{
  "history": [
    {
      "added": 0,
      "commit": "a8c88feb4a1c8e961b7902534ce3af97e9d524a4",
      "date": "2026-11-01",
      "dependencies": 441,
      "errors": [],
      "fixable": 29,
      "go_version": "go1.26.5",
      "in_binary": {
        "dependencies": 14,
        "stdlib": 21,
        "total": 35
      },
      "new_vulnerabilities": 0,
      "osv_confirmed": 30,
      "osv_only": 0,
      "ref": "v3.11.1",
      "release_changed": false,
      "release_integrity": "checksums-only",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 6.8,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 1,
        "High": 19,
        "Low": 0,
        "Medium": 7,
        "Negligible": 0,
        "Unknown": 3
      },
      "workflow": {
        "High": 76,
        "Low": 2,
        "Medium": 19,
        "files": 13
      }
    },
    {
      "added": 0,
      "commit": "a8c88feb4a1c8e961b7902534ce3af97e9d524a4",
      "date": "2026-11-02",
      "dependencies": 441,
      "errors": [],
      "fixable": 29,
      "go_version": "go1.26.5",
      "in_binary": {
        "dependencies": 14,
        "stdlib": 21,
        "total": 35
      },
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 30,
      "osv_only": 0,
      "ref": "v3.11.1",
      "release_changed": false,
      "release_integrity": "checksums-only",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 6.8,
      "scorecard_date": "2026-10-19",
      "scorecard_note": null,
      "scorecard_source": "openssf-api",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 1,
        "High": 19,
        "Low": 0,
        "Medium": 7,
        "Negligible": 0,
        "Unknown": 3
      },
      "vulnerable_packages": 9,
      "workflow": {
        "High": 76,
        "Low": 2,
        "Medium": 19,
        "files": 13
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "API & Dynamic Testing (DAST)",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "in_binary_new": [],
      "in_binary_resolved": [],
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "v3.11.1",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "a8c88feb4a1c8e961b7902534ce3af97e9d524a4",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/perf-regression.yaml",
        "name": "actions/cache/restore",
        "purl": "pkg:github/actions/cache@v6#restore",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/perf-regression.yaml",
        "name": "actions/cache/save",
        "purl": "pkg:github/actions/cache@v6#save",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/compat-checks.yaml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v7",
        "version": "v7"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release.yaml",
        "name": "actions/download-artifact",
        "purl": "pkg:github/actions/download-artifact@v8",
        "version": "v8"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/stale.yaml",
        "name": "actions/stale",
        "purl": "pkg:github/actions/stale@v11",
        "version": "v11"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/fuzz.yaml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v7",
        "version": "v7"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/perf-regression.yaml",
        "name": "benchmark-action/github-action-benchmark",
        "purl": "pkg:github/benchmark-action/github-action-benchmark@v1",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/typos.yaml",
        "name": "crate-ci/typos",
        "purl": "pkg:github/crate-ci/typos@v1.48.0",
        "version": "v1.48.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release.yaml",
        "name": "docker/login-action",
        "purl": "pkg:github/docker/login-action@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/tests.yaml",
        "name": "github/codeql-action/analyze",
        "purl": "pkg:github/github/codeql-action@v4#analyze",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/tests.yaml",
        "name": "github/codeql-action/autobuild",
        "purl": "pkg:github/github/codeql-action@v4#autobuild",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/tests.yaml",
        "name": "github/codeql-action/init",
        "purl": "pkg:github/github/codeql-action@v4#init",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/govulncheck.yaml",
        "name": "github/codeql-action/upload-sarif",
        "purl": "pkg:github/github/codeql-action@v4#upload-sarif",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/generate-docs.yaml",
        "name": "projectdiscovery/actions/commit",
        "purl": "pkg:github/projectdiscovery/actions@v1#commit",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/flamegraph.yaml",
        "name": "projectdiscovery/actions/flamegraph",
        "purl": "pkg:github/projectdiscovery/actions@v1#flamegraph",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/tests.yaml",
        "name": "projectdiscovery/actions/free-disk-space",
        "purl": "pkg:github/projectdiscovery/actions@v1#free-disk-space",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/tests.yaml",
        "name": "projectdiscovery/actions/golangci-lint/v2",
        "purl": "pkg:github/projectdiscovery/actions@v1#golangci-lint/v2",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release.yaml",
        "name": "projectdiscovery/actions/goreleaser",
        "purl": "pkg:github/projectdiscovery/actions@v1#goreleaser",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/auto-merge.yaml",
        "name": "projectdiscovery/actions/pr/approve",
        "purl": "pkg:github/projectdiscovery/actions@v1#pr/approve",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/auto-merge.yaml",
        "name": "projectdiscovery/actions/pr/merge",
        "purl": "pkg:github/projectdiscovery/actions@v1#pr/merge",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/generate-docs.yaml",
        "name": "projectdiscovery/actions/setup/git",
        "purl": "pkg:github/projectdiscovery/actions@v1#setup/git",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/flamegraph.yaml",
        "name": "projectdiscovery/actions/setup/go",
        "purl": "pkg:github/projectdiscovery/actions@v1#setup/go",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/compat-checks.yaml",
        "name": "projectdiscovery/actions/setup/go/compat-checks",
        "purl": "pkg:github/projectdiscovery/actions@v1#setup/go/compat-checks",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/tests.yaml",
        "name": "projectdiscovery/actions/setup/python",
        "purl": "pkg:github/projectdiscovery/actions@v1#setup/python",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/tests.yaml",
        "name": "projectdiscovery/nuclei-action",
        "purl": "pkg:github/projectdiscovery/nuclei-action@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/flamegraph.yaml",
        "name": "projectdiscovery/nuclei-action/cache",
        "purl": "pkg:github/projectdiscovery/nuclei-action@v3#cache",
        "version": "v3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "aead.dev/minisign",
        "purl": "pkg:golang/aead.dev/minisign@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "carvel.dev/ytt",
        "purl": "pkg:golang/carvel.dev/ytt@v0.52.0",
        "version": "v0.52.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "code.gitea.io/sdk/gitea",
        "purl": "pkg:golang/code.gitea.io/sdk/gitea@v0.17.0",
        "version": "v0.17.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "dario.cat/mergo",
        "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "filippo.io/edwards25519",
        "purl": "pkg:golang/filippo.io/edwards25519@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "git.mills.io/prologic/smtpd",
        "purl": "pkg:golang/git.mills.io/prologic/smtpd@v0.0.0-20210710122116-a525b76c287a",
        "version": "v0.0.0-20210710122116-a525b76c287a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/akrylysov/pogreb",
        "purl": "pkg:golang/github.com/akrylysov/pogreb@v0.10.2",
        "version": "v0.10.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/chroma",
        "purl": "pkg:golang/github.com/alecthomas/chroma@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/chroma/v2",
        "purl": "pkg:golang/github.com/alecthomas/chroma/v2@v2.20.0",
        "version": "v2.20.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/kingpin/v2",
        "purl": "pkg:golang/github.com/alecthomas/kingpin/v2@v2.4.0",
        "version": "v2.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/template",
        "purl": "pkg:golang/github.com/alecthomas/template@v0.0.0-20190718012654-fb15b899a751",
        "version": "v0.0.0-20190718012654-fb15b899a751"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/units",
        "purl": "pkg:golang/github.com/alecthomas/units@v0.0.0-20211218093645-b94a6e3cc137",
        "version": "v0.0.0-20211218093645-b94a6e3cc137"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alexsnet/go-vnc",
        "purl": "pkg:golang/github.com/alexsnet/go-vnc@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alitto/pond",
        "purl": "pkg:golang/github.com/alitto/pond@v1.9.2",
        "version": "v1.9.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/andybalholm/brotli",
        "purl": "pkg:golang/github.com/andybalholm/brotli@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/andybalholm/cascadia",
        "purl": "pkg:golang/github.com/andybalholm/cascadia@v1.3.3",
        "version": "v1.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/andygrunwald/go-jira",
        "purl": "pkg:golang/github.com/andygrunwald/go-jira@v1.16.1",
        "version": "v1.16.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/antchfx/htmlquery",
        "purl": "pkg:golang/github.com/antchfx/htmlquery@v1.3.5",
        "version": "v1.3.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/antchfx/xmlquery",
        "purl": "pkg:golang/github.com/antchfx/xmlquery@v1.4.4",
        "version": "v1.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/antchfx/xpath",
        "purl": "pkg:golang/github.com/antchfx/xpath@v1.3.6",
        "version": "v1.3.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/asaskevich/govalidator",
        "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
        "version": "v0.0.0-20230301143203-a9d515a09cc2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "version": "v1.41.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8",
        "version": "v1.7.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/config",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.29.17",
        "version": "v1.29.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/credentials",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.17.70",
        "version": "v1.17.70"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.16.32",
        "version": "v1.16.32"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/s3/manager",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.17.82",
        "version": "v1.17.82"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21",
        "version": "v1.4.21"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
        "version": "v2.7.21"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/ini",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.3",
        "version": "v1.8.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.22",
        "version": "v1.4.22"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.7",
        "version": "v1.13.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.13",
        "version": "v1.9.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.21",
        "version": "v1.13.21"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.21",
        "version": "v1.19.21"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/s3",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0",
        "version": "v1.99.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sso",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.25.5",
        "version": "v1.25.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.30.3",
        "version": "v1.30.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sts",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.34.0",
        "version": "v1.34.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/smithy-go",
        "purl": "pkg:golang/github.com/aws/smithy-go@v1.24.2",
        "version": "v1.24.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aymanbagabas/go-osc52/v2",
        "purl": "pkg:golang/github.com/aymanbagabas/go-osc52/v2@v2.0.1",
        "version": "v2.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aymerick/douceur",
        "purl": "pkg:golang/github.com/aymerick/douceur@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.18.0",
        "version": "v1.18.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.10.1",
        "version": "v1.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.11.1",
        "version": "v1.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob",
        "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/go-ansiterm",
        "purl": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
        "version": "v0.0.0-20250102033503-faa5f7b0171c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/go-ntlmssp",
        "purl": "pkg:golang/github.com/Azure/go-ntlmssp@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
        "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.4.2",
        "version": "v1.4.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bahlo/generic-list-go",
        "purl": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bits-and-blooms/bitset",
