{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:cf6a521f-2df2-4bbe-8e47-9d820605ec1a","version":1,"metadata":{"timestamp":"2026-11-02T03:08:07Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"2435e81b99ffa00c","type":"file","name":"microsoft/sbom-tool","version":"v4.1.5"}},"components":[{"bom-ref":"pkg:github/actions/checkout@v5?package-id=78098b4af2a52684","type":"library","name":"actions/checkout","version":"v5","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/pr-comment-api-change.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v5.0.0?package-id=c5c9d0e1ee2d0aee","type":"library","name":"actions/checkout","version":"v5.0.0","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v5.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v5.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v5.0.0?package-id=0179f7fb5ee19043","type":"library","name":"actions/checkout","version":"v5.0.0","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v5.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v5.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/gen-docs.yml"}]},{"bom-ref":"pkg:github/actions/github-script@v8.0.0?package-id=a41450dfadf96e97","type":"library","name":"actions/github-script","version":"v8.0.0","cpe":"cpe:2.3:a:actions\\/github-script:actions\\/github-script:v8.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/github-script@v8.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github-script:actions\\/github_script:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github-script:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github_script:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github-script:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github_script:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/create_release_tag.yml"}]},{"bom-ref":"pkg:github/actions/setup-dotnet@v5.0.0?package-id=0c7224b2a94cfcb9","type":"library","name":"actions/setup-dotnet","version":"v5.0.0","cpe":"cpe:2.3:a:actions\\/setup-dotnet:actions\\/setup-dotnet:v5.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-dotnet@v5.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-dotnet:actions\\/setup_dotnet:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_dotnet:actions\\/setup-dotnet:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_dotnet:actions\\/setup_dotnet:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-dotnet:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_dotnet:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/gen-docs.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v3.30.3?package-id=28f5fcf80be1b66c#analyze","type":"library","name":"github/codeql-action/analyze","version":"v3.30.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v3.30.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v3.30.3#analyze","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v3.30.3?package-id=ca9a24e64d7ffa3d#autobuild","type":"library","name":"github/codeql-action/autobuild","version":"v3.30.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v3.30.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v3.30.3#autobuild","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v3.30.3?package-id=c7139e118b59e3d5#init","type":"library","name":"github/codeql-action/init","version":"v3.30.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v3.30.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v3.30.3#init","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v3.30.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/release-drafter/release-drafter@v6.1.0?package-id=66bb55e951fd87fd","type":"library","name":"release-drafter/release-drafter","version":"v6.1.0","cpe":"cpe:2.3:a:release-drafter\\/release-drafter:release-drafter\\/release-drafter:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/release-drafter/release-drafter@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:release-drafter\\/release-drafter:release_drafter\\/release_drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:release_drafter\\/release_drafter:release-drafter\\/release-drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:release_drafter\\/release_drafter:release_drafter\\/release_drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:release-drafter\\/release:release-drafter\\/release-drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:release-drafter\\/release:release_drafter\\/release_drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:release_drafter\\/release:release-drafter\\/release-drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:release_drafter\\/release:release_drafter\\/release_drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:release:release-drafter\\/release-drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:release:release_drafter\\/release_drafter:v6.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-drafter.yml"}]},{"bom-ref":"pkg:github/stefanzweifel/git-auto-commit-action@v6.0.1?package-id=09ed9dc35414682c","type":"library","name":"stefanzweifel/git-auto-commit-action","version":"v6.0.1","cpe":"cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git-auto-commit-action:v6.0.1:*:*:*:*:*:*:*","purl":"pkg:github/stefanzweifel/git-auto-commit-action@v6.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git-auto-commit-action:stefanzweifel\\/git_auto_commit_action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git-auto-commit-action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git_auto_commit_action:stefanzweifel\\/git_auto_commit_action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git-auto-commit-action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git-auto-commit:stefanzweifel\\/git_auto_commit_action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git-auto-commit-action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git_auto_commit:stefanzweifel\\/git_auto_commit_action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git-auto-commit-action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git-auto:stefanzweifel\\/git_auto_commit_action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git-auto-commit-action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git_auto:stefanzweifel\\/git_auto_commit_action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git-auto-commit-action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanzweifel\\/git:stefanzweifel\\/git_auto_commit_action:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/gen-docs.yml"}]},{"bom-ref":"5e19ea2e1f9dfee4","type":"file","name":"/.github/workflows/codeql-analysis.yml","hashes":[{"alg":"SHA-1","content":"215eab30cd8f0f9f150673520d6157671e9b9462"},{"alg":"SHA-256","content":"b2ed5b45bac62071afd69ad435ecd8c8616e60729ff472d3b78a7fb59079808d"}]},{"bom-ref":"4cc50b8442823809","type":"file","name":"/.github/workflows/create_release_tag.yml","hashes":[{"alg":"SHA-1","content":"313b4de1dec09bcfba72cb5fcc04d6dde20c1c5d"},{"alg":"SHA-256","content":"abed3e245b1d955853a7f967408943d27688d471fa15a7cfcaa9c49c18ef6fc3"}]},{"bom-ref":"868721729e63f212","type":"file","name":"/.github/workflows/gen-docs.yml","hashes":[{"alg":"SHA-1","content":"e4469de3f9aa742ab564ee836414fc1b72a3c4d6"},{"alg":"SHA-256","content":"3980b2d65703ba931364e9fa6aa9de98d6245f911a03f2db2b9026d29a583168"}]},{"bom-ref":"0a18b7a2bb11ae7e","type":"file","name":"/.github/workflows/pr-comment-api-change.yml","hashes":[{"alg":"SHA-1","content":"ef943b51c49c282f85102f4153dc52d3d24871bd"},{"alg":"SHA-256","content":"e5b40a950c88159c69a33f60768c9b8b767198488fe5f339d73cf734836df707"}]},{"bom-ref":"31e88b446ac7c887","type":"file","name":"/.github/workflows/release-drafter.yml","hashes":[{"alg":"SHA-1","content":"390233f45015481265451016ed4532d0740b5b8d"},{"alg":"SHA-256","content":"3eebf14960822e31bc588bcb195ea170fdece9aa18f7792561b138d31d431db2"}]}]}