{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:c9aea63a-5b06-41f5-9d42-e7db126889f1","version":1,"metadata":{"timestamp":"2026-11-02T03:06:11Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"0650a9dc2841bf58","type":"file","name":"aws-cloudformation/cfn-lint","version":"v1.59.0"}},"components":[{"bom-ref":"pkg:github/actions/checkout@v7?package-id=d3069c08d55e4944","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/cd-pypi.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=e5a7c8c529469141","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/cd-release.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=ee9aca5121428121","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-branch.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=cb8175f5d167821c","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-pr-data.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=ad2e69c8f1633aa9","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-pr.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=63feaffa634eafe1","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/maintenance-v1.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v7?package-id=4b17d09d313525ff","type":"library","name":"actions/setup-python","version":"v7","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cd-pypi.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v7?package-id=ffebc0008d8e6f27","type":"library","name":"actions/setup-python","version":"v7","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cd-release.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v7?package-id=09cc3945139e56e3","type":"library","name":"actions/setup-python","version":"v7","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-branch.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v7?package-id=82959e924158a39d","type":"library","name":"actions/setup-python","version":"v7","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-pr-data.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v7?package-id=747c170148b0fed7","type":"library","name":"actions/setup-python","version":"v7","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-pr.yaml"}]},{"bom-ref":"pkg:github/actions/setup-python@v7?package-id=8ae7271d3bfa40ea","type":"library","name":"actions/setup-python","version":"v7","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/maintenance-v1.yaml"}]},{"bom-ref":"pkg:github/codecov/codecov-action@v7?package-id=a91939344353a035","type":"library","name":"codecov/codecov-action","version":"v7","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:v7:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-branch.yaml"}]},{"bom-ref":"pkg:github/codecov/codecov-action@v7?package-id=7afd20c7fcff894a","type":"library","name":"codecov/codecov-action","version":"v7","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:v7:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-pr.yaml"}]},{"bom-ref":"pkg:github/peter-evans/create-pull-request@v8?package-id=670fea22cca016a0","type":"library","name":"peter-evans/create-pull-request","version":"v8","cpe":"cpe:2.3:a:peter-evans\\/create-pull-request:peter-evans\\/create-pull-request:v8:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-pull-request@v8","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull-request:peter_evans\\/create_pull_request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter-evans\\/create-pull-request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter_evans\\/create_pull_request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter-evans\\/create-pull-request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter_evans\\/create_pull_request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter-evans\\/create-pull-request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter_evans\\/create_pull_request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-pull-request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_pull_request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-pull-request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_pull_request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-pull-request:v8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_pull_request:v8:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/maintenance-v1.yaml"}]},{"bom-ref":"pkg:github/pypa/gh-action-pip-audit@v1.1.0?package-id=1d081a9270229db6","type":"library","name":"pypa/gh-action-pip-audit","version":"v1.1.0","cpe":"cpe:2.3:a:pypa\\/gh-action-pip-audit:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:github/pypa/gh-action-pip-audit@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pip-audit:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pip_audit:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pip_audit:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pip:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pip:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pip:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pip:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-branch.yaml"}]},{"bom-ref":"pkg:github/pypa/gh-action-pip-audit@v1.1.0?package-id=15df8cfb6483da8c","type":"library","name":"pypa/gh-action-pip-audit","version":"v1.1.0","cpe":"cpe:2.3:a:pypa\\/gh-action-pip-audit:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:github/pypa/gh-action-pip-audit@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pip-audit:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pip_audit:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pip_audit:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pip:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pip:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pip:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pip:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh-action-pip-audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh_action_pip_audit:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-pr.yaml"}]},{"bom-ref":"pkg:github/pypa/gh-action-pypi-publish@release%2Fv1?package-id=074cd6d43971710d","type":"library","name":"pypa/gh-action-pypi-publish","version":"release/v1","cpe":"cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*","purl":"pkg:github/pypa/gh-action-pypi-publish@release%2Fv1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cd-pypi.yaml"}]},{"bom-ref":"pkg:github/softprops/action-gh-release@v3?package-id=a7abee898af0b075","type":"library","name":"softprops/action-gh-release","version":"v3","cpe":"cpe:2.3:a:softprops\\/action-gh-release:softprops\\/action-gh-release:v3:*:*:*:*:*:*:*","purl":"pkg:github/softprops/action-gh-release@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action-gh-release:softprops\\/action_gh_release:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action_gh_release:softprops\\/action-gh-release:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action_gh_release:softprops\\/action_gh_release:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action-gh:softprops\\/action-gh-release:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action-gh:softprops\\/action_gh_release:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action_gh:softprops\\/action-gh-release:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action_gh:softprops\\/action_gh_release:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action:softprops\\/action-gh-release:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action:softprops\\/action_gh_release:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cd-release.yaml"}]},{"bom-ref":"3055057b12e2da8d","type":"file","name":"/.github/workflows/cd-pypi.yaml","hashes":[{"alg":"SHA-1","content":"e19d37578833861ca116acd93933ba77be725035"},{"alg":"SHA-256","content":"8ead2de56f22d50eebe9a02b5a02a6e88094e8262e9f0129a670d6dedc8852a4"}]},{"bom-ref":"4770cb062b8a86d0","type":"file","name":"/.github/workflows/cd-release.yaml","hashes":[{"alg":"SHA-1","content":"4bdc3f6c239a9876a0e7e55509b5017b596bffb5"},{"alg":"SHA-256","content":"2f10b5625dc1c4e20a1b3243c115b815eb4007e813662a09de515429e401b2d5"}]},{"bom-ref":"068def5bda604689","type":"file","name":"/.github/workflows/ci-branch.yaml","hashes":[{"alg":"SHA-1","content":"496ed39b1f44207b66d9902f126ddf645471a842"},{"alg":"SHA-256","content":"2b01bbc9fb7364cbac6ec228b61ce464066107e02285201988b1c5c5680f61fc"}]},{"bom-ref":"5d6e13391430d90f","type":"file","name":"/.github/workflows/ci-pr-data.yaml","hashes":[{"alg":"SHA-1","content":"42a7d1118cebeede97e36e5883d4bb4c6e523a18"},{"alg":"SHA-256","content":"79770b1ffe9826b627839cad971789c9dc3317749f0de3fc223326e3edb5e4fe"}]},{"bom-ref":"f30b2d58620032bb","type":"file","name":"/.github/workflows/ci-pr.yaml","hashes":[{"alg":"SHA-1","content":"e4c0c4db041f1cec52f0c6a2f85109db12aab305"},{"alg":"SHA-256","content":"951a80f20f3dac059fe2ab37fb1a613cf0bce1a7d9471abffa8464b7b6fa1fc6"}]},{"bom-ref":"0282992eeddc5fed","type":"file","name":"/.github/workflows/maintenance-v1.yaml","hashes":[{"alg":"SHA-1","content":"e9f0919654dd5c9da03919fd186c9a5f52620e65"},{"alg":"SHA-256","content":"73b6445f3b2c15b96dc9defefeb2411beb8fd1b9ae3fe8074b735414cc7f0430"}]}]}