{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:87a71ebb-7f1d-4cfa-8d68-e3a93803c914","version":1,"metadata":{"timestamp":"2026-11-02T03:07:02Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"eb984a1cee6aeced","type":"file","name":"Checkmarx/kics","version":"v2.2.0"}},"components":[{"bom-ref":"f76925a05ed64e52","type":"library","name":"./.github/workflows/run-projects.yaml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/run-projects.yaml:.\\/.github\\/workflows\\/run-projects.yaml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run-projects.yaml:.\\/.github\\/workflows\\/run_projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run_projects.yaml:.\\/.github\\/workflows\\/run-projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run_projects.yaml:.\\/.github\\/workflows\\/run_projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run:.\\/.github\\/workflows\\/run-projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run:.\\/.github\\/workflows\\/run_projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cesar.yaml"}]},{"bom-ref":"ab1b3b3e61e0e324","type":"library","name":"./.github/workflows/run-projects.yaml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/run-projects.yaml:.\\/.github\\/workflows\\/run-projects.yaml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run-projects.yaml:.\\/.github\\/workflows\\/run_projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run_projects.yaml:.\\/.github\\/workflows\\/run-projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run_projects.yaml:.\\/.github\\/workflows\\/run_projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run:.\\/.github\\/workflows\\/run-projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/run:.\\/.github\\/workflows\\/run_projects.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-projects.yaml"}]},{"bom-ref":"pkg:github/sonarsource/sonarqube-scan-action@v8.2.1?package-id=782e2399a2456f4b","type":"library","name":"SonarSource/sonarqube-scan-action","version":"v8.2.1","cpe":"cpe:2.3:a:SonarSource\\/sonarqube-scan-action:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*","purl":"pkg:github/SonarSource/sonarqube-scan-action@v8.2.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube-scan-action:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube_scan_action:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube_scan_action:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube-scan:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube-scan:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube_scan:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube_scan:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sonarcloud-scan-branch.yml"}]},{"bom-ref":"pkg:github/sonarsource/sonarqube-scan-action@v8.2.1?package-id=81a1fdc3b9ec274f","type":"library","name":"SonarSource/sonarqube-scan-action","version":"v8.2.1","cpe":"cpe:2.3:a:SonarSource\\/sonarqube-scan-action:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*","purl":"pkg:github/SonarSource/sonarqube-scan-action@v8.2.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube-scan-action:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube_scan_action:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube_scan_action:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube-scan:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube-scan:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube_scan:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube_scan:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube:SonarSource\\/sonarqube-scan-action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:SonarSource\\/sonarqube:SonarSource\\/sonarqube_scan_action:v8.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sonarcloud.yml"}]},{"bom-ref":"pkg:github/actions/cache@v4.2.3?package-id=2a9abf8e12137ba8","type":"library","name":"actions/cache","version":"v4.2.3","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v4.2.3:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v4.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-integration.yml"}]},{"bom-ref":"pkg:github/actions/cache@v4.2.3?package-id=e87d4d701c415753","type":"library","name":"actions/cache","version":"v4.2.3","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v4.2.3:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v4.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/actions/cache@v4.2.3?package-id=cdad54a3f8493b09","type":"library","name":"actions/cache","version":"v4.2.3","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v4.2.3:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v4.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e-debian.yaml"}]},{"bom-ref":"pkg:github/actions/cache@v4.2.3?package-id=d792bbda918edd6c","type":"library","name":"actions/cache","version":"v4.2.3","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v4.2.3:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v4.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e.yaml"}]},{"bom-ref":"pkg:github/actions/cache@v4.2.3?package-id=acdad2788e469b62","type":"library","name":"actions/cache","version":"v4.2.3","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v4.2.3:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v4.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-test-race.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=7658c7791f131663","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/alert-update-flags.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=f44a9e86e099fa2b","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/alert-update-terraform-modules.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=04f9ae9de7f1bed7","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/cesar.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=9e62b6a8b65b78a0","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/check-apache-license.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=8e112e1566e4398d","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/check-go-coverage.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=3b8a75f3a79519c7","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-projects.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=b6fe63d92b72f7ff","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-coverage.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=d3fca823aeaf7505","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-integration.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=bd4ea0090e1659c0","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-metrics.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=92b5f3dc60eddd02","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=024d698f5fc4a4d4","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e-debian.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=667c5e1b9c4d4a22","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=9bd215e9187c571e","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-generate-antlr-parser.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=d6867f5d31ae502d","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-test-race.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=9a33b5b2759c2349","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/kics-gh-action.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=7f27bc5e3df2b5c9","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/mkdocs.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=0f2aa73de0adc3df","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/prepare-release.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=3caaf80f3c382740","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release-commits.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=7f5517eec428acf8","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release-dkr-image.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=3d3dc96a60952e41","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release-extract-info.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=e811fd7a7b2d50b1","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/run-projects.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=02b800288a51c7d1","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=8df5f5b472148ca5","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/sonarcloud-scan-branch.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=22e399d61569791a","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/sonarcloud.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=75d7ac8f48b31dff","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/statistics.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=9d70227d03d9c945","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/update-docs-queries.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=c20fe4c165e55a83","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/update-docs-release.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=2bb8e1b287983b7c","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-ansible-samples.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=c2f2396e5cb6f73b","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-arm-samples.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=508314e9618bb199","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-cfn-samples.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=f56850090658e71f","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-dkr-samples.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=7740d3b72af58ca0","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-issues.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=5ceeb4e30d2ebb2b","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-k8s-samples.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=0d22c62e4b48a53e","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-openapi-samples.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=56cf8ba4ceacd0ee","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-prs.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=0479f704fade2169","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-queries-metadata.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6.0.2?package-id=4f645215d34ff096","type":"library","name":"actions/checkout","version":"v6.0.2","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-tf-samples.yml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=dc42a29d8e3fa5d6","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-coverage.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=f81983fcc4daf494","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-metrics.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=a89110f6db04f8bb","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/run-projects.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5.0.0?package-id=36630708cc0133c4","type":"library","name":"actions/setup-go","version":"v5.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cesar.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5.0.0?package-id=73a877a2e083568a","type":"library","name":"actions/setup-go","version":"v5.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-projects.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5.0.0?package-id=b416dcc47b180ea7","type":"library","name":"actions/setup-go","version":"v5.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/run-projects.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5.6.0?package-id=3c7c5444eae62d34","type":"library","name":"actions/setup-go","version":"v5.6.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5.6.0?package-id=30edc386875e12f9","type":"library","name":"actions/setup-go","version":"v5.6.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-test-race.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5.6.0?package-id=db7401d4b1b0dd55","type":"library","name":"actions/setup-go","version":"v5.6.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v6.3.0?package-id=82737f5b29290991","type":"library","name":"actions/setup-go","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/check-go-coverage.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v6.3.0?package-id=9d1adc39c71ea591","type":"library","name":"actions/setup-go","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-coverage.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v6.3.0?package-id=746379135f75a82b","type":"library","name":"actions/setup-go","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e-debian.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v6.3.0?package-id=c4f2b09c24ef4911","type":"library","name":"actions/setup-go","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v6.3.0?package-id=2056d11b3972decf","type":"library","name":"actions/setup-go","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-commits.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v6.3.0?package-id=b9ff37a86a627a21","type":"library","name":"actions/setup-go","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v6.3.0?package-id=1598bc3f94c94295","type":"library","name":"actions/setup-go","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/statistics.yaml"}]},{"bom-ref":"pkg:github/actions/setup-node@v6.3.0?package-id=9db5067815a831ad","type":"library","name":"actions/setup-node","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-node@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e-debian.yaml"}]},{"bom-ref":"pkg:github/actions/setup-node@v6.3.0?package-id=69eabf8f92620d1f","type":"library","name":"actions/setup-node","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-node@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e.yaml"}]},{"bom-ref":"pkg:github/actions/setup-node@v6.3.0?package-id=7942f6373c60943c","type":"library","name":"actions/setup-node","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-node@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-arm-samples.yaml"}]},{"bom-ref":"pkg:github/actions/setup-node@v6.3.0?package-id=4ee4016b60ae315a","type":"library","name":"actions/setup-node","version":"v6.3.0","cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-node@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_node:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-openapi-samples.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5.6.0?package-id=d2fce0a42059598d","type":"library","name":"actions/setup-python","version":"v5.6.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/mkdocs.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5.6.0?package-id=d59ae7e507667af0","type":"library","name":"actions/setup-python","version":"v5.6.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-cfn-samples.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5.6.0?package-id=206d784cea8a2c63","type":"library","name":"actions/setup-python","version":"v5.6.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-issues.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5.6.0?package-id=e8552f49d91c03ca","type":"library","name":"actions/setup-python","version":"v5.6.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-prs.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=1397ac3a7f8ba2e9","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-metrics.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=2ee3a264e166ffbc","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=cac0945e17b6f0e5","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-commits.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=d5a2ecf5d1d80bb1","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-extract-info.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=1ad6173f06edbb52","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/statistics.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=0900009662a79310","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/update-docs-queries.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=74f57687aaa7a18f","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/update-docs-release.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=65f7757eea0a3897","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-issues.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6.2.0?package-id=204818c5613e3b57","type":"library","name":"actions/setup-python","version":"v6.2.0","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-prs.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=c99b0c2059661df9","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cesar.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=bd348ec9411292d2","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-projects.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=b6bdf6e22eb52b34","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-coverage.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=3ffad4085e9091c1","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-integration.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=856bae8ae6addfdf","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-metrics.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=b6bddd7297e6d27e","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=abfa867c3a253384","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e-debian.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=306e542cc3c45ff8","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=dad5bd3c5fb5cd57","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-test-race.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=26278edd50ca231b","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/kics-gh-action.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4.6.2?package-id=159100bcd6221835","type":"library","name":"actions/upload-artifact","version":"v4.6.