        "purl": "pkg:golang/github.com/bits-and-blooms/bitset@v1.22.0",
        "version": "v1.22.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bits-and-blooms/bloom/v3",
        "purl": "pkg:golang/github.com/bits-and-blooms/bloom/v3@v3.5.0",
        "version": "v3.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bodgit/plumbing",
        "purl": "pkg:golang/github.com/bodgit/plumbing@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bodgit/sevenzip",
        "purl": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1",
        "version": "v1.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bodgit/windows",
        "purl": "pkg:golang/github.com/bodgit/windows@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/brianvoe/gofakeit/v7",
        "purl": "pkg:golang/github.com/brianvoe/gofakeit/v7@v7.2.1",
        "version": "v7.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bufbuild/protocompile",
        "purl": "pkg:golang/github.com/bufbuild/protocompile@v0.14.1",
        "version": "v0.14.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/buger/jsonparser",
        "purl": "pkg:golang/github.com/buger/jsonparser@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/BurntSushi/toml",
        "purl": "pkg:golang/github.com/BurntSushi/toml@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bytedance/gopkg",
        "purl": "pkg:golang/github.com/bytedance/gopkg@v0.1.3",
        "version": "v0.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bytedance/sonic",
        "purl": "pkg:golang/github.com/bytedance/sonic@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bytedance/sonic/loader",
        "purl": "pkg:golang/github.com/bytedance/sonic/loader@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/caddyserver/certmagic",
        "purl": "pkg:golang/github.com/caddyserver/certmagic@v0.25.0",
        "version": "v0.25.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/caddyserver/zerossl",
        "purl": "pkg:golang/github.com/caddyserver/zerossl@v0.1.3",
        "version": "v0.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cenkalti/backoff/v4",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
        "version": "v4.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/censys/censys-sdk-go",
        "purl": "pkg:golang/github.com/censys/censys-sdk-go@v0.19.1",
        "version": "v0.19.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cespare/xxhash",
        "purl": "pkg:golang/github.com/cespare/xxhash@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cespare/xxhash/v2",
        "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/colorprofile",
        "purl": "pkg:golang/github.com/charmbracelet/colorprofile@v0.3.2",
        "version": "v0.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/glamour",
        "purl": "pkg:golang/github.com/charmbracelet/glamour@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/lipgloss",
        "purl": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.1-0.20250404203927-76690c660834",
        "version": "v1.1.1-0.20250404203927-76690c660834"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/x/ansi",
        "purl": "pkg:golang/github.com/charmbracelet/x/ansi@v0.10.1",
        "version": "v0.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/x/cellbuf",
        "purl": "pkg:golang/github.com/charmbracelet/x/cellbuf@v0.0.13",
        "version": "v0.0.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/x/exp/slice",
        "purl": "pkg:golang/github.com/charmbracelet/x/exp/slice@v0.0.0-20250908092851-c2208eb08494",
        "version": "v0.0.0-20250908092851-c2208eb08494"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/x/term",
        "purl": "pkg:golang/github.com/charmbracelet/x/term@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cheggaaa/pb/v3",
        "purl": "pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7",
        "version": "v3.1.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/clbanning/mxj/v2",
        "purl": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cloudflare/cfssl",
        "purl": "pkg:golang/github.com/cloudflare/cfssl@v1.6.4",
        "version": "v1.6.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cloudflare/circl",
        "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.3",
        "version": "v1.6.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cloudwego/base64x",
        "purl": "pkg:golang/github.com/cloudwego/base64x@v0.1.6",
        "version": "v0.1.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cncf/xds/go",
        "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
        "version": "v0.0.0-20260202195803-dba9d589def2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cnf/structhash",
        "purl": "pkg:golang/github.com/cnf/structhash@v0.0.0-20250313080605-df4c6cc74a9a",
        "version": "v0.0.0-20250313080605-df4c6cc74a9a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/continuity",
        "purl": "pkg:golang/github.com/containerd/continuity@v0.4.5",
        "version": "v0.4.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs",
        "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs/pkg",
        "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cyphar/filepath-securejoin",
        "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/DataDog/gostackparse",
        "purl": "pkg:golang/github.com/DataDog/gostackparse@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/davecgh/go-spew",
        "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "version": "v1.1.2-0.20180830191138-d8f796af33cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/davidmz/go-pageant",
        "purl": "pkg:golang/github.com/davidmz/go-pageant@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dgryski/go-rendezvous",
        "purl": "pkg:golang/github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f",
        "version": "v0.0.0-20200823014737-9f7001d12a5f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dimchansky/utfbom",
        "purl": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/distribution/reference",
        "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ditashi/jsbeautifier-go",
        "purl": "pkg:golang/github.com/ditashi/jsbeautifier-go@v0.0.0-20141206144643-2520a8026a9c",
        "version": "v0.0.0-20141206144643-2520a8026a9c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/djherbis/times",
        "purl": "pkg:golang/github.com/djherbis/times@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dlclark/regexp2",
        "purl": "pkg:golang/github.com/dlclark/regexp2@v1.11.5",
        "version": "v1.11.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dlclark/regexp2/v2",
        "purl": "pkg:golang/github.com/dlclark/regexp2/v2@v2.2.1",
        "version": "v2.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/cli",
        "purl": "pkg:golang/github.com/docker/cli@v29.2.0%2Bincompatible",
        "version": "v29.2.0+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-connections",
        "purl": "pkg:golang/github.com/docker/go-connections@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-units",
        "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dsnet/compress",
        "purl": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707",
        "version": "v0.0.2-0.20230904184137-39efe44ab707"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dustin/go-humanize",
        "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ebitengine/purego",
        "purl": "pkg:golang/github.com/ebitengine/purego@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emirpasic/gods",
        "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
        "version": "v1.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/go-control-plane/envoy",
        "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
        "version": "v1.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/protoc-gen-validate",
        "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
        "version": "v1.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ericlagergren/decimal",
        "purl": "pkg:golang/github.com/ericlagergren/decimal@v0.0.0-20240411145413-00de7ca16731",
        "version": "v0.0.0-20240411145413-00de7ca16731"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/FalconOpsLLC/goexec",
        "purl": "pkg:golang/github.com/FalconOpsLLC/goexec@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fatih/color",
        "purl": "pkg:golang/github.com/fatih/color@v1.18.0",
        "version": "v1.18.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fatih/structs",
        "purl": "pkg:golang/github.com/fatih/structs@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/felixge/fgprof",
        "purl": "pkg:golang/github.com/felixge/fgprof@v0.9.5",
        "version": "v0.9.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/felixge/httpsnoop",
        "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/free5gc/util",
        "purl": "pkg:golang/github.com/free5gc/util@v1.0.5-0.20230511064842-2e120956883b",
        "version": "v1.0.5-0.20230511064842-2e120956883b"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fullstorydev/grpcurl",
        "purl": "pkg:golang/github.com/fullstorydev/grpcurl@v1.9.3",
        "version": "v1.9.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gabriel-vasile/mimetype",
        "purl": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.8",
        "version": "v1.4.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gaissmai/bart",
        "purl": "pkg:golang/github.com/gaissmai/bart@v0.29.0",
        "version": "v0.29.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/geoffgarside/ber",
        "purl": "pkg:golang/github.com/geoffgarside/ber@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/getkin/kin-openapi",
        "purl": "pkg:golang/github.com/getkin/kin-openapi@v0.144.0",
        "version": "v0.144.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gin-contrib/sse",
        "purl": "pkg:golang/github.com/gin-contrib/sse@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gin-gonic/gin",
        "purl": "pkg:golang/github.com/gin-gonic/gin@v1.9.1",
        "version": "v1.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-asn1-ber/asn1-ber",
        "purl": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.8-0.20250403174932-29230038a667",
        "version": "v1.5.8-0.20250403174932-29230038a667"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-echarts/go-echarts/v2",
        "purl": "pkg:golang/github.com/go-echarts/go-echarts/v2@v2.6.0",
        "version": "v2.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-fed/httpsig",
        "purl": "pkg:golang/github.com/go-fed/httpsig@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/gcfg",
        "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
        "version": "v1.5.1-0.20230307220236-3a3c6141e376"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-billy/v5",
        "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.9.0",
        "version": "v5.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-git/v5",
        "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.19.1",
        "version": "v5.19.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-jose/go-jose/v4",
        "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
        "version": "v4.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-ldap/ldap/v3",
        "purl": "pkg:golang/github.com/go-ldap/ldap/v3@v3.4.12",
        "version": "v3.4.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/logr",
        "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "version": "v1.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/stdr",
        "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-ole/go-ole",
        "purl": "pkg:golang/github.com/go-ole/go-ole@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/jsonpointer",
        "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5",
        "version": "v0.22.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-openapi/swag/jsonname",
        "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.5",
        "version": "v0.25.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-pdf/fpdf",
        "purl": "pkg:golang/github.com/go-pdf/fpdf@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-pg/pg/v10",
        "purl": "pkg:golang/github.com/go-pg/pg/v10@v10.15.0",
        "version": "v10.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-pg/zerochecker",
        "purl": "pkg:golang/github.com/go-pg/zerochecker@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-playground/locales",
        "purl": "pkg:golang/github.com/go-playground/locales@v0.14.1",
        "version": "v0.14.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-playground/universal-translator",
        "purl": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1",
        "version": "v0.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-playground/validator/v10",
        "purl": "pkg:golang/github.com/go-playground/validator/v10@v10.26.0",
        "version": "v10.26.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-rod/rod",
        "purl": "pkg:golang/github.com/go-rod/rod@v0.116.2",
        "version": "v0.116.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-sourcemap/sourcemap",
        "purl": "pkg:golang/github.com/go-sourcemap/sourcemap@v2.1.4%2Bincompatible",
        "version": "v2.1.4+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-sql-driver/mysql",
        "purl": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.0",
