{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:9852965d-7a6d-4fb0-b7de-7ab6d52ccf31","version":1,"metadata":{"timestamp":"2026-11-02T03:07:38Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"2429c1e11d4b151f","type":"file","name":"open-policy-agent/opa","version":"v1.22.0"}},"components":[{"bom-ref":"2e8378c5722ecdd1","type":"library","name":"./.github/actions/build-opa","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/actions\\/build-opa:.\\/.github\\/actions\\/build-opa:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/build-opa:.\\/.github\\/actions\\/build_opa:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/build_opa:.\\/.github\\/actions\\/build-opa:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/build_opa:.\\/.github\\/actions\\/build_opa:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/build:.\\/.github\\/actions\\/build-opa:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/build:.\\/.github\\/actions\\/build_opa:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"67dab481d1e268fa","type":"library","name":"./.github/workflows/test-envoy-with-opa.yaml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-envoy-with:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-envoy-with:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_envoy_with:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_envoy_with:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-envoy:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-envoy:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_envoy:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_envoy:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test-envoy-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test_envoy_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/nightly.yaml"}]},{"bom-ref":"b56e12b9d39f7ced","type":"library","name":"./.github/workflows/test-ocp-with-opa.yaml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp-with:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp-with:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp_with:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp_with:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/nightly.yaml"}]},{"bom-ref":"802dbcdeed62eaf6","type":"library","name":"./.github/workflows/test-ocp-with-opa.yaml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp-with:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp-with:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp_with:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp_with:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-ocp:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_ocp:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test-ocp-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test_ocp_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"3a252227257ee98b","type":"library","name":"./.github/workflows/test-regal-with-opa.yaml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal-with:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal-with:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal_with:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal_with:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/nightly.yaml"}]},{"bom-ref":"e593d88d3eaa606e","type":"library","name":"./.github/workflows/test-regal-with-opa.yaml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal-with:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal-with:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal_with:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal_with:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test-regal:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test_regal:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test-regal-with-opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/test:.\\/.github\\/workflows\\/test_regal_with_opa.yaml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=03d5bc05ca66dade","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks-nightly.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=784814ccef1a20c0","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks-nightly.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=5bdb0372d20aa673","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d3fe9e4ca6cc9f60","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=0433942024fe6768","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/link-checker.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=485c24e833959e3b","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/nightly.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=eb550d0b9c904d14","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/post-merge.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=07e63315a75202dc","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/post-tag.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=2a83fbb676515788","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=1b58e12fa7a7d2c9","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release-vulnerability-check.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=18bcb75bb7f8e928","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecards.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=a1729b3124f22f0b","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/test-envoy-with-opa.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=66c44d622b5e3363","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/test-ocp-with-opa.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=f59987211cad6fae","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/test-regal-with-opa.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=611d52d7be0f6f02","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/update-implementations.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=3ba08b4819340563","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks-nightly.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=b25444e227a1be9f","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-merge.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=81c81e0bff14f6b2","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-tag.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=f0f20b89f383869c","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v6.4.0?package-id=c672a69abe7550cf","type":"library","name":"actions/setup-go","version":"v6.4.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v6.4.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v6.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v6.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v6.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v6.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v6.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v6.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/actions/build-opa/action.