deps.dev/api/v3alpha@v0.0.0-20260727054525-2946ae4a6141",
        "version": "v0.0.0-20260727054525-2946ae4a6141"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "deps.dev/util/maven",
        "purl": "pkg:golang/deps.dev/util/maven@v0.0.0-20260727054525-2946ae4a6141",
        "version": "v0.0.0-20260727054525-2946ae4a6141"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "deps.dev/util/pypi",
        "purl": "pkg:golang/deps.dev/util/pypi@v0.0.0-20260727054525-2946ae4a6141",
        "version": "v0.0.0-20260727054525-2946ae4a6141"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "deps.dev/util/resolve",
        "purl": "pkg:golang/deps.dev/util/resolve@v0.0.0-20260727054525-2946ae4a6141",
        "version": "v0.0.0-20260727054525-2946ae4a6141"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "deps.dev/util/semver",
        "purl": "pkg:golang/deps.dev/util/semver@v0.0.0-20260727054525-2946ae4a6141",
        "version": "v0.0.0-20260727054525-2946ae4a6141"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "dev.gaijin.team/go/exhaustruct/v4",
        "purl": "pkg:golang/dev.gaijin.team/go/exhaustruct/v4@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "dev.gaijin.team/go/exhaustruct/v5",
        "purl": "pkg:golang/dev.gaijin.team/go/exhaustruct/v5@v5.2.0",
        "version": "v5.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "dev.gaijin.team/go/golib",
        "purl": "pkg:golang/dev.gaijin.team/go/golib@v0.8.1",
        "version": "v0.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/42wim/httpsig",
        "purl": "pkg:golang/github.com/42wim/httpsig@v1.2.4",
        "version": "v1.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/4meepo/tagalign",
        "purl": "pkg:golang/github.com/4meepo/tagalign@v1.4.4",
        "version": "v1.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Abirdcfly/dupword",
        "purl": "pkg:golang/github.com/Abirdcfly/dupword@v0.1.8",
        "version": "v0.1.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/AdminBenni/iota-mixing",
        "purl": "pkg:golang/github.com/AdminBenni/iota-mixing@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aead/serpent",
        "purl": "pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6",
        "version": "v0.0.0-20160714141033-fba169763ea6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/agext/levenshtein",
        "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3",
        "version": "v1.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/agnivade/levenshtein",
        "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/alecthomas/chroma/v2",
        "purl": "pkg:golang/github.com/alecthomas/chroma/v2@v2.27.0",
        "version": "v2.27.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/alecthomas/go-check-sumtype",
        "purl": "pkg:golang/github.com/alecthomas/go-check-sumtype@v0.5.1-0.20260828200218-ae6904d28606",
        "version": "v0.5.1-0.20260828200218-ae6904d28606"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/AlekSi/pointer",
        "purl": "pkg:golang/github.com/AlekSi/pointer@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/alexkohler/nakedret/v2",
        "purl": "pkg:golang/github.com/alexkohler/nakedret/v2@v2.0.6",
        "version": "v2.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/alexkohler/prealloc",
        "purl": "pkg:golang/github.com/alexkohler/prealloc@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/alfatraining/structtag",
        "purl": "pkg:golang/github.com/alfatraining/structtag@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/alingse/asasalint",
        "purl": "pkg:golang/github.com/alingse/asasalint@v0.0.11",
        "version": "v0.0.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/alingse/nilnesserr",
        "purl": "pkg:golang/github.com/alingse/nilnesserr@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/AlwxSin/noinlineerr",
        "purl": "pkg:golang/github.com/AlwxSin/noinlineerr@v1.0.6",
        "version": "v1.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/anchore/go-lzo",
        "purl": "pkg:golang/github.com/anchore/go-lzo@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/anchore/go-macholibre",
        "purl": "pkg:golang/github.com/anchore/go-macholibre@v0.0.0-20250826193721-3cd206ca93aa",
        "version": "v0.0.0-20250826193721-3cd206ca93aa"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/anchore/go-struct-converter",
        "purl": "pkg:golang/github.com/anchore/go-struct-converter@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Antonboom/errname",
        "purl": "pkg:golang/github.com/Antonboom/errname@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Antonboom/nilnil",
        "purl": "pkg:golang/github.com/Antonboom/nilnil@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Antonboom/testifylint",
        "purl": "pkg:golang/github.com/Antonboom/testifylint@v1.6.4",
        "version": "v1.6.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/asaskevich/govalidator",
        "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
        "version": "v0.0.0-20230301143203-a9d515a09cc2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ashanbrown/forbidigo/v2",
        "purl": "pkg:golang/github.com/ashanbrown/forbidigo/v2@v2.3.1",
        "version": "v2.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ashanbrown/makezero/v2",
        "purl": "pkg:golang/github.com/ashanbrown/makezero/v2@v2.2.1",
        "version": "v2.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/atc0005/go-teams-notify/v2",
        "purl": "pkg:golang/github.com/atc0005/go-teams-notify/v2@v2.14.0",
        "version": "v2.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/avast/retry-go/v4",
        "purl": "pkg:golang/github.com/avast/retry-go/v4@v4.7.0",
        "version": "v4.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.1",
        "version": "v1.47.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.20",
        "version": "v1.7.20"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/config",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.6",
        "version": "v1.33.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/credentials",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.6",
        "version": "v1.20.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.1",
        "version": "v1.20.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/s3/manager",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.21.1",
        "version": "v1.21.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager@v0.4.11",
        "version": "v0.4.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.4",
        "version": "v1.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.4",
        "version": "v2.8.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.4",
        "version": "v1.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.56.0",
        "version": "v1.56.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ecrpublic",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.11",
        "version": "v1.38.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.19",
        "version": "v1.13.19"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.11.5",
        "version": "v1.11.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.4",
        "version": "v1.14.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.20.4",
        "version": "v1.20.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/kms",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.52.0",
        "version": "v1.52.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/s3",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.113.4",
        "version": "v1.113.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/signin",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.1",
        "version": "v1.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sso",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.1",
        "version": "v1.38.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.1",
        "version": "v1.43.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sts",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.1",
        "version": "v1.51.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/aws/smithy-go",
        "purl": "pkg:golang/github.com/aws/smithy-go@v1.28.1",
        "version": "v1.28.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/awslabs/amazon-ecr-credential-helper/ecr-login",
        "purl": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ayoubfaouzi/pkcs7",
        "purl": "pkg:golang/github.com/ayoubfaouzi/pkcs7@v0.2.3",
        "version": "v0.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/azure-sdk-for-go",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go@v68.0.0%2Bincompatible",
        "version": "v68.0.0+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.22.0",
        "version": "v1.22.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.0",
        "version": "v1.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0",
        "version": "v1.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4",
        "version": "v1.6.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-ansiterm",
        "purl": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
        "version": "v0.0.0-20250102033503-faa5f7b0171c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-autorest",
        "purl": "pkg:golang/github.com/Azure/go-autorest@v14.2.0%2Bincompatible",
        "version": "v14.2.0+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-autorest/autorest",
        "purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.30",
        "version": "v0.11.30"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-autorest/autorest/adal",
        "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.24",
        "version": "v0.9.24"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-autorest/autorest/azure/auth",
        "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/auth@v0.5.13",
        "version": "v0.5.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-autorest/autorest/azure/cli",
        "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/cli@v0.4.7",
        "version": "v0.4.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-autorest/autorest/date",
        "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-autorest/logger",
        "purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Azure/go-autorest/tracing",
        "purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
        "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2",
        "version": "v1.7.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/bahlo/generic-list-go",
        "purl": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bazelbuild/buildtools",
        "purl": "pkg:golang/github.com/bazelbuild/buildtools@v0.0.0-20260716142318-04cf7de1434f",
        "version": "v0.0.0-20260716142318-04cf7de1434f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/beorn7/perks",
        "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/bkielbasa/cyclop",
        "purl": "pkg:golang/github.com/bkielbasa/cyclop@v1.2.3",
        "version": "v1.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/blacktop/go-dwarf",
        "purl": "pkg:golang/github.com/blacktop/go-dwarf@v1.0.14",
        "version": "v1.0.14"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/blacktop/go-macho",
        "purl": "pkg:golang/github.com/blacktop/go-macho@v1.1.263",
        "version": "v1.1.263"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/blakesmith/ar",
        "purl": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb",
        "version": "v0.0.0-20190502131153-809d4375e1fb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/blang/semver",
        "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible",
        "version": "v3.5.1+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/blizzy78/varnamelen",
        "purl": "pkg:golang/github.com/blizzy78/varnamelen@v0.8.0",
        "version": "v0.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/bluesky-social/indigo",
        "purl": "pkg:golang/github.com/bluesky-social/indigo@v0.0.0-20240813042137-4006c0eca043",
        "version": "v0.0.0-20240813042137-4006c0eca043"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bmatcuk/doublestar/v4",
        "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0",
        "version": "v4.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/bmatcuk/doublestar/v4",
        "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.8.1",
        "version": "v4.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bombsimon/logrusr/v2",
        "purl": "pkg:golang/github.com/bombsimon/logrusr/v2@v2.0.1",
        "version": "v2.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/bombsimon/wsl/v4",
        "purl": "pkg:golang/github.com/bombsimon/wsl/v4@v4.7.0",
        "version": "v4.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/bombsimon/wsl/v5",
        "purl": "pkg:golang/github.com/bombsimon/wsl/v5@v5.9.0",
        "version": "v5.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bradleyfalzon/ghinstallation/v2",
        "purl": "pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.19.0",
        "version": "v2.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/breml/bidichk",