        "version": "v1.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-viper/mapstructure/v2",
        "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "version": "v2.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/goburrow/cache",
        "purl": "pkg:golang/github.com/goburrow/cache@v0.1.4",
        "version": "v0.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gobwas/httphead",
        "purl": "pkg:golang/github.com/gobwas/httphead@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gobwas/pool",
        "purl": "pkg:golang/github.com/gobwas/pool@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gobwas/ws",
        "purl": "pkg:golang/github.com/gobwas/ws@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/goccy/go-json",
        "purl": "pkg:golang/github.com/goccy/go-json@v0.10.5",
        "version": "v0.10.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-jwt/jwt/v4",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
        "version": "v4.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-jwt/jwt/v5",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.2.2",
        "version": "v5.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-sql/civil",
        "purl": "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9",
        "version": "v0.0.0-20220223132316-b832511892a9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-sql/sqlexp",
        "purl": "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/groupcache",
        "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "version": "v0.0.0-20241129210726-2c02b8208cf8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/protobuf",
        "purl": "pkg:golang/github.com/golang/protobuf@v1.5.4",
        "version": "v1.5.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/snappy",
        "purl": "pkg:golang/github.com/golang/snappy@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/certificate-transparency-go",
        "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.2",
        "version": "v1.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-github/v30",
        "purl": "pkg:golang/github.com/google/go-github/v30@v30.1.0",
        "version": "v30.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-querystring",
        "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/pprof",
        "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20240727154555-813a5fbdbec8",
        "version": "v0.0.0-20240727154555-813a5fbdbec8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/shlex",
        "purl": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510",
        "version": "v0.0.0-20191202100458-e7afc7fbc510"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/uuid",
        "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gorilla/css",
        "purl": "pkg:golang/github.com/gorilla/css@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gosimple/slug",
        "purl": "pkg:golang/github.com/gosimple/slug@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gosimple/unidecode",
        "purl": "pkg:golang/github.com/gosimple/unidecode@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/h2non/filetype",
        "purl": "pkg:golang/github.com/h2non/filetype@v1.1.3",
        "version": "v1.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-cleanhttp",
        "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-retryablehttp",
        "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
        "version": "v0.7.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-uuid",
        "purl": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3",
        "version": "v1.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-version",
        "purl": "pkg:golang/github.com/hashicorp/go-version@v1.8.0",
        "version": "v1.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/golang-lru/v2",
        "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "version": "v2.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hbakhtiyor/strsim",
        "purl": "pkg:golang/github.com/hbakhtiyor/strsim@v0.0.0-20190107154042-4d2bbb273edf",
        "version": "v0.0.0-20190107154042-4d2bbb273edf"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hdm/jarm-go",
        "purl": "pkg:golang/github.com/hdm/jarm-go@v0.0.8",
        "version": "v0.0.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/iangcarroll/cookiemonster",
        "purl": "pkg:golang/github.com/iangcarroll/cookiemonster@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/imdario/mergo",
        "purl": "pkg:golang/github.com/imdario/mergo@v0.3.16",
        "version": "v0.3.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/indece-official/go-ebcdic",
        "purl": "pkg:golang/github.com/indece-official/go-ebcdic@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/invopop/jsonschema",
        "purl": "pkg:golang/github.com/invopop/jsonschema@v0.13.0",
        "version": "v0.13.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/itchyny/gojq",
        "purl": "pkg:golang/github.com/itchyny/gojq@v0.12.17",
        "version": "v0.12.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/itchyny/timefmt-go",
        "purl": "pkg:golang/github.com/itchyny/timefmt-go@v0.1.6",
        "version": "v0.1.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jbenet/go-context",
        "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
        "version": "v0.0.0-20150711004518-d14ea06fba99"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jcmturner/aescts/v2",
        "purl": "pkg:golang/github.com/jcmturner/aescts/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jcmturner/dnsutils/v2",
        "purl": "pkg:golang/github.com/jcmturner/dnsutils/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jcmturner/gofork",
        "purl": "pkg:golang/github.com/jcmturner/gofork@v1.7.6",
        "version": "v1.7.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jcmturner/goidentity/v6",
        "purl": "pkg:golang/github.com/jcmturner/goidentity/v6@v6.0.1",
        "version": "v6.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jcmturner/gokrb5/v8",
        "purl": "pkg:golang/github.com/jcmturner/gokrb5/v8@v8.4.4",
        "version": "v8.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jcmturner/rpc/v2",
        "purl": "pkg:golang/github.com/jcmturner/rpc/v2@v2.0.3",
        "version": "v2.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jhump/protoreflect",
        "purl": "pkg:golang/github.com/jhump/protoreflect@v1.17.0",
        "version": "v1.17.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jinzhu/inflection",
        "purl": "pkg:golang/github.com/jinzhu/inflection@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/json-iterator/go",
        "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
        "version": "v1.1.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/julienschmidt/httprouter",
        "purl": "pkg:golang/github.com/julienschmidt/httprouter@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/k14s/starlark-go",
        "purl": "pkg:golang/github.com/k14s/starlark-go@v0.0.0-20200720175618-3a5c849cc368",
        "version": "v0.0.0-20200720175618-3a5c849cc368"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kaiakz/ubuffer",
        "purl": "pkg:golang/github.com/kaiakz/ubuffer@v0.0.0-20200803053910-dd1083087166",
        "version": "v0.0.0-20200803053910-dd1083087166"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kataras/jwt",
        "purl": "pkg:golang/github.com/kataras/jwt@v0.1.10",
        "version": "v0.1.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kevinburke/ssh_config",
        "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kitabisa/go-ci",
        "purl": "pkg:golang/github.com/kitabisa/go-ci@v1.0.3",
        "version": "v1.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/klauspost/compress",
        "purl": "pkg:golang/github.com/klauspost/compress@v1.18.7",
        "version": "v1.18.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/klauspost/cpuid/v2",
        "purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/klauspost/pgzip",
        "purl": "pkg:golang/github.com/klauspost/pgzip@v1.2.6",
        "version": "v1.2.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kylelemons/godebug",
        "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/leodido/go-urn",
        "purl": "pkg:golang/github.com/leodido/go-urn@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/leslie-qiwa/flat",
        "purl": "pkg:golang/github.com/leslie-qiwa/flat@v0.0.0-20230424180412-f9d1cf014baa",
        "version": "v0.0.0-20230424180412-f9d1cf014baa"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lib/pq",
        "purl": "pkg:golang/github.com/lib/pq@v1.12.3",
        "version": "v1.12.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/libdns/libdns",
        "purl": "pkg:golang/github.com/libdns/libdns@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/logrusorgru/aurora",
        "purl": "pkg:golang/github.com/logrusorgru/aurora@v2.0.3%2Bincompatible",
        "version": "v2.0.3+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/logrusorgru/aurora/v4",
        "purl": "pkg:golang/github.com/logrusorgru/aurora/v4@v4.0.0",
        "version": "v4.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lor00x/goldap",
        "purl": "pkg:golang/github.com/lor00x/goldap@v0.0.0-20240304151906-8d785c64d1c8",
        "version": "v0.0.0-20240304151906-8d785c64d1c8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lucasb-eyer/go-colorful",
        "purl": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lufia/plan9stats",
        "purl": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20250827001030-24949be3fa54",
        "version": "v0.0.0-20250827001030-24949be3fa54"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mackerelio/go-osstat",
        "purl": "pkg:golang/github.com/mackerelio/go-osstat@v0.2.6",
        "version": "v0.2.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mailru/easyjson",
        "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.7",
        "version": "v0.7.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Masterminds/semver/v3",
        "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.5.0",
        "version": "v3.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-colorable",
        "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
        "version": "v0.1.14"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-isatty",
        "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.22",
        "version": "v0.0.22"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-runewidth",
        "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16",
        "version": "v0.0.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-sqlite3",
        "purl": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.28",
        "version": "v1.14.28"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/maypok86/otter/v2",
        "purl": "pkg:golang/github.com/maypok86/otter/v2@v2.2.1",
        "version": "v2.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mholt/acmez/v3",
        "purl": "pkg:golang/github.com/mholt/acmez/v3@v3.1.3",
        "version": "v3.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mholt/archives",
        "purl": "pkg:golang/github.com/mholt/archives@v0.1.5",
        "version": "v0.1.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/microcosm-cc/bluemonday",
        "purl": "pkg:golang/github.com/microcosm-cc/bluemonday@v1.0.27",
        "version": "v1.0.27"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/microsoft/go-mssqldb",
        "purl": "pkg:golang/github.com/microsoft/go-mssqldb@v1.9.2",
        "version": "v1.9.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Microsoft/go-winio",
        "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/miekg/dns",
        "purl": "pkg:golang/github.com/miekg/dns@v1.1.72",
        "version": "v1.1.72"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mikelolasagasti/xz",
        "purl": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/minio/minlz",
        "purl": "pkg:golang/github.com/minio/minlz@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/minio/selfupdate",
        "purl": "pkg:golang/github.com/minio/selfupdate@v0.6.1-0.20230907112617-f11e74f84ca7",
        "version": "v0.6.1-0.20230907112617-f11e74f84ca7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/go-homedir",
        "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/docker-image-spec",
        "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/moby/api",
        "purl": "pkg:golang/github.com/moby/moby/api@v1.54.2",
        "version": "v1.54.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/moby/client",
        "purl": "pkg:golang/github.com/moby/moby/client@v0.4.1",
        "version": "v0.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/user",
        "purl": "pkg:golang/github.com/moby/sys/user@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/term",
        "purl": "pkg:golang/github.com/moby/term@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/concurrent",
        "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
        "version": "v0.0.0-20180306012644-bacd9c7ef1dd"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/modern-go/reflect2",
        "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/montanaflynn/stats",
        "purl": "pkg:golang/github.com/montanaflynn/stats@v0.7.1",
        "version": "v0.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/muesli/reflow",
        "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/muesli/termenv",
