{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:add41829-9186-479c-884e-79bfc680dc24","version":1,"metadata":{"timestamp":"2026-11-02T03:07:34Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"8623f22acf306ff6","type":"file","name":"google/osv-scanner","version":"v2.7.0"}},"components":[{"bom-ref":"f3e4d4d2bb3a89c5","type":"library","name":"./actions/internal/format-action","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/actions\\/internal\\/format-action:.\\/actions\\/internal\\/format-action:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format-action:.\\/actions\\/internal\\/format_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format_action:.\\/actions\\/internal\\/format-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format_action:.\\/actions\\/internal\\/format_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format:.\\/actions\\/internal\\/format-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format:.\\/actions\\/internal\\/format_action:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/checks.yml"}]},{"bom-ref":"02fd5c6f22821592","type":"library","name":"./actions/internal/format-action","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/actions\\/internal\\/format-action:.\\/actions\\/internal\\/format-action:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format-action:.\\/actions\\/internal\\/format_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format_action:.\\/actions\\/internal\\/format-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format_action:.\\/actions\\/internal\\/format_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format:.\\/actions\\/internal\\/format-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/format:.\\/actions\\/internal\\/format_action:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"002c3ae74a1a6d0a","type":"library","name":"./actions/internal/lint-action","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/actions\\/internal\\/lint-action:.\\/actions\\/internal\\/lint-action:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint-action:.\\/actions\\/internal\\/lint_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint_action:.\\/actions\\/internal\\/lint-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint_action:.\\/actions\\/internal\\/lint_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint:.\\/actions\\/internal\\/lint-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint:.\\/actions\\/internal\\/lint_action:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/checks.yml"}]},{"bom-ref":"11c998188f617833","type":"library","name":"./actions/internal/lint-action","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/actions\\/internal\\/lint-action:.\\/actions\\/internal\\/lint-action:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint-action:.\\/actions\\/internal\\/lint_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint_action:.\\/actions\\/internal\\/lint-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint_action:.\\/actions\\/internal\\/lint_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint:.\\/actions\\/internal\\/lint-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/lint:.\\/actions\\/internal\\/lint_action:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"e1751fe1d1cb5e4d","type":"library","name":"./actions/internal/test-action","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/actions\\/internal\\/test-action:.\\/actions\\/internal\\/test-action:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test-action:.\\/actions\\/internal\\/test_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test_action:.\\/actions\\/internal\\/test-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test_action:.\\/actions\\/internal\\/test_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test:.\\/actions\\/internal\\/test-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test:.\\/actions\\/internal\\/test_action:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"7f1382de2d6c6a2a","type":"library","name":"./actions/internal/test-action","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/actions\\/internal\\/test-action:.\\/actions\\/internal\\/test-action:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test-action:.\\/actions\\/internal\\/test_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test_action:.\\/actions\\/internal\\/test-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test_action:.\\/actions\\/internal\\/test_action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test:.\\/actions\\/internal\\/test-action:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/actions\\/internal\\/test:.\\/actions\\/internal\\/test_action:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=696805d04e804c70","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=224cdc9be1ac5f82","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=687505a652981f81","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/cassettes.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=602648e1fd695564","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/checks.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d3fe9e4ca6cc9f60","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=f563a69a9a90c28e","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/dependencies.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=bb13cd512874c451","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/docs-deploy.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=7dd854e4c565c8a1","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser-nightly.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=f3abcc0e2244d15b","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=bef808a890b77028","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/links.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=8928a5a09044497b","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=f85cbeb6ed5075fb","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/renovate-validator.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=18bcb75bb7f8e928","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecards.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=a7f7258cf4dc8b1f","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/snapshots.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=267e9b6939f430e5","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=fa2ac9b6d5a8b9b2","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/zizmor.yml"}]},{"bom-ref":"pkg:github/actions/configure-pages@v6.0.0?package-id=92fc6c2983c21800","type":"library","name":"actions/configure-pages","version":"v6.0.0","cpe":"cpe:2.3:a:actions\\/configure-pages:actions\\/configure-pages:v6.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/configure-pages@v6.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure-pages:actions\\/configure_pages:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure_pages:actions\\/configure-pages:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure_pages:actions\\/configure_pages:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure:actions\\/configure-pages:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure:actions\\/configure_pages:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docs-deploy.yml"}]},{"bom-ref":"pkg:github/actions/deploy-pages@v5.0.1?package-id=cbd449c1b6411b3f","type":"library","name":"actions/deploy-pages","version":"v5.0.1","cpe":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy-pages:v5.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/deploy-pages@v5.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy_pages:v5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy-pages:v5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy_pages:v5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy-pages:v5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy_pages:v5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docs-deploy.yml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=db5c10e11bfd8482","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=47c0c242c4a688ea","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=63200da6bb78a33e","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cassettes.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=647bf3213d69cfec","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/checks.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=1036e58251b1c99f","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=70a0d9c2cfd68236","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/dependencies.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=ac650a29acdc3fe7","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser-nightly.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=58dd45a333385b5f","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=f3b3f5387d9c6237","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=716c816e420f0d8f","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/snapshots.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=88fa45823b0e1dd0","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:github/actions/setup-node@v7.0.0?package-id=69ba229bd6535922","type":"library","name":"actions/setup-node","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-node@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/renovate-validator.yml"}]},{"bom-ref":"pkg:github/actions/stale@v11.0.0?package-id=0c5baaf9405bea89","type":"library","name":"actions/stale","version":"v11.0.0","cpe":"cpe:2.3:a:actions\\/stale:actions\\/stale:v11.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/stale@v11.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/staleness.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=d00a59b54cfcf031","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=78a57baade6a9ac1","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecards.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=abb23678262f8f40","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:github/actions/upload-pages-artifact@v5?package-id=841ee68ae2b7a3c2","type":"library","name":"actions/upload-pages-artifact","version":"v5","cpe":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload-pages-artifact:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-pages-artifact@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload_pages_artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload-pages-artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload_pages_artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload-pages-artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload_pages_artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload-pages-artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload_pages_artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-pages-artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_pages_artifact:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docs-deploy.yml"}]},{"bom-ref":"pkg:github/amannn/action-semantic-pull-request@v6.1.1?package-id=164d70e34ea2f786","type":"library","name":"amannn/action-semantic-pull-request","version":"v6.1.1","cpe":"cpe:2.3:a:amannn\\/action-semantic-pull-request:amannn\\/action-semantic-pull-request:v6.1.1:*:*:*:*:*:*:*","purl":"pkg:github/amannn/action-semantic-pull-request@v6.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action-semantic-pull-request:amannn\\/action_semantic_pull_request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action_semantic_pull_request:amannn\\/action-semantic-pull-request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action_semantic_pull_request:amannn\\/action_semantic_pull_request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action-semantic-pull:amannn\\/action-semantic-pull-request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action-semantic-pull:amannn\\/action_semantic_pull_request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action_semantic_pull:amannn\\/action-semantic-pull-request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action_semantic_pull:amannn\\/action_semantic_pull_request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action-semantic:amannn\\/action-semantic-pull-request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action-semantic:amannn\\/action_semantic_pull_request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action_semantic:amannn\\/action-semantic-pull-request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action_semantic:amannn\\/action_semantic_pull_request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action:amannn\\/action-semantic-pull-request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:amannn\\/action:amannn\\/action_semantic_pull_request:v6.