        "purl": "pkg:golang/github.com/breml/bidichk@v0.3.3",
        "version": "v0.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/breml/errchkjson",
        "purl": "pkg:golang/github.com/breml/errchkjson@v0.4.1",
        "version": "v0.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/buger/jsonparser",
        "purl": "pkg:golang/github.com/buger/jsonparser@v1.6.1",
        "version": "v1.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/BurntSushi/toml",
        "purl": "pkg:golang/github.com/BurntSushi/toml@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/butuzov/ireturn",
        "purl": "pkg:golang/github.com/butuzov/ireturn@v0.4.1",
        "version": "v0.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/butuzov/mirror",
        "purl": "pkg:golang/github.com/butuzov/mirror@v1.3.3",
        "version": "v1.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/caarlos0/env/v11",
        "purl": "pkg:golang/github.com/caarlos0/env/v11@v11.4.1",
        "version": "v11.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/caarlos0/env/v6",
        "purl": "pkg:golang/github.com/caarlos0/env/v6@v6.10.1",
        "version": "v6.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/caarlos0/go-reddit/v3",
        "purl": "pkg:golang/github.com/caarlos0/go-reddit/v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/caarlos0/go-version",
        "purl": "pkg:golang/github.com/caarlos0/go-version@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/caarlos0/log",
        "purl": "pkg:golang/github.com/caarlos0/log@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/canonical/chisel-manifest",
        "purl": "pkg:golang/github.com/canonical/chisel-manifest@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/carlmjohnson/versioninfo",
        "purl": "pkg:golang/github.com/carlmjohnson/versioninfo@v0.22.5",
        "version": "v0.22.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/catenacyber/perfsprint",
        "purl": "pkg:golang/github.com/catenacyber/perfsprint@v0.10.1",
        "version": "v0.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/cavaliergopher/cpio",
        "purl": "pkg:golang/github.com/cavaliergopher/cpio@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ccojocar/zxcvbn-go",
        "purl": "pkg:golang/github.com/ccojocar/zxcvbn-go@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/cenkalti/backoff/v4",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
        "version": "v4.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/cenkalti/backoff/v5",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
        "version": "v5.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cespare/xxhash/v2",
        "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charithe/durationcheck",
        "purl": "pkg:golang/github.com/charithe/durationcheck@v0.0.11",
        "version": "v0.0.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charmbracelet/colorprofile",
        "purl": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3",
        "version": "v0.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charmbracelet/fang",
        "purl": "pkg:golang/github.com/charmbracelet/fang@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charmbracelet/ultraviolet",
        "purl": "pkg:golang/github.com/charmbracelet/ultraviolet@v0.0.0-20260811164956-006e29f97886",
        "version": "v0.0.0-20260811164956-006e29f97886"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charmbracelet/x/ansi",
        "purl": "pkg:golang/github.com/charmbracelet/x/ansi@v0.11.8",
        "version": "v0.11.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charmbracelet/x/exp/charmtone",
        "purl": "pkg:golang/github.com/charmbracelet/x/exp/charmtone@v0.0.0-20250603201427-c31516f43444",
        "version": "v0.0.0-20250603201427-c31516f43444"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charmbracelet/x/term",
        "purl": "pkg:golang/github.com/charmbracelet/x/term@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charmbracelet/x/termios",
        "purl": "pkg:golang/github.com/charmbracelet/x/termios@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/charmbracelet/x/windows",
        "purl": "pkg:golang/github.com/charmbracelet/x/windows@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/chrismellard/docker-credential-acr-env",
        "purl": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589",
        "version": "v0.0.0-20230304212654-82a0ddb27589"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ckaznocha/intrange",
        "purl": "pkg:golang/github.com/ckaznocha/intrange@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ClickHouse/clickhouse-go-linter",
        "purl": "pkg:golang/github.com/ClickHouse/clickhouse-go-linter@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/clipperhouse/displaywidth",
        "purl": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/clipperhouse/uax29/v2",
        "purl": "pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/cloudflare/circl",
        "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.3",
        "version": "v1.6.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cloudflare/circl",
        "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.4",
        "version": "v1.6.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cncf/xds/go",
        "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
        "version": "v0.0.0-20260202195803-dba9d589def2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/common-nighthawk/go-figure",
        "purl": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be",
        "version": "v0.0.0-20210622060536-734e95fb86be"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/compose-spec/compose-go/v2",
        "purl": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.14.0",
        "version": "v2.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/containerd/api",
        "purl": "pkg:golang/github.com/containerd/containerd/api@v1.11.1",
        "version": "v1.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs",
        "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs/pkg",
        "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/typeurl/v2",
        "purl": "pkg:golang/github.com/containerd/typeurl/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/coreos/go-oidc/v3",
        "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.20.0",
        "version": "v3.20.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/curioswitch/go-reassign",
        "purl": "pkg:golang/github.com/curioswitch/go-reassign@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/cyberphone/json-canonicalization",
        "purl": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
        "version": "v0.0.0-20241213102144-19d51d7fe467"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/CycloneDX/cyclonedx-go",
        "purl": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/cyphar/filepath-securejoin",
        "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cyphar/filepath-securejoin",
        "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/daixiang0/gci",
        "purl": "pkg:golang/github.com/daixiang0/gci@v0.13.7",
        "version": "v0.13.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/dave/dst",
        "purl": "pkg:golang/github.com/dave/dst@v0.27.3",
        "version": "v0.27.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/davecgh/go-spew",
        "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "version": "v1.1.2-0.20180830191138-d8f796af33cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/davidmz/go-pageant",
        "purl": "pkg:golang/github.com/davidmz/go-pageant@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/deitch/magic",
        "purl": "pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb",
        "version": "v0.0.0-20240306090643-c67ab88f10cb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/denis-tingaikin/go-header",
        "purl": "pkg:golang/github.com/denis-tingaikin/go-header@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/dghubble/go-twitter",
        "purl": "pkg:golang/github.com/dghubble/go-twitter@v0.0.0-20220716041154-837915ec2f79",
        "version": "v0.0.0-20220716041154-837915ec2f79"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/dghubble/oauth1",
        "purl": "pkg:golang/github.com/dghubble/oauth1@v0.7.3",
        "version": "v0.7.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/dghubble/sling",
        "purl": "pkg:golang/github.com/dghubble/sling@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/digitorus/pkcs7",
        "purl": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c",
        "version": "v0.0.0-20250730155240-ffadbf3f398c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/digitorus/timestamp",
        "purl": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea",
        "version": "v0.0.0-20250524132541-c45532741eea"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/dimchansky/utfbom",
        "purl": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/diskfs/go-diskfs",
        "purl": "pkg:golang/github.com/diskfs/go-diskfs@v1.7.0",
        "version": "v1.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/distribution/reference",
        "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Djarvur/go-err113",
        "purl": "pkg:golang/github.com/Djarvur/go-err113@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/djherbis/times",
        "purl": "pkg:golang/github.com/djherbis/times@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/dlclark/regexp2/v2",
        "purl": "pkg:golang/github.com/dlclark/regexp2/v2@v2.2.1",
        "version": "v2.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/cli",
        "purl": "pkg:golang/github.com/docker/cli@v29.7.2%2Bincompatible",
        "version": "v29.7.2+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/docker/docker-credential-helpers",
        "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
        "version": "v0.9.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/docker-credential-helpers",
        "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8",
        "version": "v0.9.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/docker/go-connections",
        "purl": "pkg:golang/github.com/docker/go-connections@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-connections",
        "purl": "pkg:golang/github.com/docker/go-connections@v0.8.1",
        "version": "v0.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-units",
        "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/dprotaso/go-yit",
        "purl": "pkg:golang/github.com/dprotaso/go-yit@v0.0.0-20260209000607-dfb86291624d",
        "version": "v0.0.0-20260209000607-dfb86291624d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dsoprea/go-exfat",
        "purl": "pkg:golang/github.com/dsoprea/go-exfat@v0.0.0-20190906070738-5e932fbdb589",
        "version": "v0.0.0-20190906070738-5e932fbdb589"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dsoprea/go-logging",
        "purl": "pkg:golang/github.com/dsoprea/go-logging@v0.0.0-20200710184922-b02d349568dd",
        "version": "v0.0.0-20200710184922-b02d349568dd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dustin/go-humanize",
        "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/edsrzf/mmap-go",
        "purl": "pkg:golang/github.com/edsrzf/mmap-go@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/elliotwutingfeng/asciiset",
        "purl": "pkg:golang/github.com/elliotwutingfeng/asciiset@v0.0.0-20260801111138-45c5fff54b41",
        "version": "v0.0.0-20260801111138-45c5fff54b41"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emicklei/go-restful/v3",
        "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.12.2",
        "version": "v3.12.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emirpasic/gods",
        "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
        "version": "v1.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/go-control-plane/envoy",
        "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
        "version": "v1.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/protoc-gen-validate",
        "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
        "version": "v1.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/erikvarga/go-rpmdb",
        "purl": "pkg:golang/github.com/erikvarga/go-rpmdb@v0.0.0-20250523120114-a15a62cd4593",
        "version": "v0.0.0-20250523120114-a15a62cd4593"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ettle/strcase",
        "purl": "pkg:golang/github.com/ettle/strcase@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/evanphx/json-patch/v5",
        "purl": "pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11",
        "version": "v5.9.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fatih/color",
        "purl": "pkg:golang/github.com/fatih/color@v1.19.0",
        "version": "v1.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/fatih/structtag",
        "purl": "pkg:golang/github.com/fatih/structtag@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/felixge/httpsnoop",
        "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/firefart/nonamedreturns",
        "purl": "pkg:golang/github.com/firefart/nonamedreturns@v1.0.8",