        "purl": "pkg:golang/github.com/muesli/termenv@v0.16.0",
        "version": "v0.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Mzack9999/gcache",
        "purl": "pkg:golang/github.com/Mzack9999/gcache@v0.0.0-20230410081825-519e28eab057",
        "version": "v0.0.0-20230410081825-519e28eab057"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Mzack9999/go-http-digest-auth-client",
        "purl": "pkg:golang/github.com/Mzack9999/go-http-digest-auth-client@v0.6.1-0.20220414142836-eb8883508809",
        "version": "v0.6.1-0.20220414142836-eb8883508809"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Mzack9999/go-rsync",
        "purl": "pkg:golang/github.com/Mzack9999/go-rsync@v0.0.0-20250821180103-81ffa574ef4d",
        "version": "v0.0.0-20250821180103-81ffa574ef4d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Mzack9999/goimpacket",
        "purl": "pkg:golang/github.com/Mzack9999/goimpacket@v0.0.0-20260422121140-7085336a0415",
        "version": "v0.0.0-20260422121140-7085336a0415"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Nvveen/Gotty",
        "purl": "pkg:golang/github.com/Nvveen/Gotty@v0.0.0-20120604004816-cd527374f1e5",
        "version": "v0.0.0-20120604004816-cd527374f1e5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/nwaples/rardecode/v2",
        "purl": "pkg:golang/github.com/nwaples/rardecode/v2@v2.2.2",
        "version": "v2.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/oasdiff/yaml",
        "purl": "pkg:golang/github.com/oasdiff/yaml@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/oasdiff/yaml3",
        "purl": "pkg:golang/github.com/oasdiff/yaml3@v0.0.14",
        "version": "v0.0.14"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/oiweiwei/go-msrpc",
        "purl": "pkg:golang/github.com/oiweiwei/go-msrpc@v1.2.12",
        "version": "v1.2.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/oiweiwei/go-smb2.fork",
        "purl": "pkg:golang/github.com/oiweiwei/go-smb2.fork@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/oiweiwei/gokrb5.fork/v9",
        "purl": "pkg:golang/github.com/oiweiwei/gokrb5.fork/v9@v9.0.6",
        "version": "v9.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/olekukonko/errors",
        "purl": "pkg:golang/github.com/olekukonko/errors@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/olekukonko/ll",
        "purl": "pkg:golang/github.com/olekukonko/ll@v0.0.9",
        "version": "v0.0.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/olekukonko/tablewriter",
        "purl": "pkg:golang/github.com/olekukonko/tablewriter@v1.0.8",
        "version": "v1.0.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/go-digest",
        "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/image-spec",
        "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/runc",
        "purl": "pkg:golang/github.com/opencontainers/runc@v1.3.6",
        "version": "v1.3.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/openrdap/rdap",
        "purl": "pkg:golang/github.com/openrdap/rdap@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ory/dockertest/v3",
        "purl": "pkg:golang/github.com/ory/dockertest/v3@v3.12.0",
        "version": "v3.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pelletier/go-toml/v2",
        "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8",
        "version": "v2.0.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pierrec/lz4/v4",
        "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.23",
        "version": "v4.1.23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pjbgf/sha1cd",
        "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/browser",
        "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
        "version": "v0.0.0-20240102092130-5ac0b6a4141c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/errors",
        "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/planetscale/vtprotobuf",
        "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
        "version": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pmezard/go-difflib",
        "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
        "version": "v1.0.1-0.20181226105442-5d4384ee4fb2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/power-devops/perfstat",
        "purl": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
        "version": "v0.0.0-20240221224432-82ca36839d55"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/praetorian-inc/fingerprintx",
        "purl": "pkg:golang/github.com/praetorian-inc/fingerprintx@v1.1.15",
        "version": "v1.1.15"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/asnmap",
        "purl": "pkg:golang/github.com/projectdiscovery/asnmap@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/blackrock",
        "purl": "pkg:golang/github.com/projectdiscovery/blackrock@v0.0.1",
        "version": "v0.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/cdncheck",
        "purl": "pkg:golang/github.com/projectdiscovery/cdncheck@v1.2.46",
        "version": "v1.2.46"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/clistats",
        "purl": "pkg:golang/github.com/projectdiscovery/clistats@v0.1.4",
        "version": "v0.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/dsl",
        "purl": "pkg:golang/github.com/projectdiscovery/dsl@v0.8.20",
        "version": "v0.8.20"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/fastdialer",
        "purl": "pkg:golang/github.com/projectdiscovery/fastdialer@v0.5.14",
        "version": "v0.5.14"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/fasttemplate",
        "purl": "pkg:golang/github.com/projectdiscovery/fasttemplate@v0.0.2",
        "version": "v0.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/freeport",
        "purl": "pkg:golang/github.com/projectdiscovery/freeport@v0.0.7",
        "version": "v0.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/gcache",
        "purl": "pkg:golang/github.com/projectdiscovery/gcache@v0.0.0-20241015120333-12546c6e3f4c",
        "version": "v0.0.0-20241015120333-12546c6e3f4c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/goflags",
        "purl": "pkg:golang/github.com/projectdiscovery/goflags@v0.1.75",
        "version": "v0.1.75"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/goja",
        "purl": "pkg:golang/github.com/projectdiscovery/goja@v0.0.0-20260618133720-acb73e419534",
        "version": "v0.0.0-20260618133720-acb73e419534"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/goja_nodejs",
        "purl": "pkg:golang/github.com/projectdiscovery/goja_nodejs@v0.0.0-20260618132410-8519f75f703d",
        "version": "v0.0.0-20260618132410-8519f75f703d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/gologger",
        "purl": "pkg:golang/github.com/projectdiscovery/gologger@v1.1.71",
        "version": "v1.1.71"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/gostruct",
        "purl": "pkg:golang/github.com/projectdiscovery/gostruct@v0.0.2",
        "version": "v0.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/govaluate",
        "purl": "pkg:golang/github.com/projectdiscovery/govaluate@v0.0.0-20260615100919-5ee2581bbf7e",
        "version": "v0.0.0-20260615100919-5ee2581bbf7e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/gozero",
        "purl": "pkg:golang/github.com/projectdiscovery/gozero@v0.1.1-0.20260530071156-fa1dad563d76",
        "version": "v0.1.1-0.20260530071156-fa1dad563d76"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/hmap",
        "purl": "pkg:golang/github.com/projectdiscovery/hmap@v0.0.101",
        "version": "v0.0.101"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/httpx",
        "purl": "pkg:golang/github.com/projectdiscovery/httpx@v1.10.0",
        "version": "v1.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/interactsh",
        "purl": "pkg:golang/github.com/projectdiscovery/interactsh@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/ldapserver",
        "purl": "pkg:golang/github.com/projectdiscovery/ldapserver@v1.0.2-0.20240219154113-dcc758ebc0cb",
        "version": "v1.0.2-0.20240219154113-dcc758ebc0cb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/machineid",
        "purl": "pkg:golang/github.com/projectdiscovery/machineid@v0.0.0-20250715113114-c77eb3567582",
        "version": "v0.0.0-20250715113114-c77eb3567582"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/mapcidr",
        "purl": "pkg:golang/github.com/projectdiscovery/mapcidr@v1.1.97",
        "version": "v1.1.97"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/n3iwf",
        "purl": "pkg:golang/github.com/projectdiscovery/n3iwf@v0.0.0-20230523120440-b8cd232ff1f5",
        "version": "v0.0.0-20230523120440-b8cd232ff1f5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/networkpolicy",
        "purl": "pkg:golang/github.com/projectdiscovery/networkpolicy@v0.1.44",
        "version": "v0.1.44"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/ratelimit",
        "purl": "pkg:golang/github.com/projectdiscovery/ratelimit@v0.0.88",
        "version": "v0.0.88"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/rawhttp",
        "purl": "pkg:golang/github.com/projectdiscovery/rawhttp@v0.1.91",
        "version": "v0.1.91"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/rdap",
        "purl": "pkg:golang/github.com/projectdiscovery/rdap@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/retryabledns",
        "purl": "pkg:golang/github.com/projectdiscovery/retryabledns@v1.0.115",
        "version": "v1.0.115"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/retryablehttp-go",
        "purl": "pkg:golang/github.com/projectdiscovery/retryablehttp-go@v1.3.21",
        "version": "v1.3.21"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/sarif",
        "purl": "pkg:golang/github.com/projectdiscovery/sarif@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/tlsx",
        "purl": "pkg:golang/github.com/projectdiscovery/tlsx@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/uncover",
        "purl": "pkg:golang/github.com/projectdiscovery/uncover@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/useragent",
        "purl": "pkg:golang/github.com/projectdiscovery/useragent@v0.0.108",
        "version": "v0.0.108"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/utils",
        "purl": "pkg:golang/github.com/projectdiscovery/utils@v0.11.1",
        "version": "v0.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/wappalyzergo",
        "purl": "pkg:golang/github.com/projectdiscovery/wappalyzergo@v0.2.91",
        "version": "v0.2.91"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/projectdiscovery/yamldoc-go",
        "purl": "pkg:golang/github.com/projectdiscovery/yamldoc-go@v1.0.6",
        "version": "v1.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ProtonMail/go-crypto",
        "purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.1.6",
        "version": "v1.1.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/PuerkitoBio/goquery",
        "purl": "pkg:golang/github.com/PuerkitoBio/goquery@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/redis/go-redis/v9",
        "purl": "pkg:golang/github.com/redis/go-redis/v9@v9.11.0",
        "version": "v9.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/RedTeamPentesting/adauth",
        "purl": "pkg:golang/github.com/RedTeamPentesting/adauth@v0.5.4-0.20260511073005-3d18e8a5a687",
        "version": "v0.5.4-0.20260511073005-3d18e8a5a687"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/refraction-networking/utls",
        "purl": "pkg:golang/github.com/refraction-networking/utls@v1.8.2",
        "version": "v1.8.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/remeh/sizedwaitgroup",
        "purl": "pkg:golang/github.com/remeh/sizedwaitgroup@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rivo/uniseg",
        "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
        "version": "v0.4.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rs/xid",
        "purl": "pkg:golang/github.com/rs/xid@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rs/zerolog",
        "purl": "pkg:golang/github.com/rs/zerolog@v1.34.0",
        "version": "v1.34.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/saintfish/chardet",
        "purl": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d",
        "version": "v0.0.0-20230101081208-5e3ef4b5456d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2",
        "version": "v6.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sashabaranov/go-openai",
        "purl": "pkg:golang/github.com/sashabaranov/go-openai@v1.37.0",
        "version": "v1.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/segmentio/ksuid",
        "purl": "pkg:golang/github.com/segmentio/ksuid@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sergi/go-diff",
        "purl": "pkg:golang/github.com/sergi/go-diff@v1.3.2-0.20230802210424-5b0b94c5c0d3",
        "version": "v1.3.2-0.20230802210424-5b0b94c5c0d3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shirou/gopsutil",
        "purl": "pkg:golang/github.com/shirou/gopsutil@v3.21.11%2Bincompatible",
        "version": "v3.21.11+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shirou/gopsutil/v4",
        "purl": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.3",
        "version": "v4.26.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shurcooL/graphql",
        "purl": "pkg:golang/github.com/shurcooL/graphql@v0.0.0-20230722043721-ed46e5a46466",
        "version": "v0.0.0-20230722043721-ed46e5a46466"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sijms/go-ora/v2",
