{
  "history": [
    {
      "added": 0,
      "commit": "31ce31ee1abbcc7dc8eee5764c17121c3044c8b2",
      "date": "2026-11-01",
      "dependencies": 335,
      "errors": [],
      "fixable": 5,
      "go_version": null,
      "in_binary": null,
      "new_vulnerabilities": 0,
      "osv_confirmed": 12,
      "osv_only": 0,
      "ref": "v3.99.7",
      "release_changed": false,
      "release_integrity": "verified",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 7.9,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 4,
        "Low": 0,
        "Medium": 5,
        "Negligible": 0,
        "Unknown": 3
      },
      "workflow": {
        "High": 3,
        "Low": 1,
        "Medium": 2,
        "files": 11
      }
    },
    {
      "added": 0,
      "commit": "31ce31ee1abbcc7dc8eee5764c17121c3044c8b2",
      "date": "2026-11-02",
      "dependencies": 335,
      "errors": [],
      "fixable": 5,
      "go_version": null,
      "in_binary": null,
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 12,
      "osv_only": 0,
      "ref": "v3.99.7",
      "release_changed": false,
      "release_integrity": "verified",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 7.9,
      "scorecard_date": "2026-10-19",
      "scorecard_note": null,
      "scorecard_source": "openssf-api",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 4,
        "Low": 0,
        "Medium": 5,
        "Negligible": 0,
        "Unknown": 3
      },
      "vulnerable_packages": 5,
      "workflow": {
        "High": 3,
        "Low": 1,
        "Medium": 2,
        "files": 11
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "Pre-commit & Secrets Detection",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "v3.99.7",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "31ce31ee1abbcc7dc8eee5764c17121c3044c8b2",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/detector-corpora-test.yml",
        "name": "actions/cache/restore",
        "purl": "pkg:github/actions/cache@v6#restore",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/detector-corpora-test.yml",
        "name": "actions/cache/save",
        "purl": "pkg:github/actions/cache@v6#save",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v7",
        "version": "v7"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/detector-corpora-test.yml",
        "name": "actions/github-script",
        "purl": "pkg:github/actions/github-script@v9",
        "version": "v9"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "actions/setup-go",
        "purl": "pkg:github/actions/setup-go@v7",
        "version": "v7"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/detector-corpora-test.yml",
        "name": "aws-actions/configure-aws-credentials",
        "purl": "pkg:github/aws-actions/configure-aws-credentials@v6",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/test.yml",
        "name": "buildpulse/buildpulse-action",
        "purl": "pkg:github/buildpulse/buildpulse-action@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-bot.yml",
        "name": "docker/login-action",
        "purl": "pkg:github/docker/login-action@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release.yml",
        "name": "docker/setup-qemu-action",
        "purl": "pkg:github/docker/setup-qemu-action@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "github/codeql-action/analyze",
        "purl": "pkg:github/github/codeql-action@v4#analyze",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "github/codeql-action/init",
        "purl": "pkg:github/github/codeql-action@v4#init",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/lint.yml",
        "name": "golangci/golangci-lint-action",
        "purl": "pkg:github/golangci/golangci-lint-action@v9",
        "version": "v9"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-bot.yml",
        "name": "google-github-actions/auth",
        "purl": "pkg:github/google-github-actions/auth@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release.yml",
        "name": "goreleaser/goreleaser-action",
        "purl": "pkg:github/goreleaser/goreleaser-action@v7",
        "version": "v7"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/detector-tests.yml",
        "name": "jaxxstorm/action-install-gh-release",
        "purl": "pkg:github/jaxxstorm/action-install-gh-release@v3.0.0",
        "version": "v3.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/test.yml",
        "name": "mikepenz/action-junit-report",
        "purl": "pkg:github/mikepenz/action-junit-report@v6",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/detector-corpora-test.yml",
        "name": "peter-evans/create-or-update-comment",
        "purl": "pkg:github/peter-evans/create-or-update-comment@v5",
        "version": "v5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/detector-corpora-test.yml",
        "name": "peter-evans/find-comment",
        "purl": "pkg:github/peter-evans/find-comment@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/detector-tests.yml",
        "name": "rwx-research/setup-captain",
        "purl": "pkg:github/rwx-research/setup-captain@v1.4.1",
        "version": "v1.4.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release.yml",
        "name": "sigstore/cosign-installer",
        "purl": "pkg:github/sigstore/cosign-installer@v3.10.1",
        "version": "v3.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cel.dev/expr",
        "purl": "pkg:golang/cel.dev/expr@v0.25.2",
        "version": "v0.25.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go",
        "purl": "pkg:golang/cloud.google.com/go@v0.121.6",
        "version": "v0.121.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/auth",
        "purl": "pkg:golang/cloud.google.com/go/auth@v0.18.2",
        "version": "v0.18.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/auth/oauth2adapt",
        "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
        "version": "v0.2.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/compute/metadata",
        "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/iam",
        "purl": "pkg:golang/cloud.google.com/go/iam@v1.5.3",
        "version": "v1.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/monitoring",
        "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.24.3",
        "version": "v1.24.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/secretmanager",
        "purl": "pkg:golang/cloud.google.com/go/secretmanager@v1.16.0",
        "version": "v1.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "cloud.google.com/go/storage",
        "purl": "pkg:golang/cloud.google.com/go/storage@v1.56.1",
        "version": "v1.56.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "dario.cat/mergo",
        "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "filippo.io/edwards25519",
        "purl": "pkg:golang/filippo.io/edwards25519@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/adrg/strutil",
        "purl": "pkg:golang/github.com/adrg/strutil@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/chroma/v2",
        "purl": "pkg:golang/github.com/alecthomas/chroma/v2@v2.14.0",
        "version": "v2.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/kingpin/v2",
        "purl": "pkg:golang/github.com/alecthomas/kingpin/v2@v2.4.0",
        "version": "v2.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/alecthomas/units",
        "purl": "pkg:golang/github.com/alecthomas/units@v0.0.0-20211218093645-b94a6e3cc137",
        "version": "v0.0.0-20211218093645-b94a6e3cc137"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/andybalholm/brotli",