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/al-cheb/configure-pagefile-action@v1.4?package-id=4757d5ba7c657ff9","type":"library","name":"al-cheb/configure-pagefile-action","version":"v1.4","cpe":"cpe:2.3:a:al-cheb\\/configure-pagefile-action:al-cheb\\/configure-pagefile-action:v1.4:*:*:*:*:*:*:*","purl":"pkg:github/al-cheb/configure-pagefile-action@v1.4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:al-cheb\\/configure-pagefile-action:al_cheb\\/configure_pagefile_action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al_cheb\\/configure_pagefile_action:al-cheb\\/configure-pagefile-action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al_cheb\\/configure_pagefile_action:al_cheb\\/configure_pagefile_action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al-cheb\\/configure-pagefile:al-cheb\\/configure-pagefile-action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al-cheb\\/configure-pagefile:al_cheb\\/configure_pagefile_action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al_cheb\\/configure_pagefile:al-cheb\\/configure-pagefile-action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al_cheb\\/configure_pagefile:al_cheb\\/configure_pagefile_action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al-cheb\\/configure:al-cheb\\/configure-pagefile-action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al-cheb\\/configure:al_cheb\\/configure_pagefile_action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al_cheb\\/configure:al-cheb\\/configure-pagefile-action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al_cheb\\/configure:al_cheb\\/configure_pagefile_action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al:al-cheb\\/configure-pagefile-action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:al:al_cheb\\/configure_pagefile_action:v1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/anchore/scan-action@7.4.0?package-id=50fc8c75f0a86682","type":"library","name":"anchore/scan-action","version":"7.4.0","cpe":"cpe:2.3:a:anchore\\/scan-action:anchore\\/scan-action:7.4.0:*:*:*:*:*:*:*","purl":"pkg:github/anchore/scan-action@7.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan-action:anchore\\/scan_action:7.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan_action:anchore\\/scan-action:7.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan_action:anchore\\/scan_action:7.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan:anchore\\/scan-action:7.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan:anchore\\/scan_action:7.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/aquasecurity/trivy-action@v0.35.0?package-id=b9c4b28adaff5803","type":"library","name":"aquasecurity/trivy-action","version":"v0.35.0","cpe":"cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy-action:v0.35.0:*:*:*:*:*:*:*","purl":"pkg:github/aquasecurity/trivy-action@v0.35.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy_action:v0.35.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy-action:v0.35.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy_action:v0.35.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy-action:v0.35.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy_action:v0.35.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/aquasecurity/trivy-action@v0.36.0?package-id=130c3bee80185a05","type":"library","name":"aquasecurity/trivy-action","version":"v0.36.0","cpe":"cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*","purl":"pkg:github/aquasecurity/trivy-action@v0.36.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/aws-actions/configure-aws-credentials@v6.1.0?package-id=1189f982ebedd921","type":"library","name":"aws-actions/configure-aws-credentials","version":"v6.1.0","cpe":"cpe:2.3:a:aws-actions\\/configure-aws-credentials:aws-actions\\/configure-aws-credentials:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/aws-actions/configure-aws-credentials@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws-actions\\/configure-aws-credentials:aws_actions\\/configure_aws_credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws_actions\\/configure_aws_credentials:aws-actions\\/configure-aws-credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws_actions\\/configure_aws_credentials:aws_actions\\/configure_aws_credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws-actions\\/configure-aws:aws-actions\\/configure-aws-credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws-actions\\/configure-aws:aws_actions\\/configure_aws_credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws_actions\\/configure_aws:aws-actions\\/configure-aws-credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws_actions\\/configure_aws:aws_actions\\/configure_aws_credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws-actions\\/configure:aws-actions\\/configure-aws-credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws-actions\\/configure:aws_actions\\/configure_aws_credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws_actions\\/configure:aws-actions\\/configure-aws-credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws_actions\\/configure:aws_actions\\/configure_aws_credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws-actions\\/configure-aws-credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_actions\\/configure_aws_credentials:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/run-projects.yaml"}]},{"bom-ref":"pkg:golang/cel.dev/expr@v0.25.2?package-id=50296d5ce895996f","type":"library","name":"cel.dev/expr","version":"v0.25.2","purl":"pkg:golang/cel.dev/expr@v0.25.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:K6j46C81hXtZQfuX60cVWQFBJahKSE2gfRbNuvr5bFs="}]},{"bom-ref":"pkg:github/checkmarx/harden-runner-action@v2.20.0?package-id=2db89754e03d76b6","type":"library","name":"checkmarx/harden-runner-action","version":"v2.20.0","cpe":"cpe:2.3:a:checkmarx\\/harden-runner-action:checkmarx\\/harden-runner-action:v2.20.0:*:*:*:*:*:*:*","purl":"pkg:github/checkmarx/harden-runner-action@v2.20.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden-runner-action:checkmarx\\/harden_runner_action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden_runner_action:checkmarx\\/harden-runner-action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden_runner_action:checkmarx\\/harden_runner_action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden-runner:checkmarx\\/harden-runner-action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden-runner:checkmarx\\/harden_runner_action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden_runner:checkmarx\\/harden-runner-action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden_runner:checkmarx\\/harden_runner_action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden:checkmarx\\/harden-runner-action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/harden:checkmarx\\/harden_runner_action:v2.20.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/checkmarx/kics-github-action@v2.1.20?package-id=127a4a6f9238e569","type":"library","name":"checkmarx/kics-github-action","version":"v2.1.20","cpe":"cpe:2.3:a:checkmarx\\/kics-github-action:checkmarx\\/kics-github-action:v2.1.20:*:*:*:*:*:*:*","purl":"pkg:github/checkmarx/kics-github-action@v2.1.20","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics-github-action:checkmarx\\/kics_github_action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics_github_action:checkmarx\\/kics-github-action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics_github_action:checkmarx\\/kics_github_action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics-github:checkmarx\\/kics-github-action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics-github:checkmarx\\/kics_github_action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics_github:checkmarx\\/kics-github-action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics_github:checkmarx\\/kics_github_action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics:checkmarx\\/kics-github-action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:checkmarx\\/kics:checkmarx\\/kics_github_action:v2.1.20:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/kics-gh-action.yaml"}]},{"bom-ref":"pkg:golang/cloud.google.com/go@v0.123.0?package-id=419b179104eb109e","type":"library","name":"cloud.google.com/go","version":"v0.123.0","purl":"pkg:golang/cloud.google.com/go@v0.123.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth@v0.18.2?package-id=d9479876cbb4fd5b","type":"library","name":"cloud.google.com/go/auth","version":"v0.18.2","cpe":"cpe:2.3:a:go:auth:v0.18.2:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth@v0.18.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+Nbt5Ev0xEqxlNjd6c+yYUeosQ5TtEUaNcN/3FozlaM="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=db9b423947e22092","type":"library","name":"cloud.google.com/go/auth/oauth2adapt","version":"v0.2.8","cpe":"cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=c14bc92e6fc464c8","type":"library","name":"cloud.google.com/go/compute/metadata","version":"v0.9.0","cpe":"cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/iam@v1.5.3?package-id=b4923e6f49b49065","type":"library","name":"cloud.google.com/go/iam","version":"v1.5.3","cpe":"cpe:2.3:a:go:iam:v1.5.3:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/iam@v1.5.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+vMINPiDF2ognBJ97ABAYYwRgsaqxPbQDlMnbHMjolc="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/monitoring@v1.24.3?package-id=1d4ab1717e31cb94","type":"library","name":"cloud.google.com/go/monitoring","version":"v1.24.3","cpe":"cpe:2.3:a:go:monitoring:v1.24.3:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/monitoring@v1.24.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dde+gMNc0UhPZD1Azu6at2e79bfdztVDS5lvhOdsgaE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/storage@v1.61.3?package-id=ace21e71099592e0","type":"library","name":"cloud.google.com/go/storage","version":"v1.61.3","cpe":"cpe:2.3:a:go:storage:v1.61.3:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/storage@v1.61.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VS//ZfBuPGDvakfD9xyPW1RGF1Vy3BWUoVZXgW1KMOg="}]},{"bom-ref":"pkg:golang/code.cloudfoundry.org/bytefmt@v0.35.0?package-id=7f3e0bce531c2bd8","type":"library","name":"code.cloudfoundry.org/bytefmt","version":"v0.35.0","purl":"pkg:golang/code.cloudfoundry.org/bytefmt@v0.35.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZbGfHvOzJLpgC+N1Uy7duYmrRpvMkOC8gLqpfGWlNp8="}]},{"bom-ref":"pkg:golang/dario.cat/mergo@v1.0.1?package-id=c918163fc2b8b714","type":"library","name":"dario.cat/mergo","version":"v1.0.1","purl":"pkg:golang/dario.cat/mergo@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ra4+bf83h2ztPIQYNP99R6m+Y7KfnARDfID+a+vLl4s="}]},{"bom-ref":"pkg:github/docker/metadata-action@v6.1.0?package-id=8b9a5b55abfd6737","type":"library","name":"docker/metadata-action","version":"v6.1.0","cpe":"cpe:2.3:a:docker\\/metadata-action:docker\\/metadata-action:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/metadata-action@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata-action:docker\\/metadata_action:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata_action:docker\\/metadata-action:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata_action:docker\\/metadata_action:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata:docker\\/metadata-action:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata:docker\\/metadata_action:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-dkr-image.yml"}]},{"bom-ref":"pkg:golang/filippo.io/edwards25519@v1.1.1?package-id=ffe5ddb563418634","type":"library","name":"filippo.io/edwards25519","version":"v1.1.1","purl":"pkg:golang/filippo.io/edwards25519@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YpjwWWlNmGIDyXOn8zLzqiD+9TyIlPhGFG96P39uBpw="}]},{"bom-ref":"pkg:golang/github.com/azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c?package-id=68160b5e3e26edbb","type":"library","name":"github.com/Azure/go-ansiterm","version":"v0.0.0-20250102033503-faa5f7b0171c","cpe":"cpe:2.3:a:Azure:go-ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:udKWzYgxTojEKWjV8V+WSxDXJ4NFATAsZjh8iIbsQIg="}]},{"bom-ref":"pkg:golang/github.com/burntsushi/toml@v1.6.0?package-id=6d8d86ef9fe513ea","type":"library","name":"github.com/BurntSushi/toml","version":"v1.6.0","cpe":"cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/BurntSushi/toml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.33.0?package-id=0af171990b46e990","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp","version":"v1.33.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.33.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:l7+6kwRMJNwdCvYdDl7Eax+wzEYHSnNY7zrrfbhDdTA="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.56.0?package-id=7b7b7bb93a8a1504","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric","version":"v0.56.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.56.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.56.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.56.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O2sXMyJh8b7devAGdE+163xtRurt0RVpB6DIzX5vGfg="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.56.0?package-id=4ffa8a2ed43b6d20","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping","version":"v0.56.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.56.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.56.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.56.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0YP0+/ixwu+Uqeu/FGiBZNQ19huiUxxiPXIc9WsLKuQ="}]},{"bom-ref":"pkg:golang/github.com/makenowjust/heredoc@v1.0.0?package-id=9f66f4cc4bc4d2ef","type":"library","name":"github.com/MakeNowJust/heredoc","version":"v1.0.0","cpe":"cpe:2.3:a:MakeNowJust:heredoc:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/MakeNowJust/heredoc@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ="}]},{"bom-ref":"pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=4a60e6f3f9cac2b0","type":"library","name":"github.com/Masterminds/goutils","version":"v1.1.1","cpe":"cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/Masterminds/goutils@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI="}]},{"bom-ref":"pkg:golang/github.com/masterminds/semver/v3@v3.5.0?package-id=bb0aa2b6ed288b02","type":"library","name":"github.com/Masterminds/semver/v3","version":"v3.5.0","cpe":"cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/semver/v3@v3.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kQceYJfbupGfZOKZQg0kou0DgAKhzDg2NZPAwZ/2OOE="}]},{"bom-ref":"pkg:golang/github.com/masterminds/sprig/v3@v3.3.0?package-id=17921bc3f2f4444b","type":"library","name":"github.com/Masterminds/sprig/v3","version":"v3.3.0","cpe":"cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe3tPhs="}]},{"bom-ref":"pkg:golang/github.com/masterminds/squirrel@v1.5.4?package-id=b55eaecca1f313ce","type":"library","name":"github.com/Masterminds/squirrel","version":"v1.5.4","cpe":"cpe:2.3:a:Masterminds:squirrel:v1.5.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/squirrel@v1.5.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uUcX/aBc8O7Fg9kaISIUsHXdKuqehiXAMQTYX8afzqM="}]},{"bom-ref":"pkg:golang/github.com/vividcortex/ewma@v1.2.0?package-id=fbf2080ce02e4323","type":"library","name":"github.com/VividCortex/ewma","version":"v1.2.0","cpe":"cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/VividCortex/ewma@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f58SaIzcDXrSy3kWaHNvuJgJ3Nmz59Zji6XoJR/q1ow="}]},{"bom-ref":"pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=64d88b1cfcc4917a","type":"library","name":"github.com/agext/levenshtein","version":"v1.2.3","cpe":"cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/agext/levenshtein@v1.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo="}]},{"bom-ref":"pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=faf4ac442ab1d72e","type":"library","name":"github.com/agnivade/levenshtein","version":"v1.2.1","cpe":"cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/agnivade/levenshtein@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="}]},{"bom-ref":"pkg:golang/github.com/alexmullins/zip@v0.0.0-20180717182244-4affb64b04d0?package-id=b6fdbe914f3a5247","type":"library","name":"github.com/alexmullins/zip","version":"v0.0.0-20180717182244-4affb64b04d0","cpe":"cpe:2.3:a:alexmullins:zip:v0.0.0-20180717182244-4affb64b04d0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alexmullins/zip@v0.0.0-20180717182244-4affb64b04d0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BVts5dexXf4i+JX8tXlKT0aKoi38JwTXSe+3WUneX0k="}]},{"bom-ref":"pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.1?package-id=c4b83ef3d4f3b430","type":"library","name":"github.com/antlr4-go/antlr/v4","version":"v4.13.1","cpe":"cpe:2.3:a:antlr4-go:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:antlr4_go:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:antlr4:antlr\\/v4:v4.13.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ="}]},{"bom-ref":"pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0?package-id=e406d1260ec16639","type":"library","name":"github.com/apparentlymart/go-textseg/v15","version":"v15.0.0","cpe":"cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uYvfpb3DyLSCGWnctWKGj857c6ew1u1fNQOlOtuGxQY="}]},{"bom-ref":"pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=cb662d351fd52534","type":"library","name":"github.com/asaskevich/govalidator","version":"v0.0.0-20230301143203-a9d515a09cc2","cpe":"cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=712142717d0223dc","type":"library","name":"github.com/aws/aws-sdk-go-v2","version":"v1.42.0","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2:v1.42.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2:v1.42.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XvXMJTkFQtpBKIWZnmr9ZEOc2InWM2yldjXEJ/bymhA="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.13?package-id=c273eb56312cc52e","type":"library","name":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","version":"v1.7.13","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.13:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.13","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:p1BBrg/Hhp6uK7zpejeI8QFXHJeC/mynzi04Sl03k9g="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.24?package-id=fdae809e19f03de3","type":"library","name":"github.com/aws/aws-sdk-go-v2/config","version":"v1.32.24","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aEDEj533yGdVvEHfkCY0D/1FbDrjnZr4pIulxRjqpHs="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.23?package-id=62e47df9331a88e9","type":"library","name":"github.com/aws/aws-sdk-go-v2/credentials","version":"v1.19.23","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.23:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.23","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.23:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Zhu3GOpRCkNjtE/gJpuPDsytSnaCCTQk8neAGsgzG5Y="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=a666ef039daf39e3","type":"library","name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","version":"v1.18.29","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:r6qZHbT+wxgWO/e9vYNUEtg7lv5+UN3pRqKhLXvnArg="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=42396ccca91c1c84","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/configsources","version":"v1.4.29","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f3vKqSo13fhTYb+JEcXwXefZQE26I1FB5eTSniU67ko="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=b2673d35b191c58e","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","version":"v2.7.29","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RdwIf/CuUsvJX3RgJagbOyotl/cxoLY4xviKuE7p2GY="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=b39df44802990f79","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/v4a","version":"v1.4.30","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VTGy885W5DKBxWRUJbym9hytNaYzsyaPkCHGRRMAOhU="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=03d9f670540a01da","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding","version":"v1.13.12","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZD2+BSw9vFsNlKYIasSNt3uDbjqqXIBcM13UJv/Lx2k="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.22?package-id=52e46aaaf5bfe3b8","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/checksum","version":"v1.9.22","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.9.22:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.22","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.9.22:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:V51LGlOq/1VsDsHUdoklAQi7rMmx4qQubvFYAlP2254="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=72c60cc5003d21bc","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","version":"v1.13.29","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.29:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DRebniUGZ2MqiiIVmQJ04vIXr918hubdHMnarSLEWyU="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.29?package-id=358aa3b34938fe89","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/s3shared","version":"v1.19.29","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.29:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.29","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hiME6pBzC7OTl9LMtlyTWBuEl1f4QBcUmFDKC7MLXtc="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.103.3?package-id=f6d783f15c3da891","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/s3","version":"v1.103.