        "purl": "pkg:golang/github.com/sijms/go-ora/v2@v2.9.0",
        "version": "v2.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sirupsen/logrus",
        "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "version": "v1.9.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/skeema/knownhosts",
        "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sorairolake/lzip-go",
        "purl": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8",
        "version": "v0.3.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spaolacci/murmur3",
        "purl": "pkg:golang/github.com/spaolacci/murmur3@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/afero",
        "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/cast",
        "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
        "version": "v1.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/pflag",
        "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "version": "v1.0.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spiffe/go-spiffe/v2",
        "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0",
        "version": "v2.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/STARRY-S/zip",
        "purl": "pkg:golang/github.com/STARRY-S/zip@v0.2.3",
        "version": "v0.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/stretchr/objx",
        "purl": "pkg:golang/github.com/stretchr/objx@v0.5.3",
        "version": "v0.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/stretchr/testify",
        "purl": "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "version": "v1.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/syndtr/goleveldb",
        "purl": "pkg:golang/github.com/syndtr/goleveldb@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tarunKoyalwar/goleak",
        "purl": "pkg:golang/github.com/tarunKoyalwar/goleak@v0.0.0-20240429141123-0efa90dbdcf9",
        "version": "v0.0.0-20240429141123-0efa90dbdcf9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/btree",
        "purl": "pkg:golang/github.com/tidwall/btree@v1.8.1",
        "version": "v1.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/buntdb",
        "purl": "pkg:golang/github.com/tidwall/buntdb@v1.3.2",
        "version": "v1.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/gjson",
        "purl": "pkg:golang/github.com/tidwall/gjson@v1.18.0",
        "version": "v1.18.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/grect",
        "purl": "pkg:golang/github.com/tidwall/grect@v0.1.4",
        "version": "v0.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/match",
        "purl": "pkg:golang/github.com/tidwall/match@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/pretty",
        "purl": "pkg:golang/github.com/tidwall/pretty@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/rtred",
        "purl": "pkg:golang/github.com/tidwall/rtred@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tidwall/tinyqueue",
        "purl": "pkg:golang/github.com/tidwall/tinyqueue@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tim-ywliu/nested-logrus-formatter",
        "purl": "pkg:golang/github.com/tim-ywliu/nested-logrus-formatter@v1.3.2",
        "version": "v1.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tklauser/go-sysconf",
        "purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16",
        "version": "v0.3.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tklauser/numcpus",
        "purl": "pkg:golang/github.com/tklauser/numcpus@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tmthrgd/go-hex",
        "purl": "pkg:golang/github.com/tmthrgd/go-hex@v0.0.0-20190904060850-447a3041c3bc",
        "version": "v0.0.0-20190904060850-447a3041c3bc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/trivago/tgo",
        "purl": "pkg:golang/github.com/trivago/tgo@v1.0.7",
        "version": "v1.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/twitchyliquid64/golang-asm",
        "purl": "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1",
        "version": "v0.15.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ugorji/go/codec",
        "purl": "pkg:golang/github.com/ugorji/go/codec@v1.2.11",
        "version": "v1.2.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ulikunitz/xz",
        "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.15",
        "version": "v0.5.15"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/valyala/bytebufferpool",
        "purl": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/VividCortex/ewma",
        "purl": "pkg:golang/github.com/VividCortex/ewma@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vmihailenco/bufpool",
        "purl": "pkg:golang/github.com/vmihailenco/bufpool@v0.1.11",
        "version": "v0.1.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vmihailenco/msgpack/v5",
        "purl": "pkg:golang/github.com/vmihailenco/msgpack/v5@v5.3.4",
        "version": "v5.3.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vmihailenco/tagparser",
        "purl": "pkg:golang/github.com/vmihailenco/tagparser@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vmihailenco/tagparser/v2",
        "purl": "pkg:golang/github.com/vmihailenco/tagparser/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vulncheck-oss/go-exploit",
        "purl": "pkg:golang/github.com/vulncheck-oss/go-exploit@v1.51.0",
        "version": "v1.51.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/weppos/publicsuffix-go",
        "purl": "pkg:golang/github.com/weppos/publicsuffix-go@v0.50.3",
        "version": "v0.50.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/wk8/go-ordered-map/v2",
        "purl": "pkg:golang/github.com/wk8/go-ordered-map/v2@v2.1.8",
        "version": "v2.1.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xanzy/ssh-agent",
        "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
        "version": "v0.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xdg-go/pbkdf2",
        "purl": "pkg:golang/github.com/xdg-go/pbkdf2@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xdg-go/scram",
        "purl": "pkg:golang/github.com/xdg-go/scram@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xdg-go/stringprep",
        "purl": "pkg:golang/github.com/xdg-go/stringprep@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonpointer",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
        "version": "v0.0.0-20190905194746-02993c407bfb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonreference",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
        "version": "v0.0.0-20180127040603-bd5ef7bd5415"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xeipuuv/gojsonschema",
        "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xo/terminfo",
        "purl": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e",
        "version": "v0.0.0-20220910002029-abceb7e1c41e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yassinebenaid/godump",
        "purl": "pkg:golang/github.com/yassinebenaid/godump@v0.11.1",
        "version": "v0.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/youmark/pkcs8",
        "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
        "version": "v0.0.0-20240726163527-a2c0da244d78"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ysmood/fetchup",
        "purl": "pkg:golang/github.com/ysmood/fetchup@v0.2.3",
        "version": "v0.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ysmood/goob",
        "purl": "pkg:golang/github.com/ysmood/goob@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ysmood/got",
        "purl": "pkg:golang/github.com/ysmood/got@v0.40.0",
        "version": "v0.40.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ysmood/gson",
        "purl": "pkg:golang/github.com/ysmood/gson@v0.7.3",
        "version": "v0.7.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ysmood/leakless",
        "purl": "pkg:golang/github.com/ysmood/leakless@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yuin/goldmark",
        "purl": "pkg:golang/github.com/yuin/goldmark@v1.7.17",
        "version": "v1.7.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yuin/goldmark-emoji",
        "purl": "pkg:golang/github.com/yuin/goldmark-emoji@v1.0.6",
        "version": "v1.0.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yusufpapurcu/wmi",
        "purl": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
        "version": "v1.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zcalusic/sysinfo",
        "purl": "pkg:golang/github.com/zcalusic/sysinfo@v1.1.3",
        "version": "v1.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zeebo/blake3",
        "purl": "pkg:golang/github.com/zeebo/blake3@v0.2.4",
        "version": "v0.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zmap/rc2",
        "purl": "pkg:golang/github.com/zmap/rc2@v0.0.0-20190804163417-abaa70531248",
        "version": "v0.0.0-20190804163417-abaa70531248"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zmap/zcrypto",
        "purl": "pkg:golang/github.com/zmap/zcrypto@v0.0.0-20240803002437-3a861682ac77",
        "version": "v0.0.0-20240803002437-3a861682ac77"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/zmap/zgrab2",
        "purl": "pkg:golang/github.com/zmap/zgrab2@v0.1.8",
        "version": "v0.1.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gitlab.com/gitlab-org/api/client-go",
        "purl": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.9.1",
        "version": "v1.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.etcd.io/bbolt",
        "purl": "pkg:golang/go.etcd.io/bbolt@v1.4.3",
        "version": "v1.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.mongodb.org/mongo-driver",
        "purl": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.9",
        "version": "v1.17.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/auto/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
        "version": "v0.68.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel",
        "purl": "pkg:golang/go.opentelemetry.io/otel@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/trace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/multierr",
        "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/zap",
        "purl": "pkg:golang/go.uber.org/zap@v1.27.0",
        "version": "v1.27.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/zap/exp",
        "purl": "pkg:golang/go.uber.org/zap/exp@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v3",
        "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "version": "v3.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go4.org",
        "purl": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5",
        "version": "v0.0.0-20230225012048-214862532bf5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "goftp.io/server/v2",
        "purl": "pkg:golang/goftp.io/server/v2@v2.0.1",
        "version": "v2.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/arch",
        "purl": "pkg:golang/golang.org/x/arch@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/crypto",
        "purl": "pkg:golang/golang.org/x/crypto@v0.53.0",
        "version": "v0.53.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/exp",
        "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20260527015227-08cc5374adb3",
        "version": "v0.0.0-20260527015227-08cc5374adb3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/net",
        "purl": "pkg:golang/golang.org/x/net@v0.56.0",
        "version": "v0.56.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/oauth2",
        "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "version": "v0.36.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/sync",
        "purl": "pkg:golang/golang.org/x/sync@v0.21.0",
        "version": "v0.21.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/sys",
        "purl": "pkg:golang/golang.org/x/sys@v0.46.0",
        "version": "v0.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/term",
        "purl": "pkg:golang/golang.org/x/term@v0.44.0",
        "version": "v0.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/text",
        "purl": "pkg:golang/golang.org/x/text@v0.39.0",
        "version": "v0.39.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/time",
        "purl": "pkg:golang/golang.org/x/time@v0.14.0",
        "version": "v0.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.47.0",
        "version": "v0.47.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260414002931-afd174a4e478",
        "version": "v0.0.0-20260414002931-afd174a4e478"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/grpc",
        "purl": "pkg:golang/google.golang.org/grpc@v1.82.1",
        "version": "v1.82.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/protobuf",
        "purl": "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "version": "v1.36.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/alecthomas/kingpin.v2",
        "purl": "pkg:golang/gopkg.in/alecthomas/kingpin.v2@v2.2.6",
        "version": "v2.2.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/corvus-ch/zbase32.v1",
        "purl": "pkg:golang/gopkg.in/corvus-ch/zbase32.v1@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/warnings.v0",
        "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/yaml.v3",
        "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "mellium.im/sasl",
        "purl": "pkg:golang/mellium.im/sasl@v0.3.2",
        "version": "v0.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "moul.io/http2curl",