        "purl": "pkg:golang/github.com/andybalholm/brotli@v1.2.7",
        "version": "v1.2.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/atotto/clipboard",
        "purl": "pkg:golang/github.com/atotto/clipboard@v0.1.4",
        "version": "v0.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/avast/apkparser",
        "purl": "pkg:golang/github.com/avast/apkparser@v0.0.0-20260423123151-7fcaee440f68",
        "version": "v0.0.0-20260423123151-7fcaee440f68"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.43.7",
        "version": "v1.43.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.18",
        "version": "v1.7.18"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/config",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.38",
        "version": "v1.32.38"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/credentials",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.37",
        "version": "v1.19.37"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.38",
        "version": "v1.18.38"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/s3/manager",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.22.44",
        "version": "v1.22.44"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.38",
        "version": "v1.4.38"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.38",
        "version": "v2.7.38"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.39",
        "version": "v1.4.39"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.17",
        "version": "v1.13.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.31",
        "version": "v1.9.31"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.38",
        "version": "v1.13.38"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.39",
        "version": "v1.19.39"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/s3",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.107.3",
        "version": "v1.107.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/signin",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.5.7",
        "version": "v1.5.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sns",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sns@v1.42.7",
        "version": "v1.42.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sso",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.33.7",
        "version": "v1.33.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.38.7",
        "version": "v1.38.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sts",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.45.7",
        "version": "v1.45.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aws/smithy-go",
        "purl": "pkg:golang/github.com/aws/smithy-go@v1.27.9",
        "version": "v1.27.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aymanbagabas/go-osc52",
        "purl": "pkg:golang/github.com/aymanbagabas/go-osc52@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aymanbagabas/go-osc52/v2",
        "purl": "pkg:golang/github.com/aymanbagabas/go-osc52/v2@v2.0.1",
        "version": "v2.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/aymerick/douceur",
        "purl": "pkg:golang/github.com/aymerick/douceur@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/go-ansiterm",
        "purl": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
        "version": "v0.0.0-20250102033503-faa5f7b0171c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Azure/go-ntlmssp",
        "purl": "pkg:golang/github.com/Azure/go-ntlmssp@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
        "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.3.2",
        "version": "v1.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/beorn7/perks",
        "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bill-rich/go-syslog",
        "purl": "pkg:golang/github.com/bill-rich/go-syslog@v0.0.0-20220413021637-49edb52a574c",
        "version": "v0.0.0-20220413021637-49edb52a574c"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/BobuSumisu/aho-corasick",
        "purl": "pkg:golang/github.com/BobuSumisu/aho-corasick@v1.0.3",
        "version": "v1.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bodgit/plumbing",
        "purl": "pkg:golang/github.com/bodgit/plumbing@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bodgit/sevenzip",
        "purl": "pkg:golang/github.com/bodgit/sevenzip@v1.6.5",
        "version": "v1.6.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bodgit/windows",
        "purl": "pkg:golang/github.com/bodgit/windows@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/bradleyfalzon/ghinstallation/v2",
        "purl": "pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.16.0",
        "version": "v2.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/brianvoe/gofakeit/v7",
        "purl": "pkg:golang/github.com/brianvoe/gofakeit/v7@v7.6.0",
        "version": "v7.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cenkalti/backoff/v4",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
        "version": "v4.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cespare/xxhash/v2",
        "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/bubbles",
        "purl": "pkg:golang/github.com/charmbracelet/bubbles@v0.18.0",
        "version": "v0.18.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/bubbletea",
        "purl": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10",
        "version": "v1.3.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/colorprofile",
        "purl": "pkg:golang/github.com/charmbracelet/colorprofile@v0.2.3-0.20250311203215-f60798e515dc",
        "version": "v0.2.3-0.20250311203215-f60798e515dc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/glamour",
        "purl": "pkg:golang/github.com/charmbracelet/glamour@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/lipgloss",
        "purl": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.1-0.20250404203927-76690c660834",
        "version": "v1.1.1-0.20250404203927-76690c660834"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/x/ansi",
        "purl": "pkg:golang/github.com/charmbracelet/x/ansi@v0.10.1",
        "version": "v0.10.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/x/cellbuf",
        "purl": "pkg:golang/github.com/charmbracelet/x/cellbuf@v0.0.13",
        "version": "v0.0.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/x/exp/slice",
        "purl": "pkg:golang/github.com/charmbracelet/x/exp/slice@v0.0.0-20250327172914-2fdc97757edf",
        "version": "v0.0.0-20250327172914-2fdc97757edf"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/charmbracelet/x/term",
        "purl": "pkg:golang/github.com/charmbracelet/x/term@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cloudflare/circl",
        "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.3",
        "version": "v1.6.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cncf/xds/go",
        "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
        "version": "v0.0.0-20260202195803-dba9d589def2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs",
        "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/errdefs/pkg",
        "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/log",
        "purl": "pkg:golang/github.com/containerd/log@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/platforms",
        "purl": "pkg:golang/github.com/containerd/platforms@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/containerd/stargz-snapshotter/estargz",
        "purl": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.16.3",