        "version": "v1.0.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/fsnotify/fsnotify",
        "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1",
        "version": "v1.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fxamacker/cbor/v2",
        "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0",
        "version": "v2.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/fzipp/gocyclo",
        "purl": "pkg:golang/github.com/fzipp/gocyclo@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gabriel-vasile/mimetype",
        "purl": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
        "version": "v1.4.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GehirnInc/crypt",
        "purl": "pkg:golang/github.com/GehirnInc/crypt@v0.0.0-20230320061759-8cc1b52080c5",
        "version": "v0.0.0-20230320061759-8cc1b52080c5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ghostiam/protogetter",
        "purl": "pkg:golang/github.com/ghostiam/protogetter@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/github/smimesign",
        "purl": "pkg:golang/github.com/github/smimesign@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-critic/go-critic",
        "purl": "pkg:golang/github.com/go-critic/go-critic@v0.15.0",
        "version": "v0.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-errors/errors",
        "purl": "pkg:golang/github.com/go-errors/errors@v1.5.1",
        "version": "v1.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-fed/httpsig",
        "purl": "pkg:golang/github.com/go-fed/httpsig@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/gcfg",
        "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
        "version": "v1.5.1-0.20230307220236-3a3c6141e376"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-billy/v5",
        "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.9.2",
        "version": "v5.9.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-git/go-git/v5",
        "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.19.2",
        "version": "v5.19.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-git/v5",
        "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.19.3",
        "version": "v5.19.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-jose/go-jose/v4",
        "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
        "version": "v4.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/logr",
        "purl": "pkg:golang/github.com/go-logr/logr@v1.4.4",
        "version": "v1.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/stdr",
        "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-ole/go-ole",
        "purl": "pkg:golang/github.com/go-ole/go-ole@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/analysis",
        "purl": "pkg:golang/github.com/go-openapi/analysis@v0.25.5",
        "version": "v0.25.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/errors",
        "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.8",
        "version": "v0.22.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonpointer",
        "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1",
        "version": "v0.23.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/jsonpointer",
        "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonreference",
        "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6",
        "version": "v0.21.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/jsonreference",
        "purl": "pkg:golang/github.com/go-openapi/jsonreference@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/loads",
        "purl": "pkg:golang/github.com/go-openapi/loads@v0.25.0",
        "version": "v0.25.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/runtime",
        "purl": "pkg:golang/github.com/go-openapi/runtime@v0.33.0",
        "version": "v0.33.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/runtime/server-middleware",
        "purl": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0",
        "version": "v0.30.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/spec",
        "purl": "pkg:golang/github.com/go-openapi/spec@v0.22.9",
        "version": "v0.22.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/strfmt",
        "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.27.0",
        "version": "v0.27.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag",
        "purl": "pkg:golang/github.com/go-openapi/swag@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag",
        "purl": "pkg:golang/github.com/go-openapi/swag@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/cmdutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/cmdutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/conv",
        "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0",
        "version": "v0.27.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/conv",
        "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/fileutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/fileutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/jsonname",
        "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/jsonutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/jsonutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/loading",
        "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/loading",
        "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/mangling",
        "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/mangling",
        "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/netutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/netutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/pools",
        "purl": "pkg:golang/github.com/go-openapi/swag/pools@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/stringutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/stringutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/typeutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0",
        "version": "v0.27.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/typeutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/yamlutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/swag/yamlutils",
        "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.28.0",
        "version": "v0.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/testify/enable/yaml/v2",
        "purl": "pkg:golang/github.com/go-openapi/testify/enable/yaml/v2@v2.8.0",
        "version": "v2.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/testify/v2",
        "purl": "pkg:golang/github.com/go-openapi/testify/v2@v2.8.0",
        "version": "v2.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-openapi/validate",
        "purl": "pkg:golang/github.com/go-openapi/validate@v0.26.1",
        "version": "v0.26.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-restruct/restruct",
        "purl": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha",
        "version": "v1.2.0-alpha"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-task/slim-sprig/v3",
        "purl": "pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0",
        "version": "v3.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-toolsmith/astcast",
        "purl": "pkg:golang/github.com/go-toolsmith/astcast@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-toolsmith/astcopy",
        "purl": "pkg:golang/github.com/go-toolsmith/astcopy@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-toolsmith/astequal",
        "purl": "pkg:golang/github.com/go-toolsmith/astequal@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-toolsmith/astfmt",
        "purl": "pkg:golang/github.com/go-toolsmith/astfmt@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-toolsmith/astp",
        "purl": "pkg:golang/github.com/go-toolsmith/astp@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-toolsmith/strparse",
        "purl": "pkg:golang/github.com/go-toolsmith/strparse@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-toolsmith/typep",
        "purl": "pkg:golang/github.com/go-toolsmith/typep@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-viper/mapstructure/v2",
        "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "version": "v2.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/go-xmlfmt/xmlfmt",
        "purl": "pkg:golang/github.com/go-xmlfmt/xmlfmt@v1.1.3",
        "version": "v1.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gobwas/glob",
        "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3",
        "version": "v0.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/godoc-lint/godoc-lint",
        "purl": "pkg:golang/github.com/godoc-lint/godoc-lint@v0.11.4",
        "version": "v0.11.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gofrs/flock",
        "purl": "pkg:golang/github.com/gofrs/flock@v0.13.1",
        "version": "v0.13.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gogo/protobuf",
        "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2",
        "version": "v1.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-jwt/jwt/v4",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
        "version": "v4.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golang-jwt/jwt/v5",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
        "version": "v5.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/glog",
        "purl": "pkg:golang/github.com/golang/glog@v1.2.5",
        "version": "v1.2.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/groupcache",
        "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "version": "v0.0.0-20241129210726-2c02b8208cf8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/asciicheck",
        "purl": "pkg:golang/github.com/golangci/asciicheck@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/canonicalheader",
        "purl": "pkg:golang/github.com/golangci/canonicalheader@v0.0.0-20260827115959-a25c71c521f6",
        "version": "v0.0.0-20260827115959-a25c71c521f6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/dupl",
        "purl": "pkg:golang/github.com/golangci/dupl@v0.0.0-20260401084720-c99c5cf5c202",
        "version": "v0.0.0-20260401084720-c99c5cf5c202"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/go-printf-func-name",
        "purl": "pkg:golang/github.com/golangci/go-printf-func-name@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/gofmt",
        "purl": "pkg:golang/github.com/golangci/gofmt@v0.0.0-20260820135601-e84e05053792",
        "version": "v0.0.0-20260820135601-e84e05053792"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/golangci-lint/v2",
        "purl": "pkg:golang/github.com/golangci/golangci-lint/v2@v2.14.0",
        "version": "v2.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/golines",
        "purl": "pkg:golang/github.com/golangci/golines@v0.15.0",
        "version": "v0.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/misspell",
        "purl": "pkg:golang/github.com/golangci/misspell@v0.8.0",
        "version": "v0.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/plugin-module-register",
        "purl": "pkg:golang/github.com/golangci/plugin-module-register@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/revgrep",
        "purl": "pkg:golang/github.com/golangci/revgrep@v0.8.0",
        "version": "v0.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/rowserrcheck",
        "purl": "pkg:golang/github.com/golangci/rowserrcheck@v0.0.0-20260419091836-c5f79b8a11ba",
        "version": "v0.0.0-20260419091836-c5f79b8a11ba"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/swaggoswag",
        "purl": "pkg:golang/github.com/golangci/swaggoswag@v0.0.0-20250504205917-77f2aca3143e",
        "version": "v0.0.0-20250504205917-77f2aca3143e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/golangci/unconvert",
        "purl": "pkg:golang/github.com/golangci/unconvert@v0.0.0-20250410112200-a129a6e6413e",
        "version": "v0.0.0-20250410112200-a129a6e6413e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/google/addlicense",
        "purl": "pkg:golang/github.com/google/addlicense@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/google/certificate-transparency-go",
        "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
        "version": "v1.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/gnostic-models",
        "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-cmp",
        "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-containerregistry",
        "purl": "pkg:golang/github.com/google/go-containerregistry@v0.22.1",
        "version": "v0.22.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-github/v82",
        "purl": "pkg:golang/github.com/google/go-github/v82@v82.0.0",
        "version": "v82.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-github/v88",
        "purl": "pkg:golang/github.com/google/go-github/v88@v88.0.0",
        "version": "v88.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/google/go-github/v92",
        "purl": "pkg:golang/github.com/google/go-github/v92@v92.0.0",
        "version": "v92.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-querystring",
        "purl": "pkg:golang/github.com/google/go-querystring@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/google/ko",
        "purl": "pkg:golang/github.com/google/ko@v0.19.1",