        "purl": "pkg:golang/moul.io/http2curl@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "software.sslmate.com/src/go-pkcs12",
        "purl": "pkg:golang/software.sslmate.com/src/go-pkcs12@v0.7.2",
        "version": "v0.7.2"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/tests.yaml",
        "name": "./.github/workflows/flamegraph.yaml",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/release.yaml",
        "name": "./.github/workflows/generate-pgo.yaml",
        "purl": "",
        "version": "UNKNOWN"
      }
    ],
    "description": "Scan applications and infrastructure with customizable templates",
    "errors": [],
    "go_binary": {
      "asset": "nuclei_3.11.1_linux_amd64.zip",
      "binary": "nuclei",
      "db": "https://vuln.go.dev",
      "db_last_modified": "2026-10-27T21:16:18Z",
      "findings": [
        {
          "aliases": [
            "CVE-2026-39821"
          ],
          "epss": {
            "cve": "CVE-2026-39821",
            "percentile": 0.78915,
            "score": 0.01834
          },
          "fixed_version": "v1.26.6",
          "id": "GO-2026-5026",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-46600"
          ],
          "epss": {
            "cve": "CVE-2026-46600",
            "percentile": 0.45991,
            "score": 0.00549
          },
          "fixed_version": "v1.26.6",
          "id": "GO-2026-5942",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-33818"
          ],
          "epss": {
            "cve": "CVE-2026-33818",
            "percentile": 0.47077,
            "score": 0.00568
          },
          "fixed_version": "v1.26.6",
          "id": "GO-2026-5972",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Enforce maximum recursion depth in encoding/asn1",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-56859"
          ],
          "epss": {
            "cve": "CVE-2026-56859",
            "percentile": 0.47076,
            "score": 0.00568
          },
          "fixed_version": "v1.26.6",
          "id": "GO-2026-6088",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Add recursion depth guard during decode in encoding/xml",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-56853"
          ],
          "epss": {
            "cve": "CVE-2026-56853",
            "percentile": 0.47076,
            "score": 0.00568
          },
          "fixed_version": "v1.26.6",
          "id": "GO-2026-6089",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-56862"
          ],
          "epss": {
            "cve": "CVE-2026-56862",
            "percentile": 0.47076,
            "score": 0.00568
          },
          "fixed_version": "v1.26.6",
          "id": "GO-2026-6090",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Limit handshake messages we are willing to accept post-handshake in crypto/tls",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-56858"
          ],
          "epss": {
            "cve": "CVE-2026-56858",
            "percentile": 0.23831,
            "score": 0.0031
          },
          "fixed_version": "v1.26.6",
          "id": "GO-2026-6091",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Fix Javascript regexp context tracking in html/template",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-56860"
          ],
          "epss": {
            "cve": "CVE-2026-56860",
            "percentile": 0.46041,
            "score": 0.0055
          },
          "fixed_version": "v1.26.6",
          "id": "GO-2026-6218",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Avoid quadratic complexity in resolvePath in net/url",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-94448"
          ],
          "epss": {
            "cve": "CVE-2026-94448",
            "percentile": 0.21475,
            "score": 0.00289
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6599",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Reset context tracking on consecutive template expressions in html/template",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-97030"
          ],
          "epss": {
            "cve": "CVE-2026-97030",
            "percentile": 0.21475,
            "score": 0.00289
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6600",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Recognize yield as regexp preceder keyword in html/template",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-78659"
          ],
          "epss": {
            "cve": "CVE-2026-78659",
            "percentile": 0.50082,
            "score": 0.00627
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6603",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "HTTP/2 server memory exhaustion due to Trailer headers in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-56866"
          ],
          "epss": {
            "cve": "CVE-2026-56866",
            "percentile": 0.40968,
            "score": 0.00473
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6605",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "HTTP/1 client connection desynchronization after CONNECT rejection in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-97031"
          ],
          "epss": {
            "cve": "CVE-2026-97031",
            "percentile": 0.44095,
            "score": 0.00519
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6607",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Reject malformed ECH outer extension references in crypto/tls",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-94440"
          ],
          "epss": {
            "cve": "CVE-2026-94440",
            "percentile": 0.4362,
            "score": 0.00511
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6608",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-78667"
          ],
          "epss": {
            "cve": "CVE-2026-78667",
            "percentile": 0.41455,
            "score": 0.0048
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6609",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Lack of limit on size of parsed Range headers in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-78660"
          ],
          "epss": {
            "cve": "CVE-2026-78660",
            "percentile": 0.36838,
            "score": 0.00425
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6610",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "HTTP/2 transport accepts malformed framing-related headers in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-78669"
          ],
          "epss": {
            "cve": "CVE-2026-78669",
            "percentile": 0.49426,
            "score": 0.00614
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6611",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Excessive CPU consumption from repeated initial window changes in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-78663"
          ],
          "epss": {
            "cve": "CVE-2026-78663",
            "percentile": 0.49813,
            "score": 0.00622
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6612",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Double flow control refund on HTTP/2 server streams in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-94439"
          ],
          "epss": {
            "cve": "CVE-2026-94439",
            "percentile": 0.35772,
            "score": 0.00414
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6613",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-97032"
          ],
          "epss": {
            "cve": "CVE-2026-97032",
            "percentile": 0.42154,
            "score": 0.0049
          },
          "fixed_version": "v1.26.9",
          "id": "GO-2026-6617",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "HTTP/2 server crash due to HPACK encoder race in net/http",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-111943"
          ],
          "epss": {
            "cve": "CVE-2026-111943",
            "percentile": 0.33793,
            "score": 0.00396
          },
          "fixed_version": "v1.26.10",
          "id": "GO-2026-6809",
          "kev": null,
          "level": "symbol",
          "module": "stdlib",
          "summary": "Distrust compromised intermediate certificates in crypto/x509",
          "version": "v1.26.5"
        },
        {
          "aliases": [
            "CVE-2026-71556",
            "GHSA-hc8v-wwc9-vgxm"
          ],
          "epss": {
            "cve": "CVE-2026-71556",
            "percentile": 0.29467,
            "score": 0.00357
          },
          "fixed_version": "v5.19.2",
          "id": "GO-2026-6213",
          "kev": null,
          "level": "symbol",
          "module": "github.com/go-git/go-git/v5",
          "summary": "Worktree operations may follow symlinks in github.com/go-git/go-git",
          "version": "v5.19.1"
        },
        {
          "aliases": [
            "CVE-2026-71557",
            "GHSA-qgq7-7hm3-q39j"
          ],
          "epss": {
            "cve": "CVE-2026-71557",
            "percentile": 0.35651,
            "score": 0.00413
          },
          "fixed_version": "v5.19.2",
          "id": "GO-2026-6214",
          "kev": null,
          "level": "symbol",
          "module": "github.com/go-git/go-git/v5",
          "summary": "Path traversal via crafted reference names in github.com/go-git/go-git",
          "version": "v5.19.1"
        },
        {
          "aliases": [],
          "epss": null,
          "fixed_version": "",
          "id": "GO-2026-5932",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/crypto",
          "summary": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues",
          "version": "v0.53.0"
        },
        {
          "aliases": [
            "CVE-2026-56854"
          ],
          "epss": {
            "cve": "CVE-2026-56854",
            "percentile": 0.38024,
            "score": 0.00437
          },
          "fixed_version": "v0.55.0",
          "id": "GO-2026-6303",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/crypto",
          "summary": "Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh",
          "version": "v0.53.0"
        },
        {
          "aliases": [
            "CVE-2026-78662"
          ],
          "epss": {
            "cve": "CVE-2026-78662",
            "percentile": 0.37388,
            "score": 0.00431
          },
          "fixed_version": "v0.56.0",
          "id": "GO-2026-6354",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/crypto",
          "summary": "Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh",
          "version": "v0.53.0"
        },
        {
          "aliases": [
            "CVE-2026-56855"
          ],
          "epss": {
            "cve": "CVE-2026-56855",
            "percentile": 0.42867,
            "score": 0.005
          },
          "fixed_version": "v0.56.0",
          "id": "GO-2026-6355",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/crypto",
          "summary": "Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh",
          "version": "v0.53.0"
        },
        {
          "aliases": [
            "CVE-2026-56865"
          ],
          "epss": {
            "cve": "CVE-2026-56865",
            "percentile": 0.02533,
            "score": 0.00129
          },
          "fixed_version": "v0.40.0",
          "id": "GO-2026-6179",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/mod",
          "summary": "Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog",
          "version": "v0.37.0"
        },
        {
          "aliases": [
            "CVE-2026-56864"
          ],
          "epss": {
            "cve": "CVE-2026-56864",
            "percentile": 0.22506,
            "score": 0.00298
          },
          "fixed_version": "v0.40.0",
          "id": "GO-2026-6180",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/mod",
          "summary": "Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb",
          "version": "v0.37.0"
        },
        {
          "aliases": [
            "CVE-2026-78661"
          ],
          "epss": {
            "cve": "CVE-2026-78661",
            "percentile": 0.08063,
            "score": 0.00185
          },
          "fixed_version": "v0.62.0",
          "id": "GO-2026-6860",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/net",
          "summary": "Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net",
          "version": "v0.56.0"
        },
        {
          "aliases": [
            "CVE-2026-97045"
          ],
          "epss": {
            "cve": "CVE-2026-97045",
            "percentile": 0.10117,
            "score": 0.00202
          },
          "fixed_version": "v0.62.0",
          "id": "GO-2026-6866",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/net",
          "summary": "Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net",
          "version": "v0.56.0"
        },
        {
          "aliases": [
            "CVE-2026-56851"
          ],
          "epss": {
            "cve": "CVE-2026-56851",
            "percentile": 0.40313,
            "score": 0.00466
          },
          "fixed_version": "v0.41.0",
          "id": "GO-2026-6629",
          "kev": null,
          "level": "symbol",
          "module": "golang.org/x/text",
          "summary": "Panic parsing crafted input in x/text/secure/precis in golang.org/x/text",
          "version": "v0.39.0"
        },
        {
          "aliases": [
            "CVE-2026-84304",
            "GHSA-vp52-pcj8-j9qc"
          ],
          "epss": {
            "cve": "CVE-2026-84304",
            "percentile": 0.49152,
            "score": 0.00609
          },
          "fixed_version": "v1.83.1",
          "id": "GO-2026-6348",
