{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:3a554332-4a98-4444-86d5-63701ee02edb","version":1,"metadata":{"timestamp":"2026-11-02T03:06:52Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"d38eb76a33e53213","type":"file","name":"devops-kung-fu/bomber","version":"v0.5.1"}},"components":[{"bom-ref":"pkg:github/actions/checkout@v4?package-id=53bc26b171e948a0","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/go-quality.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=9eb4338500f07f9e","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5?package-id=fa01e584d2f351bf","type":"library","name":"actions/setup-go","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/go-quality.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5?package-id=d95cd9a37d4272b7","type":"library","name":"actions/setup-go","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/anchore/sbom-action@v0?package-id=ad90da0d57c78152","type":"library","name":"anchore/sbom-action","version":"v0","cpe":"cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom-action:v0:*:*:*:*:*:*:*","purl":"pkg:github/anchore/sbom-action@v0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom-action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom-action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/anchore/sbom-action@v0?package-id=d10e7d66dc957d83#publish-sbom","type":"library","name":"anchore/sbom-action/publish-sbom","version":"v0","cpe":"cpe:2.3:a:anchore\\/sbom-action\\/publish-sbom:anchore\\/sbom-action\\/publish-sbom:v0:*:*:*:*:*:*:*","purl":"pkg:github/anchore/sbom-action@v0#publish-sbom","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action\\/publish-sbom:anchore\\/sbom_action\\/publish_sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action\\/publish_sbom:anchore\\/sbom-action\\/publish-sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action\\/publish_sbom:anchore\\/sbom_action\\/publish_sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action\\/publish:anchore\\/sbom-action\\/publish-sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action\\/publish:anchore\\/sbom_action\\/publish_sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action\\/publish:anchore\\/sbom-action\\/publish-sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action\\/publish:anchore\\/sbom_action\\/publish_sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom-action\\/publish-sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom_action\\/publish_sbom:v0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:golang/github.com/burntsushi/toml@v1.4.0?package-id=69f9d4b20a337f2b","type":"library","name":"github.com/BurntSushi/toml","version":"v1.4.0","cpe":"cpe:2.3:a:BurntSushi:toml:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/BurntSushi/toml@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kuoIxZQy2WRRk1pttg9asf+WVv6tWQuBNVmK8+nqPr0="}]},{"bom-ref":"pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.9.1?package-id=9ac42c8b101e5bb2","type":"library","name":"github.com/CycloneDX/cyclonedx-go","version":"v0.9.1","cpe":"cpe:2.3:a:CycloneDX:cyclonedx-go:v0.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX:cyclonedx_go:v0.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yffaWOZsv77oTJa/SdVZYdgAgFioCeycBUKkqS2qzQM="}]},{"bom-ref":"pkg:golang/github.com/aymerick/douceur@v0.2.0?package-id=bd11718e529f0384","type":"library","name":"github.com/aymerick/douceur","version":"v0.2.0","cpe":"cpe:2.3:a:aymerick:douceur:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aymerick/douceur@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Mv+mAeH1Q+n9Fr+oyamOlAkUNPWPlA8PPGR0QAaYuPk="}]},{"bom-ref":"pkg:golang/github.com/briandowns/spinner@v1.23.1?package-id=644e3e1460270da6","type":"library","name":"github.com/briandowns/spinner","version":"v1.23.1","cpe":"cpe:2.3:a:briandowns:spinner:v1.23.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/briandowns/spinner@v1.23.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:t5fDPmScwUjozhDj4FA46p5acZWIPXYE30qW2Ptu650="}]},{"bom-ref":"pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=4fff1eaa0bc0be66","type":"library","name":"github.com/davecgh/go-spew","version":"v1.1.1","cpe":"cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davecgh/go-spew@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davecgh:go_spew:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c="}]},{"bom-ref":"pkg:golang/github.com/devops-kung-fu/common@v0.2.6?package-id=b55a7be3bbabdab0","type":"library","name":"github.com/devops-kung-fu/common","version":"v0.2.6","cpe":"cpe:2.3:a:devops-kung-fu:common:v0.2.