        "version": "v0.16.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/couchbase/gocb/v2",
        "purl": "pkg:golang/github.com/couchbase/gocb/v2@v2.11.0",
        "version": "v2.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/couchbase/gocbcore/v10",
        "purl": "pkg:golang/github.com/couchbase/gocbcore/v10@v10.8.0",
        "version": "v10.8.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/couchbase/gocbcoreps",
        "purl": "pkg:golang/github.com/couchbase/gocbcoreps@v0.1.3",
        "version": "v0.1.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/couchbase/goprotostellar",
        "purl": "pkg:golang/github.com/couchbase/goprotostellar@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/couchbaselabs/gocbconnstr/v2",
        "purl": "pkg:golang/github.com/couchbaselabs/gocbconnstr/v2@v2.0.0-20240607131231-fb385523de28",
        "version": "v2.0.0-20240607131231-fb385523de28"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cpuguy83/dockercfg",
        "purl": "pkg:golang/github.com/cpuguy83/dockercfg@v0.3.2",
        "version": "v0.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/crewjam/rfc5424",
        "purl": "pkg:golang/github.com/crewjam/rfc5424@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/csnewman/dextk",
        "purl": "pkg:golang/github.com/csnewman/dextk@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/cyphar/filepath-securejoin",
        "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/DataDog/zstd",
        "purl": "pkg:golang/github.com/DataDog/zstd@v1.5.5",
        "version": "v1.5.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
        "purl": "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.0",
        "version": "v4.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/distribution/reference",
        "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dlclark/regexp2",
        "purl": "pkg:golang/github.com/dlclark/regexp2@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/cli",
        "purl": "pkg:golang/github.com/docker/cli@v29.3.1%2Bincompatible",
        "version": "v29.3.1+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/distribution",
        "purl": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible",
        "version": "v2.8.3+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/docker",
        "purl": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
        "version": "v28.5.2+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/docker-credential-helpers",
        "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.3",
        "version": "v0.9.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-connections",
        "purl": "pkg:golang/github.com/docker/go-connections@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/docker/go-units",
        "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dsnet/compress",
        "purl": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707",
        "version": "v0.0.2-0.20230904184137-39efe44ab707"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/dustin/go-humanize",
        "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ebitengine/purego",
        "purl": "pkg:golang/github.com/ebitengine/purego@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/elastic/elastic-transport-go/v8",
        "purl": "pkg:golang/github.com/elastic/elastic-transport-go/v8@v8.6.1",
        "version": "v8.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/elastic/go-elasticsearch/v8",
        "purl": "pkg:golang/github.com/elastic/go-elasticsearch/v8@v8.17.1",
        "version": "v8.17.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/emirpasic/gods",
        "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
        "version": "v1.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/go-control-plane/envoy",
        "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
        "version": "v1.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/envoyproxy/protoc-gen-validate",
        "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
        "version": "v1.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/erikgeiser/coninput",
        "purl": "pkg:golang/github.com/erikgeiser/coninput@v0.0.0-20211004153227-1c3628e74d0f",
        "version": "v0.0.0-20211004153227-1c3628e74d0f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fatih/color",
        "purl": "pkg:golang/github.com/fatih/color@v1.18.0",
        "version": "v1.18.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/felixge/fgprof",
        "purl": "pkg:golang/github.com/felixge/fgprof@v0.9.5",
        "version": "v0.9.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/felixge/httpsnoop",
        "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/fsnotify/fsnotify",
        "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gabriel-vasile/mimetype",
        "purl": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15",
        "version": "v1.4.15"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/getsentry/sentry-go",
        "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.32.0",
        "version": "v0.32.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-asn1-ber/asn1-ber",
        "purl": "pkg:golang/github.com/go-asn1-ber/asn1-ber@v1.5.8",
        "version": "v1.5.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-errors/errors",
        "purl": "pkg:golang/github.com/go-errors/errors@v1.5.1",
        "version": "v1.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/gcfg",
        "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
        "version": "v1.5.1-0.20230307220236-3a3c6141e376"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-billy/v5",
        "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.9.0",
        "version": "v5.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-git/go-git/v5",
        "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.19.2",
        "version": "v5.19.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-jose/go-jose/v4",
        "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
        "version": "v4.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/logr",
        "purl": "pkg:golang/github.com/go-logr/logr@v1.4.4",
        "version": "v1.4.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/stdr",
        "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-logr/zapr",
        "purl": "pkg:golang/github.com/go-logr/zapr@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-ole/go-ole",
        "purl": "pkg:golang/github.com/go-ole/go-ole@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-redis/redis",
        "purl": "pkg:golang/github.com/go-redis/redis@v6.15.9%2Bincompatible",
        "version": "v6.15.9+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/go-sql-driver/mysql",
        "purl": "pkg:golang/github.com/go-sql-driver/mysql@v1.8.1",
        "version": "v1.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gobwas/glob",
        "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3",
        "version": "v0.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/goccy/go-json",
        "purl": "pkg:golang/github.com/goccy/go-json@v0.10.3",
        "version": "v0.10.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gofrs/flock",
        "purl": "pkg:golang/github.com/gofrs/flock@v0.12.1",
        "version": "v0.12.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-jwt/jwt/v4",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