          "kev": null,
          "level": "symbol",
          "module": "google.golang.org/grpc",
          "summary": "Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc",
          "version": "v1.82.1"
        },
        {
          "aliases": [
            "CVE-2026-84303",
            "GHSA-qc2q-p7wx-3px3"
          ],
          "epss": {
            "cve": "CVE-2026-84303",
            "percentile": 0.23991,
            "score": 0.00311
          },
          "fixed_version": "v1.83.1",
          "id": "GO-2026-6441",
          "kev": null,
          "level": "symbol",
          "module": "google.golang.org/grpc",
          "summary": "Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc",
          "version": "v1.82.1"
        },
        {
          "aliases": [
            "CVE-2026-84445",
            "GHSA-2v4p-qf9q-27wj"
          ],
          "epss": {
            "cve": "CVE-2026-84445",
            "percentile": 0.5072,
            "score": 0.00641
          },
          "fixed_version": "v1.82.2",
          "id": "GO-2026-6443",
          "kev": null,
          "level": "symbol",
          "module": "google.golang.org/grpc",
          "summary": "Server panic via missing authority or Host headers in google.golang.org/grpc",
          "version": "v1.82.1"
        }
      ],
      "go_version": "go1.26.5",
      "main_module": ""
    },
    "id": "projectdiscovery__nuclei",
    "manifests": [
      ".github/workflows/auto-merge.yaml",
      ".github/workflows/compat-checks.yaml",
      ".github/workflows/flamegraph.yaml",
      ".github/workflows/fuzz.yaml",
      ".github/workflows/generate-docs.yaml",
      ".github/workflows/generate-pgo.yaml",
      ".github/workflows/govulncheck.yaml",
      ".github/workflows/memogen.yaml",
      ".github/workflows/perf-regression.yaml",
      ".github/workflows/release.yaml",
      ".github/workflows/stale.yaml",
      ".github/workflows/tests.yaml",
      ".github/workflows/typos.yaml",
      "go.mod",
      "go.sum"
    ],
    "name": "nuclei",
    "osv": {
      "advisories": 30,
      "available": true,
      "confirmed": 30,
      "osv_only": [],
      "warning": null
    },
    "ref": "v3.11.1",
    "ref_kind": "release",
    "release_integrity": {
      "asset": "nuclei_3.11.1_linux_amd64.zip",
      "assets": 9,
      "build_provenance": null,
      "checksums_published": true,
      "digest_matches_github": true,
      "immutable_release": null,
      "methods": [],
      "provenance_published": false,
      "sbom_published": false,
      "signature": null,
      "signatures_published": false,
      "signer": null,
      "verdict": "checksums-only"
    },
    "released_at": "2026-08-08T12:21:32Z",
    "repository": "projectdiscovery/nuclei",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [
        "0 version changes among 481 shared packages \u2014 no actual upgrades",
        "Core system packages stable: golang (413), github (52), file (14) unchanged"
      ],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:07:15+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "CII-Best-Practices",
          "reason": "no effort to earn an OpenSSF best practices badge detected",
          "score": 0
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 0",
          "score": 0
        },
        {
          "name": "Signed-Releases",
          "reason": "Project has not signed or included provenance with any releases.",
          "score": 0
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 0
        },
        {
          "name": "SAST",
          "reason": "SAST tool detected but not run on all commits",
          "score": 9
        },
        {
          "name": "Binary-Artifacts",
          "reason": "no binaries found in the repo",
          "score": 10
        },
        {
          "name": "Code-Review",
          "reason": "all changesets reviewed",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "Fuzzing",
          "reason": "project is fuzzed",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        },
        {
          "name": "Branch-Protection",
          "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
          "score": -1
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow not detected",
          "score": -1
        }
      ],
      "date": "2026-10-19",
      "score": 6.8,
      "source": "openssf-api",
      "version": "v5.6.0"
    },
    "vulnerabilities": [
      {
        "aliases": [
          "CVE-2026-78663"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78663",
          "percentile": 0.49813,
          "score": 0.00622
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6612",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Critical",
        "summary": "The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configure",
        "url": "https://go.dev/cl/847187",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-100351"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-100351",
          "percentile": 0.42051,
          "score": 0.00488
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.147.0"
        ],
        "id": "GHSA-23vg-4cjm-66q5",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/getkin/kin-openapi",
        "severity": "High",
        "summary": "kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion",
        "url": "https://github.com/advisories/GHSA-23vg-4cjm-66q5",
        "version": "v0.144.0"
      },
      {
        "aliases": [
          "CVE-2026-100349"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-100349",
          "percentile": 0.40816,
          "score": 0.00472
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.146.0"
        ],
        "id": "GHSA-74vm-87hj-r66f",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/getkin/kin-openapi",
        "severity": "High",
        "summary": "kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content",
        "url": "https://github.com/advisories/GHSA-74vm-87hj-r66f",
        "version": "v0.144.0"
      },
      {
        "aliases": [
          "CVE-2026-100354"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-100354",
          "percentile": 0.37803,
          "score": 0.00435
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.149.0"
        ],
        "id": "GHSA-g8cf-rcjf-c8cf",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/getkin/kin-openapi",
        "severity": "High",
        "summary": "kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash",
        "url": "https://github.com/advisories/GHSA-g8cf-rcjf-c8cf",
        "version": "v0.144.0"
      },
      {
        "aliases": [
          "CVE-2026-100352"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-100352",
          "percentile": 0.48445,
          "score": 0.00595
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.148.0"
        ],
        "id": "GHSA-rj39-cv6w-8wv7",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/getkin/kin-openapi",
        "severity": "High",
        "summary": "kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path",
        "url": "https://github.com/advisories/GHSA-rj39-cv6w-8wv7",
        "version": "v0.144.0"
      },
      {
        "aliases": [
          "CVE-2026-100353"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-100353",
          "percentile": 0.26853,
          "score": 0.00335
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.149.0"
        ],
        "id": "GHSA-vrcc-3ch7-hppw",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/getkin/kin-openapi",
        "severity": "High",
        "summary": "kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter",
        "url": "https://github.com/advisories/GHSA-vrcc-3ch7-hppw",
        "version": "v0.144.0"
      },
      {
        "aliases": [
          "CVE-2026-71556"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-71556",
          "percentile": 0.29467,
          "score": 0.00357
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.19.2"
        ],
        "id": "GHSA-hc8v-wwc9-vgxm",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-git/go-git/v5",
        "severity": "High",
        "summary": "go-git: Worktree operations may follow symlinks",
        "url": "https://github.com/advisories/GHSA-hc8v-wwc9-vgxm",
        "version": "v5.19.1"
      },
      {
        "aliases": [
          "CVE-2026-116587"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116587",
          "percentile": 0.3048,
          "score": 0.00366
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.6"
        ],
        "id": "GHSA-mgcc-cww5-fp2q",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "High",
        "summary": "Go JOSE: DoS when parsing JWKs that contain RSA keys",
        "url": "https://github.com/advisories/GHSA-mgcc-cww5-fp2q",
        "version": "v4.1.4"
      },
      {
        "aliases": [
          "CVE-2026-56854"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56854",
          "percentile": 0.38024,
          "score": 0.00437
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.55.0"
        ],
        "id": "GO-2026-6303",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "High",
        "summary": "The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthC",
        "url": "https://go.dev/issue/80213",
        "version": "v0.53.0"
      },
      {
        "aliases": [
          "CVE-2026-78662"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78662",
          "percentile": 0.37388,
          "score": 0.00431
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.56.0"
        ],
        "id": "GO-2026-6354",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "High",
        "summary": "Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket",
        "url": "https://go.dev/issue/81316",
        "version": "v0.53.0"
      },
      {
        "aliases": [
          "CVE-2026-56855"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56855",
          "percentile": 0.42867,
          "score": 0.005
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.56.0"
        ],
        "id": "GO-2026-6355",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "High",
        "summary": "Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection d",
        "url": "https://go.dev/issue/81317",
        "version": "v0.53.0"
      },
      {
        "aliases": [
          "CVE-2026-56865"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56865",
          "percentile": 0.02533,
          "score": 0.00129
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.40.0"
        ],
        "id": "GO-2026-6179",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/mod",
        "severity": "High",
        "summary": "A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that canno",
        "url": "https://go.dev/issue/80744",
        "version": "v0.37.0"
      },
      {
        "aliases": [
          "CVE-2026-56864"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56864",
          "percentile": 0.22506,
          "score": 0.00298
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.40.0"
        ],
        "id": "GO-2026-6180",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/mod",
        "severity": "High",
        "summary": "A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if you",
        "url": "https://go.dev/issue/80745",
        "version": "v0.37.0"
      },
      {
        "aliases": [
          "CVE-2026-78659"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78659",
          "percentile": 0.50082,
          "score": 0.00627
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6603",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"",
        "url": "https://go.dev/cl/847185",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-78660"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78660",
          "percentile": 0.36838,
          "score": 0.00425
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6610",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a re",
        "url": "https://go.dev/cl/835145",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-78669"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78669",
          "percentile": 0.49426,
          "score": 0.00614
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6611",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.",
        "url": "https://go.dev/cl/847186",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-97032"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97032",
          "percentile": 0.42154,
          "score": 0.0049
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6617",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the ot",
        "url": "https://go.dev/cl/847188",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-56851"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56851",
          "percentile": 0.40313,
          "score": 0.00466
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.41.0"
        ],
        "id": "GO-2026-6629",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/text",
        "severity": "High",
        "summary": "The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.",
        "url": "https://go.dev/cl/793360",
        "version": "v0.39.0"
      },
      {
        "aliases": [
          "CVE-2026-84445"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-84445",
          "percentile": 0.5072,
          "score": 0.00641
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.82.2"
        ],
        "id": "GHSA-2v4p-qf9q-27wj",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "google.golang.org/grpc",
        "severity": "High",