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/devops-kung-fu/common@v0.2.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:devops_kung_fu:common:v0.2.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devops-kung:common:v0.2.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devops_kung:common:v0.2.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devops:common:v0.2.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HNL9suXELXHiSg7Ze0VinNkbngrBjovKYWPOckuarKc="}]},{"bom-ref":"pkg:golang/github.com/fatih/color@v1.17.0?package-id=e8d71339217567f5","type":"library","name":"github.com/fatih/color","version":"v1.17.0","cpe":"cpe:2.3:a:fatih:color:v1.17.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fatih/color@v1.17.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GlRw1BRJxkpqUCBKzKOw098ed57fEsKeNjpTe3cSjK4="}]},{"bom-ref":"pkg:golang/github.com/go-resty/resty/v2@v2.15.2?package-id=90547ee9b2b360ec","type":"library","name":"github.com/go-resty/resty/v2","version":"v2.15.2","cpe":"cpe:2.3:a:resty_project:resty:v2.15.2:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/go-resty/resty/v2@v2.15.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wLGqKU9l9tOIa2RyePoyu4ZUnDkUWfp2LZ0u6fMXExc="}]},{"bom-ref":"pkg:golang/github.com/gomarkdown/markdown@v0.0.0-20240730141124-034f12af3bf6?package-id=f10337617d742bd0","type":"library","name":"github.com/gomarkdown/markdown","version":"v0.0.0-20240730141124-034f12af3bf6","cpe":"cpe:2.3:a:gomarkdown:markdown:v0.0.0-20240730141124-034f12af3bf6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gomarkdown/markdown@v0.0.0-20240730141124-034f12af3bf6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZPy+2XJ8u0bB3sNFi+I72gMEMS7MTg7aZCCXPOjV8iw="}]},{"bom-ref":"pkg:golang/github.com/google/go-github@v17.0.0%2Bincompatible?package-id=1a7031072d62d6d6","type":"library","name":"github.com/google/go-github","version":"v17.0.0+incompatible","cpe":"cpe:2.3:a:google:go-github:v17.0.0\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-github@v17.0.0%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_github:v17.0.0\\+incompatible:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N0LgJ1j65A7kfXrZnUDaYCs/Sf4rEjNlfyDHW9dolSY="}]},{"bom-ref":"pkg:golang/github.com/google/go-querystring@v1.1.0?package-id=eaef197a46ea3fb0","type":"library","name":"github.com/google/go-querystring","version":"v1.1.0","cpe":"cpe:2.3:a:google:go-querystring:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-querystring@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_querystring:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8="}]},{"bom-ref":"pkg:golang/github.com/google/osv-scanner@v1.8.5?package-id=285b3a5c3dae1596","type":"library","name":"github.com/google/osv-scanner","version":"v1.8.5","cpe":"cpe:2.3:a:google:osv-scanner:v1.8.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/osv-scanner@v1.8.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:osv_scanner:v1.8.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zKg12vmj2A0FZ0fscTjVpKVeDhLICVlAOsLe0HZtyXU="}]},{"bom-ref":"pkg:golang/github.com/gookit/color@v1.5.4?package-id=1317002b687ff42e","type":"library","name":"github.com/gookit/color","version":"v1.5.4","cpe":"cpe:2.3:a:gookit:color:v1.5.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gookit/color@v1.5.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FZmqs7XOyGgCAxmWyPslpiok1k05wmY3SJTytgvYFs0="}]},{"bom-ref":"pkg:golang/github.com/gorilla/css@v1.0.1?package-id=c0c657c3696a9fc8","type":"library","name":"github.com/gorilla/css","version":"v1.0.1","cpe":"cpe:2.3:a:gorilla:css:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gorilla/css@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ntNaBIghp6JmvWnxbZKANoLyuXTPZ4cAMlo6RyhlbO8="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/jarcoal/httpmock@v1.3.1?package-id=80beefff3f36db31","type":"library","name":"github.com/jarcoal/httpmock","version":"v1.3.1","cpe":"cpe:2.3:a:jarcoal:httpmock:v1.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jarcoal/httpmock@v1.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iUx3whfZWVf3jT01hQTO/Eo5sAYtB2/rqaUuOtpInww="}]},{"bom-ref":"pkg:golang/github.com/jedib0t/go-pretty/v6@v6.5.9?package-id=e51fe453cb53bdf9","type":"library","name":"github.com/jedib0t/go-pretty/v6","version":"v6.5.9","cpe":"cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.5.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jedib0t/go-pretty/v6@v6.5.