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.103.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.103.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.103.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JRseEu/vIDMaWis4bSw0QbXL+cvIGc1XnX076H5ZXLE="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.1.5?package-id=3b39deaac4468315","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/signin","version":"v1.1.5","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.1.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.1.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.1.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6Xt6Ztjkwdia/7EtEaG7ki/qZUYlCcd7tGUotQed1QE="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=bd9c60668d0f7dc5","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/sso","version":"v1.31.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ey1XLTYXb9PcLt4535632o5kCGXNXEhNb620Dqwuylo="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=1854b683aa2d66ae","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","version":"v1.36.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yLr03zQE/5Eu5l3QU0Si+xMbLMbSDF2YXsigqXngs6g="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=3351560031fb9a08","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/sts","version":"v1.43.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VrIhKRCSK1umelSgB9RghvA9RTUYeQffyAS5ApXehNI="}]},{"bom-ref":"pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=2935ab500c0dcb5b","type":"library","name":"github.com/aws/smithy-go","version":"v1.27.2","cpe":"cpe:2.3:a:aws:smithy-go:v1.27.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/smithy-go@v1.27.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:smithy_go:v1.27.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y9NPmSE6am6LjEFPfqHqG/jJk7AauQvhCJONKh7kpzk="}]},{"bom-ref":"pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=4b7f4d17e7911c1a","type":"library","name":"github.com/beorn7/perks","version":"v1.0.1","cpe":"cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/beorn7/perks@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="}]},{"bom-ref":"pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d?package-id=3f2fc36fc7257f16","type":"library","name":"github.com/bgentry/go-netrc","version":"v0.0.0-20140422174119-9fd32a8b3d3d","cpe":"cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xDfNPAt8lFiC1UJrqV3uuy861HCTo708pDMbjHHdCas="}]},{"bom-ref":"pkg:golang/github.com/bigkevmcd/go-configparser@v0.0.0-20230427073640-c6b631f70126?package-id=25c8e4fb18c0015f","type":"library","name":"github.com/bigkevmcd/go-configparser","version":"v0.0.0-20230427073640-c6b631f70126","cpe":"cpe:2.3:a:bigkevmcd:go-configparser:v0.0.0-20230427073640-c6b631f70126:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bigkevmcd/go-configparser@v0.0.0-20230427073640-c6b631f70126","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:bigkevmcd:go_configparser:v0.0.0-20230427073640-c6b631f70126:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uru++pUKoS/yYU3Ohq9VItZdK/cT7FFJH/UUjOlxc+s="}]},{"bom-ref":"pkg:golang/github.com/blang/semver/v4@v4.0.0?package-id=1a04b1646ddf95dd","type":"library","name":"github.com/blang/semver/v4","version":"v4.0.0","cpe":"cpe:2.3:a:blang:semver\\/v4:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/blang/semver/v4@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM="}]},{"bom-ref":"pkg:golang/github.com/boombuler/barcode@v1.0.1?package-id=2499e34887b8a186","type":"library","name":"github.com/boombuler/barcode","version":"v1.0.1","cpe":"cpe:2.3:a:boombuler:barcode:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/boombuler/barcode@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NDBbPmhS+EqABEs5Kg3n/5ZNjy73Pz7SIV+KCeqyXcs="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/chai2010/gettext-go@v1.0.2?package-id=e34b3edc2f9c4e75","type":"library","name":"github.com/chai2010/gettext-go","version":"v1.0.2","cpe":"cpe:2.3:a:chai2010:gettext-go:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/chai2010/gettext-go@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:chai2010:gettext_go:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1Lwwip6Q2QGsAdl/ZKPCwTe9fe0CjlUbqj5bFNSjIRk="}]},{"bom-ref":"pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7?package-id=268839c5be4571df","type":"library","name":"github.com/cheggaaa/pb/v3","version":"v3.1.7","cpe":"cpe:2.3:a:cheggaaa:pb\\/v3:v3.1.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2FsIW307kt7A/rz/ZI2lvPO+v3wKazzE4K/0LtTWsOI="}]},{"bom-ref":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2?package-id=8f94fd943c978725","type":"library","name":"github.com/cncf/xds/go","version":"v0.0.0-20260202195803-dba9d589def2","cpe":"cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aBangftG7EVZoUb69Os8IaYg++6uMOdKK83QtkkvJik="}]},{"bom-ref":"pkg:golang/github.com/containerd/containerd@v1.7.35?package-id=0c6fa574f4fc5de8","type":"library","name":"github.com/containerd/containerd","version":"v1.7.35","cpe":"cpe:2.3:a:containerd:containerd:v1.7.35:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/containerd@v1.7.35","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7AU2T1qI2OdNBmKkreWZ7kASHUNFItN5Hgejd9sY938="}]},{"bom-ref":"pkg:golang/github.com/containerd/errdefs@v1.0.0?package-id=9500bbb18a20f8fd","type":"library","name":"github.com/containerd/errdefs","version":"v1.0.0","cpe":"cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/errdefs@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI="}]},{"bom-ref":"pkg:golang/github.com/containerd/log@v0.1.0?package-id=776746ff425dcb22","type":"library","name":"github.com/containerd/log","version":"v0.1.0","cpe":"cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/log@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I="}]},{"bom-ref":"pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4?package-id=4633e6ab2a608922","type":"library","name":"github.com/containerd/platforms","version":"v1.0.0-rc.4","cpe":"cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:M42JrUT4zfZTqtkUwkr0GzmUWbfyO5VO0Q5b3op97T4="}]},{"bom-ref":"pkg:golang/github.com/containerd/typeurl/v2@v2.3.0?package-id=4d8c3323d78d639c","type":"library","name":"github.com/containerd/typeurl/v2","version":"v2.3.0","cpe":"cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/typeurl/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HZHPhRWo5XMy3QGQoPrUzbW/2ckwjfweHmOwlkIrPAQ="}]},{"bom-ref":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1?package-id=60f22c630e98f3bd","type":"library","name":"github.com/cyphar/filepath-securejoin","version":"v0.6.1","cpe":"cpe:2.3:a:cyphar:filepath-securejoin:v0.6.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cyphar:filepath_securejoin:v0.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5CeZ1jPXEiYt3+Z6zqprSAgSWiggmpVyciv8syjIpVE="}]},{"bom-ref":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=e1e0f1232be39ea0","type":"library","name":"github.com/davecgh/go-spew","version":"v1.1.2-0.20180830191138-d8f796af33cc","cpe":"cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="}]},{"bom-ref":"pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.0?package-id=076e768afcc8c9ff","type":"library","name":"github.com/decred/dcrd/dcrec/secp256k1/v4","version":"v4.4.0","cpe":"cpe:2.3:a:decred:dcrd\\/dcrec\\/secp256k1\\/v4:v4.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NMZiJj8QnKe1LgsbDayM4UoHwbvwDRwnI3hwNaAHRnc="}]},{"bom-ref":"pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=fbbc9aa76747c037","type":"library","name":"github.com/emicklei/go-restful/v3","version":"v3.13.0","cpe":"cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes="}]},{"bom-ref":"pkg:golang/github.com/emicklei/proto@v1.14.0?package-id=27a23ca03f37bb94","type":"library","name":"github.com/emicklei/proto","version":"v1.14.0","cpe":"cpe:2.3:a:emicklei:proto:v1.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emicklei/proto@v1.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WYxC0OrBuuC+FUCTZvb8+fzEHdZMwLEF+OnVfZA3LXU="}]},{"bom-ref":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0?package-id=77d8e9d5a1ad9592","type":"library","name":"github.com/envoyproxy/go-control-plane/envoy","version":"v1.37.0","cpe":"cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u3riX6BoYRfF4Dr7dwSOroNfdSbEPe9Yyl09/B6wBrQ="}]},{"bom-ref":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3?package-id=08b32ee1d7cb95d6","type":"library","name":"github.com/envoyproxy/protoc-gen-validate","version":"v1.3.3","cpe":"cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MVQghNeW+LZcmXe7SY1V36Z+WFMDjpqGAGacLe2T0ds="}]},{"bom-ref":"pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible?package-id=9ebc8b7a5c68f0f5","type":"library","name":"github.com/evanphx/json-patch","version":"v5.9.11+incompatible","cpe":"cpe:2.3:a:evanphx:json-patch:v5.9.11\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/evanphx/json-patch@v5.9.11%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:evanphx:json_patch:v5.9.11\\+incompatible:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ixHHqfcGvxhWkniF1tWxBHA0yb4Z+d1UQi45df52xW8="}]},{"bom-ref":"pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11?package-id=8becd335c11df7e2","type":"library","name":"github.com/evanphx/json-patch/v5","version":"v5.9.11","cpe":"cpe:2.3:a:evanphx:json-patch\\/v5:v5.9.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:evanphx:json_patch\\/v5:v5.9.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/8HVnzMq13/3x9TPvjG08wUGqBTmZBsCWzjTM0wiaDU="}]},{"bom-ref":"pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f?package-id=0ed86f7eabab32ff","type":"library","name":"github.com/exponent-io/jsonpath","version":"v0.0.0-20210407135951-1de76d718b3f","cpe":"cpe:2.3:a:exponent-io:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/exponent-io/jsonpath@v0.0.0-20210407135951-1de76d718b3f","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponent_io:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponent:jsonpath:v0.0.0-20210407135951-1de76d718b3f:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Wl78ApPPB2Wvf/TIe2xdyJxTlb6obmF18d8QdkxNDu4="}]},{"bom-ref":"pkg:golang/github.com/fatih/color@v1.18.0?package-id=42c16c13a5380dfc","type":"library","name":"github.com/fatih/color","version":"v1.18.0","cpe":"cpe:2.3:a:fatih:color:v1.18.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fatih/color@v1.18.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=208481c695126b4d","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.0.4","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg="}]},{"bom-ref":"pkg:golang/github.com/fsnotify/fsnotify@v1.9.0?package-id=7784241df9ad0fe0","type":"library","name":"github.com/fsnotify/fsnotify","version":"v1.9.0","cpe":"cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fsnotify/fsnotify@v1.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k="}]},{"bom-ref":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=69d156e101aa4070","type":"library","name":"github.com/fxamacker/cbor/v2","version":"v2.9.0","cpe":"cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="}]},{"bom-ref":"pkg:golang/github.com/getsentry/sentry-go@v0.31.2-0.20250102155933-f2d4348b0508?package-id=7be9ac574554b2b0","type":"library","name":"github.com/getsentry/sentry-go","version":"v0.31.2-0.20250102155933-f2d4348b0508","cpe":"cpe:2.3:a:getsentry:sentry-go:v0.31.2-0.20250102155933-f2d4348b0508:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/getsentry/sentry-go@v0.31.2-0.20250102155933-f2d4348b0508","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:getsentry:sentry_go:v0.31.2-0.20250102155933-f2d4348b0508:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hVneMLWNL6QWiRvweS1eWgUN5K7kCNfq1a1wAwSuB/s="}]},{"bom-ref":"pkg:golang/github.com/go-errors/errors@v1.4.2?package-id=ee2aa43e80403f78","type":"library","name":"github.com/go-errors/errors","version":"v1.4.2","cpe":"cpe:2.3:a:go-errors:errors:v1.4.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-errors/errors@v1.4.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_errors:errors:v1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:errors:v1.4.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:J6MZopCL4uSllY1OfXM374weqZFFItUbrImctkmUxIA="}]},{"bom-ref":"pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0?package-id=d430e4649fa872e7","type":"library","name":"github.com/go-gorp/gorp/v3","version":"v3.1.0","cpe":"cpe:2.3:a:go-gorp:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-gorp/gorp/v3@v3.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_gorp:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:gorp\\/v3:v3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ItKF/Vbuj31dmV4jxA1qblpSwkl9g1typ24xoe70IGs="}]},{"bom-ref":"pkg:golang/github.com/go-ini/ini@v1.67.0?package-id=31bc95d91aa868d4","type":"library","name":"github.com/go-ini/ini","version":"v1.67.0","cpe":"cpe:2.3:a:go-ini:ini:v1.67.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-ini/ini@v1.67.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_ini:ini:v1.67.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ini:v1.67.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:z6ZrTEZqSWOTyH2FlglNbNgARyHG8oLW9gMELqKr06A="}]},{"bom-ref":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=41a8099e429d2e26","type":"library","name":"github.com/go-jose/go-jose/v4","version":"v4.1.4","cpe":"cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=1ecd2131fa62597f","type":"library","name":"github.com/go-logr/logr","version":"v1.4.3","cpe":"cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ed7921825a53d3f4","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=0221911ceb4d252e","type":"library","name":"github.com/go-openapi/jsonpointer","version":"v0.23.1","cpe":"cpe:2.3:a:go-openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonpointer:v0.23.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1HBACs7XIwR2RcmItfdSFlALhGbe6S92p0ry4d1GWg4="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=4a88fb1e16697104","type":"library","name":"github.com/go-openapi/jsonreference","version":"v0.21.6","cpe":"cpe:2.3:a:go-openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonreference@v0.21.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonreference:v0.21.