        "version": "v4.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-jwt/jwt/v5",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.2.3",
        "version": "v5.2.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-sql/civil",
        "purl": "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9",
        "version": "v0.0.0-20220223132316-b832511892a9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang-sql/sqlexp",
        "purl": "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/groupcache",
        "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "version": "v0.0.0-20241129210726-2c02b8208cf8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/golang/snappy",
        "purl": "pkg:golang/github.com/golang/snappy@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-cmp",
        "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-containerregistry",
        "purl": "pkg:golang/github.com/google/go-containerregistry@v0.20.6",
        "version": "v0.20.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-github/v67",
        "purl": "pkg:golang/github.com/google/go-github/v67@v67.0.0",
        "version": "v67.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-github/v72",
        "purl": "pkg:golang/github.com/google/go-github/v72@v72.0.0",
        "version": "v72.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/go-querystring",
        "purl": "pkg:golang/github.com/google/go-querystring@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/pprof",
        "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20240227163752-401108e1b7e7",
        "version": "v0.0.0-20240227163752-401108e1b7e7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/s2a-go",
        "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9",
        "version": "v0.1.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/google/uuid",
        "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/googleapis/enterprise-certificate-proxy",
        "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.11",
        "version": "v0.3.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/googleapis/gax-go/v2",
        "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.17.0",
        "version": "v2.17.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.33.0",
        "version": "v1.33.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.53.0",
        "version": "v0.53.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping",
        "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.53.0",
        "version": "v0.53.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gorilla/css",
        "purl": "pkg:golang/github.com/gorilla/css@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/gorilla/websocket",
        "purl": "pkg:golang/github.com/gorilla/websocket@v1.5.3",
        "version": "v1.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/grpc-ecosystem/go-grpc-middleware",
        "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/h2non/parth",
        "purl": "pkg:golang/github.com/h2non/parth@v0.0.0-20190131123155-b4df798d6542",
        "version": "v0.0.0-20190131123155-b4df798d6542"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/errwrap",
        "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-cleanhttp",
        "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-multierror",
        "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/go-retryablehttp",
        "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
        "version": "v0.7.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/hashicorp/golang-lru/v2",
        "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "version": "v2.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jackc/pgpassfile",
        "purl": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jackc/pgservicefile",
        "purl": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
        "version": "v0.0.0-20240606120523-5a60cdf6a761"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jackc/pgx/v5",
        "purl": "pkg:golang/github.com/jackc/pgx/v5@v5.9.2",
        "version": "v5.9.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jbenet/go-context",
        "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
        "version": "v0.0.0-20150711004518-d14ea06fba99"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jedib0t/go-pretty/v6",
        "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.6.8",
        "version": "v6.6.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jlaffaye/ftp",
        "purl": "pkg:golang/github.com/jlaffaye/ftp@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/joho/godotenv",
        "purl": "pkg:golang/github.com/joho/godotenv@v1.5.1",
        "version": "v1.5.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/jpillora/s3",
        "purl": "pkg:golang/github.com/jpillora/s3@v1.1.4",
        "version": "v1.1.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/k0kubun/go-ansi",
        "purl": "pkg:golang/github.com/k0kubun/go-ansi@v0.0.0-20180517002512-3bf9e2903213",
        "version": "v0.0.0-20180517002512-3bf9e2903213"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kevinburke/ssh_config",
        "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kjk/lzma",
        "purl": "pkg:golang/github.com/kjk/lzma@v0.0.0-20161016003348-3fd93898850d",
        "version": "v0.0.0-20161016003348-3fd93898850d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/klauspost/compress",
        "purl": "pkg:golang/github.com/klauspost/compress@v1.20.3",
        "version": "v1.20.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/klauspost/cpuid/v2",
        "purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/klauspost/pgzip",
        "purl": "pkg:golang/github.com/klauspost/pgzip@v1.2.6",
        "version": "v1.2.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/kylelemons/godebug",
        "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/blackmagic",
        "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/httpcc",
        "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/httprc/v3",
        "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/jwx/v3",
        "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.12",
        "version": "v3.0.12"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/option",
        "purl": "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lestrrat-go/option/v2",
        "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
        "version": "v2.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lib/pq",
        "purl": "pkg:golang/github.com/lib/pq@v1.10.9",
        "version": "v1.10.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lrstanley/bubblezone",
        "purl": "pkg:golang/github.com/lrstanley/bubblezone@v0.0.0-20250404061050-e13639e27357",
        "version": "v0.0.0-20250404061050-e13639e27357"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lucasb-eyer/go-colorful",
        "purl": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/lufia/plan9stats",
        "purl": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20260330125221-c963978e514e",
        "version": "v0.0.0-20260330125221-c963978e514e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/magiconair/properties",
        "purl": "pkg:golang/github.com/magiconair/properties@v1.8.10",
        "version": "v1.8.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/marusama/semaphore/v2",
        "purl": "pkg:golang/github.com/marusama/semaphore/v2@v2.5.0",
        "version": "v2.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-colorable",