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/title.yml"}]},{"bom-ref":"pkg:golang/bitbucket.org/creachadair/stringset@v0.0.14?package-id=6610d138a1b37c90","type":"library","name":"bitbucket.org/creachadair/stringset","version":"v0.0.14","cpe":"cpe:2.3:a:creachadair:stringset:v0.0.14:*:*:*:*:*:*:*","purl":"pkg:golang/bitbucket.org/creachadair/stringset@v0.0.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:t1ejQyf8utS4GZV/4fM+1gvYucggZkfhb+tMobDxYOE="}]},{"bom-ref":"pkg:golang/charm.land/glamour/v2@v2.0.1?package-id=8b61d4d707967eb5","type":"library","name":"charm.land/glamour/v2","version":"v2.0.1","cpe":"cpe:2.3:a:glamour:v2:v2.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/charm.land/glamour/v2@v2.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xl+r00A4aJWU0z8fgwKd9fQQ4rsphqGUzuEiXZP5n+c="}]},{"bom-ref":"pkg:golang/charm.land/lipgloss/v2@v2.0.6?package-id=812d125bcbb0e72e","type":"library","name":"charm.land/lipgloss/v2","version":"v2.0.6","cpe":"cpe:2.3:a:lipgloss:v2:v2.0.6:*:*:*:*:*:*:*","purl":"pkg:golang/charm.land/lipgloss/v2@v2.0.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EaGKeuA8FvF+v2BT5VmZd2LoYLaMZJXA5n34th8nCIQ="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=c14bc92e6fc464c8","type":"library","name":"cloud.google.com/go/compute/metadata","version":"v0.9.0","cpe":"cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="}]},{"bom-ref":"pkg:golang/dario.cat/mergo@v1.0.2?package-id=8a417a55484d15ee","type":"library","name":"dario.cat/mergo","version":"v1.0.2","purl":"pkg:golang/dario.cat/mergo@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8="}]},{"bom-ref":"pkg:golang/deps.dev/api/v3@v3.0.0-20260811035547-133c155ce203?package-id=61a6e763dee93ed1","type":"library","name":"deps.dev/api/v3","version":"v3.0.0-20260811035547-133c155ce203","cpe":"cpe:2.3:a:api:v3:v3.0.0-20260811035547-133c155ce203:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/api/v3@v3.0.0-20260811035547-133c155ce203","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:609W3fMlUT5DRVkVUFSpA3a8FvWp0NCAF5auaspsews="}]},{"bom-ref":"pkg:golang/deps.dev/api/v3alpha@v0.0.0-20260811035547-133c155ce203?package-id=4861938e8fbaad1d","type":"library","name":"deps.dev/api/v3alpha","version":"v0.0.0-20260811035547-133c155ce203","cpe":"cpe:2.3:a:api:v3alpha:v0.0.0-20260811035547-133c155ce203:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/api/v3alpha@v0.0.0-20260811035547-133c155ce203","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W5ZqGOPq1Yz7nrAXKznIsYjsgjG84jBG5seCaNtaSlI="}]},{"bom-ref":"pkg:golang/deps.dev/util/maven@v0.0.0-20260928000106-0e158e8db197?package-id=21eeac69a385ecad","type":"library","name":"deps.dev/util/maven","version":"v0.0.0-20260928000106-0e158e8db197","cpe":"cpe:2.3:a:util:maven:v0.0.0-20260928000106-0e158e8db197:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/util/maven@v0.0.0-20260928000106-0e158e8db197","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rtUqRyhX/4PBA14cYm13S6Tjp2xNMOhOM0eOSOSTAOc="}]},{"bom-ref":"pkg:golang/deps.dev/util/pypi@v0.0.0-20260727054525-2946ae4a6141?package-id=270a6b987c35fd5f","type":"library","name":"deps.dev/util/pypi","version":"v0.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:util:pypi:v0.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/util/pypi@v0.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WEYLTUP83k5nruc5a8FrgNyWP2s+ArFL308X4tVgX38="}]},{"bom-ref":"pkg:golang/deps.dev/util/resolve@v0.0.0-20260727054525-2946ae4a6141?package-id=735fc1059508a05f","type":"library","name":"deps.dev/util/resolve","version":"v0.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:util:resolve:v0.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/util/resolve@v0.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:d9WOtqC8tF8hfBBt14AfWACsr9/j0Zstgph6np5IBvI="}]},{"bom-ref":"pkg:golang/deps.dev/util/semver@v0.0.0-20260727054525-2946ae4a6141?package-id=2a6db37800f3ca9f","type":"library","name":"deps.dev/util/semver","version":"v0.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:util:semver:v0.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/util/semver@v0.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZQY7wh3yBPpxAYfi5M4qq1a4ZJ5Z85KbJCL+awX7snA="}]},{"bom-ref":"pkg:github/docker/login-action@v4.6.0?package-id=296de0c9da76acae","type":"library","name":"docker/login-action","version":"v4.6.0","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v4.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser-nightly.yml"}]},{"bom-ref":"pkg:github/docker/login-action@v4.6.0?package-id=6cdbd3b2612069af","type":"library","name":"docker/login-action","version":"v4.6.0","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v4.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v4.4.1?package-id=bd181a77f304d582","type":"library","name":"docker/setup-buildx-action","version":"v4.4.1","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v4.4.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser-nightly.yml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v4.4.1?package-id=4ceeb2ff28818c49","type":"library","name":"docker/setup-buildx-action","version":"v4.4.1","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v4.4.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v4.4.1?package-id=60386386ff282744","type":"library","name":"docker/setup-buildx-action","version":"v4.4.1","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v4.4.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:github/docker/setup-qemu-action@v4.4.0?package-id=b40132935d762cb1","type":"library","name":"docker/setup-qemu-action","version":"v4.4.0","cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-qemu-action@v4.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser-nightly.yml"}]},{"bom-ref":"pkg:github/docker/setup-qemu-action@v4.4.0?package-id=cf6446ad7d6aecc3","type":"library","name":"docker/setup-qemu-action","version":"v4.4.0","cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-qemu-action@v4.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yml"}]},{"bom-ref":"pkg:github/docker/setup-qemu-action@v4.4.0?package-id=5c7f8cf3a2f1a812","type":"library","name":"docker/setup-qemu-action","version":"v4.4.0","cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-qemu-action@v4.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:github/dorny/paths-filter@v4.0.3?package-id=dcdd068ee1f6bac6","type":"library","name":"dorny/paths-filter","version":"v4.0.3","cpe":"cpe:2.3:a:dorny\\/paths-filter:dorny\\/paths-filter:v4.0.3:*:*:*:*:*:*:*","purl":"pkg:github/dorny/paths-filter@v4.0.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:dorny\\/paths-filter:dorny\\/paths_filter:v4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dorny\\/paths_filter:dorny\\/paths-filter:v4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dorny\\/paths_filter:dorny\\/paths_filter:v4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dorny\\/paths:dorny\\/paths-filter:v4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dorny\\/paths:dorny\\/paths_filter:v4.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:golang/github.com/burntsushi/toml@v1.6.0?package-id=6d8d86ef9fe513ea","type":"library","name":"github.com/BurntSushi/toml","version":"v1.6.0","cpe":"cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/BurntSushi/toml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk="}]},{"bom-ref":"pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.12.0?package-id=5f0109a749bf9b17","type":"library","name":"github.com/CycloneDX/cyclonedx-go","version":"v0.12.0","cpe":"cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/7Jum36UA6V043tQZ/fE3jf+Nf9gn/qxUFfd7QReMy8="}]},{"bom-ref":"pkg:golang/github.com/gehirninc/crypt@v0.0.0-20230320061759-8cc1b52080c5?package-id=1f3555263afce68d","type":"library","name":"github.com/GehirnInc/crypt","version":"v0.0.0-20230320061759-8cc1b52080c5","cpe":"cpe:2.3:a:GehirnInc:crypt:v0.0.0-20230320061759-8cc1b52080c5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GehirnInc/crypt@v0.0.0-20230320061759-8cc1b52080c5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IEjq88XO4PuBDcvmjQJcQGg+w+UaafSy8G5Kcb5tBhI="}]},{"bom-ref":"pkg:golang/github.com/microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29?package-id=fc378e330b798bc4","type":"library","name":"github.com/Microsoft/go-winio","version":"v0.6.3-0.20251027160822-ad3df93bed29","cpe":"cpe:2.3:a:Microsoft:go-winio:v0.6.3-0.20251027160822-ad3df93bed29:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Microsoft:go_winio:v0.6.3-0.20251027160822-ad3df93bed29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0kQAzHq8vLs7Pptv+7TxjdETLf/nIqJpIB4oC6Ba4vY="}]},{"bom-ref":"pkg:golang/github.com/protonmail/go-crypto@v1.4.1?package-id=6d5b046a5726eafa","type":"library","name":"github.com/ProtonMail/go-crypto","version":"v1.4.1","cpe":"cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9RfcZHqEQUvP8RzecWEUafnZVtEvrBVL9BiF67IQOfM="}]},{"bom-ref":"pkg:golang/github.com/velocidex/json@v0.0.0-20220224052537-92f3c0326e5a?package-id=2c2c169dc6942f7d","type":"library","name":"github.com/Velocidex/json","version":"v0.0.0-20220224052537-92f3c0326e5a","cpe":"cpe:2.3:a:Velocidex:json:v0.0.0-20220224052537-92f3c0326e5a:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Velocidex/json@v0.0.0-20220224052537-92f3c0326e5a","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AeXPUzhU0yhID/v5JJEIkjaE85ASe+Vh4Kuv1RSLL+4="}]},{"bom-ref":"pkg:golang/github.com/velocidex/ordereddict@v0.0.0-20250821063524-02dc06e46238?package-id=1ec53b1cfc7a54dd","type":"library","name":"github.com/Velocidex/ordereddict","version":"v0.0.0-20250821063524-02dc06e46238","cpe":"cpe:2.3:a:Velocidex:ordereddict:v0.0.0-20250821063524-02dc06e46238:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Velocidex/ordereddict@v0.0.0-20250821063524-02dc06e46238","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Q2DFf1f4fiz1/V4cu2wojDKF6/DfjIY7QmfVAr/UnJY="}]},{"bom-ref":"pkg:golang/github.com/velocidex/yaml/v2@v2.2.8?package-id=9343f513e63d3297","type":"library","name":"github.com/Velocidex/yaml/v2","version":"v2.2.8","cpe":"cpe:2.3:a:Velocidex:yaml\\/v2:v2.2.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Velocidex/yaml/v2@v2.2.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GUrSy4SBJ6RjGt43k6MeBKtw2z/27gh4A3hfFmFY3No="}]},{"bom-ref":"pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6?package-id=76e4e0dd582324a1","type":"library","name":"github.com/aead/serpent","version":"v0.0.0-20160714141033-fba169763ea6","cpe":"cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5L8Mj9Co9sJVgW3TpYk2gxGJnDjsYuboNTcRmbtGKGs="}]},{"bom-ref":"pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=64d88b1cfcc4917a","type":"library","name":"github.com/agext/levenshtein","version":"v1.2.3","cpe":"cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/agext/levenshtein@v1.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo="}]},{"bom-ref":"pkg:golang/github.com/alecthomas/chroma/v2@v2.19.0?package-id=18d36576a2b32f96","type":"library","name":"github.com/alecthomas/chroma/v2","version":"v2.19.0","cpe":"cpe:2.3:a:alecthomas:chroma\\/v2:v2.19.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alecthomas/chroma/v2@v2.19.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Im+SLRgT8maArxv81mULDWN8oKxkzboH07CHesxElq4="}]},{"bom-ref":"pkg:golang/github.com/anchore/go-lzo@v0.1.0?package-id=7298cbdb17ec86e4","type":"library","name":"github.com/anchore/go-lzo","version":"v0.1.0","cpe":"cpe:2.3:a:anchore:go-lzo:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/anchore/go-lzo@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore:go_lzo:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NgAacnzqPeGH49Ky19QKLBZEuFRqtTG9cdaucc3Vncs="}]},{"bom-ref":"pkg:golang/github.com/anchore/go-struct-converter@v0.1.0?package-id=7997500b1202e5fd","type":"library","name":"github.com/anchore/go-struct-converter","version":"v0.1.0","cpe":"cpe:2.3:a:anchore:go-struct-converter:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/anchore/go-struct-converter@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore:go_struct_converter:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2rDRssAl6mgKBSLNiVCMADgZRhoqtw9dedlWa0OhD30="}]},{"bom-ref":"pkg:golang/github.com/atotto/clipboard@v0.1.4?package-id=aab02fd2812f41a4","type":"library","name":"github.com/atotto/clipboard","version":"v0.1.4","cpe":"cpe:2.3:a:atotto:clipboard:v0.1.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/atotto/clipboard@v0.1.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EH0zSVneZPSuFR11BlR9YppQTVDbh5+16AmcJi4g1z4="}]},{"bom-ref":"pkg:golang/github.com/aymanbagabas/go-osc52/v2@v2.0.1?package-id=3d7292ae0be0db1e","type":"library","name":"github.com/aymanbagabas/go-osc52/v2","version":"v2.0.1","cpe":"cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aymanbagabas/go-osc52/v2@v2.