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NZ5nGfnaM1n4I43Xjm1e5/M2GjOwQwndQz22uhxwD+Y="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag@v0.26.0?package-id=1608e6643bbc4fd6","type":"library","name":"github.com/go-openapi/swag","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GVDXCmfvhfu1BxiHo8/FA+BbKmhecHnG3varjON5/RI="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.0?package-id=102037c959da4f3c","type":"library","name":"github.com/go-openapi/swag/cmdutils","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/cmdutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iowihOcvq7y4egO8cOq0dmfohz6wfeQ63U1EnuhO2TU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/conv@v0.26.0?package-id=f1f56de8dd9277a3","type":"library","name":"github.com/go-openapi/swag/conv","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/conv:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/conv@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/conv:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/conv:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5yGGsPYI1ZCva93U0AoKi/iZrNhaJEjr324YVsiD89I="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.0?package-id=4363efb6c485e40d","type":"library","name":"github.com/go-openapi/swag/fileutils","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/fileutils:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/fileutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/fileutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WJoPRvsA7QRiiWluowkLJa9jaYR7FCuxmDvnCgaRRxU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.0?package-id=a2e42602eea4dee6","type":"library","name":"github.com/go-openapi/swag/jsonname","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/jsonname:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/jsonname:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/jsonname:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gV1NFX9M8avo0YSpmWogqfQISigCmpaiNci8cGECU5w="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.0?package-id=692465708ccf9b8b","type":"library","name":"github.com/go-openapi/swag/jsonutils","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/jsonutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FawFML2iAXsPqmERscuMPIHmFsoP1tOqWkxBaKNMsnA="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/loading@v0.26.0?package-id=0ca9b47c72a972df","type":"library","name":"github.com/go-openapi/swag/loading","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/loading:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/loading@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/loading:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/loading:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Apg6zaKhCJurpJer0DCxq99qwmhFddBhaMX7kilDcko="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/mangling@v0.26.0?package-id=6a3b9b38166534c2","type":"library","name":"github.com/go-openapi/swag/mangling","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/mangling:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/mangling@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/mangling:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/mangling:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Du2YC4YLA/Y5m/YKQd7AnY5qq0wRKSFZTTt8ktFaXcQ="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/netutils@v0.26.0?package-id=c7103272bcf3d75a","type":"library","name":"github.com/go-openapi/swag/netutils","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/netutils:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/netutils@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/netutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/netutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CmZp+ZT7HrmFwrC3GdGsXBq2+42T1bjKBapcqVpIs3c="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.0?package-id=945111220f4db820","type":"library","name":"github.com/go-openapi/swag/stringutils","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/stringutils:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/stringutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/stringutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qZQngLxs5s7SLijc3N2ZO+fUq2o8LjuWAASSrJuh+xg="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.26.0?package-id=a9fd043ee7a64bc4","type":"library","name":"github.com/go-openapi/swag/typeutils","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/typeutils:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/typeutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/typeutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2kdEwdiNWy+JJdOvu5MA2IIg2SylWAFuuyQIKYybfq4="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.0?package-id=c4d429e4cc117bd9","type":"library","name":"github.com/go-openapi/swag/yamlutils","version":"v0.26.0","cpe":"cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/yamlutils:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:H7O8l/8NJJQ/oiReEN+oMpnGMyt8G0hl460nRZxhLMQ="}]},{"bom-ref":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=69e67edfc2286e18","type":"library","name":"github.com/go-viper/mapstructure/v2","version":"v2.5.0","cpe":"cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="}]},{"bom-ref":"pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=7e6951e683212209","type":"library","name":"github.com/gobwas/glob","version":"v0.2.3","cpe":"cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gobwas/glob@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="}]},{"bom-ref":"pkg:golang/github.com/gocarina/gocsv@v0.0.0-20240520201108-78e41c74b4b1?package-id=252ee8e9b5c39c96","type":"library","name":"github.com/gocarina/gocsv","version":"v0.0.0-20240520201108-78e41c74b4b1","cpe":"cpe:2.3:a:gocarina:gocsv:v0.0.0-20240520201108-78e41c74b4b1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gocarina/gocsv@v0.0.0-20240520201108-78e41c74b4b1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FWNFq4fM1wPfcK40yHE5UO3RUdSNPaBC+j3PokzA6OQ="}]},{"bom-ref":"pkg:golang/github.com/goccy/go-json@v0.10.5?package-id=92463fb2dfb99ba1","type":"library","name":"github.com/goccy/go-json","version":"v0.10.5","cpe":"cpe:2.3:a:goccy:go-json:v0.10.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goccy/go-json@v0.10.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:goccy:go_json:v0.10.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4="}]},{"bom-ref":"pkg:golang/github.com/golang/mock@v1.6.0?package-id=8e7b426adeb73ad7","type":"library","name":"github.com/golang/mock","version":"v1.6.0","cpe":"cpe:2.3:a:golang:mock:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang/mock@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ErTB+efbowRARo13NNdxyJji2egdxLGQhRaY+DUumQc="}]},{"bom-ref":"pkg:golang/github.com/google/btree@v1.1.3?package-id=bc759b3b23d38a4c","type":"library","name":"github.com/google/btree","version":"v1.1.3","cpe":"cpe:2.3:a:google:btree:v1.1.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/btree@v1.1.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg="}]},{"bom-ref":"pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=879c470a8b8bf38a","type":"library","name":"github.com/google/gnostic-models","version":"v0.7.0","cpe":"cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/gnostic-models@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="}]},{"bom-ref":"pkg:golang/github.com/google/pprof@v0.0.0-20260402051712-545e8a4df936?package-id=53fe737f77e55244","type":"library","name":"github.com/google/pprof","version":"v0.0.0-20260402051712-545e8a4df936","cpe":"cpe:2.3:a:google:pprof:v0.0.0-20260402051712-545e8a4df936:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/pprof@v0.0.0-20260402051712-545e8a4df936","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EwtI+Al+DeppwYX2oXJCETMO23COyaKGP6fHVpkpWpg="}]},{"bom-ref":"pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=ac7cd253b4e1753e","type":"library","name":"github.com/google/s2a-go","version":"v0.1.9","cpe":"cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/s2a-go@v0.1.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0="}]},{"bom-ref":"pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510?package-id=0b060ec91a1d2de4","type":"library","name":"github.com/google/shlex","version":"v0.0.0-20191202100458-e7afc7fbc510","cpe":"cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.14?package-id=708b2afd2627aebc","type":"library","name":"github.com/googleapis/enterprise-certificate-proxy","version":"v0.3.14","cpe":"cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.14:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yh8ncqsbUY4shRD5dA6RlzjJaT4hi3kII+zYw8wmLb8="}]},{"bom-ref":"pkg:golang/github.com/googleapis/gax-go/v2@v2.17.0?package-id=5197b81b96832a38","type":"library","name":"github.com/googleapis/gax-go/v2","version":"v2.17.0","cpe":"cpe:2.3:a:googleapis:gax-go\\/v2:v2.17.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/gax-go/v2@v2.17.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:gax_go\\/v2:v2.17.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RksgfBpxqff0EZkDWYuz9q/uWsTVz+kf43LsZ1J6SMc="}]},{"bom-ref":"pkg:golang/github.com/gookit/color@v1.5.4?package-id=1317002b687ff42e","type":"library","name":"github.com/gookit/color","version":"v1.5.4","cpe":"cpe:2.3:a:gookit:color:v1.5.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gookit/color@v1.5.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FZmqs7XOyGgCAxmWyPslpiok1k05wmY3SJTytgvYFs0="}]},{"bom-ref":"pkg:golang/github.com/gosuri/uitable@v0.0.4?package-id=061a6374b79462eb","type":"library","name":"github.com/gosuri/uitable","version":"v0.0.4","cpe":"cpe:2.3:a:gosuri:uitable:v0.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gosuri/uitable@v0.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IG2xLKRvErL3uhY6e1BylFzG+aJiwQviDDTfOKeKTpY="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.72?package-id=44116a1338e8d972","type":"library","name":"github.com/hashicorp/aws-sdk-go-base/v2","version":"v2.0.0-beta.72","cpe":"cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.72:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.72","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.72:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vTCWu1wbdYo7PEZFem/rlr01+Un+wwVmI7wiegFdRLk="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=56b7e6360dd390d7","type":"library","name":"github.com/hashicorp/errwrap","version":"v1.1.0","cpe":"cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=912d0981a4a0e36c","type":"library","name":"github.com/hashicorp/go-cleanhttp","version":"v0.5.2","cpe":"cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-getter@v1.8.6?package-id=931e842427747489","type":"library","name":"github.com/hashicorp/go-getter","version":"v1.8.6","cpe":"cpe:2.3:a:hashicorp:go-getter:v1.8.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-getter@v1.8.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_getter:v1.8.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9sQboWULaydVphxc4S64oAI4YqpuCk7nPmvbk131ebY="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=b3d879cd60d2aaba","type":"library","name":"github.com/hashicorp/go-multierror","version":"v1.1.1","cpe":"cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-version@v1.8.0?package-id=bdaa092171c066b9","type":"library","name":"github.com/hashicorp/go-version","version":"v1.8.0","cpe":"cpe:2.3:a:hashicorp:go-version:v1.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-version@v1.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_version:v1.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KAkNb1HAiZd1ukkxDFGmokVZe1Xy9HG6NUp+bPle2i4="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/hcl@v1.0.0?package-id=965b4ad27671b41e","type":"library","name":"github.com/hashicorp/hcl","version":"v1.0.0","cpe":"cpe:2.3:a:hashicorp:hcl:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/hcl@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/hcl/v2@v2.23.0?package-id=42385e3aa5b4488f","type":"library","name":"github.com/hashicorp/hcl/v2","version":"v2.23.0","cpe":"cpe:2.3:a:hashicorp:hcl\\/v2:v2.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/hcl/v2@v2.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Fphj1/gCylPxHutVSEOf2fBOh1VE4AuLV7+kbJf3qos="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/terraform-json@v0.24.0?package-id=a79386f2d701a4fb","type":"library","name":"github.com/hashicorp/terraform-json","version":"v0.24.0","cpe":"cpe:2.3:a:hashicorp:terraform-json:v0.24.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/terraform-json@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:terraform_json:v0.24.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rUiyF+x1kYawXeRth6fKFm/MdfBS6+lW4NbeATsYz8Q="}]},{"bom-ref":"pkg:golang/github.com/huandu/xstrings@v1.5.0?package-id=0634db5052d02338","type":"library","name":"github.com/huandu/xstrings","version":"v1.5.0","cpe":"cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/huandu/xstrings@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/jmoiron/sqlx@v1.4.0?package-id=523a75deab7613ad","type":"library","name":"github.com/jmoiron/sqlx","version":"v1.4.0","cpe":"cpe:2.3:a:jmoiron:sqlx:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jmoiron/sqlx@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o="}]},{"bom-ref":"pkg:golang/github.com/johnfercher/maroto@v1.0.0?package-id=b5990122851493b5","type":"library","name":"github.com/johnfercher/maroto","version":"v1.0.0","cpe":"cpe:2.3:a:johnfercher:maroto:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/johnfercher/maroto@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yo26a/Mxj2YbHCzpIW7FypKtdvv9BdeLNHaApHwLCXU="}]},{"bom-ref":"pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=b71b97451ba45321","type":"library","name":"github.com/json-iterator/go","version":"v1.1.12","cpe":"cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/json-iterator/go@v1.1.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="}]},{"bom-ref":"pkg:golang/github.com/jung-kurt/gofpdf@v1.16.3-0.20210918000319-0c885ad36193?package-id=6a92f1c3e0aad124","type":"library","name":"github.com/jung-kurt/gofpdf","version":"v1.16.3-0.20210918000319-0c885ad36193","cpe":"cpe:2.3:a:jung-kurt:gofpdf:v1.16.3-0.20210918000319-0c885ad36193:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jung-kurt/gofpdf@v1.16.3-0.20210918000319-0c885ad36193","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jung_kurt:gofpdf:v1.16.3-0.20210918000319-0c885ad36193:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jung:gofpdf:v1.16.3-0.20210918000319-0c885ad36193:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CayMi+tPSM/E2jT9zBgpgCrLiRkAfV6Vw0qf63NCsfQ="}]},{"bom-ref":"pkg:golang/github.com/klauspost/compress@v1.18.7?package-id=e78d768123e880ae","type":"library","name":"github.com/klauspost/compress","version":"v1.18.7","cpe":"cpe:2.3:a:klauspost:compress:v1.18.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/compress@v1.18.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aUyZsS4kH3QTKurYhAOwAHxllVPnOthb3vPfnF1Ehjw="}]},{"bom-ref":"pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0?package-id=06cff04535867818","type":"library","name":"github.com/lann/builder","version":"v0.0.0-20180802200727-47ae307949d0","cpe":"cpe:2.3:a:lann:builder:v0.0.0-20180802200727-47ae307949d0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lann/builder@v0.0.0-20180802200727-47ae307949d0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SOEGU9fKiNWd/HOJuq6+3iTQz8KNCLtVX6idSoTLdUw="}]},{"bom-ref":"pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0?package-id=b38c9ea03ad0ff14","type":"library","name":"github.com/lann/ps","version":"v0.0.0-20150810152359-62de8c46ede0","cpe":"cpe:2.3:a:lann:ps:v0.0.0-20150810152359-62de8c46ede0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lann/ps@v0.0.0-20150810152359-62de8c46ede0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:P6pPBnrTSX3DEVR4fDembhRWSsG5rVo6hYhAB/ADZrk="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=467dfc2aaacc1a64","type":"library","name":"github.com/lestrrat-go/blackmagic","version":"v1.0.4","cpe":"cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/dsig@v1.0.0?package-id=f114313751794113","type":"library","name":"github.com/lestrrat-go/dsig","version":"v1.0.0","cpe":"cpe:2.3:a:lestrrat-go:dsig:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/dsig@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OE09s2r9Z81kxzJYRn07TFM9XA4akrUdoMwr0L8xj38="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0?package-id=d65a56cfe6081f49","type":"library","name":"github.com/lestrrat-go/dsig-secp256k1","version":"v1.0.0","cpe":"cpe:2.3:a:lestrrat-go:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat-go:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JpDe4Aybfl0soBvoVwjqDbp+9S1Y2OM7gcrVVMFPOzY="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=77082979d5501f35","type":"library","name":"github.com/lestrrat-go/httpcc","version":"v1.0.1","cpe":"cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1?package-id=5d52c91b65aaebd3","type":"library","name":"github.com/lestrrat-go/httprc/v3","version":"v3.0.1","cpe":"cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3n7Es68YYGZb2Jf+k//llA4FTZMl3yCwIjFIk4ubevI="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.12?package-id=c5d7d8cc80a9303f","type":"library","name":"github.com/lestrrat-go/jwx/v3","version":"v3.0.12","cpe":"cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.0.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.0.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:jwx\\/v3:v3.0.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:p25r68Y4KrbBdYjIsQweYxq794CtGCzcrc5dGzJIRjg="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/option@v1.0.1?package-id=2567932c5047a2a2","type":"library","name":"github.com/lestrrat-go/option","version":"v1.0.1","cpe":"cpe:2.3:a:lestrrat-go:option:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/option@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:option:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:option:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oAzP2fvZGQKWkvHa1/SAcFolBEca1oN+mQ7eooNBEYU="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=304fb132333f206a","type":"library","name":"github.com/lestrrat-go/option/v2","version":"v2.0.0","cpe":"cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss="}]},{"bom-ref":"pkg:golang/github.com/lib/pq@v1.12.3?package-id=6e44ce0064e1f822","type":"library","name":"github.com/lib/pq","version":"v1.12.3","cpe":"cpe:2.3:a:lib:pq:v1.12.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lib/pq@v1.12.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tTWxr2YLKwIvK90ZXEw8GP7UFHtcbTtty8zsI+YjrfQ="}]},{"bom-ref":"pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de?package-id=65c4d2ba4f8585f1","type":"library","name":"github.com/liggitt/tabwriter","version":"v0.0.0-20181228230101-89fcab3d43de","cpe":"cpe:2.3:a:liggitt:tabwriter:v0.0.0-20181228230101-89fcab3d43de:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/liggitt/tabwriter@v0.0.0-20181228230101-89fcab3d43de","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9TO3cAIGXtEhnIaL+V+BEER86oLrvS+kWobKpbJuye0="}]},{"bom-ref":"pkg:golang/github.com/mackerelio/go-osstat@v0.2.5?package-id=a9e559d2675648c3","type":"library","name":"github.com/mackerelio/go-osstat","version":"v0.2.5","cpe":"cpe:2.3:a:mackerelio:go-osstat:v0.2.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mackerelio/go-osstat@v0.2.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mackerelio:go_osstat:v0.2.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+MqTbZUhoIt4m8qzkVoXUJg1EuifwlAJSk4Yl2GXh+o="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=91942c1bb7a7c638","type":"library","name":"github.com/mattn/go-colorable","version":"v0.1.13","cpe":"cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-colorable@v0.1.13","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/scripts/report/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-colorable@v0.1.14?package-id=08b5338f302cc464","type":"library","name":"github.com/mattn/go-colorable","version":"v0.1.14","cpe":"cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-colorable@v0.1.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=19dab4793e13f14f","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.19","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.19","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/scripts/report/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.20?package-id=f4619afab7c4111c","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.20","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.20","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.16?package-id=898c0bba93674d22","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.16","cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.16:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.16","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.16:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0?package-id=a08603254284a9b5","type":"library","name":"github.com/mitchellh/copystructure","version":"v1.2.0","cpe":"cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=0eaeac14455768a2","type":"library","name":"github.com/mitchellh/go-homedir","version":"v1.1.0","cpe":"cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/go-homedir@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=e395ab6147e93076","type":"library","name":"github.com/mitchellh/go-wordwrap","version":"v1.0.1","cpe":"cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2?package-id=683fad220f58d434","type":"library","name":"github.com/mitchellh/reflectwalk","version":"v1.0.2","cpe":"cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ="}]},{"bom-ref":"pkg:golang/github.com/moby/buildkit@v0.31.1?package-id=a0b902372e5b3323","type":"library","name":"github.com/moby/buildkit","version":"v0.31.1","cpe":"cpe:2.3:a:moby:buildkit:v0.31.