        "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13",
        "version": "v0.1.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-isatty",
        "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
        "version": "v0.0.20"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-localereader",
        "purl": "pkg:golang/github.com/mattn/go-localereader@v0.0.1",
        "version": "v0.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mattn/go-runewidth",
        "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16",
        "version": "v0.0.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/maypok86/otter/v2",
        "purl": "pkg:golang/github.com/maypok86/otter/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mholt/archives",
        "purl": "pkg:golang/github.com/mholt/archives@v0.0.0-20241216060121-23e0af8fe73d",
        "version": "v0.0.0-20241216060121-23e0af8fe73d"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/microcosm-cc/bluemonday",
        "purl": "pkg:golang/github.com/microcosm-cc/bluemonday@v1.0.27",
        "version": "v1.0.27"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/microsoft/go-mssqldb",
        "purl": "pkg:golang/github.com/microsoft/go-mssqldb@v1.8.2",
        "version": "v1.8.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/Microsoft/go-winio",
        "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/colorstring",
        "purl": "pkg:golang/github.com/mitchellh/colorstring@v0.0.0-20190213212951-d06e56a500db",
        "version": "v0.0.0-20190213212951-d06e56a500db"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/go-homedir",
        "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/mitchellh/go-ps",
        "purl": "pkg:golang/github.com/mitchellh/go-ps@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/docker-image-spec",
        "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/go-archive",
        "purl": "pkg:golang/github.com/moby/go-archive@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/moby/api",
        "purl": "pkg:golang/github.com/moby/moby/api@v1.54.2",
        "version": "v1.54.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/moby/client",
        "purl": "pkg:golang/github.com/moby/moby/client@v0.4.1",
        "version": "v0.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/patternmatcher",
        "purl": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
        "version": "v0.6.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/sequential",
        "purl": "pkg:golang/github.com/moby/sys/sequential@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/user",
        "purl": "pkg:golang/github.com/moby/sys/user@v0.4.1",
        "version": "v0.4.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/sys/userns",
        "purl": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/moby/term",
        "purl": "pkg:golang/github.com/moby/term@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/montanaflynn/stats",
        "purl": "pkg:golang/github.com/montanaflynn/stats@v0.7.1",
        "version": "v0.7.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/muesli/ansi",
        "purl": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6",
        "version": "v0.0.0-20230316100256-276c6243b2f6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/muesli/cancelreader",
        "purl": "pkg:golang/github.com/muesli/cancelreader@v0.2.2",
        "version": "v0.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/muesli/reflow",
        "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/muesli/termenv",
        "purl": "pkg:golang/github.com/muesli/termenv@v0.16.0",
        "version": "v0.16.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/munnerz/goautoneg",
        "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
        "version": "v0.0.0-20191010083416-a7dc8b61c822"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/nwaples/rardecode/v2",
        "purl": "pkg:golang/github.com/nwaples/rardecode/v2@v2.4.5",
        "version": "v2.4.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/onsi/ginkgo",
        "purl": "pkg:golang/github.com/onsi/ginkgo@v1.16.5",
        "version": "v1.16.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/go-digest",
        "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/opencontainers/image-spec",
        "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/patrickmn/go-cache",
        "purl": "pkg:golang/github.com/patrickmn/go-cache@v2.1.0%2Bincompatible",
        "version": "v2.1.0+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/paulbellamy/ratecounter",
        "purl": "pkg:golang/github.com/paulbellamy/ratecounter@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pierrec/lz4/v4",
        "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.27",
        "version": "v4.1.27"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pjbgf/sha1cd",
        "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/pkg/errors",
        "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/planetscale/vtprotobuf",
        "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
        "version": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/power-devops/perfstat",
        "purl": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
        "version": "v0.0.0-20240221224432-82ca36839d55"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/client_golang",
        "purl": "pkg:golang/github.com/prometheus/client_golang@v1.20.5",
        "version": "v1.20.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/client_model",
        "purl": "pkg:golang/github.com/prometheus/client_model@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/common",
        "purl": "pkg:golang/github.com/prometheus/common@v0.55.0",
        "version": "v0.55.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/prometheus/procfs",
        "purl": "pkg:golang/github.com/prometheus/procfs@v0.15.1",
        "version": "v0.15.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ProtonMail/go-crypto",
        "purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.1.6",
        "version": "v1.1.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rabbitmq/amqp091-go",
        "purl": "pkg:golang/github.com/rabbitmq/amqp091-go@v1.14.0",
        "version": "v1.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/repeale/fp-go",
        "purl": "pkg:golang/github.com/repeale/fp-go@v0.11.1",
        "version": "v0.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/rivo/uniseg",
        "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
        "version": "v0.4.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sahilm/fuzzy",
        "purl": "pkg:golang/github.com/sahilm/fuzzy@v0.1.1-0.20230530133925-c48e322e2a8f",
        "version": "v0.1.1-0.20230530133925-c48e322e2a8f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sassoftware/go-rpmutils",
        "purl": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/schollz/progressbar/v3",
        "purl": "pkg:golang/github.com/schollz/progressbar/v3@v3.17.1",
        "version": "v3.17.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/segmentio/asm",
        "purl": "pkg:golang/github.com/segmentio/asm@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sendgrid/rest",
        "purl": "pkg:golang/github.com/sendgrid/rest@v2.6.9%2Bincompatible",
        "version": "v2.6.9+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sendgrid/sendgrid-go",
        "purl": "pkg:golang/github.com/sendgrid/sendgrid-go@v3.16.1%2Bincompatible",