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k="}]},{"bom-ref":"pkg:golang/github.com/aymerick/douceur@v0.2.0?package-id=bd11718e529f0384","type":"library","name":"github.com/aymerick/douceur","version":"v0.2.0","cpe":"cpe:2.3:a:aymerick:douceur:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aymerick/douceur@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Mv+mAeH1Q+n9Fr+oyamOlAkUNPWPlA8PPGR0QAaYuPk="}]},{"bom-ref":"pkg:golang/github.com/ayoubfaouzi/pkcs7@v0.2.3?package-id=3069607b00ba34ae","type":"library","name":"github.com/ayoubfaouzi/pkcs7","version":"v0.2.3","cpe":"cpe:2.3:a:ayoubfaouzi:pkcs7:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ayoubfaouzi/pkcs7@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XGCYHteXgclHnNlPdCF8aFyoUKwP9VhLQp+VX+hBZ3U="}]},{"bom-ref":"pkg:golang/github.com/bazelbuild/buildtools@v0.0.0-20260716142318-04cf7de1434f?package-id=72d6824e53650ed9","type":"library","name":"github.com/bazelbuild/buildtools","version":"v0.0.0-20260716142318-04cf7de1434f","cpe":"cpe:2.3:a:bazelbuild:buildtools:v0.0.0-20260716142318-04cf7de1434f:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bazelbuild/buildtools@v0.0.0-20260716142318-04cf7de1434f","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2mT6QcXmMFtvg7bezs1Fef7nnpJyeCmfWoWNjwtvNZ4="}]},{"bom-ref":"pkg:golang/github.com/canonical/chisel-manifest@v1.2.0?package-id=65027a860c94de28","type":"library","name":"github.com/canonical/chisel-manifest","version":"v1.2.0","cpe":"cpe:2.3:a:canonical:chisel-manifest:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/canonical/chisel-manifest@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:canonical:chisel_manifest:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kFB9fBP33CvH+RLbTYLuKtFFICpq2JmH4xtYvBqpj3I="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/bubbles@v1.0.0?package-id=97cfbf7b3355753f","type":"library","name":"github.com/charmbracelet/bubbles","version":"v1.0.0","cpe":"cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/bubbles@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:12J8/ak/uCZEMQ6KU7pcfwceyjLlWsDLAxB5fXonfvc="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10?package-id=0877d4ed51165bc6","type":"library","name":"github.com/charmbracelet/bubbletea","version":"v1.3.10","cpe":"cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:otUDHWMMzQSB0Pkc87rm691KZ3SWa4KUlvF9nRvCICw="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3?package-id=336b7ead245bcb11","type":"library","name":"github.com/charmbracelet/colorprofile","version":"v0.4.3","cpe":"cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QPa1IWkYI+AOB+fE+mg/5/4HRMZcaXex9t5KX76i20Q="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/lipgloss@v1.1.1-0.20250404203927-76690c660834?package-id=c40cdf35808273e8","type":"library","name":"github.com/charmbracelet/lipgloss","version":"v1.1.1-0.20250404203927-76690c660834","cpe":"cpe:2.3:a:charmbracelet:lipgloss:v1.1.1-0.20250404203927-76690c660834:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/lipgloss@v1.1.1-0.20250404203927-76690c660834","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZR7e0ro+SZZiIZD7msJyA+NjkCNNavuiPBLgerbOziE="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/ultraviolet@v0.0.0-20260811164956-006e29f97886?package-id=405df5f1e5fc38df","type":"library","name":"github.com/charmbracelet/ultraviolet","version":"v0.0.0-20260811164956-006e29f97886","cpe":"cpe:2.3:a:charmbracelet:ultraviolet:v0.0.0-20260811164956-006e29f97886:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/ultraviolet@v0.0.0-20260811164956-006e29f97886","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rdnVWKgJpTVXKuKuJyxDJ+NFJdUaUqGvyGy61OcvlbA="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/ansi@v0.11.8?package-id=1860f6e24e4caf7f","type":"library","name":"github.com/charmbracelet/x/ansi","version":"v0.11.8","cpe":"cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/ansi@v0.11.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JMFwp0CgDC2+jcOB162HH5k7I3FVbgFSMMYg7dSPBQQ="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/cellbuf@v0.0.15?package-id=da86d400c320b7cd","type":"library","name":"github.com/charmbracelet/x/cellbuf","version":"v0.0.15","cpe":"cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/cellbuf@v0.0.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ur3pZy0o6z/R7EylET877CBxaiE1Sp1GMxoFPAIztPI="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/exp/slice@v0.0.0-20260803091719-3755ebad01b1?package-id=5e70a6be73247766","type":"library","name":"github.com/charmbracelet/x/exp/slice","version":"v0.0.0-20260803091719-3755ebad01b1","cpe":"cpe:2.3:a:charmbracelet:x\\/exp\\/slice:v0.0.0-20260803091719-3755ebad01b1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/exp/slice@v0.0.0-20260803091719-3755ebad01b1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mg80wPD5ZV0wDYdZAhHilmwGaTv8uEedVRnNiM0TehA="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/term@v0.2.2?package-id=e16502c875bce6ab","type":"library","name":"github.com/charmbracelet/x/term","version":"v0.2.2","cpe":"cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/term@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xVRT/S2ZcKdhhOuSP4t5cLi5o+JxklsoEObBSgfgZRk="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/termios@v0.1.1?package-id=122c6871b274d1c8","type":"library","name":"github.com/charmbracelet/x/termios","version":"v0.1.1","cpe":"cpe:2.3:a:charmbracelet:x\\/termios:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/termios@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o3Q2bT8eqzGnGPOYheoYS8eEleT5ZVNYNy8JawjaNZY="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/windows@v0.2.2?package-id=dabfbb43fd792507","type":"library","name":"github.com/charmbracelet/x/windows","version":"v0.2.2","cpe":"cpe:2.3:a:charmbracelet:x\\/windows:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/windows@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IofanmuvaxnKHuV04sC0eBy/smG6kIKrWG2/jYn2GuM="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0?package-id=5c8b2642db8ea713","type":"library","name":"github.com/clipperhouse/displaywidth","version":"v0.11.0","cpe":"cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lBc6kY44VFw+TDx4I8opi/EtL9m20WSEFgwIwO+UVM8="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0?package-id=dfa0b50ab9a7e8bd","type":"library","name":"github.com/clipperhouse/uax29/v2","version":"v2.7.0","cpe":"cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJv2v7Vk="}]},{"bom-ref":"pkg:golang/github.com/cloudflare/circl@v1.6.4?package-id=cb1f4cab4c2a23b3","type":"library","name":"github.com/cloudflare/circl","version":"v1.6.4","cpe":"cpe:2.3:a:cloudflare:circl:v1.6.4:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/cloudflare/circl@v1.6.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pOXuDTCEYyzydgUpQ0CQz3LsinKjiSk6nNP5Lt5K64U="}]},{"bom-ref":"pkg:golang/github.com/compose-spec/compose-go/v2@v2.14.0?package-id=b733f7777cd62433","type":"library","name":"github.com/compose-spec/compose-go/v2","version":"v2.14.0","cpe":"cpe:2.3:a:compose-spec:compose-go\\/v2:v2.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/compose-spec/compose-go/v2@v2.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose-spec:compose_go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose_spec:compose-go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose_spec:compose_go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose:compose-go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose:compose_go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uaJeo5B3+OVlu+Rx2qLBcAdXPEUUzm5nQrRiGJafRAQ="}]},{"bom-ref":"pkg:golang/github.com/containerd/errdefs@v1.0.0?package-id=9500bbb18a20f8fd","type":"library","name":"github.com/containerd/errdefs","version":"v1.0.0","cpe":"cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/errdefs@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI="}]},{"bom-ref":"pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0?package-id=d39d8b735782a363","type":"library","name":"github.com/containerd/errdefs/pkg","version":"v0.3.0","cpe":"cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE="}]},{"bom-ref":"pkg:golang/github.com/containerd/typeurl/v2@v2.3.0?package-id=4d8c3323d78d639c","type":"library","name":"github.com/containerd/typeurl/v2","version":"v2.3.0","cpe":"cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/typeurl/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HZHPhRWo5XMy3QGQoPrUzbW/2ckwjfweHmOwlkIrPAQ="}]},{"bom-ref":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0?package-id=b481af457ff3ec17","type":"library","name":"github.com/cyphar/filepath-securejoin","version":"v0.7.0","cpe":"cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:s0Y3ITPy6sQn5xt54DuYvTF8hu134ooYLUb58DX/HjE="}]},{"bom-ref":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=e1e0f1232be39ea0","type":"library","name":"github.com/davecgh/go-spew","version":"v1.1.2-0.20180830191138-d8f796af33cc","cpe":"cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="}]},{"bom-ref":"pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb?package-id=21fe7058dddd40ea","type":"library","name":"github.com/deitch/magic","version":"v0.0.0-20240306090643-c67ab88f10cb","cpe":"cpe:2.3:a:deitch:magic:v0.0.0-20240306090643-c67ab88f10cb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4W/2rQ3wzEimF5s+J6OY3ODiQtJZ5W1sForSgogVXkY="}]},{"bom-ref":"pkg:golang/github.com/diskfs/go-diskfs@v1.7.0?package-id=6010a82c7ac8537d","type":"library","name":"github.com/diskfs/go-diskfs","version":"v1.7.0","cpe":"cpe:2.3:a:diskfs:go-diskfs:v1.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/diskfs/go-diskfs@v1.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:diskfs:go_diskfs:v1.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vonWmt5CMowXwUc79jWyGrf2DIMeoOjkLlMnQYGVOs8="}]},{"bom-ref":"pkg:golang/github.com/distribution/reference@v0.6.0?package-id=5cf5bbf310c710d0","type":"library","name":"github.com/distribution/reference","version":"v0.6.0","cpe":"cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/distribution/reference@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk="}]},{"bom-ref":"pkg:golang/github.com/djherbis/times@v1.6.0?package-id=5151ccce279e791c","type":"library","name":"github.com/djherbis/times","version":"v1.6.0","cpe":"cpe:2.3:a:djherbis:times:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/djherbis/times@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w2ctJ92J8fBvWPxugmXIv7Nz7Q3iDMKNx9v5ocVH20c="}]},{"bom-ref":"pkg:golang/github.com/dlclark/regexp2@v1.12.0?package-id=68bc698e8b8651fb","type":"library","name":"github.com/dlclark/regexp2","version":"v1.12.0","cpe":"cpe:2.3:a:dlclark:regexp2:v1.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dlclark/regexp2@v1.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0j4c5qQmnC6XOWNjP3PIXURXN2gWx76rd3KvgdPkCz8="}]},{"bom-ref":"pkg:golang/github.com/docker/cli@v29.7.1%2Bincompatible?package-id=37493d73ab4b69a9","type":"library","name":"github.com/docker/cli","version":"v29.7.1+incompatible","cpe":"cpe:2.3:a:docker:cli:v29.7.1\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/cli@v29.7.1%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ILZpP6B7fedIr6ANy824QkDp1WMJuouIq0O2SrBkB2w="}]},{"bom-ref":"pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8?package-id=21583d883112ee03","type":"library","name":"github.com/docker/docker-credential-helpers","version":"v0.9.8","cpe":"cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bIREROb7So6PRlq6KTtdS9MPEjC29OQRkFNlvK2OX8Q="}]},{"bom-ref":"pkg:golang/github.com/docker/go-connections@v0.8.1?package-id=166704c30495edb9","type":"library","name":"github.com/docker/go-connections","version":"v0.8.1","cpe":"cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/go-connections@v0.