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/buildkit@v0.31.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j3p55abBl4kiXXPZgYX+6zWgB2aefqHXoPown12fIzU="}]},{"bom-ref":"pkg:golang/github.com/moby/term@v0.5.2?package-id=252c570f2f958b65","type":"library","name":"github.com/moby/term","version":"v0.5.2","cpe":"cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/term@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ="}]},{"bom-ref":"pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=a36fc4a176d0ee4a","type":"library","name":"github.com/modern-go/concurrent","version":"v0.0.0-20180306012644-bacd9c7ef1dd","cpe":"cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="}]},{"bom-ref":"pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=b199fcf302d10783","type":"library","name":"github.com/modern-go/reflect2","version":"v1.0.3-0.20250322232337-35a7c28c31ee","cpe":"cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="}]},{"bom-ref":"pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00?package-id=b92e03b55201aa80","type":"library","name":"github.com/monochromegane/go-gitignore","version":"v0.0.0-20200626010858-205db1a8cc00","cpe":"cpe:2.3:a:monochromegane:go-gitignore:v0.0.0-20200626010858-205db1a8cc00:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/monochromegane/go-gitignore@v0.0.0-20200626010858-205db1a8cc00","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:monochromegane:go_gitignore:v0.0.0-20200626010858-205db1a8cc00:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:n6/2gBQ3RWajuToeY6ZtZTIKv2v7ThUy5KKusIT0yc0="}]},{"bom-ref":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=2d33de0c2e03c980","type":"library","name":"github.com/munnerz/goautoneg","version":"v0.0.0-20191010083416-a7dc8b61c822","cpe":"cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="}]},{"bom-ref":"pkg:golang/github.com/open-policy-agent/opa@v1.12.3?package-id=a78f34bff9eab222","type":"library","name":"github.com/open-policy-agent/opa","version":"v1.12.3","cpe":"cpe:2.3:a:open-policy-agent:opa:v1.12.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/open-policy-agent/opa@v1.12.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent:opa:v1.12.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy:opa:v1.12.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy:opa:v1.12.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open:opa:v1.12.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qe3m/w52baKC/HJtippw+hYBUKCzuBCPjB+D5P9knfc="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=19989b5d142f3073","type":"library","name":"github.com/opencontainers/go-digest","version":"v1.0.0","cpe":"cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=10613df95c6a2b3e","type":"library","name":"github.com/opencontainers/image-spec","version":"v1.1.1","cpe":"cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="}]},{"bom-ref":"pkg:golang/github.com/pelletier/go-toml/v2@v2.3.1?package-id=046ac6e33dc86b99","type":"library","name":"github.com/pelletier/go-toml/v2","version":"v2.3.1","cpe":"cpe:2.3:a:pelletier:go-toml\\/v2:v2.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pelletier/go-toml/v2@v2.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pelletier:go_toml\\/v2:v2.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MYEvvGnQjeNkRF1qUuGolNtNExTDwct51yp7olPtrEc="}]},{"bom-ref":"pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible?package-id=d231fed63574932a","type":"library","name":"github.com/peterbourgon/diskv","version":"v2.0.1+incompatible","cpe":"cpe:2.3:a:peterbourgon:diskv:v2.0.1\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UBdAOUP5p4RWqPBg048CAvpKN+vxiaj6gdUUzhl4XmI="}]},{"bom-ref":"pkg:golang/github.com/pkg/errors@v0.9.1?package-id=2f2b4a7ce7872628","type":"library","name":"github.com/pkg/errors","version":"v0.9.1","cpe":"cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/errors@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="}]},{"bom-ref":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=63efd6ebb5d1e9e9","type":"library","name":"github.com/planetscale/vtprotobuf","version":"v0.6.1-0.20240319094008-0393e58bdf10","cpe":"cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo="}]},{"bom-ref":"pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2?package-id=687547b3b9e2c718","type":"library","name":"github.com/pmezard/go-difflib","version":"v1.0.1-0.20181226105442-5d4384ee4fb2","cpe":"cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_golang@v1.23.2?package-id=12e76b8784ec4a20","type":"library","name":"github.com/prometheus/client_golang","version":"v1.23.2","cpe":"cpe:2.3:a:prometheus:client-golang:v1.23.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_golang@v1.23.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_golang:v1.23.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_model@v0.6.2?package-id=a37501789b93a9d0","type":"library","name":"github.com/prometheus/client_model","version":"v0.6.2","cpe":"cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_model@v0.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk="}]},{"bom-ref":"pkg:golang/github.com/prometheus/common@v0.67.5?package-id=9066a0e611d37b18","type":"library","name":"github.com/prometheus/common","version":"v0.67.5","cpe":"cpe:2.3:a:prometheus:common:v0.67.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/common@v0.67.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pIgK94WWlQt1WLwAC5j2ynLaBRDiinoAb86HZHTUGI4="}]},{"bom-ref":"pkg:golang/github.com/prometheus/procfs@v0.20.1?package-id=643085215170eec7","type":"library","name":"github.com/prometheus/procfs","version":"v0.20.1","cpe":"cpe:2.3:a:prometheus:procfs:v0.20.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/procfs@v0.20.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XwbrGOIplXW/AU3YhIhLODXMJYyC1isLFfYCsTEycfc="}]},{"bom-ref":"pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=ccba7952d6086b56","type":"library","name":"github.com/rcrowley/go-metrics","version":"v0.0.0-20250401214520-65e299d6c5c9","cpe":"cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rcrowley:go_metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg="}]},{"bom-ref":"pkg:golang/github.com/relex/aini@v1.6.0?package-id=8a967b64d6d3f0a7","type":"library","name":"github.com/relex/aini","version":"v1.6.0","cpe":"cpe:2.3:a:relex:aini:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/relex/aini@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iIMLsRWYtXKYS3edGz3EDpBxvLOiMAfSCUXjr4A8jbY="}]},{"bom-ref":"pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=2c0de3c260aa0d91","type":"library","name":"github.com/rivo/uniseg","version":"v0.4.7","cpe":"cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rivo/uniseg@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="}]},{"bom-ref":"pkg:golang/github.com/rs/zerolog@v1.31.0?package-id=7d5d8dd416094d43","type":"library","name":"github.com/rs/zerolog","version":"v1.31.0","cpe":"cpe:2.3:a:rs:zerolog:v1.31.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rs/zerolog@v1.31.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/.github/scripts/report/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FcTR3NnLWW+NnTwwhFWiJSZr4ECLpqCm6QsEnyvbV4A="}]},{"bom-ref":"pkg:golang/github.com/rs/zerolog@v1.34.0?package-id=86dc0ff5b772a4c2","type":"library","name":"github.com/rs/zerolog","version":"v1.34.0","cpe":"cpe:2.3:a:rs:zerolog:v1.34.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rs/zerolog@v1.34.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:k43nTLIwcTVQAncfCw4KZ2VY6ukYoZaBPNOE8txlOeY="}]},{"bom-ref":"pkg:golang/github.com/rubenv/sql-migrate@v1.8.1?package-id=ce17378e26bd7a66","type":"library","name":"github.com/rubenv/sql-migrate","version":"v1.8.1","cpe":"cpe:2.3:a:rubenv:sql-migrate:v1.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rubenv/sql-migrate@v1.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rubenv:sql_migrate:v1.8.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EPNwCvjAowHI3TnZ+4fQu3a915OpnQoPAjTXCGOy2U0="}]},{"bom-ref":"pkg:golang/github.com/russross/blackfriday/v2@v2.1.0?package-id=322467568497145e","type":"library","name":"github.com/russross/blackfriday/v2","version":"v2.1.0","cpe":"cpe:2.3:a:russross:blackfriday\\/v2:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/russross/blackfriday/v2@v2.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk="}]},{"bom-ref":"pkg:golang/github.com/ruudk/golang-pdf417@v0.0.0-20201230142125-a7e3863a1245?package-id=8ea625dcb24795df","type":"library","name":"github.com/ruudk/golang-pdf417","version":"v0.0.0-20201230142125-a7e3863a1245","cpe":"cpe:2.3:a:ruudk:golang-pdf417:v0.0.0-20201230142125-a7e3863a1245:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ruudk/golang-pdf417@v0.0.0-20201230142125-a7e3863a1245","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ruudk:golang_pdf417:v0.0.0-20201230142125-a7e3863a1245:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:K1Xf3bKttbF+koVGaX5xngRIZ5bVjbmPnaxE/dR08uY="}]},{"bom-ref":"pkg:golang/github.com/sabhiram/go-gitignore@v0.0.0-20210923224102-525f6e181f06?package-id=6ead70c3e0dd9764","type":"library","name":"github.com/sabhiram/go-gitignore","version":"v0.0.0-20210923224102-525f6e181f06","cpe":"cpe:2.3:a:sabhiram:go-gitignore:v0.0.0-20210923224102-525f6e181f06:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sabhiram/go-gitignore@v0.0.0-20210923224102-525f6e181f06","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sabhiram:go_gitignore:v0.0.0-20210923224102-525f6e181f06:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OkMGxebDjyw0ULyrTYWeN0UNCCkmCWfjPnIA2W6oviI="}]},{"bom-ref":"pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=ddd1e2da24a21af5","type":"library","name":"github.com/sagikazarmark/locafero","version":"v0.11.0","cpe":"cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sagikazarmark/locafero@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc="}]},{"bom-ref":"pkg:golang/github.com/samber/lo@v1.38.1?package-id=dc8aebe5966407a9","type":"library","name":"github.com/samber/lo","version":"v1.38.1","cpe":"cpe:2.3:a:samber:lo:v1.38.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/samber/lo@v1.38.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j2XEAqXKb09Am4ebOg31SpvzUTTs6EN3VfgeLUhPdXM="}]},{"bom-ref":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2?package-id=71c58913568eda11","type":"library","name":"github.com/santhosh-tekuri/jsonschema/v6","version":"v6.0.2","cpe":"cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ="}]},{"bom-ref":"pkg:golang/github.com/segmentio/asm@v1.2.1?package-id=6e2ce7675f03c1d0","type":"library","name":"github.com/segmentio/asm","version":"v1.2.1","cpe":"cpe:2.3:a:segmentio:asm:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/segmentio/asm@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DTNbBqs57ioxAD4PrArqftgypG4/qNpXoJx8TVXxPR0="}]},{"bom-ref":"pkg:golang/github.com/shopspring/decimal@v1.4.0?package-id=19af8ea56a342c55","type":"library","name":"github.com/shopspring/decimal","version":"v1.4.0","cpe":"cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shopspring/decimal@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k="}]},{"bom-ref":"pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=f9cb0ed57e859e4c","type":"library","name":"github.com/sirupsen/logrus","version":"v1.9.4","cpe":"cpe:2.3:a:turbopuffer:logrus:v1.9.4:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/sirupsen/logrus@v1.9.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w="}]},{"bom-ref":"pkg:golang/github.com/sosedoff/ansible-vault-go@v0.2.0?package-id=470c1b1bac97a483","type":"library","name":"github.com/sosedoff/ansible-vault-go","version":"v0.2.0","cpe":"cpe:2.3:a:sosedoff:ansible-vault-go:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sosedoff/ansible-vault-go@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sosedoff:ansible_vault_go:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XqkBdqbXgTuFQ++NdrZvSdUTNozeb6S3V5x7FVs17vg="}]},{"bom-ref":"pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=cfbd747de78458fc","type":"library","name":"github.com/sourcegraph/conc","version":"v0.3.1-0.20240121214520-5f936abd7ae8","cpe":"cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw="}]},{"bom-ref":"pkg:golang/github.com/spf13/afero@v1.15.0?package-id=577ab40ea4ceaedf","type":"library","name":"github.com/spf13/afero","version":"v1.15.0","cpe":"cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/afero@v1.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="}]},{"bom-ref":"pkg:golang/github.com/spf13/cast@v1.10.0?package-id=b759ce340b0f2e0e","type":"library","name":"github.com/spf13/cast","version":"v1.10.0","cpe":"cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cast@v1.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=aaf4307e8bf5eb4c","type":"library","name":"github.com/spf13/cobra","version":"v1.10.2","cpe":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=ec9ed93888749dc0","type":"library","name":"github.com/spf13/pflag","version":"v1.0.10","cpe":"cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="}]},{"bom-ref":"pkg:golang/github.com/spf13/viper@v1.21.0?package-id=53bb8bba12e970aa","type":"library","name":"github.com/spf13/viper","version":"v1.21.0","cpe":"cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/viper@v1.21.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="}]},{"bom-ref":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=19c7011cfc5a1b62","type":"library","name":"github.com/spiffe/go-spiffe/v2","version":"v2.7.0","cpe":"cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uXe1MflJoHw58wAUvxVlcM7WpKtijWG7I1UidcGh6g4="}]},{"bom-ref":"pkg:golang/github.com/stretchr/testify@v1.11.1?package-id=2dbf9db270c468dd","type":"library","name":"github.com/stretchr/testify","version":"v1.11.1","cpe":"cpe:2.3:a:stretchr:testify:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/testify@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U="}]},{"bom-ref":"pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=2db166198c302bc1","type":"library","name":"github.com/subosito/gotenv","version":"v1.6.0","cpe":"cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/subosito/gotenv@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="}]},{"bom-ref":"pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=0c53b157306fcdd3","type":"library","name":"github.com/tchap/go-patricia/v2","version":"v2.3.3","cpe":"cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc="}]},{"bom-ref":"pkg:golang/github.com/tdewolff/minify/v2@v2.23.1?package-id=5f2e5ca2a538d5d7","type":"library","name":"github.com/tdewolff/minify/v2","version":"v2.23.1","cpe":"cpe:2.3:a:tdewolff:minify\\/v2:v2.23.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tdewolff/minify/v2@v2.23.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:r6sKQrumHzskWZRdhiRa+pZhn7CdBMojACNP9fuKpXQ="}]},{"bom-ref":"pkg:golang/github.com/tdewolff/minify/v2@v2.9.21?package-id=8f0493fe7bbca19c","type":"library","name":"github.com/tdewolff/minify/v2","version":"v2.9.21","cpe":"cpe:2.3:a:tdewolff:minify\\/v2:v2.9.21:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tdewolff/minify/v2@v2.9.21","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/.github/scripts/report/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nO4s1PEMy7aRjlIlbr3Jgr+bJby8QYuifa2Vs2f9lh4="}]},{"bom-ref":"pkg:golang/github.com/tdewolff/parse/v2@v2.5.19?package-id=a3953497bb62800c","type":"library","name":"github.com/tdewolff/parse/v2","version":"v2.5.19","cpe":"cpe:2.3:a:tdewolff:parse\\/v2:v2.5.19:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tdewolff/parse/v2@v2.5.19","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/.github/scripts/report/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Kjaj3KQOx/4elIxlBSglus4E2oMfdROphvbq2b+OBZ0="}]},{"bom-ref":"pkg:golang/github.com/tdewolff/parse/v2@v2.7.23?package-id=229f5338c834198a","type":"library","name":"github.com/tdewolff/parse/v2","version":"v2.7.23","cpe":"cpe:2.3:a:tdewolff:parse\\/v2:v2.7.23:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tdewolff/parse/v2@v2.7.23","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sCW2PNTCM1yVldh5YK/8wrpRI9rSbloUZWjAydlN2IA="}]},{"bom-ref":"pkg:golang/github.com/tidwall/gjson@v1.18.0?package-id=a21849443016379f","type":"library","name":"github.com/tidwall/gjson","version":"v1.18.0","cpe":"cpe:2.3:a:tidwall:gjson:v1.18.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/gjson@v1.18.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FIDeeyB800efLX89e5a8Y0BNH+LOngJyGrIWxG2FKQY="}]},{"bom-ref":"pkg:golang/github.com/tidwall/match@v1.1.1?package-id=f03a8ca224ae40da","type":"library","name":"github.com/tidwall/match","version":"v1.1.1","cpe":"cpe:2.3:a:tidwall:match:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/match@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+Ho715JplO36QYgwN9PGYNhgZvoUSc9X2c80KVTi+GA="}]},{"bom-ref":"pkg:golang/github.com/tidwall/pretty@v1.2.1?package-id=fdfa75cc6c742ae7","type":"library","name":"github.com/tidwall/pretty","version":"v1.2.1","cpe":"cpe:2.3:a:tidwall:pretty:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/pretty@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4="}]},{"bom-ref":"pkg:golang/github.com/ulikunitz/xz@v0.5.15?package-id=72178d1409ff5a60","type":"library","name":"github.com/ulikunitz/xz","version":"v0.5.15","cpe":"cpe:2.3:a:ulikunitz:xz:v0.5.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ulikunitz/xz@v0.5.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9DNdB5s+SgV3bQ2ApL10xRc35ck0DuIX/isZvIk+ubY="}]},{"bom-ref":"pkg:golang/github.com/valyala/fastjson@v1.6.4?package-id=5706bbdc11e33696","type":"library","name":"github.com/valyala/fastjson","version":"v1.6.4","cpe":"cpe:2.3:a:valyala:fastjson:v1.6.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/valyala/fastjson@v1.6.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uAUNq9Z6ymTgGhcm0UynUAB6tlbakBrz6CQFax3BXVQ="}]},{"bom-ref":"pkg:golang/github.com/vektah/gqlparser/v2@v2.5.31?package-id=663f6e7a40486243","type":"library","name":"github.com/vektah/gqlparser/v2","version":"v2.5.31","cpe":"cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.31:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/vektah/gqlparser/v2@v2.5.31","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YhWGA1mfTjID7qJhd1+Vxhpk5HTgydrGU9IgkWBTJ7k="}]},{"bom-ref":"pkg:golang/github.com/x448/float16@v0.8.4?package-id=413366d78e6a286c","type":"library","name":"github.com/x448/float16","version":"v0.8.4","cpe":"cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/x448/float16@v0.8.