        "version": "v0.19.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/osv-scalibr",
        "purl": "pkg:golang/github.com/google/osv-scalibr@v0.5.3",
        "version": "v0.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/osv-scanner/v2",
        "purl": "pkg:golang/github.com/google/osv-scanner/v2@v2.5.1",
        "version": "v2.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/pprof",
        "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3",
        "version": "v0.0.0-20260802141513-ef3492d7dac3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/google/rpmpack",
        "purl": "pkg:golang/github.com/google/rpmpack@v0.7.1",
        "version": "v0.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/s2a-go",
        "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9",
        "version": "v0.1.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/uuid",
        "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/wire",
        "purl": "pkg:golang/github.com/google/wire@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/googleapis/enterprise-certificate-proxy",
        "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.17",
        "version": "v0.3.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/googleapis/enterprise-certificate-proxy",
        "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20",
        "version": "v0.3.20"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/googleapis/gax-go/v2",
        "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2",
        "version": "v2.26.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.35.0",
        "version": "v1.35.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gordonklaus/ineffassign",
        "purl": "pkg:golang/github.com/gordonklaus/ineffassign@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/goreleaser/chglog",
        "purl": "pkg:golang/github.com/goreleaser/chglog@v0.7.4",
        "version": "v0.7.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/goreleaser/fileglob",
        "purl": "pkg:golang/github.com/goreleaser/fileglob@v1.4.1",
        "version": "v1.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/goreleaser/go-shellwords",
        "purl": "pkg:golang/github.com/goreleaser/go-shellwords@v1.0.13",
        "version": "v1.0.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/goreleaser/goreleaser/v2",
        "purl": "pkg:golang/github.com/goreleaser/goreleaser/v2@v2.18.3",
        "version": "v2.18.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/goreleaser/nfpm/v2",
        "purl": "pkg:golang/github.com/goreleaser/nfpm/v2@v2.47.0",
        "version": "v2.47.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/goreleaser/quill",
        "purl": "pkg:golang/github.com/goreleaser/quill@v0.0.0-20260630015114-8310f3e9a321",
        "version": "v0.0.0-20260630015114-8310f3e9a321"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gorilla/websocket",
        "purl": "pkg:golang/github.com/gorilla/websocket@v1.5.3",
        "version": "v1.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gostaticanalysis/analysisutil",
        "purl": "pkg:golang/github.com/gostaticanalysis/analysisutil@v0.7.1",
        "version": "v0.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gostaticanalysis/comment",
        "purl": "pkg:golang/github.com/gostaticanalysis/comment@v1.5.0",
        "version": "v1.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gostaticanalysis/forcetypeassert",
        "purl": "pkg:golang/github.com/gostaticanalysis/forcetypeassert@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/gostaticanalysis/nilerr",
        "purl": "pkg:golang/github.com/gostaticanalysis/nilerr@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/grafeas/kritis",
        "purl": "pkg:golang/github.com/grafeas/kritis@v0.2.3-0.20210120183821-faeba81c520c",
        "version": "v0.2.3-0.20210120183821-faeba81c520c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.30.0",
        "version": "v2.30.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/h2non/filetype",
        "purl": "pkg:golang/github.com/h2non/filetype@v1.1.3",
        "version": "v1.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/hashicorp/errwrap",
        "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-cleanhttp",
        "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/hashicorp/go-immutable-radix/v2",
        "purl": "pkg:golang/github.com/hashicorp/go-immutable-radix/v2@v2.1.0",
        "version": "v2.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/hashicorp/go-multierror",
        "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-retryablehttp",
        "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
        "version": "v0.7.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/hashicorp/go-version",
        "purl": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
        "version": "v1.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/hashicorp/golang-lru",
        "purl": "pkg:golang/github.com/hashicorp/golang-lru@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/hashicorp/golang-lru/v2",
        "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "version": "v2.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/hexops/gotextdiff",
        "purl": "pkg:golang/github.com/hexops/gotextdiff@v1.0.3",
        "version": "v1.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hmarr/codeowners",
        "purl": "pkg:golang/github.com/hmarr/codeowners@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/huandu/xstrings",
        "purl": "pkg:golang/github.com/huandu/xstrings@v1.5.0",
        "version": "v1.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ianlancetaylor/demangle",
        "purl": "pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20260724033716-83e58baca724",
        "version": "v0.0.0-20260724033716-83e58baca724"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/icholy/digest",
        "purl": "pkg:golang/github.com/icholy/digest@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/in-toto/attestation",
        "purl": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/in-toto/in-toto-golang",
        "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/inconshreveable/mousetrap",
        "purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/invopop/jsonschema",
        "purl": "pkg:golang/github.com/invopop/jsonschema@v0.14.0",
        "version": "v0.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/bbloom",
        "purl": "pkg:golang/github.com/ipfs/bbloom@v0.0.4",
        "version": "v0.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-block-format",
        "purl": "pkg:golang/github.com/ipfs/go-block-format@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-cid",
        "purl": "pkg:golang/github.com/ipfs/go-cid@v0.4.1",
        "version": "v0.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-datastore",
        "purl": "pkg:golang/github.com/ipfs/go-datastore@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-ipfs-blockstore",
        "purl": "pkg:golang/github.com/ipfs/go-ipfs-blockstore@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-ipfs-ds-help",
        "purl": "pkg:golang/github.com/ipfs/go-ipfs-ds-help@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-ipfs-util",
        "purl": "pkg:golang/github.com/ipfs/go-ipfs-util@v0.0.3",
        "version": "v0.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-ipld-cbor",
        "purl": "pkg:golang/github.com/ipfs/go-ipld-cbor@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-ipld-format",
        "purl": "pkg:golang/github.com/ipfs/go-ipld-format@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-log",
        "purl": "pkg:golang/github.com/ipfs/go-log@v1.0.5",
        "version": "v1.0.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-log/v2",
        "purl": "pkg:golang/github.com/ipfs/go-log/v2@v2.5.1",
        "version": "v2.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ipfs/go-metrics-interface",
        "purl": "pkg:golang/github.com/ipfs/go-metrics-interface@v0.0.1",
        "version": "v0.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jbenet/go-context",
        "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
        "version": "v0.0.0-20150711004518-d14ea06fba99"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/jbenet/goprocess",
        "purl": "pkg:golang/github.com/jbenet/goprocess@v0.1.4",
        "version": "v0.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jedib0t/go-pretty/v6",
        "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.8.3",
        "version": "v6.8.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/jedisct1/go-minisign",
        "purl": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20241212093149-d2f9f49435c7",
        "version": "v0.0.0-20241212093149-d2f9f49435c7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/jgautheron/goconst",
        "purl": "pkg:golang/github.com/jgautheron/goconst@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/jjti/go-spancheck",
        "purl": "pkg:golang/github.com/jjti/go-spancheck@v0.6.5",
        "version": "v0.6.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/json-iterator/go",
        "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
        "version": "v1.1.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/julz/importas",
        "purl": "pkg:golang/github.com/julz/importas@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/karamaru-alpha/copyloopvar",
        "purl": "pkg:golang/github.com/karamaru-alpha/copyloopvar@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/kevinburke/ssh_config",
        "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kevinburke/ssh_config",
        "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/kisielk/errcheck",
        "purl": "pkg:golang/github.com/kisielk/errcheck@v1.20.0",
        "version": "v1.20.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/kkHAIKE/contextcheck",
        "purl": "pkg:golang/github.com/kkHAIKE/contextcheck@v1.1.6",
        "version": "v1.1.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/klauspost/compress",
        "purl": "pkg:golang/github.com/klauspost/compress@v1.19.2",
        "version": "v1.19.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/klauspost/compress",
        "purl": "pkg:golang/github.com/klauspost/compress@v1.20.1",
        "version": "v1.20.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/klauspost/cpuid/v2",
        "purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/klauspost/pgzip",
        "purl": "pkg:golang/github.com/klauspost/pgzip@v1.2.6",
        "version": "v1.2.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/kulti/thelper",
        "purl": "pkg:golang/github.com/kulti/thelper@v0.7.1",
        "version": "v0.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/kunwardeep/paralleltest",
        "purl": "pkg:golang/github.com/kunwardeep/paralleltest@v1.0.15",
        "version": "v1.0.15"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/kylelemons/godebug",
        "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ldez/exptostd",
        "purl": "pkg:golang/github.com/ldez/exptostd@v0.4.5",
        "version": "v0.4.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ldez/gomoddirectives",
        "purl": "pkg:golang/github.com/ldez/gomoddirectives@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ldez/grignotin",
        "purl": "pkg:golang/github.com/ldez/grignotin@v0.10.1",
        "version": "v0.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ldez/structtags",
        "purl": "pkg:golang/github.com/ldez/structtags@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ldez/tagliatelle",
        "purl": "pkg:golang/github.com/ldez/tagliatelle@v0.8.0",
        "version": "v0.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ldez/usetesting",
        "purl": "pkg:golang/github.com/ldez/usetesting@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/leonklingele/grouper",
        "purl": "pkg:golang/github.com/leonklingele/grouper@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/lucasb-eyer/go-colorful",
        "purl": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.4.1",
        "version": "v1.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lunixbochs/struc",
        "purl": "pkg:golang/github.com/lunixbochs/struc@v0.0.0-20241101090106-8d528fa2c543",
        "version": "v0.0.0-20241101090106-8d528fa2c543"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/macabu/inamedparam",
        "purl": "pkg:golang/github.com/macabu/inamedparam@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/manuelarte/embeddedstructfieldcheck",
        "purl": "pkg:golang/github.com/manuelarte/embeddedstructfieldcheck@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/manuelarte/funcorder",
        "purl": "pkg:golang/github.com/manuelarte/funcorder@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/maratori/testableexamples",
        "purl": "pkg:golang/github.com/maratori/testableexamples@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/maratori/testpackage",
        "purl": "pkg:golang/github.com/maratori/testpackage@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/masahiro331/go-ext4-filesystem",
        "purl": "pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20260423010602-fe51f5b5e52b",