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JibmG5hULs5qXSr/cp/w3Pw5fZuStt4MOHMUExb29/M="}]},{"bom-ref":"pkg:golang/github.com/docker/go-units@v0.5.0?package-id=a9271522b4f3233c","type":"library","name":"github.com/docker/go-units","version":"v0.5.0","cpe":"cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/go-units@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4="}]},{"bom-ref":"pkg:golang/github.com/dsoprea/go-exfat@v0.0.0-20190906070738-5e932fbdb589?package-id=3d94d3e5c36ff57e","type":"library","name":"github.com/dsoprea/go-exfat","version":"v0.0.0-20190906070738-5e932fbdb589","cpe":"cpe:2.3:a:dsoprea:go-exfat:v0.0.0-20190906070738-5e932fbdb589:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dsoprea/go-exfat@v0.0.0-20190906070738-5e932fbdb589","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dsoprea:go_exfat:v0.0.0-20190906070738-5e932fbdb589:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LzrKhEeL5tqo8i86+5a8JgL5cEJBRspVm4FsKRK/gxA="}]},{"bom-ref":"pkg:golang/github.com/dsoprea/go-logging@v0.0.0-20200710184922-b02d349568dd?package-id=d7d000a9876efc27","type":"library","name":"github.com/dsoprea/go-logging","version":"v0.0.0-20200710184922-b02d349568dd","cpe":"cpe:2.3:a:dsoprea:go-logging:v0.0.0-20200710184922-b02d349568dd:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dsoprea/go-logging@v0.0.0-20200710184922-b02d349568dd","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dsoprea:go_logging:v0.0.0-20200710184922-b02d349568dd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:l+vLbuxptsC6VQyQsfD7NnEC8BZuFpz45PgY+pH8YTg="}]},{"bom-ref":"pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=8432997ae2bcf2c7","type":"library","name":"github.com/dustin/go-humanize","version":"v1.0.1","cpe":"cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dustin/go-humanize@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="}]},{"bom-ref":"pkg:golang/github.com/edsrzf/mmap-go@v1.2.0?package-id=df3b112da95d7dfb","type":"library","name":"github.com/edsrzf/mmap-go","version":"v1.2.0","cpe":"cpe:2.3:a:edsrzf:mmap-go:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/edsrzf/mmap-go@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:edsrzf:mmap_go:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hXLYlkbaPzt1SaQk+anYwKSRNhufIDCchSPkUD6dD84="}]},{"bom-ref":"pkg:golang/github.com/elliotwutingfeng/asciiset@v0.0.0-20260801111138-45c5fff54b41?package-id=465587111cd64492","type":"library","name":"github.com/elliotwutingfeng/asciiset","version":"v0.0.0-20260801111138-45c5fff54b41","cpe":"cpe:2.3:a:elliotwutingfeng:asciiset:v0.0.0-20260801111138-45c5fff54b41:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/elliotwutingfeng/asciiset@v0.0.0-20260801111138-45c5fff54b41","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:k6IHOr6orJ0s8nQ0b8QmuO8RVj0K3WYruDcQfcdqm8g="}]},{"bom-ref":"pkg:golang/github.com/emirpasic/gods@v1.18.1?package-id=091896950bf83083","type":"library","name":"github.com/emirpasic/gods","version":"v1.18.1","cpe":"cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emirpasic/gods@v1.18.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc="}]},{"bom-ref":"pkg:golang/github.com/erikgeiser/coninput@v0.0.0-20211004153227-1c3628e74d0f?package-id=1284b838dcd5a2b7","type":"library","name":"github.com/erikgeiser/coninput","version":"v0.0.0-20211004153227-1c3628e74d0f","cpe":"cpe:2.3:a:erikgeiser:coninput:v0.0.0-20211004153227-1c3628e74d0f:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/erikgeiser/coninput@v0.0.0-20211004153227-1c3628e74d0f","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Y/CXytFA4m6baUTXGLOoWe4PQhGxaX0KpnayAqC48p4="}]},{"bom-ref":"pkg:golang/github.com/erikvarga/go-rpmdb@v0.0.0-20261001143808-1a11b79cbdd3?package-id=332ce7747cb9d340","type":"library","name":"github.com/erikvarga/go-rpmdb","version":"v0.0.0-20261001143808-1a11b79cbdd3","cpe":"cpe:2.3:a:erikvarga:go-rpmdb:v0.0.0-20261001143808-1a11b79cbdd3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/erikvarga/go-rpmdb@v0.0.0-20261001143808-1a11b79cbdd3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:erikvarga:go_rpmdb:v0.0.0-20261001143808-1a11b79cbdd3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rX5hmz+Oru8THw9NJp4pF2P/VPeosuF33nUXS3hD1Lw="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0?package-id=21924c216340421a","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.1.0","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc="}]},{"bom-ref":"pkg:golang/github.com/gkampitakis/ciinfo@v0.3.4?package-id=3ecfbf738588f0de","type":"library","name":"github.com/gkampitakis/ciinfo","version":"v0.3.4","cpe":"cpe:2.3:a:gkampitakis:ciinfo:v0.3.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gkampitakis/ciinfo@v0.3.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5eBSibVuSMbb/H6Elc0IIEFbkzCJi3lm94n0+U7Z0KY="}]},{"bom-ref":"pkg:golang/github.com/gkampitakis/go-snaps@v0.5.23?package-id=07da3958600bec9b","type":"library","name":"github.com/gkampitakis/go-snaps","version":"v0.5.23","cpe":"cpe:2.3:a:gkampitakis:go-snaps:v0.5.23:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gkampitakis/go-snaps@v0.5.23","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:gkampitakis:go_snaps:v0.5.23:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:okh5QR48zpUjpWtu65AtqxdCY8huJq+dEDuUzd1PuKg="}]},{"bom-ref":"pkg:golang/github.com/go-errors/errors@v1.5.1?package-id=29e62402733f875c","type":"library","name":"github.com/go-errors/errors","version":"v1.5.1","cpe":"cpe:2.3:a:go-errors:errors:v1.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-errors/errors@v1.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_errors:errors:v1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:errors:v1.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZwEMSLRCapFLflTpT7NKaAc7ukJ8ZPEjzlxt8rPN8bk="}]},{"bom-ref":"pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376?package-id=9363818d11b9e55a","type":"library","name":"github.com/go-git/gcfg","version":"v1.5.1-0.20230307220236-3a3c6141e376","cpe":"cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI="}]},{"bom-ref":"pkg:golang/github.com/go-git/go-billy/v5@v5.9.1?package-id=ba992b50ca69d442","type":"library","name":"github.com/go-git/go-billy/v5","version":"v5.9.1","cpe":"cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/go-billy/v5@v5.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8U73XiOTfINdItHVa6z4Gv7ToObcZ6grkqQbLryLCdA="}]},{"bom-ref":"pkg:golang/github.com/go-git/go-git/v5@v5.19.2?package-id=9fc26012aa6c7546","type":"library","name":"github.com/go-git/go-git/v5","version":"v5.19.2","cpe":"cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/go-git/v5@v5.19.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wkfn7vOlUBu8ivAWKBWisTiwJK4jYHzTF8Ndv1LyGqY="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.4?package-id=5d64ad5913a6841c","type":"library","name":"github.com/go-logr/logr","version":"v1.4.4","cpe":"cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ed7921825a53d3f4","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/go-ole/go-ole@v1.3.0?package-id=6ead74d90d43108e","type":"library","name":"github.com/go-ole/go-ole","version":"v1.3.0","cpe":"cpe:2.3:a:go-ole:go-ole:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-ole/go-ole@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-ole:go_ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_ole:go-ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_ole:go_ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Dt6ye7+vXGIKZ7Xtk4s6/xVdGDQynvom7xCFEdWr6uE="}]},{"bom-ref":"pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha?package-id=ef53ed4c6fbe2f06","type":"library","name":"github.com/go-restruct/restruct","version":"v1.2.0-alpha","cpe":"cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2Lp474S/9660+SJjpVxoKuWX09JsXHSrdV7Nv3/gkvc="}]},{"bom-ref":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=69e67edfc2286e18","type":"library","name":"github.com/go-viper/mapstructure/v2","version":"v2.5.0","cpe":"cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="}]},{"bom-ref":"pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=7e6951e683212209","type":"library","name":"github.com/gobwas/glob","version":"v0.2.3","cpe":"cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gobwas/glob@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="}]},{"bom-ref":"pkg:golang/github.com/goccy/go-yaml@v1.19.2?package-id=efc377de37bce13b","type":"library","name":"github.com/goccy/go-yaml","version":"v1.19.2","cpe":"cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goccy/go-yaml@v1.19.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PmFC1S6h8ljIz6gMRBopkjP1TVT7xuwrButHID66PoM="}]},{"bom-ref":"pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8?package-id=bd00e3e04a73c5bc","type":"library","name":"github.com/golang/groupcache","version":"v0.0.0-20241129210726-2c02b8208cf8","cpe":"cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ="}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=473d0adb4b419c7e","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="}]},{"bom-ref":"pkg:golang/github.com/google/go-containerregistry@v0.21.8?package-id=48451f5063e51de5","type":"library","name":"github.com/google/go-containerregistry","version":"v0.21.8","cpe":"cpe:2.3:a:google:go-containerregistry:v0.21.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-containerregistry@v0.21.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_containerregistry:v0.21.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ig/zIsnztdCUNaiNNczE+MoP5xcyUMfvpvfOr1xyMLE="}]},{"bom-ref":"pkg:golang/github.com/google/jsonschema-go@v0.4.3?package-id=854bb626977263ec","type":"library","name":"github.com/google/jsonschema-go","version":"v0.4.3","cpe":"cpe:2.3:a:google:jsonschema-go:v0.4.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/jsonschema-go@v0.4.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:jsonschema_go:v0.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/DBOLZTfDow7pe2GmaJNhltueGTtDKICi8V8p+DQPd0="}]},{"bom-ref":"pkg:golang/github.com/google/osv-scalibr@v0.5.4-0.20261009010329-5be78a00e3c2?package-id=abe0adf3a91e7305","type":"library","name":"github.com/google/osv-scalibr","version":"v0.5.4-0.20261009010329-5be78a00e3c2","cpe":"cpe:2.3:a:google:osv-scalibr:v0.5.4-0.20261009010329-5be78a00e3c2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/osv-scalibr@v0.5.4-0.20261009010329-5be78a00e3c2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:osv_scalibr:v0.5.4-0.20261009010329-5be78a00e3c2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Wuc6ytG0LYkegdUfSqzg/D6JKfoK+kQnkshSTvluqFg="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/gorilla/css@v1.0.1?package-id=c0c657c3696a9fc8","type":"library","name":"github.com/gorilla/css","version":"v1.0.1","cpe":"cpe:2.3:a:gorilla:css:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gorilla/css@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ntNaBIghp6JmvWnxbZKANoLyuXTPZ4cAMlo6RyhlbO8="}]},{"bom-ref":"pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20260724033716-83e58baca724?package-id=48b7c99b4d437e40","type":"library","name":"github.com/ianlancetaylor/demangle","version":"v0.0.0-20260724033716-83e58baca724","cpe":"cpe:2.3:a:ianlancetaylor:demangle:v0.0.0-20260724033716-83e58baca724:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20260724033716-83e58baca724","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QixF8Mcbe87ET7pK/fPbBJ9GXFddmEY8yYMepzMzo30="}]},{"bom-ref":"pkg:golang/github.com/icholy/digest@v1.2.0?package-id=d33af7054bd74273","type":"library","name":"github.com/icholy/digest","version":"v1.2.0","cpe":"cpe:2.3:a:icholy:digest:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/icholy/digest@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oTbG4IsNOmidJ+421ehG7Ty93yt1yotq13kFMG569yw="}]},{"bom-ref":"pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99?package-id=bcb720b429ff9158","type":"library","name":"github.com/jbenet/go-context","version":"v0.0.0-20150711004518-d14ea06fba99","cpe":"cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A="}]},{"bom-ref":"pkg:golang/github.com/jedib0t/go-pretty/v6@v6.8.3?package-id=c52b7808b1ddc1da","type":"library","name":"github.com/jedib0t/go-pretty/v6","version":"v6.8.3","cpe":"cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.8.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jedib0t/go-pretty/v6@v6.8.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.8.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yVSk5aemoYHCvcrtqyXklwqcgHQIQzmy/oUzFlmffSQ="}]},{"bom-ref":"pkg:golang/github.com/kevinburke/ssh_config@v1.6.0?package-id=77b24a7fa945737a","type":"library","name":"github.com/kevinburke/ssh_config","version":"v1.6.0","cpe":"cpe:2.3:a:kevinburke:ssh-config:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kevinburke/ssh_config@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:kevinburke:ssh_config:v1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:J1FBfmuVosPHf5GRdltRLhPJtJpTlMdKTBjRgTaQBFY="}]},{"bom-ref":"pkg:golang/github.com/klauspost/compress@v1.19.1?package-id=dd04ca2a7e32e0e2","type":"library","name":"github.com/klauspost/compress","version":"v1.19.1","cpe":"cpe:2.3:a:klauspost:compress:v1.19.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/compress@v1.19.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VsB4HPswih7mmZ8WleSFQ75c/Ui1M4trX5oAsJnhSlk="}]},{"bom-ref":"pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0?package-id=da1ed5cf6c0ff047","type":"library","name":"github.com/klauspost/cpuid/v2","version":"v2.4.0","cpe":"cpe:2.3:a:klauspost:cpuid\\/v2:v2.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S6Hrbc7+ywsr0r+RLapfGBHfyefhCTwEh3A0tV913Dw="}]},{"bom-ref":"pkg:golang/github.com/kr/pretty@v0.3.1?package-id=b76d4050a948c5b8","type":"library","name":"github.com/kr/pretty","version":"v0.3.1","cpe":"cpe:2.3:a:kr:pretty:v0.