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.5.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ACteMBRrrmm1gMsXe9PSTOClQ63IXDUt03H5U+UV8OU="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=898b7c8b52706e63","type":"library","name":"github.com/mattn/go-colorable","version":"v0.1.13","cpe":"cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-colorable@v0.1.13","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.20?package-id=f4619afab7c4111c","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.20","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.20","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.16?package-id=898c0bba93674d22","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.16","cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.16:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.16","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.16:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc="}]},{"bom-ref":"pkg:golang/github.com/microcosm-cc/bluemonday@v1.0.27?package-id=72b841f6456c6cb6","type":"library","name":"github.com/microcosm-cc/bluemonday","version":"v1.0.27","cpe":"cpe:2.3:a:microcosm-cc:bluemonday:v1.0.27:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/microcosm-cc/bluemonday@v1.0.27","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:microcosm_cc:bluemonday:v1.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:microcosm:bluemonday:v1.0.27:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MpEUotklkwCSLeH+Qdx1VJgNqLlpY2KXwXFM08ygZfk="}]},{"bom-ref":"pkg:golang/github.com/package-url/packageurl-go@v0.1.3?package-id=0233e14d43cef3a8","type":"library","name":"github.com/package-url/packageurl-go","version":"v0.1.3","cpe":"cpe:2.3:a:package-url:packageurl-go:v0.1.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/package-url/packageurl-go@v0.1.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-url:packageurl_go:v0.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_url:packageurl-go:v0.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_url:packageurl_go:v0.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:packageurl-go:v0.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:packageurl_go:v0.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4juMED3hHiz0set3Vq3KeQ75KD1avthoXLtmE3I0PLs="}]},{"bom-ref":"pkg:golang/github.com/pmezard/go-difflib@v1.0.0?package-id=2e9153c8c5a4f906","type":"library","name":"github.com/pmezard/go-difflib","version":"v1.0.0","cpe":"cpe:2.3:a:pmezard:go-difflib:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pmezard/go-difflib@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pmezard:go_difflib:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM="}]},{"bom-ref":"pkg:golang/github.com/remeh/sizedwaitgroup@v1.0.0?package-id=0ec9233dfa27690e","type":"library","name":"github.com/remeh/sizedwaitgroup","version":"v1.0.0","cpe":"cpe:2.3:a:remeh:sizedwaitgroup:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/remeh/sizedwaitgroup@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VNGGFwNo/R5+MJBf6yrsr110p0m4/OX4S3DCy7Kyl5E="}]},{"bom-ref":"pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=2c0de3c260aa0d91","type":"library","name":"github.com/rivo/uniseg","version":"v0.4.7","cpe":"cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rivo/uniseg@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="}]},{"bom-ref":"pkg:golang/github.com/sashabaranov/go-openai@v1.30.3?package-id=8fdd964b6781636c","type":"library","name":"github.com/sashabaranov/go-openai","version":"v1.30.3","cpe":"cpe:2.3:a:sashabaranov:go-openai:v1.30.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sashabaranov/go-openai@v1.30.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sashabaranov:go_openai:v1.30.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TEdRP3otRXX2A7vLoU+kI5XpoSo7VUUlM/rEttUqgek="}]},{"bom-ref":"pkg:golang/github.com/spf13/afero@v1.11.0?package-id=f55db4944dda030e","type":"library","name":"github.com/spf13/afero","version":"v1.11.0","cpe":"cpe:2.3:a:spf13:afero:v1.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/afero@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WJQKhtpdm3v2IzqG8VMqrr6Rf3UYpEF239Jy9wNepM8="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.8.1?package-id=ff8b95e290b08cab","type":"library","name":"github.com/spf13/cobra","version":"v1.8.1","cpe":"cpe:2.3:a:spf13:cobra:v1.