        "version": "v3.16.1+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sergi/go-diff",
        "purl": "pkg:golang/github.com/sergi/go-diff@v1.3.2-0.20230802210424-5b0b94c5c0d3",
        "version": "v1.3.2-0.20230802210424-5b0b94c5c0d3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shirou/gopsutil/v4",
        "purl": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.4",
        "version": "v4.26.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shuheiktgw/go-travis",
        "purl": "pkg:golang/github.com/shuheiktgw/go-travis@v0.3.1",
        "version": "v0.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shurcooL/githubv4",
        "purl": "pkg:golang/github.com/shurcooL/githubv4@v0.0.0-20260209031235-2402fdf4a9ed",
        "version": "v0.0.0-20260209031235-2402fdf4a9ed"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/shurcooL/graphql",
        "purl": "pkg:golang/github.com/shurcooL/graphql@v0.0.0-20230722043721-ed46e5a46466",
        "version": "v0.0.0-20230722043721-ed46e5a46466"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sirupsen/logrus",
        "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "version": "v1.9.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/skeema/knownhosts",
        "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/sorairolake/lzip-go",
        "purl": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.5",
        "version": "v0.3.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spf13/afero",
        "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
        "version": "v1.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/spiffe/go-spiffe/v2",
        "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/stangelandcl/ppmd",
        "purl": "pkg:golang/github.com/stangelandcl/ppmd@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/STARRY-S/zip",
        "purl": "pkg:golang/github.com/STARRY-S/zip@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/stretchr/objx",
        "purl": "pkg:golang/github.com/stretchr/objx@v0.5.3",
        "version": "v0.5.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/stretchr/testify",
        "purl": "pkg:golang/github.com/stretchr/testify@v1.12.1",
        "version": "v1.12.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/testcontainers/testcontainers-go",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/testcontainers/testcontainers-go/modules/elasticsearch",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go/modules/elasticsearch@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/testcontainers/testcontainers-go/modules/mongodb",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go/modules/mongodb@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/testcontainers/testcontainers-go/modules/mssql",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go/modules/mssql@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/testcontainers/testcontainers-go/modules/mysql",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go/modules/mysql@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/testcontainers/testcontainers-go/modules/postgres",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go/modules/postgres@v0.42.1-0.20260423004847-9fc0246c3859",
        "version": "v0.42.1-0.20260423004847-9fc0246c3859"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tetratelabs/wazero",
        "purl": "pkg:golang/github.com/tetratelabs/wazero@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/therootcompany/xz",
        "purl": "pkg:golang/github.com/therootcompany/xz@v1.0.1",
        "version": "v1.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/TheZeroSlave/zapsentry",
        "purl": "pkg:golang/github.com/TheZeroSlave/zapsentry@v1.23.0",
        "version": "v1.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tklauser/go-sysconf",
        "purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/tklauser/numcpus",
        "purl": "pkg:golang/github.com/tklauser/numcpus@v0.12.0",
        "version": "v0.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/trufflesecurity/disk-buffer-reader",
        "purl": "pkg:golang/github.com/trufflesecurity/disk-buffer-reader@v0.2.1",
        "version": "v0.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/trufflesecurity/ldap-verify",
        "purl": "pkg:golang/github.com/trufflesecurity/ldap-verify@v0.0.0-20261012152128-4a15fafb6e19",
        "version": "v0.0.0-20261012152128-4a15fafb6e19"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/trufflesecurity/overseer",
        "purl": "pkg:golang/github.com/trufflesecurity/overseer@v1.2.8",
        "version": "v1.2.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/trufflesecurity/touchfile",
        "purl": "pkg:golang/github.com/trufflesecurity/touchfile@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/trufflesecurity/waas-client-library-go",
        "purl": "pkg:golang/github.com/trufflesecurity/waas-client-library-go@v1.0.9",
        "version": "v1.0.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/ulikunitz/xz",
        "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.15",
        "version": "v0.5.15"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/vbatts/tar-split",
        "purl": "pkg:golang/github.com/vbatts/tar-split@v0.12.1",
        "version": "v0.12.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/wasilibs/go-re2",
        "purl": "pkg:golang/github.com/wasilibs/go-re2@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/wasilibs/wazero-helpers",
        "purl": "pkg:golang/github.com/wasilibs/wazero-helpers@v0.0.0-20250123031827-cd30c44769bb",
        "version": "v0.0.0-20250123031827-cd30c44769bb"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xanzy/ssh-agent",
        "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
        "version": "v0.3.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xdg-go/pbkdf2",
        "purl": "pkg:golang/github.com/xdg-go/pbkdf2@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xdg-go/scram",
        "purl": "pkg:golang/github.com/xdg-go/scram@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xdg-go/stringprep",
        "purl": "pkg:golang/github.com/xdg-go/stringprep@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xhit/go-str2duration/v2",
        "purl": "pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0",
        "version": "v2.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xi2/xz",
        "purl": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8",
        "version": "v0.0.0-20171230120015-48954b6210f8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xo/dburl",
        "purl": "pkg:golang/github.com/xo/dburl@v0.23.8",
        "version": "v0.23.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/xo/terminfo",
        "purl": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e",
        "version": "v0.0.0-20220910002029-abceb7e1c41e"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/youmark/pkcs8",
        "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
        "version": "v0.0.0-20240726163527-a2c0da244d78"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yuin/goldmark",
        "purl": "pkg:golang/github.com/yuin/goldmark@v1.7.17",
        "version": "v1.7.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yuin/goldmark-emoji",
        "purl": "pkg:golang/github.com/yuin/goldmark-emoji@v1.0.5",
        "version": "v1.0.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "github.com/yusufpapurcu/wmi",
        "purl": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
        "version": "v1.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gitlab.com/gitlab-org/api/client-go",