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kr/pretty@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE="}]},{"bom-ref":"pkg:golang/github.com/kr/text@v0.2.0?package-id=149bb08a88b6158e","type":"library","name":"github.com/kr/text","version":"v0.2.0","cpe":"cpe:2.3:a:kr:text:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kr/text@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY="}]},{"bom-ref":"pkg:golang/github.com/lucasb-eyer/go-colorful@v1.4.1?package-id=32a5c2df3711b9cb","type":"library","name":"github.com/lucasb-eyer/go-colorful","version":"v1.4.1","cpe":"cpe:2.3:a:lucasb-eyer:go-colorful:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lucasb-eyer/go-colorful@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb-eyer:go_colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb_eyer:go-colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb_eyer:go_colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb:go-colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb:go_colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1EO+WB73+EH8EVbzlrG3KLAfEypQWVHIBqlTf+2hNss="}]},{"bom-ref":"pkg:golang/github.com/lunixbochs/struc@v0.0.0-20241101090106-8d528fa2c543?package-id=d9d20256daac88a6","type":"library","name":"github.com/lunixbochs/struc","version":"v0.0.0-20241101090106-8d528fa2c543","cpe":"cpe:2.3:a:lunixbochs:struc:v0.0.0-20241101090106-8d528fa2c543:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lunixbochs/struc@v0.0.0-20241101090106-8d528fa2c543","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GxMuVb9tJajC1QpbQwYNY1ZAo1EIE8I+UclBjOfjz/M="}]},{"bom-ref":"pkg:golang/github.com/maruel/natural@v1.3.0?package-id=b46de64980aad7a8","type":"library","name":"github.com/maruel/natural","version":"v1.3.0","cpe":"cpe:2.3:a:maruel:natural:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/maruel/natural@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VsmCsBmEyrR46RomtgHs5hbKADGRVtliHTyCOLFBpsg="}]},{"bom-ref":"pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20260423010602-fe51f5b5e52b?package-id=4176aa0fbf2d51a4","type":"library","name":"github.com/masahiro331/go-ext4-filesystem","version":"v0.0.0-20260423010602-fe51f5b5e52b","cpe":"cpe:2.3:a:masahiro331:go-ext4-filesystem:v0.0.0-20260423010602-fe51f5b5e52b:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20260423010602-fe51f5b5e52b","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:masahiro331:go_ext4_filesystem:v0.0.0-20260423010602-fe51f5b5e52b:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IAYuiQq6BVizPeXTKBoY3Jcin3gGn8No7h31lvH0aKo="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.24?package-id=993ea55f7ccdb0d0","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.24","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tGZZoVgT/KiqK1c8ocVLeDS8BSWMRd47J3Lbz7vsReI="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-localereader@v0.0.1?package-id=33f9337f163bac50","type":"library","name":"github.com/mattn/go-localereader","version":"v0.0.1","cpe":"cpe:2.3:a:mattn:go-localereader:v0.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-localereader@v0.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_localereader:v0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ygSAOl7ZXTx4RdPYinUpg6W99U8jWvWi9Ye2JC/oIi4="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.27?package-id=cf94b2c96fe5c02c","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.27","cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.27","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Feg/Oou5zI/wnpgDF6omIU0OokC9GxLC/WRknhVlIR0="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-shellwords@v1.0.14?package-id=04ad98a47da456fe","type":"library","name":"github.com/mattn/go-shellwords","version":"v1.0.14","cpe":"cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-shellwords@v1.0.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yUKzIgsCnosndOASY6/enly1EAuaXeFSQ7cdyA3OuYg="}]},{"bom-ref":"pkg:golang/github.com/michaelkedar/xml@v0.0.0-20250626233154-4ec9e090d1cd?package-id=bb6a3cc111fbf338","type":"library","name":"github.com/michaelkedar/xml","version":"v0.0.0-20250626233154-4ec9e090d1cd","cpe":"cpe:2.3:a:michaelkedar:xml:v0.0.0-20250626233154-4ec9e090d1cd:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/michaelkedar/xml@v0.0.0-20250626233154-4ec9e090d1cd","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HONhnyx03XM5PTnlrL4dcz0QSJC/Qdi/YH2yJEmpqKc="}]},{"bom-ref":"pkg:golang/github.com/microcosm-cc/bluemonday@v1.0.27?package-id=72b841f6456c6cb6","type":"library","name":"github.com/microcosm-cc/bluemonday","version":"v1.0.27","cpe":"cpe:2.3:a:microcosm-cc:bluemonday:v1.0.27:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/microcosm-cc/bluemonday@v1.0.27","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:microcosm_cc:bluemonday:v1.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:microcosm:bluemonday:v1.0.27:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MpEUotklkwCSLeH+Qdx1VJgNqLlpY2KXwXFM08ygZfk="}]},{"bom-ref":"pkg:golang/github.com/micromdm/plist@v0.2.2?package-id=3e315d4dab2efa06","type":"library","name":"github.com/micromdm/plist","version":"v0.2.2","cpe":"cpe:2.3:a:micromdm:plist:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/micromdm/plist@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:a5Yt/coion6hwVEW0da8a5P8IyAchXZ6eC+oBA0uJW8="}]},{"bom-ref":"pkg:golang/github.com/moby/buildkit@v0.32.2?package-id=ec3701d3bb3e8095","type":"library","name":"github.com/moby/buildkit","version":"v0.32.2","cpe":"cpe:2.3:a:moby:buildkit:v0.32.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/buildkit@v0.32.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Sfy7+u6dUv/2yuBc9KCoK70Re8atuV8aPZ5UOC068Vc="}]},{"bom-ref":"pkg:golang/github.com/moby/docker-image-spec@v1.3.1?package-id=96770404d2af75ce","type":"library","name":"github.com/moby/docker-image-spec","version":"v1.3.1","cpe":"cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/docker-image-spec@v1.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3Nl2EsFP0="}]},{"bom-ref":"pkg:golang/github.com/moby/moby/api@v1.55.0?package-id=3aebbdf00f80f1b3","type":"library","name":"github.com/moby/moby/api","version":"v1.55.0","cpe":"cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/moby/api@v1.55.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2/sexvQyqIWS8pRSCFddBfpW2qE7vR7FCL+vN8pxwMc="}]},{"bom-ref":"pkg:golang/github.com/moby/moby/client@v0.5.1?package-id=ff329376ab2ad4b2","type":"library","name":"github.com/moby/moby/client","version":"v0.5.1","cpe":"cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/moby/client@v0.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tYNaJno4c0HXz12y5BiqEDy0rVTYkWzI26lGvnTMiJw="}]},{"bom-ref":"pkg:golang/github.com/modelcontextprotocol/go-sdk@v1.8.0?package-id=3b94e9596cd13c01","type":"library","name":"github.com/modelcontextprotocol/go-sdk","version":"v1.8.0","cpe":"cpe:2.3:a:modelcontextprotocol:go-sdk:v1.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modelcontextprotocol/go-sdk@v1.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modelcontextprotocol:go_sdk:v1.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KIvahhYqwtbeniWVPs3TcXEA7b8jEtwfBpOTAI+Urx4="}]},{"bom-ref":"pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6?package-id=bf26c8fc89989d9d","type":"library","name":"github.com/muesli/ansi","version":"v0.0.0-20230316100256-276c6243b2f6","cpe":"cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZK8zHtRHOkbHy6Mmr5D264iyp3TiX5OmNcI5cIARiQI="}]},{"bom-ref":"pkg:golang/github.com/muesli/cancelreader@v0.2.2?package-id=952b970833d2dae7","type":"library","name":"github.com/muesli/cancelreader","version":"v0.2.2","cpe":"cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/cancelreader@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3I4Kt4BQjOR54NavqnDogx/MIoWBFa0StPA8ELUXHmA="}]},{"bom-ref":"pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=7514a3be24a1ed3c","type":"library","name":"github.com/muesli/reflow","version":"v0.3.0","cpe":"cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/reflow@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s="}]},{"bom-ref":"pkg:golang/github.com/muesli/termenv@v0.16.0?package-id=eda57fee892a5a88","type":"library","name":"github.com/muesli/termenv","version":"v0.16.0","cpe":"cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/termenv@v0.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S5AlUN9dENB57rsbnkPyfdGuWIlkmzJjbFf0Tf5FWUc="}]},{"bom-ref":"pkg:golang/github.com/ncruces/go-strftime@v1.0.0?package-id=1144b4da6fcfdc60","type":"library","name":"github.com/ncruces/go-strftime","version":"v1.0.0","cpe":"cpe:2.3:a:ncruces:go-strftime:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ncruces/go-strftime@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncruces:go_strftime:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOFAw7w="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=19989b5d142f3073","type":"library","name":"github.com/opencontainers/go-digest","version":"v1.0.0","cpe":"cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=10613df95c6a2b3e","type":"library","name":"github.com/opencontainers/image-spec","version":"v1.1.1","cpe":"cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="}]},{"bom-ref":"pkg:golang/github.com/ossf/osv-schema/bindings/go@v0.0.0-20260902031056-b388a18021a3?package-id=eb3abdbdf24b0e46","type":"library","name":"github.com/ossf/osv-schema/bindings/go","version":"v0.0.0-20260902031056-b388a18021a3","cpe":"cpe:2.3:a:ossf:osv-schema\\/bindings\\/go:v0.0.0-20260902031056-b388a18021a3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ossf/osv-schema/bindings/go@v0.0.0-20260902031056-b388a18021a3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf:osv_schema\\/bindings\\/go:v0.0.0-20260902031056-b388a18021a3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mNqW4tPTIPcx3KL5qZCByAHiTwGcwD/eCEfKOEvLA4g="}]},{"bom-ref":"pkg:golang/github.com/owenrumney/go-sarif/v3@v3.3.1?package-id=e2900b5584bc44c7","type":"library","name":"github.com/owenrumney/go-sarif/v3","version":"v3.3.1","cpe":"cpe:2.3:a:owenrumney:go-sarif\\/v3:v3.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/owenrumney/go-sarif/v3@v3.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:owenrumney:go_sarif\\/v3:v3.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bKY8YnWcY8zYTiGVObC5wZLlfEvMkCxK9XMGXBbzEtQ="}]},{"bom-ref":"pkg:golang/github.com/package-url/packageurl-go@v0.1.7?package-id=24c2801cb9dd26d6","type":"library","name":"github.com/package-url/packageurl-go","version":"v0.1.7","cpe":"cpe:2.3:a:package-url:packageurl-go:v0.1.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/package-url/packageurl-go@v0.1.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-url:packageurl_go:v0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_url:packageurl-go:v0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_url:packageurl_go:v0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:packageurl-go:v0.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:packageurl_go:v0.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iFWg6tzAjLA6F/qX3M5nZaiMHJgc+p2zxVyr/fY+sZY="}]},{"bom-ref":"pkg:golang/github.com/pandatix/go-cvss@v0.6.4?package-id=f0e242900b28999e","type":"library","name":"github.com/pandatix/go-cvss","version":"v0.6.4","cpe":"cpe:2.3:a:pandatix:go-cvss:v0.6.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pandatix/go-cvss@v0.6.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pandatix:go_cvss:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9w2RCO/Q4UTiJyEgpCHRiVc6CfrsFEnkoX+OtATqKio="}]},{"bom-ref":"pkg:golang/github.com/pierrec/lz4/v4@v4.1.27?package-id=bfde10bfc0aa75fd","type":"library","name":"github.com/pierrec/lz4/v4","version":"v4.1.27","cpe":"cpe:2.3:a:pierrec:lz4\\/v4:v4.1.27:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pierrec/lz4/v4@v4.1.27","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+PhzhWDrjRj89TH2sw43nE3+4+W8lSxIuQadEHZyjUk="}]},{"bom-ref":"pkg:golang/github.com/pjbgf/sha1cd@v0.6.0?package-id=9e41dfa71d0745e8","type":"library","name":"github.com/pjbgf/sha1cd","version":"v0.6.0","cpe":"cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pjbgf/sha1cd@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3WJ8Wz8gvDz29quX1OcEmkAlUg9diU4GxJHqs0/XiwU="}]},{"bom-ref":"pkg:golang/github.com/pkg/errors@v0.9.1?package-id=2f2b4a7ce7872628","type":"library","name":"github.com/pkg/errors","version":"v0.9.1","cpe":"cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/errors@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="}]},{"bom-ref":"pkg:golang/github.com/pkg/xattr@v0.4.12?package-id=6223a1a56b452ce1","type":"library","name":"github.com/pkg/xattr","version":"v0.4.12","cpe":"cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/xattr@v0.4.