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=b7053341eda23113","type":"library","name":"github.com/spf13/pflag","version":"v1.0.5","cpe":"cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA="}]},{"bom-ref":"pkg:golang/github.com/stretchr/testify@v1.9.0?package-id=1e92eaf826745a46","type":"library","name":"github.com/stretchr/testify","version":"v1.9.0","cpe":"cpe:2.3:a:stretchr:testify:v1.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/testify@v1.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg="}]},{"bom-ref":"pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e?package-id=470cccbaad5c75a4","type":"library","name":"github.com/xo/terminfo","version":"v0.0.0-20220910002029-abceb7e1c41e","cpe":"cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JVG44RsyaB9T2KIHavMF/ppJZNG9ZpyihvCd0w101no="}]},{"bom-ref":"pkg:golang/golang.org/x/exp@v0.0.0-20240909161429-701f63a606c0?package-id=16f8778747b5d753","type":"library","name":"golang.org/x/exp","version":"v0.0.0-20240909161429-701f63a606c0","cpe":"cpe:2.3:a:golang:x\\/exp:v0.0.0-20240909161429-701f63a606c0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/exp@v0.0.0-20240909161429-701f63a606c0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:e66Fs6Z+fZTbFBAxKfP3PALWBtpfqks2bwGcexMxgtk="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.21.0?package-id=3f5468cdd228ca24","type":"library","name":"golang.org/x/mod","version":"v0.21.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.21.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.21.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vvrHzRwRfVKSiLrG+d4FMl/Qi4ukBCE6kZlTUkDYRT0="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.29.0?package-id=54ee9db42318ea26","type":"library","name":"golang.org/x/net","version":"v0.29.0","cpe":"cpe:2.3:a:golang:networking:v0.29.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.29.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.29.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5ORfpBpCs4HzDYoodCDBbwHzdR5UrLBZ3sOnUJmFoHo="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.8.0?package-id=6ed10f6c5bd5d7b0","type":"library","name":"golang.org/x/sync","version":"v0.8.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.25.0?package-id=1e8c7467caf8d2dc","type":"library","name":"golang.org/x/sys","version":"v0.25.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.25.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.25.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:r+8e+loiHxRqhXVl6ML1nO3l1+oFoWbnlu2Ehimmi34="}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.24.0?package-id=eed7cec5e8136648","type":"library","name":"golang.org/x/term","version":"v0.24.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.24.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Mh5cbb+Zk2hqqXNO7S1iTjEphVL+jb8ZWaqh/g+JWkM="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.18.0?package-id=c3b2b6317226c3b2","type":"library","name":"golang.org/x/text","version":"v0.18.0","cpe":"cpe:2.3:a:golang:text:v0.18.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.18.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XvMDiNzPAl0jr17s6W9lcaIhGUfUORdGCNsuLmPG224="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=716c668b92999095","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:github/goreleaser/goreleaser-action@v5.1.0?package-id=95f8e065814a4f06","type":"library","name":"goreleaser/goreleaser-action","version":"v5.1.0","cpe":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser-action:v5.1.0:*:*:*:*:*:*:*","purl":"pkg:github/goreleaser/goreleaser-action@v5.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser_action:v5.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser-action:v5.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser_action:v5.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser-action:v5.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser_action:v5.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"bb57daef49cf4d8e","type":"file","name":"/.github/workflows/go-quality.yml","hashes":[{"alg":"SHA-1","content":"5511376944738f45773eb8e06c869636b4c5790f"},{"alg":"SHA-256","content":"bf053e43e772261e1158eebe7030063180cd2ad6dd50efe92bbd4e6b68d3fb3d"}]},{"bom-ref":"cc210d8a1a5f5704","type":"file","name":"/.github/workflows/release.yml","hashes":[{"alg":"SHA-1","content":"83b6d8624a3ece3fc989ff0d940b0f7c7dc8754e"},{"alg":"SHA-256","content":"db36dcb1c1d31814c2e5a8b1a8635783415c03cbcd3b7fc1ecc58f6a7eff5ba1"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"3668ebe9f78166f013d63da8ea7ea700b669006b"},{"alg":"SHA-256","content":"242eafd10d2f4736d3e426d483fd34932211584f7721b8f6aab2f407327c957e"}]}]}