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=8d3359a3be622488","type":"library","name":"github.com/xeipuuv/gojsonpointer","version":"v0.0.0-20190905194746-02993c407bfb","cpe":"cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=2429773a33fd3e90","type":"library","name":"github.com/xeipuuv/gojsonreference","version":"v0.0.0-20180127040603-bd5ef7bd5415","cpe":"cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?package-id=806b0d14bbdc7157","type":"library","name":"github.com/xeipuuv/gojsonschema","version":"v1.2.0","cpe":"cpe:2.3:a:xeipuuv:gojsonschema:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74="}]},{"bom-ref":"pkg:golang/github.com/xlab/treeprint@v1.2.0?package-id=2430962e156992df","type":"library","name":"github.com/xlab/treeprint","version":"v1.2.0","cpe":"cpe:2.3:a:xlab:treeprint:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xlab/treeprint@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ="}]},{"bom-ref":"pkg:golang/github.com/xo/terminfo@v0.0.0-20210125001918-ca9a967f8778?package-id=17509ec34c11e24f","type":"library","name":"github.com/xo/terminfo","version":"v0.0.0-20210125001918-ca9a967f8778","cpe":"cpe:2.3:a:xo:terminfo:v0.0.0-20210125001918-ca9a967f8778:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xo/terminfo@v0.0.0-20210125001918-ca9a967f8778","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QldyIu/L63oPpyvQmHgvgickp1Yw510KJOqX7H24mg8="}]},{"bom-ref":"pkg:golang/github.com/yargevad/filepathx@v1.0.0?package-id=ea91be9b5bb2a395","type":"library","name":"github.com/yargevad/filepathx","version":"v1.0.0","cpe":"cpe:2.3:a:yargevad:filepathx:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yargevad/filepathx@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SYcT+N3tYGi+NvazubCNlvgIPbzAk7i7y2dwg3I5FYc="}]},{"bom-ref":"pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=a435657526b949cf","type":"library","name":"github.com/yashtewari/glob-intersection","version":"v0.2.0","cpe":"cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg="}]},{"bom-ref":"pkg:golang/github.com/zclconf/go-cty@v1.16.2?package-id=85ce7852af238095","type":"library","name":"github.com/zclconf/go-cty","version":"v1.16.2","cpe":"cpe:2.3:a:zclconf:go-cty:v1.16.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/zclconf/go-cty@v1.16.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:zclconf:go_cty:v1.16.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LAJSwc3v81IRBZyUVQDUdZ7hs3SYs9jv0eZJDWHD/70="}]},{"bom-ref":"pkg:github/github/codeql-action@4c3e5362829f0b0bb62ff5f6c938d7f95574c306?package-id=c4902dd17454c3ca#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"4c3e5362829f0b0bb62ff5f6c938d7f95574c306","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@4c3e5362829f0b0bb62ff5f6c938d7f95574c306#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:4c3e5362829f0b0bb62ff5f6c938d7f95574c306:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a00544d9cf935bfa","type":"library","name":"go.opentelemetry.io/auto/sdk","version":"v1.2.1","cpe":"cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0?package-id=3dbe8fb028253bc2","type":"library","name":"go.opentelemetry.io/contrib/detectors/gcp","version":"v1.44.0","cpe":"cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NmLfL734pJhM0JKaYd2Y28+nY9dPRWYAAbxhRCrKXPw="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.69.0?package-id=86898f25c2487373","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc","version":"v0.69.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.69.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.69.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2yEATaop1/a1I4psnSLgWVPLWwCzkqWakgJy7xTDVy0="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0?package-id=afa40991728a2ca2","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","version":"v0.69.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8tvICD4vSTOOsNrsI4Ljf6C+6UKvpTEH5XY3JMoyPoo="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=458f9251810739a4","type":"library","name":"go.opentelemetry.io/otel","version":"v1.44.0","cpe":"cpe:2.3:a:opentelemetry:opentelemetry:v1.44.0:*:*:*:*:go:*:*","purl":"pkg:golang/go.opentelemetry.io/otel@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=35f7f9ed1665e42b","type":"library","name":"go.opentelemetry.io/otel/metric","version":"v1.44.0","cpe":"cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0?package-id=182b6051dc7fda66","type":"library","name":"go.opentelemetry.io/otel/sdk","version":"v1.44.0","cpe":"cpe:2.3:a:otel:sdk:v1.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nHYwb9lK+fJPU/dnT6s7W7Z8itMWyqrnVfbheVYrZ58="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.44.0?package-id=6c6a1785787b5a4d","type":"library","name":"go.opentelemetry.io/otel/sdk/metric","version":"v1.44.0","cpe":"cpe:2.3:a:otel:sdk\\/metric:v1.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3LlKgI+VjbVsjNRFZJZAJ30WjXC5VkNRks6si09iEfI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=9903b7930f5fcede","type":"library","name":"go.opentelemetry.io/otel/trace","version":"v1.44.0","cpe":"cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=1794e7f09a134d32","type":"library","name":"go.yaml.in/yaml/v2","version":"v2.4.4","cpe":"cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=ec78f89cba1c3744","type":"library","name":"go.yaml.in/yaml/v3","version":"v3.0.4","cpe":"cpe:2.3:a:yaml:v3:v3.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v3@v3.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.56.0?package-id=68d3b962d07abc2f","type":"library","name":"golang.org/x/crypto","version":"v0.56.0","cpe":"cpe:2.3:a:golang:crypto:v0.56.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.56.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y="}]},{"bom-ref":"pkg:golang/golang.org/x/exp@v0.0.0-20260603202125-055de637280b?package-id=f9edccd6aaab975e","type":"library","name":"golang.org/x/exp","version":"v0.0.0-20260603202125-055de637280b","cpe":"cpe:2.3:a:golang:x\\/exp:v0.0.0-20260603202125-055de637280b:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/exp@v0.0.0-20260603202125-055de637280b","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:v1uXiEBHo8QA0LiGCo7UgHMzHT4Kdfpl2zmtH5vaP1Q="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.40.0?package-id=d1ab57f95a820b67","type":"library","name":"golang.org/x/mod","version":"v0.40.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.40.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.40.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.58.0?package-id=f556606ebb1221ee","type":"library","name":"golang.org/x/net","version":"v0.58.0","cpe":"cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.58.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To="}]},{"bom-ref":"pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=78c10eb5d81f36d3","type":"library","name":"golang.org/x/oauth2","version":"v0.36.0","cpe":"cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/oauth2@v0.36.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.22.0?package-id=1e9b8c91e22e88f0","type":"library","name":"golang.org/x/sync","version":"v0.22.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.22.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.12.0?package-id=e72acb7e69be88c4","type":"library","name":"golang.org/x/sys","version":"v0.12.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/.github/scripts/report/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CM0HF96J0hcLAwsHPJZjfdNzs0gftsLfgKt57wWHJ0o="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.47.0?package-id=009b0ba8c25f5f40","type":"library","name":"golang.org/x/sys","version":"v0.47.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs="}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.45.0?package-id=cd7992b205dbcbfe","type":"library","name":"golang.org/x/term","version":"v0.45.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.41.0?package-id=a3883bc5333631e4","type":"library","name":"golang.org/x/text","version":"v0.41.0","cpe":"cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.41.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8="}]},{"bom-ref":"pkg:golang/golang.org/x/time@v0.15.0?package-id=d9baab7c2b8c8a86","type":"library","name":"golang.org/x/time","version":"v0.15.0","cpe":"cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/time@v0.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U="}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.49.0?package-id=1d0c1f0fc356ce03","type":"library","name":"golang.org/x/tools","version":"v0.49.0","cpe":"cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.49.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI="}]},{"bom-ref":"pkg:golang/golang.org/x/tools/godoc@v0.1.0-deprecated?package-id=cb75789330996ab9","type":"library","name":"golang.org/x/tools/godoc","version":"v0.1.0-deprecated","cpe":"cpe:2.3:a:golang:x\\/tools\\/godoc:v0.1.0-deprecated:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools/godoc@v0.1.0-deprecated","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o+aZ1BOj6Hsx/GBdJO/s815sqftjSnrZZwyYTHODvtk="}]},{"bom-ref":"pkg:golang/google.golang.org/api@v0.271.0?package-id=c93068aabbf1c367","type":"library","name":"google.golang.org/api","version":"v0.271.0","cpe":"cpe:2.3:a:google:api:v0.271.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/api@v0.271.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cIPN4qcUc61jlh7oXu6pwOQqbJW2GqYh5PS6rB2C/JY="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto@v0.0.0-20260128011058-8636f8732409?package-id=2215ca48f416c05b","type":"library","name":"google.golang.org/genproto","version":"v0.0.0-20260128011058-8636f8732409","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260128011058-8636f8732409:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto@v0.0.0-20260128011058-8636f8732409","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VQZ/yAbAtjkHgH80teYd2em3xtIkkHd7ZhqfH2N9CsM="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=88223e57ff8b226b","type":"library","name":"google.golang.org/genproto/googleapis/api","version":"v0.0.0-20260526163538-3dc84a4a5aaa","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Kjn0N0tCrDgiAFW+lGO4JZ3ck44CehvJQMAwj9QF0G8="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=efbac0b3adb6da1d","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20260526163538-3dc84a4a5aaa","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.83.2?package-id=73ac7fbf7679b398","type":"library","name":"google.golang.org/grpc","version":"v1.83.2","cpe":"cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.83.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=127a9b3f68c78786","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12-0.20260120151049-f2248ac996af","cpe":"cpe:2.3:a:google:protobuf:v1.36.12-0.20260120151049-f2248ac996af:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI="}]},{"bom-ref":"pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=54838b79820fd4c9","type":"library","name":"gopkg.in/evanphx/json-patch.v4","version":"v4.13.0","purl":"pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:czT3CmqEaQ1aanPc5SdlgQrrEIb8w/wwCvWWnfEbYzo="}]},{"bom-ref":"pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=da26a12b6ed4d20c","type":"library","name":"gopkg.in/inf.v0","version":"v0.9.1","purl":"pkg:golang/gopkg.in/inf.v0@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=716c668b92999095","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:golang/helm.sh/helm/v3@v3.21.2?package-id=1902286f05017960","type":"library","name":"helm.sh/helm/v3","version":"v3.21.2","cpe":"cpe:2.3:a:helm:v3:v3.21.2:*:*:*:*:*:*:*","purl":"pkg:golang/helm.sh/helm/v3@v3.21.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O8ktw30zQZm4tNRavKRN44rotcHICdbSU3e6gS7CCbQ="}]},{"bom-ref":"pkg:golang/k8s.io/api@v0.36.2?package-id=c44f08d7aa2dbc73","type":"library","name":"k8s.io/api","version":"v0.36.2","purl":"pkg:golang/k8s.io/api@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY="}]},{"bom-ref":"pkg:golang/k8s.io/apiextensions-apiserver@v0.36.2?package-id=802c017d8bd0cdd2","type":"library","name":"k8s.io/apiextensions-apiserver","version":"v0.36.2","purl":"pkg:golang/k8s.io/apiextensions-apiserver@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3O5gqOj/dt2XWWbpMe+TXWpE9yU6pjM/tXxtHHJT/K4="}]},{"bom-ref":"pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=a37b7b1f0ae54a3c","type":"library","name":"k8s.io/apimachinery","version":"v0.36.2","purl":"pkg:golang/k8s.io/apimachinery@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ="}]},{"bom-ref":"pkg:golang/k8s.io/apiserver@v0.36.2?package-id=fefddfa87ba41d60","type":"library","name":"k8s.io/apiserver","version":"v0.36.2","purl":"pkg:golang/k8s.io/apiserver@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6vMnkmHZPeBloNkHUhmZYq7Ylv8WIB8xjyEl+eSt26E="}]},{"bom-ref":"pkg:golang/k8s.io/cli-runtime@v0.36.2?package-id=83a278d9c6940519","type":"library","name":"k8s.io/cli-runtime","version":"v0.36.2","purl":"pkg:golang/k8s.io/cli-runtime@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CconTvEeV4DJs4ZX3HQKCFbFRGsm6OtuBM9yjmMP2VM="}]},{"bom-ref":"pkg:golang/k8s.io/client-go@v0.36.2?package-id=44953f8055b4755e","type":"library","name":"k8s.io/client-go","version":"v0.36.2","purl":"pkg:golang/k8s.io/client-go@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bfgxmFKc9CgqsgX4xKLAAdmTQlWee7Ob/HlDOrJ5TBI="}]},{"bom-ref":"pkg:golang/k8s.io/component-base@v0.36.2?package-id=82ca8d9a5d059499","type":"library","name":"k8s.io/component-base","version":"v0.36.2","purl":"pkg:golang/k8s.io/component-base@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Z0VH80O7Ng0HDZnZj3WRR3urEGa0kTwmO8CwEwjVK1w="}]},{"bom-ref":"pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=1239873eaf62af00","type":"library","name":"k8s.io/klog/v2","version":"v2.140.0","cpe":"cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*","purl":"pkg:golang/k8s.io/klog/v2@v2.140.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc="}]},{"bom-ref":"pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=c62f7cdb7602f7c3","type":"library","name":"k8s.io/kube-openapi","version":"v0.0.0-20260317180543-43fb72c5454a","purl":"pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg="}]},{"bom-ref":"pkg:golang/k8s.io/kubectl@v0.36.2?package-id=6855618ae302ccb6","type":"library","name":"k8s.io/kubectl","version":"v0.36.2","purl":"pkg:golang/k8s.io/kubectl@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rpUGGpeL09XVOLep2yle5jrtk//JA1L6ZHfkQQtVEwk="}]},{"bom-ref":"pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=ec441e3b96b1290a","type":"library","name":"k8s.io/utils","version":"v0.0.0-20260210185600-b8788abfbbc2","purl":"pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU="}]},{"bom-ref":"pkg:github/lots0logs/gh-action-get-changed-files@2.2.2?package-id=d84ed73f501953ea","type":"library","name":"lots0logs/gh-action-get-changed-files","version":"2.2.2","cpe":"cpe:2.3:a:lots0logs\\/gh-action-get-changed-files:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*","purl":"pkg:github/lots0logs/gh-action-get-changed-files@2.2.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh-action-get-changed-files:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh_action_get_changed_files:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh_action_get_changed_files:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh-action-get-changed:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh-action-get-changed:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh_action_get_changed:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh_action_get_changed:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh-action-get:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh-action-get:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh_action_get:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh_action_get:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh-action:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh-action:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh_action:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh_action:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh:lots0logs\\/gh-action-get-changed-files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lots0logs\\/gh:lots0logs\\/gh_action_get_changed_files:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-cfn-samples.yml"}]},{"bom-ref":"pkg:golang/mvdan.cc/sh/v3@v3.11.0?package-id=25f7631230044c56","type":"library","name":"mvdan.cc/sh/v3","version":"v3.11.0","cpe":"cpe:2.3:a:sh:v3:v3.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/mvdan.cc/sh/v3@v3.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:q5h+XMDRfUGUedCqFFsjoFjrhwf2Mvtt1rkMvVz0blw="}]},{"bom-ref":"pkg:golang/oras.land/oras-go/v2@v2.6.2?package-id=883597e705b9f817","type":"library","name":"oras.land/oras-go/v2","version":"v2.6.2","cpe":"cpe:2.3:a:linuxfoundation:oras:v2.6.2:*:*:*:*:go:*:*","purl":"pkg:golang/oras.land/oras-go/v2@v2.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N04RXngAp1LJKTG6ifz3xHPipasEkWr+hFmInja5YKo="}]},{"bom-ref":"pkg:github/securego/gosec@v2.22.5?package-id=92354a01e76c51d2","type":"library","name":"securego/gosec","version":"v2.22.5","cpe":"cpe:2.3:a:securego\\/gosec:securego\\/gosec:v2.22.5:*:*:*:*:*:*:*","purl":"pkg:github/securego/gosec@v2.22.5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:golang/sigs.k8s.io/controller-runtime@v0.14.6?package-id=598681ce01723414","type":"library","name":"sigs.k8s.io/controller-runtime","version":"v0.14.6","purl":"pkg:golang/sigs.k8s.io/controller-runtime@v0.14.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oxstGVvXGNnMvY7TAESYk+lzr6S3V5VFxQ6d92KcwQA="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=ec32c0f5bc606249","type":"library","name":"sigs.k8s.io/json","version":"v0.0.0-20250730193827-2d320260d730","purl":"pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/kustomize/api@v0.21.1?package-id=a54b7c7f9f046a68","type":"library","name":"sigs.k8s.io/kustomize/api","version":"v0.21.1","cpe":"cpe:2.3:a:kustomize:api:v0.21.1:*:*:*:*:*:*:*","purl":"pkg:golang/sigs.k8s.io/kustomize/api@v0.21.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lzqbzvz2CSvsjIUZUBNFKtIMsEw7hVLJp0JeSIVmuJs="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.21.1?package-id=fb7a891683a6bc59","type":"library","name":"sigs.k8s.io/kustomize/kyaml","version":"v0.21.1","cpe":"cpe:2.3:a:kustomize:kyaml:v0.21.1:*:*:*:*:*:*:*","purl":"pkg:golang/sigs.k8s.io/kustomize/kyaml@v0.21.