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rRTkSyFNTRElv6pkA3zpjHpQ90p/OdHQC1GmGh1aTjM="}]},{"bom-ref":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=63efd6ebb5d1e9e9","type":"library","name":"github.com/planetscale/vtprotobuf","version":"v0.6.1-0.20240319094008-0393e58bdf10","cpe":"cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo="}]},{"bom-ref":"pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec?package-id=82caff8370081f6f","type":"library","name":"github.com/remyoudompheng/bigfft","version":"v0.0.0-20230129092748-24d4a6f8daec","cpe":"cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE="}]},{"bom-ref":"pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=2c0de3c260aa0d91","type":"library","name":"github.com/rivo/uniseg","version":"v0.4.7","cpe":"cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rivo/uniseg@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="}]},{"bom-ref":"pkg:golang/github.com/rogpeppe/go-internal@v1.15.0?package-id=1f1447cc4787223f","type":"library","name":"github.com/rogpeppe/go-internal","version":"v1.15.0","cpe":"cpe:2.3:a:rogpeppe:go-internal:v1.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rogpeppe/go-internal@v1.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogpeppe:go_internal:v1.15.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:D0RCU5rMAp+SpgkiNdrjfJ+LX4J1M32V2NeCY7EJ6hc="}]},{"bom-ref":"pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c?package-id=5e103b6f10fbeebc","type":"library","name":"github.com/rust-secure-code/go-rustaudit","version":"v0.0.0-20250226111315-e20ec32e963c","cpe":"cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8gOLsYwaY2JwlTMT4brS5/9XJdrdIbmk2obvQ748CC0="}]},{"bom-ref":"pkg:golang/github.com/saferwall/pe@v1.6.5?package-id=00a1b15dde385769","type":"library","name":"github.com/saferwall/pe","version":"v1.6.5","cpe":"cpe:2.3:a:saferwall:pe:v1.6.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/saferwall/pe@v1.6.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CxgDvikdp9mnLb2kHKVyyRHbK/JSMrtslCaveXxIQ8M="}]},{"bom-ref":"pkg:golang/github.com/sahilm/fuzzy@v0.1.3?package-id=3032de224246095a","type":"library","name":"github.com/sahilm/fuzzy","version":"v0.1.3","cpe":"cpe:2.3:a:sahilm:fuzzy:v0.1.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sahilm/fuzzy@v0.1.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:juByESSS32nVD81vr6tHmKmA/8zde7gE+x5CLxrzXPU="}]},{"bom-ref":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2?package-id=71c58913568eda11","type":"library","name":"github.com/santhosh-tekuri/jsonschema/v6","version":"v6.0.2","cpe":"cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ="}]},{"bom-ref":"pkg:golang/github.com/segmentio/asm@v1.2.1?package-id=6e2ce7675f03c1d0","type":"library","name":"github.com/segmentio/asm","version":"v1.2.1","cpe":"cpe:2.3:a:segmentio:asm:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/segmentio/asm@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DTNbBqs57ioxAD4PrArqftgypG4/qNpXoJx8TVXxPR0="}]},{"bom-ref":"pkg:golang/github.com/segmentio/encoding@v0.5.4?package-id=9ac72e90bcc39681","type":"library","name":"github.com/segmentio/encoding","version":"v0.5.4","cpe":"cpe:2.3:a:segmentio:encoding:v0.5.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/segmentio/encoding@v0.5.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OW1VRern8Nw6ITAtwSZ7Idrl3MXCFwXHPgqESYfvNt0="}]},{"bom-ref":"pkg:golang/github.com/sergi/go-diff@v1.4.0?package-id=eadb73b749fc4f5b","type":"library","name":"github.com/sergi/go-diff","version":"v1.4.0","cpe":"cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sergi/go-diff@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw="}]},{"bom-ref":"pkg:golang/github.com/shirou/gopsutil@v3.21.11%2Bincompatible?package-id=237a3d65765a58a6","type":"library","name":"github.com/shirou/gopsutil","version":"v3.21.11+incompatible","cpe":"cpe:2.3:a:shirou:gopsutil:v3.21.11\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shirou/gopsutil@v3.21.11%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI="}]},{"bom-ref":"pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=f9cb0ed57e859e4c","type":"library","name":"github.com/sirupsen/logrus","version":"v1.9.4","cpe":"cpe:2.3:a:turbopuffer:logrus:v1.9.4:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/sirupsen/logrus@v1.9.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w="}]},{"bom-ref":"pkg:golang/github.com/skeema/knownhosts@v1.3.2?package-id=71d9fe37442f8273","type":"library","name":"github.com/skeema/knownhosts","version":"v1.3.2","cpe":"cpe:2.3:a:skeema:knownhosts:v1.3.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/skeema/knownhosts@v1.3.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EDL9mgf4NzwMXCTfaxSD/o/a5fxDw/xL9nkU28JjdBg="}]},{"bom-ref":"pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb?package-id=77b6a97fae96f2c5","type":"library","name":"github.com/spdx/gordf","version":"v0.0.0-20250128162952-000978ccd6fb","cpe":"cpe:2.3:a:spdx:gordf:v0.0.0-20250128162952-000978ccd6fb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7G2Czq97VORM5xNRrD8tSQdhoXPRs8s+Otlc7st9TS0="}]},{"bom-ref":"pkg:golang/github.com/spdx/tools-golang@v0.5.7?package-id=5e97ba94fb7276eb","type":"library","name":"github.com/spdx/tools-golang","version":"v0.5.7","cpe":"cpe:2.3:a:spdx:tools-golang:v0.5.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spdx/tools-golang@v0.5.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:spdx:tools_golang:v0.5.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+sWcKGnhwp3vLdMqPcLdA6QK679vd86cK9hQWH3AwCg="}]},{"bom-ref":"pkg:golang/github.com/thoas/go-funk@v0.9.3?package-id=51c6a19b84ad1ac6","type":"library","name":"github.com/thoas/go-funk","version":"v0.9.3","cpe":"cpe:2.3:a:thoas:go-funk:v0.9.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/thoas/go-funk@v0.9.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:thoas:go_funk:v0.9.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7+nAEx3kn5ZJcnDm2Bh23N2yOtweO14bi//dvRtgLpw="}]},{"bom-ref":"pkg:golang/github.com/tidwall/gjson@v1.19.0?package-id=04338fb47390afd1","type":"library","name":"github.com/tidwall/gjson","version":"v1.19.0","cpe":"cpe:2.3:a:tidwall:gjson:v1.19.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/gjson@v1.19.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xwxm7n691Uf3u5OFjzngavjGTh55KX5q/9w9xHW88JU="}]},{"bom-ref":"pkg:golang/github.com/tidwall/jsonc@v0.3.3?package-id=3b6238052db5e671","type":"library","name":"github.com/tidwall/jsonc","version":"v0.3.3","cpe":"cpe:2.3:a:tidwall:jsonc:v0.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/jsonc@v0.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RVQqL3xFfDkKKXIDsrBiVQiEpBtxoKbmMXONb2H/y2w="}]},{"bom-ref":"pkg:golang/github.com/tidwall/match@v1.2.0?package-id=c49f85af4acbcaf6","type":"library","name":"github.com/tidwall/match","version":"v1.2.0","cpe":"cpe:2.3:a:tidwall:match:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/match@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0pt8FlkOwjN2fPt4bIl4BoNxb98gGHN2ObFEDkrfZnM="}]},{"bom-ref":"pkg:golang/github.com/tidwall/pretty@v1.2.1?package-id=fdfa75cc6c742ae7","type":"library","name":"github.com/tidwall/pretty","version":"v1.2.1","cpe":"cpe:2.3:a:tidwall:pretty:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/pretty@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4="}]},{"bom-ref":"pkg:golang/github.com/tidwall/sjson@v1.2.5?package-id=49ec4e4ca8468b25","type":"library","name":"github.com/tidwall/sjson","version":"v1.2.5","cpe":"cpe:2.3:a:tidwall:sjson:v1.2.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/sjson@v1.2.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kLy8mja+1c9jlljvWTlSazM7cKDRfJuR/bOJhcY5NcY="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go/v2@v2.7.0?package-id=8e899e6183c7616b","type":"library","name":"github.com/tink-crypto/tink-go/v2","version":"v2.7.0","cpe":"cpe:2.3:a:tink-crypto:tink-go\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:k7QnUXJ1cRDpvoy/5l1FimZqMAArRff8vjUqzi5N04o="}]},{"bom-ref":"pkg:golang/github.com/tklauser/go-sysconf@v0.4.0?package-id=003adf9d2b04f89f","type":"library","name":"github.com/tklauser/go-sysconf","version":"v0.4.0","cpe":"cpe:2.3:a:tklauser:go-sysconf:v0.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tklauser/go-sysconf@v0.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tklauser:go_sysconf:v0.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7H0uAN+7RkwWRaxhYXDLqa5V3LPrJeV8wmD9dRUgPQU="}]},{"bom-ref":"pkg:golang/github.com/tklauser/numcpus@v0.12.0?package-id=29f3bd5e07a2ca65","type":"library","name":"github.com/tklauser/numcpus","version":"v0.12.0","cpe":"cpe:2.3:a:tklauser:numcpus:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tklauser/numcpus@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NR85qdvHA9pFse3x3weVZ0r0ST8R6l5RHbZrlRaqob4="}]},{"bom-ref":"pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0?package-id=8cade2e123c43e3f","type":"library","name":"github.com/tonistiigi/go-csvvalue","version":"v0.0.0-20240814133006-030d3b2625d0","cpe":"cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2f304B10LaZdB8kkVEaoXvAMVan2tl9AiK4G0odjQtE="}]},{"bom-ref":"pkg:golang/github.com/ulikunitz/xz@v0.5.16?package-id=dddc558a2e41841e","type":"library","name":"github.com/ulikunitz/xz","version":"v0.5.16","cpe":"cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ulikunitz/xz@v0.5.16","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ld6NyySjx5lowVKwJvMRLnW5nxKX/xnpSiFYZ/Lxur0="}]},{"bom-ref":"pkg:golang/github.com/urfave/cli/v3@v3.13.0?package-id=5d489874a858319d","type":"library","name":"github.com/urfave/cli/v3","version":"v3.13.0","cpe":"cpe:2.3:a:urfave:cli\\/v3:v3.13.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/urfave/cli/v3@v3.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Dr6jqMfIyyFsRVn7Nz5mqLsMY+ZMpfh3a0aMs+umPVY="}]},{"bom-ref":"pkg:golang/github.com/xanzy/ssh-agent@v0.3.3?package-id=a40a80bb17249690","type":"library","name":"github.com/xanzy/ssh-agent","version":"v0.3.3","cpe":"cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xanzy/ssh-agent@v0.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=8d3359a3be622488","type":"library","name":"github.com/xeipuuv/gojsonpointer","version":"v0.0.0-20190905194746-02993c407bfb","cpe":"cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=2429773a33fd3e90","type":"library","name":"github.com/xeipuuv/gojsonreference","version":"v0.0.0-20180127040603-bd5ef7bd5415","cpe":"cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?package-id=806b0d14bbdc7157","type":"library","name":"github.com/xeipuuv/gojsonschema","version":"v1.2.0","cpe":"cpe:2.3:a:xeipuuv:gojsonschema:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74="}]},{"bom-ref":"pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0?package-id=e613d28352f68667","type":"library","name":"github.com/xhit/go-str2duration/v2","version":"v2.1.0","cpe":"cpe:2.3:a:xhit:go-str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:xhit:go_str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lxklc02Drh6ynqX+DdPyp5pCKLUQpRT8bp8Ydu2Bstc="}]},{"bom-ref":"pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e?package-id=470cccbaad5c75a4","type":"library","name":"github.com/xo/terminfo","version":"v0.0.0-20220910002029-abceb7e1c41e","cpe":"cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JVG44RsyaB9T2KIHavMF/ppJZNG9ZpyihvCd0w101no="}]},{"bom-ref":"pkg:golang/github.com/yosida95/uritemplate/v3@v3.0.2?package-id=ba0d2aab72f03917","type":"library","name":"github.com/yosida95/uritemplate/v3","version":"v3.0.2","cpe":"cpe:2.3:a:yosida95:uritemplate\\/v3:v3.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yosida95/uritemplate/v3@v3.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ed3Oyj9yrmi9087+NczuL5BwkIc4wvTb5zIM+UJPGz4="}]},{"bom-ref":"pkg:golang/github.com/yuin/goldmark@v1.8.5?package-id=3ddad9948423d297","type":"library","name":"github.com/yuin/goldmark","version":"v1.8.5","cpe":"cpe:2.3:a:yuin:goldmark:v1.8.5:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/yuin/goldmark@v1.8.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:r6N5afV5qj/5S4UTch8agZHJ8UxNCMwX7WjkkJam2NA="}]},{"bom-ref":"pkg:golang/github.com/yuin/goldmark-emoji@v1.0.6?package-id=59d861ab59eb32cc","type":"library","name":"github.com/yuin/goldmark-emoji","version":"v1.0.6","cpe":"cpe:2.3:a:yuin:goldmark-emoji:v1.0.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yuin/goldmark-emoji@v1.0.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:yuin:goldmark_emoji:v1.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QWfF2FYaXwL74tfGOW5izeiZepUDroDJfWubQI9HTHs="}]},{"bom-ref":"pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4?package-id=fcec6f9de843b76d","type":"library","name":"github.com/yusufpapurcu/wmi","version":"v1.2.4","cpe":"cpe:2.3:a:yusufpapurcu:wmi:v1.2.