        "purl": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.mongodb.org/mongo-driver",
        "purl": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.7",
        "version": "v1.17.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/auto/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/detectors/gcp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.62.0",
        "version": "v0.62.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
        "version": "v0.68.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel",
        "purl": "pkg:golang/go.opentelemetry.io/otel@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/otel/trace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0",
        "version": "v1.45.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.opentelemetry.io/proto/otlp",
        "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/automaxprocs",
        "purl": "pkg:golang/go.uber.org/automaxprocs@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/mock",
        "purl": "pkg:golang/go.uber.org/mock@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/multierr",
        "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.uber.org/zap",
        "purl": "pkg:golang/go.uber.org/zap@v1.27.0",
        "version": "v1.27.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go.yaml.in/yaml/v3",
        "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5",
        "version": "v3.0.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "go4.org",
        "purl": "pkg:golang/go4.org@v0.0.0-20260112195520-a5071408f32f",
        "version": "v0.0.0-20260112195520-a5071408f32f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/crypto",
        "purl": "pkg:golang/golang.org/x/crypto@v0.57.0",
        "version": "v0.57.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.41.0",
        "version": "v0.41.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/net",
        "purl": "pkg:golang/golang.org/x/net@v0.60.0",
        "version": "v0.60.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/oauth2",
        "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "version": "v0.36.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/sync",
        "purl": "pkg:golang/golang.org/x/sync@v0.23.0",
        "version": "v0.23.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/sys",
        "purl": "pkg:golang/golang.org/x/sys@v0.48.0",
        "version": "v0.48.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/term",
        "purl": "pkg:golang/golang.org/x/term@v0.46.0",
        "version": "v0.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/text",
        "purl": "pkg:golang/golang.org/x/text@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "golang.org/x/time",
        "purl": "pkg:golang/golang.org/x/time@v0.14.0",
        "version": "v0.14.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/api",
        "purl": "pkg:golang/google.golang.org/api@v0.264.0",
        "version": "v0.264.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto",
        "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260128011058-8636f8732409",
        "version": "v0.0.0-20260128011058-8636f8732409"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/api",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260720211330-0afa2a65878a",
        "version": "v0.0.0-20260720211330-0afa2a65878a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260720211330-0afa2a65878a",
        "version": "v0.0.0-20260720211330-0afa2a65878a"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/grpc",
        "purl": "pkg:golang/google.golang.org/grpc@v1.83.2",
        "version": "v1.83.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "google.golang.org/protobuf",
        "purl": "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "version": "v1.36.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/h2non/gock.v1",
        "purl": "pkg:golang/gopkg.in/h2non/gock.v1@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/warnings.v0",
        "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
        "version": "v0.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/yaml.v2",
        "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0",
        "version": "v2.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "gopkg.in/yaml.v3",
        "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "pault.ag/go/debian",
        "purl": "pkg:golang/pault.ag/go/debian@v0.18.0",
        "version": "v0.18.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "pault.ag/go/topsort",
        "purl": "pkg:golang/pault.ag/go/topsort@v0.1.1",
        "version": "v0.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "pgregory.net/rapid",
        "purl": "pkg:golang/pgregory.net/rapid@v1.2.0",
        "version": "v1.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go.mod",
        "name": "sigs.k8s.io/yaml",
        "purl": "pkg:golang/sigs.k8s.io/yaml@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/secrets.yml",
        "name": "./",
        "purl": "",
        "version": "UNKNOWN"
      }
    ],
    "description": "Find credentials in git history and live systems",
    "errors": [],
    "go_binary_note": "trufflehog_3.99.7_linux_amd64.tar.gz could not be analyzed: no Go build information (the binary may be compressed, for example with UPX, or not built with Go)",
    "id": "trufflesecurity__trufflehog",
    "manifests": [
      ".github/workflows/codeql-analysis.yml",
      ".github/workflows/detector-corpora-test.yml",
      ".github/workflows/detector-tests.yml",
      ".github/workflows/lint.yml",
      ".github/workflows/performance.yml",
      ".github/workflows/release-bot.yml",
      ".github/workflows/release.yml",
      ".github/workflows/secrets.yml",
      ".github/workflows/smoke.yml",
      ".github/workflows/test.yml",
      "action.yml",
      "go.mod",
      "go.sum"
    ],
    "name": "trufflehog",
    "osv": {
      "advisories": 12,
      "available": true,
      "confirmed": 12,
      "osv_only": [],
      "warning": null
    },
    "ref": "v3.99.7",
    "ref_kind": "release",
    "release_integrity": {
      "asset": "trufflehog_3.99.7_linux_amd64.tar.gz",
      "assets": 9,
      "build_provenance": null,
      "checksums_published": true,
      "digest_matches_github": true,
      "immutable_release": null,
      "methods": [
        {
          "covers": "checksums file trufflehog_3.99.7_checksums.txt",
          "identity": "GitHub Actions workflow in trufflesecurity/trufflehog",
          "method": "cosign",
          "signer": "URI:https://github.com/trufflesecurity/trufflehog/.github/workflows/release.yml@refs/tags/v3.99.7",
          "status": "verified"
        }
      ],
      "provenance_published": false,
      "sbom_published": false,
      "signature": "own-workflow",
      "signatures_published": true,
      "signer": "URI:https://github.com/trufflesecurity/trufflehog/.github/workflows/release.yml@refs/tags/v3.99.7",
      "verdict": "verified"
    },
    "released_at": "2026-10-24T06:04:25Z",
    "repository": "trufflesecurity/trufflehog",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [
        "0 version changes among 363 shared packages \u2014 no actual upgrades",
        "Core system packages stable: golang (314), github (37), file (11) unchanged"
      ],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:08:27+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "CII-Best-Practices",
          "reason": "no effort to earn an OpenSSF best practices badge detected",
          "score": 0