        "version": "v0.0.0-20260423010602-fe51f5b5e52b"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Masterminds/goutils",
        "purl": "pkg:golang/github.com/Masterminds/goutils@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/semver/v3",
        "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.4.0",
        "version": "v3.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Masterminds/semver/v3",
        "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.5.0",
        "version": "v3.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Masterminds/sprig/v3",
        "purl": "pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0",
        "version": "v3.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/matoous/godox",
        "purl": "pkg:golang/github.com/matoous/godox@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-colorable",
        "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.15",
        "version": "v0.1.15"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/mattn/go-isatty",
        "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.22",
        "version": "v0.0.22"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-isatty",
        "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.24",
        "version": "v0.0.24"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/mattn/go-mastodon",
        "purl": "pkg:golang/github.com/mattn/go-mastodon@v0.0.13",
        "version": "v0.0.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/mattn/go-runewidth",
        "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.24",
        "version": "v0.0.24"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-runewidth",
        "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.28",
        "version": "v0.0.28"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-shellwords",
        "purl": "pkg:golang/github.com/mattn/go-shellwords@v1.0.14",
        "version": "v1.0.14"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/mgechev/revive",
        "purl": "pkg:golang/github.com/mgechev/revive@v1.17.0",
        "version": "v1.17.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/micromdm/plist",
        "purl": "pkg:golang/github.com/micromdm/plist@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/microsoft/azure-devops-go-api/azuredevops/v7",
        "purl": "pkg:golang/github.com/microsoft/azure-devops-go-api/azuredevops/v7@v7.1.0",
        "version": "v7.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/Microsoft/go-winio",
        "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Microsoft/go-winio",
        "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29",
        "version": "v0.6.3-0.20251027160822-ad3df93bed29"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/minio/sha256-simd",
        "purl": "pkg:golang/github.com/minio/sha256-simd@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/MirrexOne/unqueryvet",
        "purl": "pkg:golang/github.com/MirrexOne/unqueryvet@v1.5.4",
        "version": "v1.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/mitchellh/copystructure",
        "purl": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/mitchellh/go-homedir",
        "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/mitchellh/reflectwalk",
        "purl": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/buildkit",
        "purl": "pkg:golang/github.com/moby/buildkit@v0.32.2",
        "version": "v0.32.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/docker-image-spec",
        "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/moby/api",
        "purl": "pkg:golang/github.com/moby/moby/api@v1.55.0",
        "version": "v1.55.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/moby/client",
        "purl": "pkg:golang/github.com/moby/moby/client@v0.5.1",
        "version": "v0.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/moby/term",
        "purl": "pkg:golang/github.com/moby/term@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/modelcontextprotocol/registry",
        "purl": "pkg:golang/github.com/modelcontextprotocol/registry@v1.8.1",
        "version": "v1.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/concurrent",
        "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
        "version": "v0.0.0-20180306012644-bacd9c7ef1dd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/reflect2",
        "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
        "version": "v1.0.3-0.20250322232337-35a7c28c31ee"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/moricho/tparallel",
        "purl": "pkg:golang/github.com/moricho/tparallel@v0.3.2",
        "version": "v0.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/mr-tron/base58",
        "purl": "pkg:golang/github.com/mr-tron/base58@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/muesli/cancelreader",
        "purl": "pkg:golang/github.com/muesli/cancelreader@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/muesli/mango",
        "purl": "pkg:golang/github.com/muesli/mango@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/muesli/mango-cobra",
        "purl": "pkg:golang/github.com/muesli/mango-cobra@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/muesli/mango-pflag",
        "purl": "pkg:golang/github.com/muesli/mango-pflag@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/muesli/roff",
        "purl": "pkg:golang/github.com/muesli/roff@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/multiformats/go-base32",
        "purl": "pkg:golang/github.com/multiformats/go-base32@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/multiformats/go-base36",
        "purl": "pkg:golang/github.com/multiformats/go-base36@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/multiformats/go-multibase",
        "purl": "pkg:golang/github.com/multiformats/go-multibase@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/multiformats/go-multihash",
        "purl": "pkg:golang/github.com/multiformats/go-multihash@v0.2.3",
        "version": "v0.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/multiformats/go-varint",
        "purl": "pkg:golang/github.com/multiformats/go-varint@v0.0.7",
        "version": "v0.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/munnerz/goautoneg",
        "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
        "version": "v0.0.0-20191010083416-a7dc8b61c822"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/nakabonne/nestif",
        "purl": "pkg:golang/github.com/nakabonne/nestif@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ncruces/go-strftime",
        "purl": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/nishanths/exhaustive",
        "purl": "pkg:golang/github.com/nishanths/exhaustive@v0.13.0",
        "version": "v0.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/nishanths/predeclared",
        "purl": "pkg:golang/github.com/nishanths/predeclared@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/nunnatsa/ginkgolinter",
        "purl": "pkg:golang/github.com/nunnatsa/ginkgolinter@v0.24.0",
        "version": "v0.24.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/oklog/ulid/v2",
        "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
        "version": "v2.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/olekukonko/errors",
        "purl": "pkg:golang/github.com/olekukonko/errors@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/olekukonko/ll",
        "purl": "pkg:golang/github.com/olekukonko/ll@v0.0.9",
        "version": "v0.0.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/olekukonko/tablewriter",
        "purl": "pkg:golang/github.com/olekukonko/tablewriter@v1.0.9",
        "version": "v1.0.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/onsi/ginkgo/v2",
        "purl": "pkg:golang/github.com/onsi/ginkgo/v2@v2.33.0",
        "version": "v2.33.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/onsi/gomega",
        "purl": "pkg:golang/github.com/onsi/gomega@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/go-digest",
        "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/image-spec",
        "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/OpenPeeDeeP/depguard/v2",
        "purl": "pkg:golang/github.com/OpenPeeDeeP/depguard/v2@v2.2.1",
        "version": "v2.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/opentracing/opentracing-go",
        "purl": "pkg:golang/github.com/opentracing/opentracing-go@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ossf/osv-schema/bindings/go",
        "purl": "pkg:golang/github.com/ossf/osv-schema/bindings/go@v0.0.0-20260730052020-9509daabeece",
        "version": "v0.0.0-20260730052020-9509daabeece"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/otiai10/copy",
        "purl": "pkg:golang/github.com/otiai10/copy@v1.14.1",
        "version": "v1.14.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/otiai10/mint",
        "purl": "pkg:golang/github.com/otiai10/mint@v1.6.3",
        "version": "v1.6.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/owenrumney/go-sarif/v3",
        "purl": "pkg:golang/github.com/owenrumney/go-sarif/v3@v3.3.1",
        "version": "v3.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/package-url/packageurl-go",
        "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.6",
        "version": "v0.1.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pandatix/go-cvss",
        "purl": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/pb33f/ordered-map/v2",
        "purl": "pkg:golang/github.com/pb33f/ordered-map/v2@v2.3.1",
        "version": "v2.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/pelletier/go-toml",
        "purl": "pkg:golang/github.com/pelletier/go-toml@v1.9.5",
        "version": "v1.9.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/pelletier/go-toml/v2",
        "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3",
        "version": "v2.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pierrec/lz4/v4",
        "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.27",
        "version": "v4.1.27"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/pjbgf/sha1cd",
        "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pjbgf/sha1cd",
        "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/pkg/browser",
        "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
        "version": "v0.0.0-20240102092130-5ac0b6a4141c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/errors",
        "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/xattr",
        "purl": "pkg:golang/github.com/pkg/xattr@v0.4.12",
        "version": "v0.4.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/planetscale/vtprotobuf",
        "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
        "version": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pmezard/go-difflib",
        "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
        "version": "v1.0.1-0.20181226105442-5d4384ee4fb2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/polydawn/refmt",
        "purl": "pkg:golang/github.com/polydawn/refmt@v0.89.1-0.20221221234430-40501e09de1f",
        "version": "v0.89.1-0.20221221234430-40501e09de1f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/prometheus/client_golang",
        "purl": "pkg:golang/github.com/prometheus/client_golang@v1.24.1",
        "version": "v1.24.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/prometheus/client_model",
        "purl": "pkg:golang/github.com/prometheus/client_model@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/prometheus/common",
        "purl": "pkg:golang/github.com/prometheus/common@v0.70.1",
        "version": "v0.70.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/prometheus/procfs",
        "purl": "pkg:golang/github.com/prometheus/procfs@v0.21.1",
        "version": "v0.21.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ProtonMail/go-crypto",
        "purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1",
        "version": "v1.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/quasilyte/go-ruleguard",
        "purl": "pkg:golang/github.com/quasilyte/go-ruleguard@v0.4.5",
        "version": "v0.4.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/quasilyte/go-ruleguard/dsl",
        "purl": "pkg:golang/github.com/quasilyte/go-ruleguard/dsl@v0.3.23",
        "version": "v0.3.23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/quasilyte/gogrep",
        "purl": "pkg:golang/github.com/quasilyte/gogrep@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/quasilyte/regex/syntax",
        "purl": "pkg:golang/github.com/quasilyte/regex/syntax@v0.0.0-20210819130434-b3f0c404a727",
        "version": "v0.0.0-20210819130434-b3f0c404a727"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/quasilyte/stdinfo",
        "purl": "pkg:golang/github.com/quasilyte/stdinfo@v0.0.0-20220114132959-f7386bf02567",
        "version": "v0.0.0-20220114132959-f7386bf02567"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/raeperd/recvcheck",
        "purl": "pkg:golang/github.com/raeperd/recvcheck@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/remyoudompheng/bigfft",
        "purl": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec",
        "version": "v0.0.0-20230129092748-24d4a6f8daec"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rivo/uniseg",