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0="}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.2?package-id=3d500e9aa5ab6a84#analyze","type":"library","name":"github/codeql-action/analyze","version":"v4.38.2","cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v4.38.2:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.2#analyze","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.2?package-id=69fb3e4c0d48ed5d#autobuild","type":"library","name":"github/codeql-action/autobuild","version":"v4.38.2","cpe":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v4.38.2:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.2#autobuild","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.2?package-id=d618dacff1a6ff17#init","type":"library","name":"github/codeql-action/init","version":"v4.38.2","cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v4.38.2:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.2#init","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.2?package-id=dd1445e14d852876#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v4.38.2","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.2#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecards.yml"}]},{"bom-ref":"pkg:golang/go.etcd.io/bbolt@v1.5.0?package-id=ca77a2c7fc710584","type":"library","name":"go.etcd.io/bbolt","version":"v1.5.0","purl":"pkg:golang/go.etcd.io/bbolt@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S7GAl7Fxv12yohbwFfIbQCGDWbQbtDGPET4P/bD4lxU="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a00544d9cf935bfa","type":"library","name":"go.opentelemetry.io/auto/sdk","version":"v1.2.1","cpe":"cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0?package-id=2e5e2097a23c0dc3","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","version":"v0.70.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.70.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LMuyCAyfalSjDyjdC65nK6N0zoTT63+E/u95X0JovZI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel@v1.45.0?package-id=f27770650f676674","type":"library","name":"go.opentelemetry.io/otel","version":"v1.45.0","cpe":"cpe:2.3:a:opentelemetry:opentelemetry:v1.45.0:*:*:*:*:go:*:*","purl":"pkg:golang/go.opentelemetry.io/otel@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pdrWmLHofpubmArBv1LgFSv1Z0Ie/ppdZzu+kUN5EeU="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0?package-id=f9a727401b6a9791","type":"library","name":"go.opentelemetry.io/otel/metric","version":"v1.45.0","cpe":"cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7Eg1uH7CJ5cXv9is6tnBe1FI6rj1nwUdbFypRm3br/M="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0?package-id=8e426af775fa3244","type":"library","name":"go.opentelemetry.io/otel/trace","version":"v1.45.0","cpe":"cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:l/mP6Uv7oNO7/TblbhpbgMidxhq1uO/rPsikOyVhxag="}]},{"bom-ref":"pkg:golang/go.uber.org/multierr@v1.11.0?package-id=ef196337207eb800","type":"library","name":"go.uber.org/multierr","version":"v1.11.0","purl":"pkg:golang/go.uber.org/multierr@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="}]},{"bom-ref":"pkg:golang/go.uber.org/zap@v1.28.0?package-id=25dd85e1ded5b566","type":"library","name":"go.uber.org/zap","version":"v1.28.0","purl":"pkg:golang/go.uber.org/zap@v1.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=1794e7f09a134d32","type":"library","name":"go.yaml.in/yaml/v2","version":"v2.4.4","cpe":"cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.6?package-id=0a888785800e6604","type":"library","name":"go.yaml.in/yaml/v4","version":"v4.0.0-rc.6","cpe":"cpe:2.3:a:yaml:v4:v4.0.0-rc.6:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1h7H1ohdUh93/FyE4YaDa1Zh64K6VVbjF4K6WUxMtH4="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.58.0?package-id=15c1d9acb12062ba","type":"library","name":"golang.org/x/crypto","version":"v0.58.0","cpe":"cpe:2.3:a:golang:crypto:v0.58.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.58.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.58.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.41.0?package-id=56d232e7120c3a8b","type":"library","name":"golang.org/x/mod","version":"v0.41.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.41.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.61.0?package-id=6128ad9f9e329ffe","type":"library","name":"golang.org/x/net","version":"v0.61.0","cpe":"cpe:2.3:a:golang:networking:v0.61.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.61.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.61.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw="}]},{"bom-ref":"pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=78c10eb5d81f36d3","type":"library","name":"golang.org/x/oauth2","version":"v0.36.0","cpe":"cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/oauth2@v0.36.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.24.0?package-id=295e96fc2f845b35","type":"library","name":"golang.org/x/sync","version":"v0.24.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.24.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.49.0?package-id=aec8e4adcf0dcac2","type":"library","name":"golang.org/x/sys","version":"v0.49.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.49.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.49.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA="}]},{"bom-ref":"pkg:golang/golang.org/x/telemetry@v0.0.0-20260924152758-ed294f943157?package-id=1457c89b6722901a","type":"library","name":"golang.org/x/telemetry","version":"v0.0.0-20260924152758-ed294f943157","cpe":"cpe:2.3:a:golang:x\\/telemetry:v0.0.0-20260924152758-ed294f943157:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/telemetry@v0.0.0-20260924152758-ed294f943157","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DftxASHKl6JolFPqoN+2WrFO53JvkHwRXvFqf8gsivA="}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.47.0?package-id=8db19b9b9f8e30c1","type":"library","name":"golang.org/x/term","version":"v0.47.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.47.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cpyOwQkr2Nzxe2p6KnrTG7Ei2wtzjsuSjhpXXepZ/BM="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.43.0?package-id=70a65622f5a0d35d","type":"library","name":"golang.org/x/text","version":"v0.43.0","cpe":"cpe:2.3:a:golang:text:v0.43.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.43.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc="}]},{"bom-ref":"pkg:golang/golang.org/x/time@v0.15.0?package-id=d9baab7c2b8c8a86","type":"library","name":"golang.org/x/time","version":"v0.15.0","cpe":"cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/time@v0.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U="}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.51.0?package-id=9208579da0e0c549","type":"library","name":"golang.org/x/tools","version":"v0.51.0","cpe":"cpe:2.3:a:golang:x\\/tools:v0.51.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.51.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:k4Xc/1Om9jwkBJBo4NVLMSARBoWtK10mx+W5BnXCeAI="}]},{"bom-ref":"pkg:golang/golang.org/x/vuln@v1.6.0?package-id=818901d20c290082","type":"library","name":"golang.org/x/vuln","version":"v1.6.0","cpe":"cpe:2.3:a:golang:x\\/vuln:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/vuln@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FeMO9Rm/HwyduOztbvKcOw+zvDEPr4I4aQNSfevFcKY="}]},{"bom-ref":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da?package-id=056fc8b658138e7a","type":"library","name":"golang.org/x/xerrors","version":"v0.0.0-20240903120638-7835f813f4da","cpe":"cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:noIWHXmPHxILtqtCOPIhSt0ABwskkZKjD3bXGnZGpNY="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d?package-id=f849625c0ca194d1","type":"library","name":"google.golang.org/genproto/googleapis/api","version":"v0.0.0-20260803160001-6ac0973c030d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260803160001-6ac0973c030d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FarXi840EJWSHYTN3ERkADbPWjl307+FGrA22KAVjjc="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260803160001-6ac0973c030d?package-id=eca950a65691f327","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20260803160001-6ac0973c030d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260803160001-6ac0973c030d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260803160001-6ac0973c030d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IL4hdHzcUv2l/gcg98/Rj3FbtE6axwqslOW8SW0C+S0="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.84.0?package-id=54bcc746f2ab7987","type":"library","name":"google.golang.org/grpc","version":"v1.84.0","cpe":"cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.84.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:soMyaPJ8pAak5PIQ0DGBUir0XRo2fRoMqhNWMLlLxO0="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=0055873c0ce1a39b","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12","cpe":"cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc="}]},{"bom-ref":"pkg:github/google/osv-scanner-action@nightly?package-id=d072060975dd29da#.github/workflows/osv-scanner-reusable-pr.yml","type":"library","name":"google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml","version":"nightly","cpe":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*","purl":"pkg:github/google/osv-scanner-action@nightly#.github/workflows/osv-scanner-reusable-pr.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable-pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable_pr.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/osv-scanner-unified-action.yml"}]},{"bom-ref":"pkg:github/google/osv-scanner-action@main?package-id=8c0a12b78e235c2c#.github/workflows/osv-scanner-reusable.yml","type":"library","name":"google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml","version":"main","cpe":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*","purl":"pkg:github/google/osv-scanner-action@main#.github/workflows/osv-scanner-reusable.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:main:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"pkg:github/google/osv-scanner-action@nightly?package-id=bacb5b809de4a5c5#.github/workflows/osv-scanner-reusable.yml","type":"library","name":"google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml","version":"nightly","cpe":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*","purl":"pkg:github/google/osv-scanner-action@nightly#.github/workflows/osv-scanner-reusable.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner-action\\/.github\\/workflows\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner_action\\/.github\\/workflows\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv-scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv_scanner:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv:google\\/osv-scanner-action\\/.github\\/workflows\\/osv-scanner-reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google\\/osv:google\\/osv_scanner_action\\/.github\\/workflows\\/osv_scanner_reusable.yml:nightly:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/osv-scanner-unified-action.yml"}]},{"bom-ref":"pkg:golang/gopkg.in/dnaeon/go-vcr.v4@v4.0.7?package-id=56c60c217f58284a","type":"library","name":"gopkg.in/dnaeon/go-vcr.v4","version":"v4.0.7","purl":"pkg:golang/gopkg.in/dnaeon/go-vcr.v4@v4.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Mq/RF+mq3QwtEunJSsoTbYPt3elSAmdJhAxrEaqr88I="}]},{"bom-ref":"pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=8f99b4759d521906","type":"library","name":"gopkg.in/ini.v1","version":"v1.67.3","purl":"pkg:golang/gopkg.in/ini.v1@v1.67.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw="}]},{"bom-ref":"pkg:golang/gopkg.in/warnings.v0@v0.1.2?package-id=8ac617c9f7dfb7cd","type":"library","name":"gopkg.in/warnings.v0","version":"v0.1.2","purl":"pkg:golang/gopkg.in/warnings.v0@v0.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=716c668b92999095","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:github/goreleaser/goreleaser-action@v7.2.3?package-id=f8d70b781190dd0c","type":"library","name":"goreleaser/goreleaser-action","version":"v7.2.3","cpe":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*","purl":"pkg:github/goreleaser/goreleaser-action@v7.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser-nightly.yml"}]},{"bom-ref":"pkg:github/goreleaser/goreleaser-action@v7.2.3?package-id=d201b548c4078c5b","type":"library","name":"goreleaser/goreleaser-action","version":"v7.2.3","cpe":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*","purl":"pkg:github/goreleaser/goreleaser-action@v7.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yml"}]},{"bom-ref":"pkg:github/goreleaser/goreleaser-action@v7.2.3?package-id=b9978ae09474ecaa","type":"library","name":"goreleaser/goreleaser-action","version":"v7.2.3","cpe":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*","purl":"pkg:github/goreleaser/goreleaser-action@v7.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yml"}]},{"bom-ref":"pkg:golang/modernc.org/libc@v1.74.4?package-id=9341583fe21cc516","type":"library","name":"modernc.org/libc","version":"v1.74.4","purl":"pkg:golang/modernc.org/libc@v1.74.