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 0
        },
        {
          "name": "Branch-Protection",
          "reason": "branch protection is not maximal on development and all release branches",
          "score": 5
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 7",
          "score": 7
        },
        {
          "name": "Signed-Releases",
          "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
          "score": 8
        },
        {
          "name": "Binary-Artifacts",
          "reason": "binaries present in source code",
          "score": 9
        },
        {
          "name": "Code-Review",
          "reason": "all changesets reviewed",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "Fuzzing",
          "reason": "project is fuzzed",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow detected",
          "score": 10
        },
        {
          "name": "SAST",
          "reason": "SAST tool is run on all commits",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        }
      ],
      "date": "2026-10-19",
      "score": 7.9,
      "source": "openssf-api",
      "version": "v5.6.0"
    },
    "vulnerabilities": [
      {
        "aliases": [
          "CVE-2026-42306"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-42306",
          "percentile": 0.01018,
          "score": 0.00104
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-rg2x-37c3-w2rh",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Docker: Race condition in docker cp allows bind mount redirection to host path",
        "url": "https://github.com/advisories/GHSA-rg2x-37c3-w2rh",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-41567"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-41567",
          "percentile": 0.04603,
          "score": 0.00155
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-x86f-5xw2-fm2r",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Docker: `PUT /containers/{id}/archive` executes container binary on the host",
        "url": "https://github.com/advisories/GHSA-x86f-5xw2-fm2r",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-34040",
          "GHSA-x744-4wpc-v9h2"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-34040",
          "percentile": 0.95361,
          "score": 0.0927
        },
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-4887",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker",
        "url": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-116587"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116587",
          "percentile": 0.3048,
          "score": 0.00366
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.6"
        ],
        "id": "GHSA-mgcc-cww5-fp2q",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "High",
        "summary": "Go JOSE: DoS when parsing JWKs that contain RSA keys",
        "url": "https://github.com/advisories/GHSA-mgcc-cww5-fp2q",
        "version": "v4.1.4"
      },
      {
        "aliases": [
          "CVE-2026-85747"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-85747",
          "percentile": 0.12276,
          "score": 0.00218
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-685w-q87j-wqw3",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/distribution",
        "severity": "Medium",
        "summary": "Distribution: Client `manifests.Get()` does not verify returned content against requested digest",
        "url": "https://github.com/advisories/GHSA-685w-q87j-wqw3",
        "version": "v2.8.3+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-33997"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-33997",
          "percentile": 0.34433,
          "score": 0.00402
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-pxq6-2prw-chj9",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "Medium",
        "summary": "Moby has an Off-by-one error in its plugin privilege validation",
        "url": "https://github.com/advisories/GHSA-pxq6-2prw-chj9",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-41568"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-41568",
          "percentile": 0.01188,
          "score": 0.00108
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-vp62-88p7-qqf5",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "Medium",
        "summary": "Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap",
        "url": "https://github.com/advisories/GHSA-vp62-88p7-qqf5",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-116585"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116585",
          "percentile": 0.18368,
          "score": 0.00264
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.5"
        ],
        "id": "GHSA-4w3g-jfj2-cw2q",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "Medium",
        "summary": "Go JOSE: Panic during CBC-HMAC processing",
        "url": "https://github.com/advisories/GHSA-4w3g-jfj2-cw2q",
        "version": "v4.1.4"
      },
      {
        "aliases": [
          "CVE-2026-116586"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-116586",
          "percentile": 0.21769,
          "score": 0.00292
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.5"
        ],
        "id": "GHSA-vvm8-gf78-28g4",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-jose/go-jose/v4",
        "severity": "Medium",
        "summary": "Go JOSE: Panics in JSON parsing",
        "url": "https://github.com/advisories/GHSA-vvm8-gf78-28g4",
        "version": "v4.1.4"
      },
      {
        "aliases": [],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-5932",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "Unknown",
        "summary": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained f",
        "url": "https://go.dev/issue/44226",
        "version": "v0.57.0"
      },
      {
        "aliases": [
          "CVE-2026-78661"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78661",
          "percentile": 0.08063,
          "score": 0.00185
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6860",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") cau",
        "url": "https://go.dev/cl/849365",
        "version": "v0.60.0"
      },
      {
        "aliases": [
          "CVE-2026-97045"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97045",
          "percentile": 0.10117,
          "score": 0.00202
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6866",
        "kev": null,
        "location": "go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> f",
        "url": "https://go.dev/cl/855121",
        "version": "v0.60.0"
      }
    ],
    "workflow_audit": {
      "files": 11,
      "findings": [
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yml",
          "line": 9,
          "note": "contents: write is overly broad at the workflow level",
          "rule": "excessive-permissions",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yml",
          "line": 10,
          "note": "packages: write is overly broad at the workflow level",
          "rule": "excessive-permissions",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/release.yml",
          "line": 11,
          "note": "id-token: write is overly broad at the workflow level",
          "rule": "excessive-permissions",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/performance.yml",
          "line": 6,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/secrets.yml",
          "line": 13,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/secrets.yml",
          "line": 22,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}