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IVlbmhC076nf6foyL6Taw4BkrLuEsXUXNpsE+ScX7fI="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=4bfa21fc21b1ff5b","type":"library","name":"sigs.k8s.io/randfill","version":"v1.0.0","purl":"pkg:golang/sigs.k8s.io/randfill@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=6477ea84c5316046","type":"library","name":"sigs.k8s.io/structured-merge-diff/v6","version":"v6.3.2","cpe":"cpe:2.3:a:structured-merge-diff:v6:v6.3.2:*:*:*:*:*:*:*","purl":"pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured_merge_diff:v6:v6.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured-merge:v6:v6.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured_merge:v6:v6.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured:v6:v6.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kwVWMx5yS1CrnFWA/2QHyRVJ8jM6dBA80uLmm0wJkk8="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=95ee3a98ac8d2d6e","type":"library","name":"sigs.k8s.io/yaml","version":"v1.6.0","purl":"pkg:golang/sigs.k8s.io/yaml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="}]},{"bom-ref":"pkg:github/step-security/action-yamllint@v3.1.1?package-id=25eaf3b938564363","type":"library","name":"step-security/action-yamllint","version":"v3.1.1","cpe":"cpe:2.3:a:step-security\\/action-yamllint:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/action-yamllint@v3.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/action-yamllint:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/action_yamllint:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/action_yamllint:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/action:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/action:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/action:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/action:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-ansible-samples.yml"}]},{"bom-ref":"pkg:github/step-security/action-yamllint@v3.1.1?package-id=31d3b95828d5a393","type":"library","name":"step-security/action-yamllint","version":"v3.1.1","cpe":"cpe:2.3:a:step-security\\/action-yamllint:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/action-yamllint@v3.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/action-yamllint:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/action_yamllint:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/action_yamllint:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/action:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/action:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/action:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/action:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/action-yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/action_yamllint:v3.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-openapi-samples.yaml"}]},{"bom-ref":"pkg:github/step-security/actions-comment-pull-request@v3.0.2?package-id=eaa2e639a28a9669","type":"library","name":"step-security/actions-comment-pull-request","version":"v3.0.2","cpe":"cpe:2.3:a:step-security\\/actions-comment-pull-request:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*","purl":"pkg:github/step-security/actions-comment-pull-request@v3.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull-request:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull_request:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull_request:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/check-apache-license.yaml"}]},{"bom-ref":"pkg:github/step-security/actions-comment-pull-request@v3.0.2?package-id=f8aec1eb4e3314ba","type":"library","name":"step-security/actions-comment-pull-request","version":"v3.0.2","cpe":"cpe:2.3:a:step-security\\/actions-comment-pull-request:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*","purl":"pkg:github/step-security/actions-comment-pull-request@v3.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull-request:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull_request:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull_request:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-issues.yaml"}]},{"bom-ref":"pkg:github/step-security/actions-comment-pull-request@v3.0.2?package-id=d09cf4d71448c26a","type":"library","name":"step-security/actions-comment-pull-request","version":"v3.0.2","cpe":"cpe:2.3:a:step-security\\/actions-comment-pull-request:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*","purl":"pkg:github/step-security/actions-comment-pull-request@v3.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull-request:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull_request:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull_request:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment-pull:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment_pull:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions-comment:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions_comment:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/actions:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/actions:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/actions-comment-pull-request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/actions_comment_pull_request:v3.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-prs.yaml"}]},{"bom-ref":"pkg:github/step-security/create-pull-request@v8.1.1?package-id=9326d5de75aa9a68","type":"library","name":"step-security/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:step-security\\/create-pull-request:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull-request:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull_request:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull_request:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/alert-update-terraform-modules.yaml"}]},{"bom-ref":"pkg:github/step-security/create-pull-request@v8.1.1?package-id=bff16f6db6ff3dca","type":"library","name":"step-security/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:step-security\\/create-pull-request:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull-request:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull_request:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull_request:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-generate-antlr-parser.yaml"}]},{"bom-ref":"pkg:github/step-security/create-pull-request@v8.1.1?package-id=48608475b982523d","type":"library","name":"step-security/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:step-security\\/create-pull-request:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull-request:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull_request:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull_request:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prepare-release.yaml"}]},{"bom-ref":"pkg:github/step-security/create-pull-request@v8.1.1?package-id=9621f363cd6ed391","type":"library","name":"step-security/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:step-security\\/create-pull-request:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull-request:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull_request:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull_request:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create-pull:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create_pull:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/create:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/create:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/update-docs-queries.yaml"}]},{"bom-ref":"pkg:github/step-security/docker-build-push-action@v7.1.0?package-id=99014ee8a12b28d1","type":"library","name":"step-security/docker-build-push-action","version":"v7.1.0","cpe":"cpe:2.3:a:step-security\\/docker-build-push-action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/docker-build-push-action@v7.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push-action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-integration.yml"}]},{"bom-ref":"pkg:github/step-security/docker-build-push-action@v7.1.0?package-id=8771d3f30d32a29d","type":"library","name":"step-security/docker-build-push-action","version":"v7.1.0","cpe":"cpe:2.3:a:step-security\\/docker-build-push-action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/docker-build-push-action@v7.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push-action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e-debian.yaml"}]},{"bom-ref":"pkg:github/step-security/docker-build-push-action@v7.1.0?package-id=5ecfee385968d439","type":"library","name":"step-security/docker-build-push-action","version":"v7.1.0","cpe":"cpe:2.3:a:step-security\\/docker-build-push-action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/docker-build-push-action@v7.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push-action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e.yaml"}]},{"bom-ref":"pkg:github/step-security/docker-build-push-action@v7.1.0?package-id=63284c47263a7276","type":"library","name":"step-security/docker-build-push-action","version":"v7.1.0","cpe":"cpe:2.3:a:step-security\\/docker-build-push-action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/docker-build-push-action@v7.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push-action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-generate-antlr-parser.yaml"}]},{"bom-ref":"pkg:github/step-security/docker-build-push-action@v7.1.0?package-id=3929be4dbb67f8a6","type":"library","name":"step-security/docker-build-push-action","version":"v7.1.0","cpe":"cpe:2.3:a:step-security\\/docker-build-push-action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/docker-build-push-action@v7.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push-action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-dkr-image.yml"}]},{"bom-ref":"pkg:github/step-security/docker-build-push-action@v7.1.0?package-id=b9605c5b5dbbeb20","type":"library","name":"step-security/docker-build-push-action","version":"v7.1.0","cpe":"cpe:2.3:a:step-security\\/docker-build-push-action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/docker-build-push-action@v7.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push-action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push_action:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build-push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build_push:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_build:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/docker-build-push-action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/docker_build_push_action:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/step-security/docker-login-action@v4.5.1?package-id=f9c5976af8eb2e39","type":"library","name":"step-security/docker-login-action","version":"v4.5.1","cpe":"cpe:2.3:a:step-security\\/docker-login-action:step-security\\/docker-login-action:v4.5.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/docker-login-action@v4.5.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-login-action:step_security\\/docker_login_action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_login_action:step-security\\/docker-login-action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_login_action:step_security\\/docker_login_action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-login:step-security\\/docker-login-action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker-login:step_security\\/docker_login_action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_login:step-security\\/docker-login-action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker_login:step_security\\/docker_login_action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step-security\\/docker-login-action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/docker:step_security\\/docker_login_action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step-security\\/docker-login-action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/docker:step_security\\/docker_login_action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/docker-login-action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/docker_login_action:v4.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-dkr-image.yml"}]},{"bom-ref":"pkg:github/step-security/golangci-lint-action@v9.2.0?package-id=7732e9426751c2a1","type":"library","name":"step-security/golangci-lint-action","version":"v9.2.0","cpe":"cpe:2.3:a:step-security\\/golangci-lint-action:step-security\\/golangci-lint-action:v9.2.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/golangci-lint-action@v9.2.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/golangci-lint-action:step_security\\/golangci_lint_action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/golangci_lint_action:step-security\\/golangci-lint-action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/golangci_lint_action:step_security\\/golangci_lint_action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/golangci-lint:step-security\\/golangci-lint-action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/golangci-lint:step_security\\/golangci_lint_action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/golangci_lint:step-security\\/golangci-lint-action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/golangci_lint:step_security\\/golangci_lint_action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/golangci:step-security\\/golangci-lint-action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/golangci:step_security\\/golangci_lint_action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/golangci:step-security\\/golangci-lint-action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/golangci:step_security\\/golangci_lint_action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/golangci-lint-action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/golangci_lint_action:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/step-security/paths-filter@v4.0.1?package-id=9d8e137dd893711c","type":"library","name":"step-security/paths-filter","version":"v4.0.1","cpe":"cpe:2.3:a:step-security\\/paths-filter:step-security\\/paths-filter:v4.0.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/paths-filter@v4.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/paths-filter:step_security\\/paths_filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/paths_filter:step-security\\/paths-filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/paths_filter:step_security\\/paths_filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/paths:step-security\\/paths-filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/paths:step_security\\/paths_filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/paths:step-security\\/paths-filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/paths:step_security\\/paths_filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/paths-filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/paths_filter:v4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci.yml"}]},{"bom-ref":"pkg:github/step-security/setup-buildx-action@v4.0.0?package-id=90b7e4d1c9d8ae22","type":"library","name":"step-security/setup-buildx-action","version":"v4.0.0","cpe":"cpe:2.3:a:step-security\\/setup-buildx-action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/setup-buildx-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx-action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-ci-integration.yml"}]},{"bom-ref":"pkg:github/step-security/setup-buildx-action@v4.0.0?package-id=90327efed092af0c","type":"library","name":"step-security/setup-buildx-action","version":"v4.0.0","cpe":"cpe:2.3:a:step-security\\/setup-buildx-action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/setup-buildx-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx-action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e-debian.yaml"}]},{"bom-ref":"pkg:github/step-security/setup-buildx-action@v4.0.0?package-id=9b898058a3437c36","type":"library","name":"step-security/setup-buildx-action","version":"v4.0.0","cpe":"cpe:2.3:a:step-security\\/setup-buildx-action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/setup-buildx-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx-action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e.yaml"}]},{"bom-ref":"pkg:github/step-security/setup-buildx-action@v4.0.0?package-id=67610d952170a1c3","type":"library","name":"step-security/setup-buildx-action","version":"v4.0.0","cpe":"cpe:2.3:a:step-security\\/setup-buildx-action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/setup-buildx-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx-action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-generate-antlr-parser.yaml"}]},{"bom-ref":"pkg:github/step-security/setup-buildx-action@v4.0.0?package-id=b67b838ece9fb341","type":"library","name":"step-security/setup-buildx-action","version":"v4.0.0","cpe":"cpe:2.3:a:step-security\\/setup-buildx-action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/setup-buildx-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx-action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-dkr-image.yml"}]},{"bom-ref":"pkg:github/step-security/setup-buildx-action@v4.0.0?package-id=63709c385f3e20fb","type":"library","name":"step-security/setup-buildx-action","version":"v4.0.0","cpe":"cpe:2.3:a:step-security\\/setup-buildx-action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/setup-buildx-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx-action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx_action:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_buildx:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/setup-buildx-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/setup_buildx_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/sec-checks.yaml"}]},{"bom-ref":"pkg:github/step-security/setup-qemu-action@v4.0.0?package-id=f80a7bc1be469185","type":"library","name":"step-security/setup-qemu-action","version":"v4.0.0","cpe":"cpe:2.3:a:step-security\\/setup-qemu-action:step-security\\/setup-qemu-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/step-security/setup-qemu-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-qemu-action:step_security\\/setup_qemu_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_qemu_action:step-security\\/setup-qemu-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_qemu_action:step_security\\/setup_qemu_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-qemu:step-security\\/setup-qemu-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup-qemu:step_security\\/setup_qemu_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_qemu:step-security\\/setup-qemu-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup_qemu:step_security\\/setup_qemu_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step-security\\/setup-qemu-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/setup:step_security\\/setup_qemu_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step-security\\/setup-qemu-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/setup:step_security\\/setup_qemu_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/setup-qemu-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/setup_qemu_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-dkr-image.yml"}]},{"bom-ref":"pkg:github/step-security/upload-release-action@v2.11.4?package-id=205b2d2848d9fc18","type":"library","name":"step-security/upload-release-action","version":"v2.11.4","cpe":"cpe:2.3:a:step-security\\/upload-release-action:step-security\\/upload-release-action:v2.11.4:*:*:*:*:*:*:*","purl":"pkg:github/step-security/upload-release-action@v2.11.4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/upload-release-action:step_security\\/upload_release_action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/upload_release_action:step-security\\/upload-release-action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/upload_release_action:step_security\\/upload_release_action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/upload-release:step-security\\/upload-release-action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/upload-release:step_security\\/upload_release_action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/upload_release:step-security\\/upload-release-action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/upload_release:step_security\\/upload_release_action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/upload:step-security\\/upload-release-action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/upload:step_security\\/upload_release_action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/upload:step-security\\/upload-release-action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/upload:step_security\\/upload_release_action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/upload-release-action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/upload_release_action:v2.11.