        "summary": "gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers",
        "url": "https://github.com/advisories/GHSA-2v4p-qf9q-27wj",
        "version": "v1.82.1"
      },
      {
        "aliases": [
          "CVE-2026-84304"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-84304",
          "percentile": 0.49152,
          "score": 0.00609
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.83.1"
        ],
        "id": "GHSA-vp52-pcj8-j9qc",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "google.golang.org/grpc",
        "severity": "High",
        "summary": "gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation",
        "url": "https://github.com/advisories/GHSA-vp52-pcj8-j9qc",
        "version": "v1.82.1"
      },
      {
        "aliases": [
          "CVE-2026-100347"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-100347",
          "percentile": 0.43881,
          "score": 0.00515
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.145.0"
        ],
        "id": "GHSA-fh4f-47mf-f2gj",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/getkin/kin-openapi",
        "severity": "Medium",
        "summary": "kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path",
        "url": "https://github.com/advisories/GHSA-fh4f-47mf-f2gj",
        "version": "v0.144.0"
      },
      {
        "aliases": [
          "CVE-2026-100348"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-100348",
          "percentile": 0.31115,
          "score": 0.00372
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.145.0"
        ],
        "id": "GHSA-mh7x-f8wq-4jhx",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/getkin/kin-openapi",
        "severity": "Medium",
        "summary": "kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)",
        "url": "https://github.com/advisories/GHSA-mh7x-f8wq-4jhx",
        "version": "v0.144.0"
      },
      {
        "aliases": [
          "CVE-2026-71557"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-71557",
          "percentile": 0.35651,
          "score": 0.00413
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.19.2"
        ],
        "id": "GHSA-qgq7-7hm3-q39j",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-git/go-git/v5",
        "severity": "Medium",
        "summary": "go-git: Malicious reference names may modify files outside the reference storage",
        "url": "https://github.com/advisories/GHSA-qgq7-7hm3-q39j",
        "version": "v5.19.1"
      },
      {
        "aliases": [
          "CVE-2026-116585"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116585",
          "percentile": 0.18368,
          "score": 0.00264
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.5"
        ],
        "id": "GHSA-4w3g-jfj2-cw2q",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "Medium",
        "summary": "Go JOSE: Panic during CBC-HMAC processing",
        "url": "https://github.com/advisories/GHSA-4w3g-jfj2-cw2q",
        "version": "v4.1.4"
      },
      {
        "aliases": [
          "CVE-2026-116586"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116586",
          "percentile": 0.21769,
          "score": 0.00292
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.5"
        ],
        "id": "GHSA-vvm8-gf78-28g4",
        "in_binary": "vulnerable code not in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "Medium",
        "summary": "Go JOSE: Panics in JSON parsing",
        "url": "https://github.com/advisories/GHSA-vvm8-gf78-28g4",
        "version": "v4.1.4"
      },
      {
        "aliases": [
          "CVE-2026-61801"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-61801",
          "percentile": 0.01634,
          "score": 0.00117
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.4.1"
        ],
        "id": "GHSA-mjcv-p78q-w5fw",
        "in_binary": "not in released binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/moby/sys/user",
        "severity": "Medium",
        "summary": "github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files",
        "url": "https://github.com/advisories/GHSA-mjcv-p78q-w5fw",
        "version": "v0.4.0"
      },
      {
        "aliases": [
          "CVE-2026-84303"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-84303",
          "percentile": 0.23991,
          "score": 0.00311
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.83.1"
        ],
        "id": "GHSA-qc2q-p7wx-3px3",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "google.golang.org/grpc",
        "severity": "Medium",
        "summary": "gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion",
        "url": "https://github.com/advisories/GHSA-qc2q-p7wx-3px3",
        "version": "v1.82.1"
      },
      {
        "aliases": [],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-5932",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "Unknown",
        "summary": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained f",
        "url": "https://go.dev/issue/44226",
        "version": "v0.53.0"
      },
      {
        "aliases": [
          "CVE-2026-78661"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78661",
          "percentile": 0.08063,
          "score": 0.00185
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6860",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") cau",
        "url": "https://go.dev/cl/849365",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-97045"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97045",
          "percentile": 0.10117,
          "score": 0.00202
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6866",
        "in_binary": "vulnerable code in binary",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> f",
        "url": "https://go.dev/cl/855121",
        "version": "v0.56.0"
      }
    ],
    "workflow_audit": {
      "files": 13,
      "findings": [
        {
          "confidence": "Medium",
          "description": "use of fundamentally insecure workflow trigger",
          "file": ".github/workflows/auto-merge.yaml",
          "line": 3,
          "note": "this workflow",
          "rule": "dangerous-triggers",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#dangerous-triggers"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/auto-merge.yaml",
          "line": 21,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/auto-merge.yaml",
          "line": 22,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "spoofable bot actor check",
          "file": ".github/workflows/compat-checks.yaml",
          "line": 10,
          "note": "this job",
          "rule": "bot-conditions",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#bot-conditions"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/compat-checks.yaml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/compat-checks.yaml",
          "line": 17,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/flamegraph.yaml",
          "line": 15,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/flamegraph.yaml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/flamegraph.yaml",
          "line": 17,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/flamegraph.yaml",
          "line": 46,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/flamegraph.yaml",
          "line": 52,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/fuzz.yaml",
          "line": 20,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/fuzz.yaml",
          "line": 21,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/fuzz.yaml",
          "line": 40,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/fuzz.yaml",
          "line": 41,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/fuzz.yaml",
          "line": 47,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/generate-docs.yaml",
          "line": 14,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/generate-docs.yaml",
          "line": 15,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/generate-docs.yaml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/generate-docs.yaml",
          "line": 20,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/generate-pgo.yaml",
          "line": 21,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/generate-pgo.yaml",
          "line": 22,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/generate-pgo.yaml",
          "line": 23,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/generate-pgo.yaml",
          "line": 46,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/govulncheck.yaml",
          "line": 19,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/govulncheck.yaml",
          "line": 20,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/govulncheck.yaml",
          "line": 27,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/memogen.yaml",
          "line": 17,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/memogen.yaml",
          "line": 18,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/memogen.yaml",
          "line": 19,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/memogen.yaml",
          "line": 23,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/perf-regression.yaml",
          "line": 14,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/perf-regression.yaml",
          "line": 15,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/perf-regression.yaml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/perf-regression.yaml",
          "line": 21,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/perf-regression.yaml",
          "line": 25,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/perf-regression.yaml",
          "line": 35,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release.yaml",
          "line": 19,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release.yaml",
          "line": 22,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release.yaml",
          "line": 26,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release.yaml",
          "line": 29,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/release.yaml",
          "line": 33,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/stale.yaml",
          "line": 16,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 25,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 26,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 27,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 28,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 45,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 46,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 47,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 48,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 93,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 94,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 95,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 118,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 119,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 120,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 121,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 138,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 139,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 140,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 141,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 142,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 155,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 156,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 157,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 169,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 170,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 173,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 174,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 197,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 207,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 208,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tests.yaml",
          "line": 211,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/typos.yaml",
          "line": 19,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/typos.yaml",
          "line": 20,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/fuzz.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/fuzz.yaml",
          "line": 13,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/fuzz.yaml",
          "line": 28,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/generate-docs.yaml",
          "line": 10,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/memogen.yaml",
          "line": 13,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/perf-regression.yaml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yaml",
          "line": 10,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yaml",
          "line": 14,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 20,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 34,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 86,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 107,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 127,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 148,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 202,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/tests.yaml",
          "line": 213,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/typos.yaml",
          "line": 14,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release.yaml",
          "line": 11,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/tests.yaml",
          "line": 214,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}