        "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
        "version": "v0.4.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/robfig/cron/v3",
        "purl": "pkg:golang/github.com/robfig/cron/v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/rogpeppe/go-internal",
        "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.16.0",
        "version": "v1.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rust-secure-code/go-rustaudit",
        "purl": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c",
        "version": "v0.0.0-20250226111315-e20ec32e963c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ryancurrah/gomodguard",
        "purl": "pkg:golang/github.com/ryancurrah/gomodguard@v1.4.1",
        "version": "v1.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ryancurrah/gomodguard/v2",
        "purl": "pkg:golang/github.com/ryancurrah/gomodguard/v2@v2.1.3",
        "version": "v2.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ryanrolds/sqlclosecheck",
        "purl": "pkg:golang/github.com/ryanrolds/sqlclosecheck@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/saferwall/pe",
        "purl": "pkg:golang/github.com/saferwall/pe@v1.6.5",
        "version": "v1.6.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sagikazarmark/locafero",
        "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sanposhiho/wastedassign/v2",
        "purl": "pkg:golang/github.com/sanposhiho/wastedassign/v2@v2.1.0",
        "version": "v2.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/santhosh-tekuri/jsonschema/v5",
        "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1",
        "version": "v5.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3",
        "version": "v6.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sashamelentyev/interfacebloat",
        "purl": "pkg:golang/github.com/sashamelentyev/interfacebloat@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sashamelentyev/usestdlibvars",
        "purl": "pkg:golang/github.com/sashamelentyev/usestdlibvars@v1.29.0",
        "version": "v1.29.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sassoftware/relic",
        "purl": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible",
        "version": "v7.2.1+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/scylladb/go-set",
        "purl": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e",
        "version": "v1.0.3-0.20200225121959-cc7b2070d91e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/secure-systems-lab/go-securesystemslib",
        "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/securego/gosec/v2",
        "purl": "pkg:golang/github.com/securego/gosec/v2@v2.29.0",
        "version": "v2.29.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sergi/go-diff",
        "purl": "pkg:golang/github.com/sergi/go-diff@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/shibumi/go-pathspec",
        "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shirou/gopsutil",
        "purl": "pkg:golang/github.com/shirou/gopsutil@v3.21.11%2Bincompatible",
        "version": "v3.21.11+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/shopspring/decimal",
        "purl": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shurcooL/githubv4",
        "purl": "pkg:golang/github.com/shurcooL/githubv4@v0.0.0-20201206200315-234843c633fa",
        "version": "v0.0.0-20201206200315-234843c633fa"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shurcooL/graphql",
        "purl": "pkg:golang/github.com/shurcooL/graphql@v0.0.0-20200928012149-18c5c3165e3a",
        "version": "v0.0.0-20200928012149-18c5c3165e3a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sigstore/cosign/v3",
        "purl": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.1",
        "version": "v3.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sigstore/protobuf-specs",
        "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "version": "v0.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sigstore/rekor",
        "purl": "pkg:golang/github.com/sigstore/rekor@v1.5.2",
        "version": "v1.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sigstore/rekor-tiles/v2",
        "purl": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.2-0.20260601073857-5d098a2b6443",
        "version": "v2.2.2-0.20260601073857-5d098a2b6443"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sigstore/sigstore",
        "purl": "pkg:golang/github.com/sigstore/sigstore@v1.10.8",
        "version": "v1.10.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sigstore/sigstore-go",
        "purl": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sigstore/timestamp-authority/v2",
        "purl": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2",
        "version": "v2.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sirupsen/logrus",
        "purl": "pkg:golang/github.com/sirupsen/logrus@v1.10.2",
        "version": "v1.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sivchari/containedctx",
        "purl": "pkg:golang/github.com/sivchari/containedctx@v1.0.3",
        "version": "v1.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/skeema/knownhosts",
        "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/skeema/knownhosts",
        "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.2",
        "version": "v1.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/slack-go/slack",
        "purl": "pkg:golang/github.com/slack-go/slack@v0.29.0",
        "version": "v0.29.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sonatard/noctx",
        "purl": "pkg:golang/github.com/sonatard/noctx@v0.5.1",
        "version": "v0.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/sourcegraph/go-diff",
        "purl": "pkg:golang/github.com/sourcegraph/go-diff@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/spaolacci/murmur3",
        "purl": "pkg:golang/github.com/spaolacci/murmur3@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spdx/gordf",
        "purl": "pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb",
        "version": "v0.0.0-20250128162952-000978ccd6fb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spdx/tools-golang",
        "purl": "pkg:golang/github.com/spdx/tools-golang@v0.5.7",
        "version": "v0.5.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/spf13/afero",
        "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/spf13/cast",
        "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
        "version": "v1.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/cobra",
        "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "version": "v1.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/pflag",
        "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "version": "v1.0.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/spf13/viper",
        "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
        "version": "v1.21.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spiffe/go-spiffe/v2",
        "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ssgreg/nlreturn/v2",
        "purl": "pkg:golang/github.com/ssgreg/nlreturn/v2@v2.2.1",
        "version": "v2.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/stbenjam/no-sprintf-host-port",
        "purl": "pkg:golang/github.com/stbenjam/no-sprintf-host-port@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/stretchr/objx",
        "purl": "pkg:golang/github.com/stretchr/objx@v0.5.3",
        "version": "v0.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/stretchr/testify",
        "purl": "pkg:golang/github.com/stretchr/testify@v1.12.1",
        "version": "v1.12.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/subosito/gotenv",
        "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/tetafro/godot",
        "purl": "pkg:golang/github.com/tetafro/godot@v1.5.6",
        "version": "v1.5.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/theupdateframework/go-tuf",
        "purl": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/theupdateframework/go-tuf/v2",
        "purl": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2",
        "version": "v2.4.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/thoas/go-funk",
        "purl": "pkg:golang/github.com/thoas/go-funk@v0.9.3",
        "version": "v0.9.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/gjson",
        "purl": "pkg:golang/github.com/tidwall/gjson@v1.19.0",
        "version": "v1.19.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/jsonc",
        "purl": "pkg:golang/github.com/tidwall/jsonc@v0.3.3",
        "version": "v0.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/match",
        "purl": "pkg:golang/github.com/tidwall/match@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/pretty",
        "purl": "pkg:golang/github.com/tidwall/pretty@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/timakin/bodyclose",
        "purl": "pkg:golang/github.com/timakin/bodyclose@v0.0.0-20260723120731-857993a2939c",
        "version": "v0.0.0-20260723120731-857993a2939c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/timonwong/loggercheck",
        "purl": "pkg:golang/github.com/timonwong/loggercheck@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tink-crypto/tink-go/v2",
        "purl": "pkg:golang/github.com/tink-crypto/tink-go/v2@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tklauser/go-sysconf",
        "purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tklauser/numcpus",
        "purl": "pkg:golang/github.com/tklauser/numcpus@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/tomarrell/wrapcheck/v2",
        "purl": "pkg:golang/github.com/tomarrell/wrapcheck/v2@v2.12.0",
        "version": "v2.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/tommy-muehle/go-mnd/v2",
        "purl": "pkg:golang/github.com/tommy-muehle/go-mnd/v2@v2.5.1",
        "version": "v2.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/tomnomnom/linkheader",
        "purl": "pkg:golang/github.com/tomnomnom/linkheader@v0.0.0-20250811210735-e5fe3b51442e",
        "version": "v0.0.0-20250811210735-e5fe3b51442e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tonistiigi/go-csvvalue",
        "purl": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
        "version": "v0.0.0-20240814133006-030d3b2625d0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/transparency-dev/formats",
        "purl": "pkg:golang/github.com/transparency-dev/formats@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/transparency-dev/merkle",
        "purl": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
        "version": "v0.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ulikunitz/xz",
        "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.16",
        "version": "v0.5.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ulikunitz/xz",
        "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.17",
        "version": "v0.5.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ultraware/funlen",
        "purl": "pkg:golang/github.com/ultraware/funlen@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ultraware/whitespace",
        "purl": "pkg:golang/github.com/ultraware/whitespace@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/uudashr/gocognit",
        "purl": "pkg:golang/github.com/uudashr/gocognit@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/uudashr/iface",
        "purl": "pkg:golang/github.com/uudashr/iface@v1.5.1",
        "version": "v1.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Velocidex/json",
        "purl": "pkg:golang/github.com/Velocidex/json@v0.0.0-20220224052537-92f3c0326e5a",
        "version": "v0.0.0-20220224052537-92f3c0326e5a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Velocidex/ordereddict",
        "purl": "pkg:golang/github.com/Velocidex/ordereddict@v0.0.0-20250821063524-02dc06e46238",
        "version": "v0.0.0-20250821063524-02dc06e46238"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Velocidex/yaml/v2",
        "purl": "pkg:golang/github.com/Velocidex/yaml/v2@v2.2.8",
        "version": "v2.2.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/wagoodman/go-progress",
        "purl": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20230925121702-07e42b3cdba0",
        "version": "v0.0.0-20230925121702-07e42b3cdba0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/whyrusleeping/cbor-gen",
        "purl": "pkg:golang/github.com/whyrusleeping/cbor-gen@v0.1.3-0.20240731173018-74d74643234c",
        "version": "v0.1.3-0.20240731173018-74d74643234c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/x448/float16",
        "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
        "version": "v0.8.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xanzy/ssh-agent",
        "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
        "version": "v0.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonpointer",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
        "version": "v0.0.0-20190905194746-02993c407bfb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonreference",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
        "version": "v0.0.0-20180127040603-bd5ef7bd5415"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonschema",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/xen0n/gosmopolitan",
