{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:cf4155ca-c161-4fd3-b2c0-61449bb6c30f","version":1,"metadata":{"timestamp":"2026-11-02T03:09:29Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"71a29cffd9b4c88e","type":"file","name":"PyCQA/bandit","version":"1.9.4"}},"components":[{"bom-ref":"pkg:github/actions/checkout@v6?package-id=a566c6c5f5ccf317","type":"library","name":"actions/checkout","version":"v6","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/build-publish-image.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6?package-id=4201414894838c0b","type":"library","name":"actions/checkout","version":"v6","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/dependency-review.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6?package-id=9404804c04dae268","type":"library","name":"actions/checkout","version":"v6","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/publish-to-pypi.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6?package-id=1af2a0e9f3feafc0","type":"library","name":"actions/checkout","version":"v6","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/publish-to-test-pypi.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v6?package-id=52d44f4e45f5e65b","type":"library","name":"actions/checkout","version":"v6","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/pythonpackage.yml"}]},{"bom-ref":"pkg:github/actions/dependency-review-action@v4?package-id=7fe35ffe4d667c4c","type":"library","name":"actions/dependency-review-action","version":"v4","cpe":"cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/dependency-review-action@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/dependency-review.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6?package-id=e060dddca64d985b","type":"library","name":"actions/setup-python","version":"v6","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publish-to-pypi.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6?package-id=8f613be7d45ba115","type":"library","name":"actions/setup-python","version":"v6","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publish-to-test-pypi.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v6?package-id=3df61a37d4c7912b","type":"library","name":"actions/setup-python","version":"v6","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pythonpackage.yml"}]},{"bom-ref":"pkg:github/docker/build-push-action@v6?package-id=206b9d0f39f43f83","type":"library","name":"docker/build-push-action","version":"v6","cpe":"cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:v6:*:*:*:*:*:*:*","purl":"pkg:github/docker/build-push-action@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build-push-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build-publish-image.yml"}]},{"bom-ref":"pkg:github/docker/login-action@v3?package-id=eadacb8fdd81439f","type":"library","name":"docker/login-action","version":"v3","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build-publish-image.yml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v3?package-id=c70166c3ed5ec0fe","type":"library","name":"docker/setup-buildx-action","version":"v3","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build-publish-image.yml"}]},{"bom-ref":"pkg:github/pypa/gh-action-pypi-publish@release%2Fv1?package-id=0d561f1a2d4a49ae","type":"library","name":"pypa/gh-action-pypi-publish","version":"release/v1","cpe":"cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*","purl":"pkg:github/pypa/gh-action-pypi-publish@release%2Fv1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publish-to-pypi.yml"}]},{"bom-ref":"pkg:github/pypa/gh-action-pypi-publish@release%2Fv1?package-id=3214dc85cc92fb6f","type":"library","name":"pypa/gh-action-pypi-publish","version":"release/v1","cpe":"cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*","purl":"pkg:github/pypa/gh-action-pypi-publish@release%2Fv1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publish-to-test-pypi.yml"}]},{"bom-ref":"pkg:github/sigstore/cosign-installer@v4.0.0?package-id=130c90f4d35b41fc","type":"library","name":"sigstore/cosign-installer","version":"v4.0.0","cpe":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/cosign-installer@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build-publish-image.yml"}]},{"bom-ref":"8901d0aa75824e84","type":"file","name":"/.github/workflows/build-publish-image.yml","hashes":[{"alg":"SHA-1","content":"ec7bef14a164a29a108f35287255330c20d345b5"},{"alg":"SHA-256","content":"a2be952af48865ef11b64eb36ee28115a6f610a4e8fa9be44e359cef1e817dbe"}]},{"bom-ref":"11769e63aa84e323","type":"file","name":"/.github/workflows/dependency-review.yml","hashes":[{"alg":"SHA-1","content":"6d71559632772dd5905f97c056d1bfcb7fe74f08"},{"alg":"SHA-256","content":"0dbed8530bd638ca6aec98a80e97077c9e62af704c19229faff7c02d4184941d"}]},{"bom-ref":"3c0b28345371eabc","type":"file","name":"/.github/workflows/publish-to-pypi.yml","hashes":[{"alg":"SHA-1","content":"2acf238c8e7af11bc313c7ca9317d4196cba342a"},{"alg":"SHA-256","content":"1ef17aaf9c8a9ca2a82f553d18e8bda4ccb1909260da38a6e3b3c9b21eafecff"}]},{"bom-ref":"c1776e68bad2684c","type":"file","name":"/.github/workflows/publish-to-test-pypi.yml","hashes":[{"alg":"SHA-1","content":"1f91733af9599890d54b08c128e6b6040fc0a38f"},{"alg":"SHA-256","content":"7705f570298d7a27b94a560bb1c4cd01f959ca110e667051f3cebcb3eb91901d"}]},{"bom-ref":"807f9a8b745227ca","type":"file","name":"/.github/workflows/pythonpackage.yml","hashes":[{"alg":"SHA-1","content":"e80c2b062f2f0aab08ed27eaf06d45fa8e3b95c9"},{"alg":"SHA-256","content":"fb6284af1b0397d65b3fc331f6fdb0303dbe3069f6037632e931f4bdfc028bad"}]}]}