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fX1Omw4o2/1C2iRkkIsrQTasJQldLhRmuPreXLoWs9k="}]},{"bom-ref":"pkg:golang/modernc.org/mathutil@v1.7.1?package-id=610e3c135e640d33","type":"library","name":"modernc.org/mathutil","version":"v1.7.1","purl":"pkg:golang/modernc.org/mathutil@v1.7.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU="}]},{"bom-ref":"pkg:golang/modernc.org/memory@v1.11.0?package-id=e97959334b57993e","type":"library","name":"modernc.org/memory","version":"v1.11.0","purl":"pkg:golang/modernc.org/memory@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o4QC8aMQzmcwCK3t3Ux/ZHmwFPzE6hf2Y5LbkRs+hbI="}]},{"bom-ref":"pkg:golang/modernc.org/sqlite@v1.56.0?package-id=5b4cee8859168f35","type":"library","name":"modernc.org/sqlite","version":"v1.56.0","purl":"pkg:golang/modernc.org/sqlite@v1.56.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/D8e2RfFqoy/Zc6PuC76U28zFwmI/sYx1Kjm4yEn9e0="}]},{"bom-ref":"pkg:github/ossf/scorecard-action@v2.4.4?package-id=f27ab09243ec6ee9","type":"library","name":"ossf/scorecard-action","version":"v2.4.4","cpe":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:github/ossf/scorecard-action@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecards.yml"}]},{"bom-ref":"pkg:golang/osv.dev/bindings/go@v0.0.0-20260805021707-3a57b89df3b6?package-id=4f5c985a9738da57","type":"library","name":"osv.dev/bindings/go","version":"v0.0.0-20260805021707-3a57b89df3b6","cpe":"cpe:2.3:a:bindings:go:v0.0.0-20260805021707-3a57b89df3b6:*:*:*:*:*:*:*","purl":"pkg:golang/osv.dev/bindings/go@v0.0.0-20260805021707-3a57b89df3b6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1cVzYzGXOOvFVi5B6LOjPeZeqLA59IAowEfYZPwed2g="}]},{"bom-ref":"pkg:github/peter-evans/create-pull-request@v8.1.1?package-id=15052932e41efbe4","type":"library","name":"peter-evans/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:peter-evans\\/create-pull-request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull-request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cassettes.yml"}]},{"bom-ref":"pkg:github/peter-evans/create-pull-request@v8.1.1?package-id=18c117a274f03dc7","type":"library","name":"peter-evans/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:peter-evans\\/create-pull-request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull-request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/dependencies.yml"}]},{"bom-ref":"pkg:github/peter-evans/create-pull-request@v8.1.1?package-id=9c5412ef02ff70d7","type":"library","name":"peter-evans/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:peter-evans\\/create-pull-request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull-request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/snapshots.yml"}]},{"bom-ref":"pkg:github/ruby/setup-ruby@v1.327.0?package-id=56ad0fd3e5bce0b8","type":"library","name":"ruby/setup-ruby","version":"v1.327.0","cpe":"cpe:2.3:a:ruby\\/setup-ruby:ruby\\/setup-ruby:v1.327.0:*:*:*:*:*:*:*","purl":"pkg:github/ruby/setup-ruby@v1.327.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ruby\\/setup-ruby:ruby\\/setup_ruby:v1.327.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ruby\\/setup_ruby:ruby\\/setup-ruby:v1.327.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ruby\\/setup_ruby:ruby\\/setup_ruby:v1.327.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ruby\\/setup:ruby\\/setup-ruby:v1.327.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ruby\\/setup:ruby\\/setup_ruby:v1.327.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docs-deploy.yml"}]},{"bom-ref":"pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=95ee3a98ac8d2d6e","type":"library","name":"sigs.k8s.io/yaml","version":"v1.6.0","purl":"pkg:golang/sigs.k8s.io/yaml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="}]},{"bom-ref":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0?package-id=7bb808975f704fea#.github/workflows/generator_generic_slsa3.yml","type":"library","name":"slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml","version":"v2.1.0","cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0#.github/workflows/generator_generic_slsa3.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yml"}]},{"bom-ref":"pkg:github/tcort/github-action-markdown-link-check@v1.1.3?package-id=ed04671c63ce07d8","type":"library","name":"tcort/github-action-markdown-link-check","version":"v1.1.3","cpe":"cpe:2.3:a:tcort\\/github-action-markdown-link-check:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*","purl":"pkg:github/tcort/github-action-markdown-link-check@v1.1.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown-link-check:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown_link_check:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown_link_check:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown-link:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown-link:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown_link:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown_link:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/links.yml"}]},{"bom-ref":"pkg:github/tcort/github-action-markdown-link-check@v1.1.3?package-id=8ae397d0ef40fd8b","type":"library","name":"tcort/github-action-markdown-link-check","version":"v1.1.3","cpe":"cpe:2.3:a:tcort\\/github-action-markdown-link-check:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*","purl":"pkg:github/tcort/github-action-markdown-link-check@v1.1.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown-link-check:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown_link_check:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown_link_check:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown-link:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown-link:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown_link:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown_link:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action-markdown:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action_markdown:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github-action:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github_action:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github:tcort\\/github-action-markdown-link-check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tcort\\/github:tcort\\/github_action_markdown_link_check:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/prerelease-check.yml"}]},{"bom-ref":"pkg:golang/www.velocidex.com/golang/go-ntfs@v0.2.1?package-id=f3c4c5fa2610877c","type":"library","name":"www.velocidex.com/golang/go-ntfs","version":"v0.2.1","cpe":"cpe:2.3:a:golang:go-ntfs:v0.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/www.velocidex.com/golang/go-ntfs@v0.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:go_ntfs:v0.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9oSN0CpBZTmM75F4cEpUdAiOW55afj0ZALpvRt8cBZw="}]},{"bom-ref":"pkg:golang/www.velocidex.com/golang/regparser@v0.0.0-20250203141505-31e704a67ef7?package-id=b50488d31dadf95e","type":"library","name":"www.velocidex.com/golang/regparser","version":"v0.0.0-20250203141505-31e704a67ef7","cpe":"cpe:2.3:a:golang:regparser:v0.0.0-20250203141505-31e704a67ef7:*:*:*:*:*:*:*","purl":"pkg:golang/www.velocidex.com/golang/regparser@v0.0.0-20250203141505-31e704a67ef7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BMX/37sYwX+8JhHt+YNbPfbx7dXG1w1L1mXonNBtjt0="}]},{"bom-ref":"pkg:github/zizmorcore/zizmor-action@v0.6.4?package-id=ee2cbe255bb382ec","type":"library","name":"zizmorcore/zizmor-action","version":"v0.6.4","cpe":"cpe:2.3:a:zizmorcore\\/zizmor-action:zizmorcore\\/zizmor-action:v0.6.4:*:*:*:*:*:*:*","purl":"pkg:github/zizmorcore/zizmor-action@v0.6.4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor-action:zizmorcore\\/zizmor_action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor_action:zizmorcore\\/zizmor-action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor_action:zizmorcore\\/zizmor_action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor:zizmorcore\\/zizmor-action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor:zizmorcore\\/zizmor_action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/zizmor.yml"}]},{"bom-ref":"7f36cf1cf27420e7","type":"file","name":"/.github/workflows/cassettes.yml","hashes":[{"alg":"SHA-1","content":"9060f530749eac9416ee92c15e8fcae2fdae0111"},{"alg":"SHA-256","content":"3263399a69900f2e79ceccac88925fce70f4c575395b55bdede69a14e9aa18ad"}]},{"bom-ref":"0a6a1c237c0ab4d7","type":"file","name":"/.github/workflows/checks.yml","hashes":[{"alg":"SHA-1","content":"5401164ac1525330c668dd3708d0a61f7ebd6ab5"},{"alg":"SHA-256","content":"9a05c8bf78ad478d23eb556cab76fd6e1c0cd8737affb47a57d26dd0fab3d777"}]},{"bom-ref":"5e19ea2e1f9dfee4","type":"file","name":"/.github/workflows/codeql-analysis.yml","hashes":[{"alg":"SHA-1","content":"1ec1ec68aae4c54b1da1f629528fb70043400a25"},{"alg":"SHA-256","content":"72e155083526bbe70fbbc88d49b93c9354663f55b2dc705c3c481d6d89b6a87d"}]},{"bom-ref":"3d00a1975cf0dad1","type":"file","name":"/.github/workflows/dependencies.yml","hashes":[{"alg":"SHA-1","content":"b693d5a14e04c251888d394a4a2acebfba8921e9"},{"alg":"SHA-256","content":"68fa8a9d0a1c4eb42ae3d66f2b9071dd942fd895d4ceb7ea03a273be5ace18f7"}]},{"bom-ref":"cba32c6f05c46ad2","type":"file","name":"/.github/workflows/docs-deploy.yml","hashes":[{"alg":"SHA-1","content":"5e0b752eebec2057d86c31a014a7c1540a84164d"},{"alg":"SHA-256","content":"ca8dadba7ca614fd6d649605ae772d14cb836a6f31e19010ebc1fb86a67e3f2a"}]},{"bom-ref":"e259fd3d84ed8407","type":"file","name":"/.github/workflows/goreleaser-nightly.yml","hashes":[{"alg":"SHA-1","content":"04039bbf6d9faeb5f5252b8b595037ef06f3f607"},{"alg":"SHA-256","content":"ea4cdf59365712bf5c4614f8ce51b4f4068b7b85aa06c62d721d95bdf637ba3e"}]},{"bom-ref":"a24e9312fabd7fe5","type":"file","name":"/.github/workflows/goreleaser.yml","hashes":[{"alg":"SHA-1","content":"cf409939cdb583968e3787c3aa9994123d010bde"},{"alg":"SHA-256","content":"ade3ce61301a7bea3329b8894aece33ee584153dc059cee50696aac1d1223b86"}]},{"bom-ref":"567158ce37d6d07b","type":"file","name":"/.github/workflows/links.yml","hashes":[{"alg":"SHA-1","content":"9d5b248eba17158ad02d722bd345f6d04d5ee58a"},{"alg":"SHA-256","content":"0d06cb48793b58019aee49396588037eab644d7c0373a017e0d89bbc704b6836"}]},{"bom-ref":"72670350b38040c9","type":"file","name":"/.github/workflows/osv-scanner-unified-action.yml","hashes":[{"alg":"SHA-1","content":"9b9d2cd942b1e2ae53479bcb64d267a855c98d4e"},{"alg":"SHA-256","content":"d567bfc8c328dedeab60dfeb133cf70043c71226ae8fcdfb4951e614016c25cb"}]},{"bom-ref":"9dcdc0cb53eeaf84","type":"file","name":"/.github/workflows/prerelease-check.yml","hashes":[{"alg":"SHA-1","content":"1c5610a9358df5bff833fda2be3ed449ccc6d4c1"},{"alg":"SHA-256","content":"802fbc4ce3fa4bebd167cd52b0729c73dfb1a946633891c8e66532ee89f37985"}]},{"bom-ref":"776d495e3b3ff440","type":"file","name":"/.github/workflows/renovate-validator.yml","hashes":[{"alg":"SHA-1","content":"4b782e8bb54303d2a442e8972569523e080059a8"},{"alg":"SHA-256","content":"b7966356e640b43e4ac9b74e41c699aa2c0dd0b0fc8294eb23b1108a99d82e0e"}]},{"bom-ref":"ae8b423421606a94","type":"file","name":"/.github/workflows/scorecards.yml","hashes":[{"alg":"SHA-1","content":"5b2b2e20c5a3fcadad363b731ea694bdf20f1426"},{"alg":"SHA-256","content":"3dfef6dbb44dfb9bf94e51cfd6255ab2d21eabf9d1133ab4966b3333bd2d0b73"}]},{"bom-ref":"02ea188d875d4468","type":"file","name":"/.github/workflows/snapshots.yml","hashes":[{"alg":"SHA-1","content":"cf369e79668db77a43e6ef2a098a4c5b4a64142d"},{"alg":"SHA-256","content":"2b38ce9d0d0e9654c65a381c8c338420574e4044995de989d2a71d3a7dcd8a45"}]},{"bom-ref":"7ac6bc80c291e9c5","type":"file","name":"/.github/workflows/staleness.yml","hashes":[{"alg":"SHA-1","content":"8632a473a6b174c5e461dc0812f46aac951dc9ed"},{"alg":"SHA-256","content":"8dfba0f21d800dda283573af35ff3823f73df86f17443dcffeb99a9d30b8962c"}]},{"bom-ref":"9b0927f24570d5cb","type":"file","name":"/.github/workflows/tests.yml","hashes":[{"alg":"SHA-1","content":"3c774c82d68f91a07b40633fc22a339d6c39794a"},{"alg":"SHA-256","content":"47388f1dc4e866e74ca3d708f2e76599202a88a4ffc37bf2f11b96f5f8aad893"}]},{"bom-ref":"a999fb75b49dd273","type":"file","name":"/.github/workflows/title.yml","hashes":[{"alg":"SHA-1","content":"1f17856c864e9bf6c20df38d11d9b0ca2bcb46af"},{"alg":"SHA-256","content":"b97b5a00f25c034ad9f61be10f26e518d4f1277679eb5679ec32363fb494aec5"}]},{"bom-ref":"3643813eb03d72ac","type":"file","name":"/.github/workflows/zizmor.yml","hashes":[{"alg":"SHA-1","content":"bb01b6179225867864413cdaceb653744020a5d7"},{"alg":"SHA-256","content":"2e636171f2fb079bf05dd5b0a6d721a920a1673404f84d56f00b0a412c6f8baa"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"775f9b57391249f624cff35bda52bf58b35bd76c"},{"alg":"SHA-256","content":"3e5985b09095a2a836bbafd4a79e126010af066acaf6d32b5d098a12f989a6a6"}]}]}