        "purl": "pkg:golang/github.com/xen0n/gosmopolitan@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xhit/go-str2duration/v2",
        "purl": "pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0",
        "version": "v2.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/xo/terminfo",
        "purl": "pkg:golang/github.com/xo/terminfo@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/yagipy/maintidx",
        "purl": "pkg:golang/github.com/yagipy/maintidx@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/yeya24/promlinter",
        "purl": "pkg:golang/github.com/yeya24/promlinter@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/ykadowak/zerologlint",
        "purl": "pkg:golang/github.com/ykadowak/zerologlint@v0.1.5",
        "version": "v0.1.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "github.com/youmark/pkcs8",
        "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
        "version": "v0.0.0-20240726163527-a2c0da244d78"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yusufpapurcu/wmi",
        "purl": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
        "version": "v1.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "gitlab.com/bosi/decorder",
        "purl": "pkg:golang/gitlab.com/bosi/decorder@v0.4.2",
        "version": "v0.4.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "gitlab.com/digitalxero/go-conventional-commit",
        "purl": "pkg:golang/gitlab.com/digitalxero/go-conventional-commit@v1.0.7",
        "version": "v1.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gitlab.com/gitlab-org/api/client-go",
        "purl": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go-simpler.org/musttag",
        "purl": "pkg:golang/go-simpler.org/musttag@v0.14.0",
        "version": "v0.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go-simpler.org/sloglint",
        "purl": "pkg:golang/go-simpler.org/sloglint@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.augendre.info/arangolint",
        "purl": "pkg:golang/go.augendre.info/arangolint@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.augendre.info/fatcontext",
        "purl": "pkg:golang/go.augendre.info/fatcontext@v0.10.1",
        "version": "v0.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.digitalxero.dev/go-msix",
        "purl": "pkg:golang/go.digitalxero.dev/go-msix@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.etcd.io/bbolt",
        "purl": "pkg:golang/go.etcd.io/bbolt@v1.5.0",
        "version": "v1.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.mozilla.org/pkcs7",
        "purl": "pkg:golang/go.mozilla.org/pkcs7@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opencensus.io",
        "purl": "pkg:golang/go.opencensus.io@v0.24.0",
        "version": "v0.24.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/auto/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/detectors/gcp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.69.0",
        "version": "v0.69.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.70.0",
        "version": "v0.70.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0",
        "version": "v0.70.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel",
        "purl": "pkg:golang/go.opentelemetry.io/otel@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.opentelemetry.io/otel",
        "purl": "pkg:golang/go.opentelemetry.io/otel@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.opentelemetry.io/otel/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.opentelemetry.io/otel/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/trace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.opentelemetry.io/otel/trace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0",
        "version": "v1.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "go.uber.org/atomic",
        "purl": "pkg:golang/go.uber.org/atomic@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/mock",
        "purl": "pkg:golang/go.uber.org/mock@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/multierr",
        "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/zap",
        "purl": "pkg:golang/go.uber.org/zap@v1.28.0",
        "version": "v1.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v2",
        "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
        "version": "v2.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v3",
        "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5",
        "version": "v3.0.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v4",
        "purl": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.6",
        "version": "v4.0.0-rc.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gocloud.dev",
        "purl": "pkg:golang/gocloud.dev@v0.46.0",
        "version": "v0.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/crypto",
        "purl": "pkg:golang/golang.org/x/crypto@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "golang.org/x/exp/typeparams",
        "purl": "pkg:golang/golang.org/x/exp/typeparams@v0.0.0-20260811152304-ee035b5b010f",
        "version": "v0.0.0-20260811152304-ee035b5b010f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.41.0",
        "version": "v0.41.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "golang.org/x/net",
        "purl": "pkg:golang/golang.org/x/net@v0.59.0",
        "version": "v0.59.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/net",
        "purl": "pkg:golang/golang.org/x/net@v0.60.0",
        "version": "v0.60.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/oauth2",
        "purl": "pkg:golang/golang.org/x/oauth2@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/sync",
        "purl": "pkg:golang/golang.org/x/sync@v0.23.0",
        "version": "v0.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/sys",
        "purl": "pkg:golang/golang.org/x/sys@v0.48.0",
        "version": "v0.48.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/telemetry",
        "purl": "pkg:golang/golang.org/x/telemetry@v0.0.0-20260811182544-a038080d80e5",
        "version": "v0.0.0-20260811182544-a038080d80e5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/term",
        "purl": "pkg:golang/golang.org/x/term@v0.46.0",
        "version": "v0.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/text",
        "purl": "pkg:golang/golang.org/x/text@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/time",
        "purl": "pkg:golang/golang.org/x/time@v0.15.0",
        "version": "v0.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.49.0",
        "version": "v0.49.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.50.0",
        "version": "v0.50.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/vuln",
        "purl": "pkg:golang/golang.org/x/vuln@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/xerrors",
        "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da",
        "version": "v0.0.0-20240903120638-7835f813f4da"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/api",
        "purl": "pkg:golang/google.golang.org/api@v0.288.0",
        "version": "v0.288.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "google.golang.org/api",
        "purl": "pkg:golang/google.golang.org/api@v0.293.0",
        "version": "v0.293.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto",
        "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d",
        "version": "v0.0.0-20260715232425-e75dac1f907d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/api",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d",
        "version": "v0.0.0-20260803160001-6ac0973c030d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "google.golang.org/genproto/googleapis/api",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688",
        "version": "v0.0.0-20260819154853-08b0e4226688"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260803160001-6ac0973c030d",
        "version": "v0.0.0-20260803160001-6ac0973c030d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688",
        "version": "v0.0.0-20260819154853-08b0e4226688"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/grpc",
        "purl": "pkg:golang/google.golang.org/grpc@v1.83.2",
        "version": "v1.83.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/protobuf",
        "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12",
        "version": "v1.36.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "gopkg.in/alexcesaro/quotedprintable.v3",
        "purl": "pkg:golang/gopkg.in/alexcesaro/quotedprintable.v3@v3.0.0-20150716171945-2caba252f4dc",
        "version": "v3.0.0-20150716171945-2caba252f4dc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/evanphx/json-patch.v4",
        "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
        "version": "v4.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/inf.v0",
        "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/ini.v1",
        "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.3",
        "version": "v1.67.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "gopkg.in/mail.v2",
        "purl": "pkg:golang/gopkg.in/mail.v2@v2.3.1",
        "version": "v2.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/warnings.v0",
        "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/yaml.v3",
        "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "honnef.co/go/tools",
        "purl": "pkg:golang/honnef.co/go/tools@v0.8.1",
        "version": "v0.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/api",
        "purl": "pkg:golang/k8s.io/api@v0.35.3",
        "version": "v0.35.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/apimachinery",
        "purl": "pkg:golang/k8s.io/apimachinery@v0.35.3",
        "version": "v0.35.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "k8s.io/apimachinery",
        "purl": "pkg:golang/k8s.io/apimachinery@v0.36.2",
        "version": "v0.36.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/client-go",
        "purl": "pkg:golang/k8s.io/client-go@v0.35.3",
        "version": "v0.35.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/klog/v2",
        "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "version": "v2.140.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/kube-openapi",
        "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20250910181357-589584f1c912",
        "version": "v0.0.0-20250910181357-589584f1c912"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "k8s.io/utils",
        "purl": "pkg:golang/k8s.io/utils@v0.0.0-20251002143259-bc988d571ff4",
        "version": "v0.0.0-20251002143259-bc988d571ff4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "k8s.io/utils",
        "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2",
        "version": "v0.0.0-20260210185600-b8788abfbbc2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "lukechampine.com/blake3",
        "purl": "pkg:golang/lukechampine.com/blake3@v1.4.1",
        "version": "v1.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "modernc.org/libc",
        "purl": "pkg:golang/modernc.org/libc@v1.74.4",
        "version": "v1.74.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "modernc.org/mathutil",
        "purl": "pkg:golang/modernc.org/mathutil@v1.7.1",
        "version": "v1.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "modernc.org/memory",
        "purl": "pkg:golang/modernc.org/memory@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "modernc.org/sqlite",
        "purl": "pkg:golang/modernc.org/sqlite@v1.56.0",
        "version": "v1.56.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "mvdan.cc/gofumpt",
        "purl": "pkg:golang/mvdan.cc/gofumpt@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "mvdan.cc/sh/v3",
        "purl": "pkg:golang/mvdan.cc/sh/v3@v3.14.1",
        "version": "v3.14.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "mvdan.cc/unparam",
        "purl": "pkg:golang/mvdan.cc/unparam@v0.0.0-20260823230713-2fa3d841b0c8",
        "version": "v0.0.0-20260823230713-2fa3d841b0c8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "osv.dev/bindings/go",
        "purl": "pkg:golang/osv.dev/bindings/go@v0.0.0-20260805021707-3a57b89df3b6",
        "version": "v0.0.0-20260805021707-3a57b89df3b6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/json",
        "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
        "version": "v0.0.0-20250730193827-2d320260d730"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "sigs.k8s.io/kind",
        "purl": "pkg:golang/sigs.k8s.io/kind@v0.32.0",
        "version": "v0.32.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/randfill",
        "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/release-utils",
        "purl": "pkg:golang/sigs.k8s.io/release-utils@v0.11.1",
        "version": "v0.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/structured-merge-diff/v6",
        "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0",
        "version": "v6.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/yaml",
        "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "tools/go.mod",
        "name": "software.sslmate.com/src/go-pkcs12",
        "purl": "pkg:golang/software.sslmate.com/src/go-pkcs12@v0.7.3",
        "version": "v0.7.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "www.velocidex.com/golang/go-ntfs",