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-extract-info.yaml"}]},{"bom-ref":"pkg:github/styfle/cancel-workflow-action@0.12.1?package-id=a2df5401bf207b51","type":"library","name":"styfle/cancel-workflow-action","version":"0.12.1","cpe":"cpe:2.3:a:styfle\\/cancel-workflow-action:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*","purl":"pkg:github/styfle/cancel-workflow-action@0.12.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow-action:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow_action:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow_action:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e-debian.yaml"}]},{"bom-ref":"pkg:github/styfle/cancel-workflow-action@0.12.1?package-id=29cd3e6b46b71a09","type":"library","name":"styfle/cancel-workflow-action","version":"0.12.1","cpe":"cpe:2.3:a:styfle\\/cancel-workflow-action:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*","purl":"pkg:github/styfle/cancel-workflow-action@0.12.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow-action:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow_action:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow_action:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-e2e.yaml"}]},{"bom-ref":"pkg:github/styfle/cancel-workflow-action@0.12.1?package-id=7fc77767bb9e1caa","type":"library","name":"styfle/cancel-workflow-action","version":"0.12.1","cpe":"cpe:2.3:a:styfle\\/cancel-workflow-action:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*","purl":"pkg:github/styfle/cancel-workflow-action@0.12.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow-action:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow_action:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow_action:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/update-docs-queries.yaml"}]},{"bom-ref":"pkg:github/styfle/cancel-workflow-action@0.12.1?package-id=061d4f8c47220457","type":"library","name":"styfle/cancel-workflow-action","version":"0.12.1","cpe":"cpe:2.3:a:styfle\\/cancel-workflow-action:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*","purl":"pkg:github/styfle/cancel-workflow-action@0.12.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow-action:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow_action:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow_action:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel-workflow:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel_workflow:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel:styfle\\/cancel-workflow-action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:styfle\\/cancel:styfle\\/cancel_workflow_action:0.12.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/update-docs-release.yaml"}]},{"bom-ref":"pkg:pypi/tabulate@0.8.9?package-id=486ee6aece8c5e0f","type":"library","name":"tabulate","version":"0.8.9","cpe":"cpe:2.3:a:python-tabulate:python-tabulate:0.8.9:*:*:*:*:*:*:*","purl":"pkg:pypi/tabulate@0.8.9","properties":[{"name":"syft:package:foundBy","value":"python-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-pip-requirements-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-tabulate:python_tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_tabulate:python-tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_tabulate:python_tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-tabulate:tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_tabulate:tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tabulate:python-tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tabulate:python_tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tabulate:tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:tabulate:0.8.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/scripts/metrics/requirements.txt"}]},{"bom-ref":"pkg:github/toko-bifrost/ms-teams-deploy-card@3.1.2?package-id=f02289921550068d","type":"library","name":"toko-bifrost/ms-teams-deploy-card","version":"3.1.2","cpe":"cpe:2.3:a:toko-bifrost\\/ms-teams-deploy-card:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*","purl":"pkg:github/toko-bifrost/ms-teams-deploy-card@3.1.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams-deploy-card:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams_deploy_card:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams_deploy_card:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams-deploy:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams-deploy:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams_deploy:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams_deploy:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/mkdocs.yml"}]},{"bom-ref":"pkg:github/toko-bifrost/ms-teams-deploy-card@3.1.2?package-id=57f5d04eb981bede","type":"library","name":"toko-bifrost/ms-teams-deploy-card","version":"3.1.2","cpe":"cpe:2.3:a:toko-bifrost\\/ms-teams-deploy-card:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*","purl":"pkg:github/toko-bifrost/ms-teams-deploy-card@3.1.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams-deploy-card:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams_deploy_card:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams_deploy_card:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams-deploy:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams-deploy:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams_deploy:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams_deploy:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms-teams:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms_teams:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko-bifrost\\/ms:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko_bifrost\\/ms:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko:toko-bifrost\\/ms-teams-deploy-card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:toko:toko_bifrost\\/ms_teams_deploy_card:3.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-dkr-image.yml"}]},{"bom-ref":"466d9d398adc6f7e","type":"file","name":"/.github/scripts/metrics/requirements.txt","hashes":[{"alg":"SHA-1","content":"c93d2006fc571fb8695121eb4a4fc0faddd89d83"},{"alg":"SHA-256","content":"6e57652d7d5b475949523a14743a76e355e4bc3de947a1ac648388c2601d4420"}]},{"bom-ref":"9886c401044626df","type":"file","name":"/.github/scripts/report/go.mod","hashes":[{"alg":"SHA-1","content":"481610cc654bab3dbb20e33e7a98a26de70dc8d8"},{"alg":"SHA-256","content":"b22cd34f0a70e337abb10670c1e6d65e9ad11d8bdae5f66da4d332aa92404431"}]},{"bom-ref":"0900e91e58aaac96","type":"file","name":"/.github/workflows/alert-update-flags.yaml","hashes":[{"alg":"SHA-1","content":"c74bb25c74b852d47d3bb3e190e087bbbc02fbde"},{"alg":"SHA-256","content":"ce9d296a9a528ac1659f9f8c7b598f64f2beb8737f001b361c282e611ef41b1f"}]},{"bom-ref":"ebf381deedd32643","type":"file","name":"/.github/workflows/alert-update-terraform-modules.yaml","hashes":[{"alg":"SHA-1","content":"1d5e1615deab4c12c680ea48b217a14428f75901"},{"alg":"SHA-256","content":"3f072b47e8e2d6c2895788bf1ddd8a6c2ff6ee7c2f0f401354681b44a4edb261"}]},{"bom-ref":"bbf96633afbc6d0f","type":"file","name":"/.github/workflows/cesar.yaml","hashes":[{"alg":"SHA-1","content":"0385484c56751b229959d19799c28cbcfa2cfb03"},{"alg":"SHA-256","content":"65eb025e24946aefdeb1eaee430a4c9a48c2f5a5aa0b9c2aed1993797a84d918"}]},{"bom-ref":"81943b761fe40923","type":"file","name":"/.github/workflows/check-apache-license.yaml","hashes":[{"alg":"SHA-1","content":"8fb939bb4e6cd1aae44857f4dd65d93f1d312f4f"},{"alg":"SHA-256","content":"0bc9c1ed102db5301322ece265d60c41ea263cdbe6d98acb051a47f006b86301"}]},{"bom-ref":"067dae2c3fefe460","type":"file","name":"/.github/workflows/check-go-coverage.yaml","hashes":[{"alg":"SHA-1","content":"4723bb5627046be9b3343985538b57da1c6486ae"},{"alg":"SHA-256","content":"37bb0c5effa448dcc7c93b50486686a0252951e1a1f9e7cfb753932c0b49c949"}]},{"bom-ref":"d690d27d29843ff3","type":"file","name":"/.github/workflows/ci-projects.yaml","hashes":[{"alg":"SHA-1","content":"bebe00b0a7069c7ae0114d7595bf7f6caa0b7cff"},{"alg":"SHA-256","content":"8c3a97c605af29e69efaa2425d39f6876a30a97084b6fa88f8f1ba7ab0d0ac61"}]},{"bom-ref":"6d8f1321390969da","type":"file","name":"/.github/workflows/go-ci-coverage.yaml","hashes":[{"alg":"SHA-1","content":"331f7ae8cd625f22959a16b76fb456c4026b6e07"},{"alg":"SHA-256","content":"4c2a045b7fa87abe801d5f5d19d950b3d38e645579d672d2a9f04b504906da44"}]},{"bom-ref":"56bed5f5c3069f3e","type":"file","name":"/.github/workflows/go-ci-integration.yml","hashes":[{"alg":"SHA-1","content":"fcc2fb5d40d9f067ff98fb1ebd89a145051ae9cd"},{"alg":"SHA-256","content":"183c7362818914a56da9300ab5325f7b6a10184b534b225baca6de9700942348"}]},{"bom-ref":"fcecd8e2979fb0a1","type":"file","name":"/.github/workflows/go-ci-metrics.yaml","hashes":[{"alg":"SHA-1","content":"faee7c63395fb00ce0ff51390a4e4e6597e6f3db"},{"alg":"SHA-256","content":"7bf39dfb7eb11b66b23db9bfab5e5ac13c7534cc11d97940a92369da1870f393"}]},{"bom-ref":"dccc8643f3b216bc","type":"file","name":"/.github/workflows/go-ci.yml","hashes":[{"alg":"SHA-1","content":"e0226c0577ac8031a99ae0b045d88322115a0d81"},{"alg":"SHA-256","content":"8ceba8a0206637d509dd9cbe215f3d00433f2419769267b95419e1b904a1fa86"}]},{"bom-ref":"1edde8b6bbfbe25e","type":"file","name":"/.github/workflows/go-e2e-debian.yaml","hashes":[{"alg":"SHA-1","content":"fa0e32a3c92a95f863900efe50b73b992eb6a40b"},{"alg":"SHA-256","content":"7ae48359c5f32c2add4ae5decff46402c2436fc33581b20866343b4850f1e44a"}]},{"bom-ref":"2b3fe46a2482f3f6","type":"file","name":"/.github/workflows/go-e2e.yaml","hashes":[{"alg":"SHA-1","content":"597bc0ed7c41119425c12c6226179494d976d67d"},{"alg":"SHA-256","content":"3bba617234019034603edcf44000e24dc4c92976fd4ae68d78bc5e99f9f87cfe"}]},{"bom-ref":"d379453d1ad68178","type":"file","name":"/.github/workflows/go-generate-antlr-parser.yaml","hashes":[{"alg":"SHA-1","content":"9a8fcd21090762778ae4f2d599662f9b6144162d"},{"alg":"SHA-256","content":"e02d7ead11cb2a5570ca798543b6193d1137be2540681e350dd64006020b4a84"}]},{"bom-ref":"472c6261fb306d0b","type":"file","name":"/.github/workflows/go-test-race.yml","hashes":[{"alg":"SHA-1","content":"53baad2d534a440653553070f5eea87e734db68a"},{"alg":"SHA-256","content":"c3435950780af9161f1b6757332359dbfdff1804b916e803d4959c9ad0e70ff1"}]},{"bom-ref":"7d49ce3e5acc2501","type":"file","name":"/.github/workflows/kics-gh-action.yaml","hashes":[{"alg":"SHA-1","content":"6b1fd517fb214861e748919d63c6ad82db5fffac"},{"alg":"SHA-256","content":"6bd65264a8d0ec6eceb5791e04172eebf63183f6c6463e1687a7f81d3a329390"}]},{"bom-ref":"addca108cf87523e","type":"file","name":"/.github/workflows/mkdocs.yml","hashes":[{"alg":"SHA-1","content":"5bf09543b916fc1ea734f9dd352ae931cfa36068"},{"alg":"SHA-256","content":"81d6e2c34f9139fc5a923a33a97806d6110777ef25b42d2c9d65e08128befa94"}]},{"bom-ref":"939e1fde9979c8a5","type":"file","name":"/.github/workflows/prepare-release.yaml","hashes":[{"alg":"SHA-1","content":"21534ce7dcf80372c308482348d721a67de3c321"},{"alg":"SHA-256","content":"fa04690ac3921795c45f62f76280b4cdbbf9b88411105a4a280f7678fd093230"}]},{"bom-ref":"d8a292c06dd1a27a","type":"file","name":"/.github/workflows/release-commits.yaml","hashes":[{"alg":"SHA-1","content":"041c8020f03a1125a4af4ab811a7635b1ba0a26b"},{"alg":"SHA-256","content":"244a4ff83c286605f517f02f039bcae01de2efb35d9361d34dd15d6b1497e08e"}]},{"bom-ref":"b383495c2b40f92d","type":"file","name":"/.github/workflows/release-dkr-image.yml","hashes":[{"alg":"SHA-1","content":"2b5a3f05e59ef8a060d1f4459a1a9b2302c728f9"},{"alg":"SHA-256","content":"237e874800dce882ccaf154798426d1e5f7e07907100c9330a3f723f5cbd9a80"}]},{"bom-ref":"f007debf412847e7","type":"file","name":"/.github/workflows/release-extract-info.yaml","hashes":[{"alg":"SHA-1","content":"a6cb2b5b5e65aea0682682b536cc538229d45142"},{"alg":"SHA-256","content":"096e4cbc4c590717a7d78b835eea97b95fbb91b256714d11ea4698035ab532a8"}]},{"bom-ref":"ebb2a86bc00cdab8","type":"file","name":"/.github/workflows/run-projects.yaml","hashes":[{"alg":"SHA-1","content":"bae468ca9502ed694c8d439a8ec4ed016cea84ff"},{"alg":"SHA-256","content":"49f249a93d209f90bbdb2aeb30fc666c7397b6c12e6701899048d704c26467d3"}]},{"bom-ref":"8a55f3d8ad1f819c","type":"file","name":"/.github/workflows/sec-checks.yaml","hashes":[{"alg":"SHA-1","content":"57281c2f8e10e1fa19845af9fa5e7bd908a9c100"},{"alg":"SHA-256","content":"449d15e222ab59b82c4e716d5c88e4c4a2ccb4908e0742e0c54dfe0585e23595"}]},{"bom-ref":"e21f7bb16c04813c","type":"file","name":"/.github/workflows/sonarcloud-scan-branch.yml","hashes":[{"alg":"SHA-1","content":"42223b3c79090fede188be7b0398ca6afc6194fb"},{"alg":"SHA-256","content":"a692e4e4e3a580764a6ee8055d8c827ff515b7d03f4a0ad264819fd69257fc2d"}]},{"bom-ref":"c2a4006bab425795","type":"file","name":"/.github/workflows/sonarcloud.yml","hashes":[{"alg":"SHA-1","content":"2f371093a2a235b5a646eac17565488e0c5311ff"},{"alg":"SHA-256","content":"5d93ed5632b98f578a1595cbc656f727ca07bbcceb48a26945f4757cac4e964c"}]},{"bom-ref":"b2680fbe1b2cb8e2","type":"file","name":"/.github/workflows/statistics.yaml","hashes":[{"alg":"SHA-1","content":"4c90cb183dde310701218bb46b665115f83322ea"},{"alg":"SHA-256","content":"05da68f0a7dd7b77d1496ab8b857996bdcfc4b4fdd3c2f0a9877656cb7209dc4"}]},{"bom-ref":"22098a05df1e97ac","type":"file","name":"/.github/workflows/update-docs-queries.yaml","hashes":[{"alg":"SHA-1","content":"2631133c2f0ea577081146ed2a652c06b61d7766"},{"alg":"SHA-256","content":"6e1c672ec5de150494bb5418a6054fbf7d346d25ce79f0bc4c76d1a880b8e288"}]},{"bom-ref":"fba7a7450d6f2cb6","type":"file","name":"/.github/workflows/update-docs-release.yaml","hashes":[{"alg":"SHA-1","content":"2f5af21ea4652150420c66c25d8e1b869c5c5750"},{"alg":"SHA-256","content":"76c06a973942accd81f442abad33e2f78a4f924977ec165591b86663c4e1ba5e"}]},{"bom-ref":"076fb1e2ec877b97","type":"file","name":"/.github/workflows/validate-ansible-samples.yml","hashes":[{"alg":"SHA-1","content":"63511c7cf7deb35e71a11af2dec9c4068f770845"},{"alg":"SHA-256","content":"552b127c9f50cad1dc9bdbdaf48743858c9c591c180eaf60095c3a19497df45a"}]},{"bom-ref":"3d5ca70f6e5239bf","type":"file","name":"/.github/workflows/validate-arm-samples.yaml","hashes":[{"alg":"SHA-1","content":"21f28dbaacede0dd750798daa5189e39bfc234cf"},{"alg":"SHA-256","content":"7a3b9ae8bc90f1bee79177933783bf2ebad0d4f14b54a5a07de18f087daa073a"}]},{"bom-ref":"d04035c6a72a146e","type":"file","name":"/.github/workflows/validate-cfn-samples.yml","hashes":[{"alg":"SHA-1","content":"5264446d34ead17cff72888a98be929f5b380f26"},{"alg":"SHA-256","content":"b143803d180fbd61e46ebe7929711b0d1e5d9e5c6d9614173e9e9e2abb7b1611"}]},{"bom-ref":"518902cf0999b7e7","type":"file","name":"/.github/workflows/validate-dkr-samples.yml","hashes":[{"alg":"SHA-1","content":"2e20ea2d38af19d8f9d2de160b927fab2c276de9"},{"alg":"SHA-256","content":"a6400b53726cc08e92bb0f60a6e997eede207b8477d287ca14716dcc2dbf2a04"}]},{"bom-ref":"ededb1f8c265ba31","type":"file","name":"/.github/workflows/validate-issues.yaml","hashes":[{"alg":"SHA-1","content":"ccb211a482df6e04cb244a0dae7d471b5efc2800"},{"alg":"SHA-256","content":"a90f817c6f0b1dbb0f246c82e942a559c6c3695a4146168b9b34f4cc2bebe28f"}]},{"bom-ref":"b9eea0be6846ee2d","type":"file","name":"/.github/workflows/validate-k8s-samples.yml","hashes":[{"alg":"SHA-1","content":"67e6e57480ab3800900e6a2298690fdad1f6d20a"},{"alg":"SHA-256","content":"12b101a75a18b506019c75208964191421a3dfd25ad36af9f9c3bb143d42ab8d"}]},{"bom-ref":"f97f373371b06a05","type":"file","name":"/.github/workflows/validate-openapi-samples.yaml","hashes":[{"alg":"SHA-1","content":"b5dfc313bf5502c44495c31ac993667865d01f02"},{"alg":"SHA-256","content":"04b260c6f02b5f8bd2aa4f5bdcae7500ce660e553c90ff57f3687a3128a00a23"}]},{"bom-ref":"2aa7fb234a0eaafd","type":"file","name":"/.github/workflows/validate-prs.yaml","hashes":[{"alg":"SHA-1","content":"f2add1e62e9a958eb4cfe4e83a6e77cb7b43977f"},{"alg":"SHA-256","content":"f54d3734e171639954249f3bf60dfe967dbee682ef3f8a47a9aac783e078dd85"}]},{"bom-ref":"82f312bbae150f63","type":"file","name":"/.github/workflows/validate-queries-metadata.yml","hashes":[{"alg":"SHA-1","content":"487cfad7f9b40391e6be1ba1e3088a1dd4265411"},{"alg":"SHA-256","content":"e07dfed875f8b95c8e8e68da9f5962310048ef9fe4dda2063be0217d27f97f47"}]},{"bom-ref":"be419ccaa2a9f5c7","type":"file","name":"/.github/workflows/validate-tf-samples.yml","hashes":[{"alg":"SHA-1","content":"08cdaa33fcc2da085d72ef6d73e756ceeda6a0d6"},{"alg":"SHA-256","content":"27c4f47ff6432af52bb534744f8d67734531c93cd89acbbddfa90b547738a422"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"7711afdeb069b381b49e4846c9cb18f715339fa6"},{"alg":"SHA-256","content":"38fb1210bbf8b6432bf86d416857a3f7e6885e1d42a41aa38eb452d7e37c15eb"}]}]}