        "purl": "pkg:golang/www.velocidex.com/golang/go-ntfs@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "www.velocidex.com/golang/regparser",
        "purl": "pkg:golang/www.velocidex.com/golang/regparser@v0.0.0-20250203141505-31e704a67ef7",
        "version": "v0.0.0-20250203141505-31e704a67ef7"
      }
    ],
    "description": "Measure open-source project security practices with OpenSSF checks",
    "errors": [],
    "go_binary": {
      "asset": "scorecard_5.6.0_linux_amd64.tar.gz",
      "binary": "scorecard",
      "db": "https://vuln.go.dev",
      "db_last_modified": "2026-10-27T21:16:18Z",
      "findings": [
        {
          "aliases": [
            "CVE-2026-111943"
          ],
          "epss": {
            "cve": "CVE-2026-111943",
            "percentile": 0.33793,
            "score": 0.00396
          },
          "fixed_version": "v1.27.3",
          "id": "GO-2026-6809",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Distrust compromised intermediate certificates in crypto/x509",
          "version": "v1.27.2"
        },
        {
          "aliases": [],
          "epss": null,
          "fixed_version": "",
          "id": "GO-2026-5932",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/crypto",
          "summary": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues",
          "version": "v0.57.0"
        },
        {
          "aliases": [
            "CVE-2026-78661"
          ],
          "epss": {
            "cve": "CVE-2026-78661",
            "percentile": 0.08063,
            "score": 0.00185
          },
          "fixed_version": "v0.62.0",
          "id": "GO-2026-6860",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/net",
          "summary": "Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net",
          "version": "v0.60.0"
        },
        {
          "aliases": [
            "CVE-2026-97045"
          ],
          "epss": {
            "cve": "CVE-2026-97045",
            "percentile": 0.10117,
            "score": 0.00202
          },
          "fixed_version": "v0.62.0",
          "id": "GO-2026-6866",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/net",
          "summary": "Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net",
          "version": "v0.60.0"
        }
      ],
      "go_version": "go1.27.2",
      "main_module": "github.com/ossf/scorecard/v5"
    },
    "id": "ossf__scorecard",
    "manifests": [
      ".github/workflows/codeql-analysis.yml",
      ".github/workflows/depsreview.yml",
      ".github/workflows/docker.yml",
      ".github/workflows/gitlab.yml",
      ".github/workflows/goreleaser.yaml",
      ".github/workflows/integration.yml",
      ".github/workflows/lint.yml",
      ".github/workflows/main.yml",
      ".github/workflows/osps-baseline.yml",
      ".github/workflows/publishimage.yml",
      ".github/workflows/scdiff.yml",
      ".github/workflows/scorecard-analysis.yml",
      ".github/workflows/security-insights.yml",
      ".github/workflows/stale.yml",
      ".github/workflows/verify.yml",
      "go.mod",
      "go.sum",
      "tools/go.mod",
      "tools/go.sum"
    ],
    "name": "scorecard",
    "osv": {
      "advisories": 18,
      "available": true,
      "confirmed": 14,
      "osv_only": [],
      "warning": null
    },
    "ref": "v5.6.0",
    "ref_kind": "release",
    "release_integrity": {
      "asset": "scorecard_5.6.0_linux_amd64.tar.gz",
      "assets": 8,
      "build_provenance": "verified",
      "checksums_published": true,
      "digest_matches_github": true,
      "immutable_release": null,
      "methods": [
        {
          "error": "",
          "method": "slsa-verifier",
          "status": "verified"
        }
      ],
      "provenance_published": true,
      "sbom_published": false,
      "signature": null,
      "signatures_published": false,
      "signer": null,
      "verdict": "verified"
    },
    "released_at": "2026-10-12T00:21:01Z",
    "repository": "ossf/scorecard",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [
        "0 version changes among 844 shared packages \u2014 no actual upgrades",
        "Core system packages stable: golang (768), github (59), file (17) unchanged"
      ],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:07:40+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "Code-Review",
          "reason": "Found 9/23 approved changesets -- score normalized to 3",
          "score": 3
        },
        {
          "name": "Branch-Protection",
          "reason": "branch protection is not maximal on development and all release branches",
          "score": 5
        },
        {
          "name": "CII-Best-Practices",
          "reason": "badge detected: Passing",
          "score": 5
        },
        {
          "name": "Vulnerabilities",
          "reason": "4 existing vulnerabilities detected",
          "score": 6
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 9",
          "score": 9
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 9
        },
        {
          "name": "Binary-Artifacts",
          "reason": "no binaries found in the repo",
          "score": 10
        },
        {
          "name": "CI-Tests",
          "reason": "29 out of 29 merged PRs checked by a CI test -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Contributors",
          "reason": "project has 74 contributing companies or organizations",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "Dependency-Update-Tool",
          "reason": "update tool detected",
          "score": 10
        },
        {
          "name": "Fuzzing",
          "reason": "project is fuzzed",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow detected",
          "score": 10
        },
        {
          "name": "SAST",
          "reason": "SAST tool is run on all commits",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        },
        {
          "name": "Signed-Releases",
          "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
          "score": 10
        }
      ],
      "date": "2026-10-31",
      "score": 8.6,
      "source": "openssf-api",
      "version": "v5.6.0"
    },
    "vulnerabilities": [
      {
        "aliases": [
          "CVE-2026-78663"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78663",
          "percentile": 0.49813,
          "score": 0.00622
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6612",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Critical",
        "summary": "The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configure",
        "url": "https://go.dev/cl/847187",
        "version": "v0.59.0"
      },
      {
        "aliases": [
          "CVE-2026-116587"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116587",
          "percentile": 0.3048,
          "score": 0.00366
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.6"
        ],
        "id": "GHSA-mgcc-cww5-fp2q",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "High",
        "summary": "Go JOSE: DoS when parsing JWKs that contain RSA keys",
        "url": "https://github.com/advisories/GHSA-mgcc-cww5-fp2q",
        "version": "v4.1.4"
      },
      {
        "aliases": [
          "CVE-2026-78659"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78659",
          "percentile": 0.50082,
          "score": 0.00627
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6603",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"",
        "url": "https://go.dev/cl/847185",
        "version": "v0.59.0"
      },
      {
        "aliases": [
          "CVE-2026-78660"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78660",
          "percentile": 0.36838,
          "score": 0.00425
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6610",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a re",
        "url": "https://go.dev/cl/835145",
        "version": "v0.59.0"
      },
      {
        "aliases": [
          "CVE-2026-78669"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78669",
          "percentile": 0.49426,
          "score": 0.00614
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6611",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.",
        "url": "https://go.dev/cl/847186",
        "version": "v0.59.0"
      },
      {
        "aliases": [
          "CVE-2026-97032"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97032",
          "percentile": 0.42154,
          "score": 0.0049
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6617",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the ot",
        "url": "https://go.dev/cl/847188",
        "version": "v0.59.0"
      },
      {
        "aliases": [
          "CVE-2026-116585"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116585",
          "percentile": 0.18368,
          "score": 0.00264
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.5"
        ],
        "id": "GHSA-4w3g-jfj2-cw2q",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "Medium",
        "summary": "Go JOSE: Panic during CBC-HMAC processing",
        "url": "https://github.com/advisories/GHSA-4w3g-jfj2-cw2q",
        "version": "v4.1.4"
      },
      {
        "aliases": [
          "CVE-2026-116586"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116586",
          "percentile": 0.21769,
          "score": 0.00292
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.5"
        ],
        "id": "GHSA-vvm8-gf78-28g4",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "Medium",
        "summary": "Go JOSE: Panics in JSON parsing",
        "url": "https://github.com/advisories/GHSA-vvm8-gf78-28g4",
        "version": "v4.1.4"
      },
      {
        "aliases": [],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-6225",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "github.com/chrismellard/docker-credential-acr-env",
        "severity": "Unknown",
        "summary": "In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring \".azurecr.io\" (such as evil.azurecr.io.attacker.com) are treated a",
        "url": "https://github.com/chrismellard/docker-credential-acr-env/issues/21",
        "version": "v0.0.0-20230304212654-82a0ddb27589"
      },
      {
        "aliases": [],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-5932",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "Unknown",
        "summary": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained f",
        "url": "https://go.dev/issue/44226",
        "version": "v0.57.0"
      },
      {
        "aliases": [
          "CVE-2026-78661"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78661",
          "percentile": 0.08063,
          "score": 0.00185
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6860",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") cau",
        "url": "https://go.dev/cl/849365",
        "version": "v0.59.0"
      },
      {
        "aliases": [
          "CVE-2026-78661"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78661",
          "percentile": 0.08063,
          "score": 0.00185
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6860",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") cau",
        "url": "https://go.dev/cl/849365",
        "version": "v0.60.0"
      },
      {
        "aliases": [
          "CVE-2026-97045"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97045",
          "percentile": 0.10117,
          "score": 0.00202
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6866",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "tools/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> f",
        "url": "https://go.dev/cl/855121",
        "version": "v0.59.0"
      },
      {
        "aliases": [
          "CVE-2026-97045"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97045",
          "percentile": 0.10117,
          "score": 0.00202
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6866",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> f",
        "url": "https://go.dev/cl/855121",
        "version": "v0.60.0"
      }
    ],
    "workflow_audit": {
      "files": 15,
      "findings": [
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/goreleaser.yaml",
          "line": 73,
          "note": "this job",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "Medium",
          "description": "use of fundamentally insecure workflow trigger",
          "file": ".github/workflows/scdiff.yml",
          "line": 2,
          "note": "this workflow",
          "rule": "dangerous-triggers",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#dangerous-triggers"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/scdiff.yml",
          "line": 52,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "Medium",
          "description": "use of fundamentally insecure workflow trigger",
          "file": ".github/workflows/verify.yml",
          "line": 16,
          "note": "this workflow",
          "rule": "dangerous-triggers",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#dangerous-triggers"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/goreleaser.yaml",
          "line": 84,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/scdiff.yml",
          "line": 6,
          "note": "uses read-all permissions",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}