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=b677764820606e89","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks-nightly.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=08ba96c5117dd23c","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=1036e58251b1c99f","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=c6f72e982bb3865c","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/nightly.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=1bde289d5ce3ac1e","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-merge.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=21fe1e82b8e89f99","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-tag.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=88b1359c071323cf","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=e0d740ead3efeb33","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-vulnerability-check.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=1ca7af13fc0ab965","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-envoy-with-opa.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=be2103a8c6bf3f77","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-ocp-with-opa.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=4b398e07b908d28a","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-regal-with-opa.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=85e2848906250544","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/update-implementations.yaml"}]},{"bom-ref":"pkg:github/actions/setup-java@v6.0.1?package-id=9df6c1a60804bfa9","type":"library","name":"actions/setup-java","version":"v6.0.1","cpe":"cpe:2.3:a:actions\\/setup-java:actions\\/setup-java:v6.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-java@v6.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-java:actions\\/setup_java:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_java:actions\\/setup-java:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_java:actions\\/setup_java:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-java:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_java:v6.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks-nightly.yaml"}]},{"bom-ref":"pkg:github/actions/setup-node@v7.0.0?package-id=dcc45f774b63e563","type":"library","name":"actions/setup-node","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-node@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=8462c57cd000687e","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks-nightly.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=8a1902fa1ea1a9ca","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-merge.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=4a7e7d825736d879","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-tag.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=00f6c4a92c227693","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=78a57baade6a9ac1","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecards.yml"}]},{"bom-ref":"pkg:github/bufbuild/buf-action@v1.6.0?package-id=a078471d0ed0e6cf","type":"library","name":"bufbuild/buf-action","version":"v1.6.0","cpe":"cpe:2.3:a:bufbuild\\/buf-action:bufbuild\\/buf-action:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:github/bufbuild/buf-action@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:bufbuild\\/buf-action:bufbuild\\/buf_action:v1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bufbuild\\/buf_action:bufbuild\\/buf-action:v1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bufbuild\\/buf_action:bufbuild\\/buf_action:v1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bufbuild\\/buf:bufbuild\\/buf-action:v1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bufbuild\\/buf:bufbuild\\/buf_action:v1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v4.4.1?package-id=7d0860516134d440","type":"library","name":"docker/setup-buildx-action","version":"v4.4.1","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v4.4.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-merge.yaml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v4.4.1?package-id=92120046dccc65c1","type":"library","name":"docker/setup-buildx-action","version":"v4.4.1","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v4.4.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-tag.yaml"}]},{"bom-ref":"pkg:github/docker/setup-qemu-action@v4.4.0?package-id=335fd02d5eb1b9c3","type":"library","name":"docker/setup-qemu-action","version":"v4.4.0","cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-qemu-action@v4.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:golang/github.com/filosottile/rsc-cmd/benchlab@v0.0.0-20260520161042-9fc40f0f0431?package-id=403c475ccdc7a6cf","type":"library","name":"github.com/FiloSottile/rsc-cmd/benchlab","version":"v0.0.0-20260520161042-9fc40f0f0431","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:FiloSottile:rsc-cmd\\/benchlab:v0.0.0-20260520161042-9fc40f0f0431:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/FiloSottile/rsc-cmd/benchlab@v0.0.0-20260520161042-9fc40f0f0431","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:FiloSottile:rsc_cmd\\/benchlab:v0.0.0-20260520161042-9fc40f0f0431:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:SWY2mG5IjWeinMt7gke/HIcectn60f/P8HbzKOAeh08="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/vividcortex/ewma@v1.2.0?package-id=d3cc5c3026505ffb","type":"library","name":"github.com/VividCortex/ewma","version":"v1.2.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/VividCortex/ewma@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:f58SaIzcDXrSy3kWaHNvuJgJ3Nmz59Zji6XoJR/q1ow="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d?package-id=7fa336aa44dc1d66","type":"library","name":"github.com/acarl005/stripansi","version":"v0.0.0-20180116102854-5a71ef0e047d","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:licZJFw2RwpHMqeKTCYkitsPqHNxTmd4SNR5r94FGM8="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/aclements/go-moremath@v0.0.0-20210112150236-f10218a38794?package-id=c4a68c343da0c3a4","type":"library","name":"github.com/aclements/go-moremath","version":"v0.0.0-20210112150236-f10218a38794","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:aclements:go-moremath:v0.0.0-20210112150236-f10218a38794:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aclements/go-moremath@v0.0.0-20210112150236-f10218a38794","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aclements:go_moremath:v0.0.0-20210112150236-f10218a38794:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:xlwdaKcTNVW4PtpQb8aKA4Pjy0CdJHEqvFbAnvR5m2g="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=faf4ac442ab1d72e","type":"library","name":"github.com/agnivade/levenshtein","version":"v1.2.1","cpe":"cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/agnivade/levenshtein@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="}]},{"bom-ref":"pkg:golang/github.com/akavel/rsrc@v0.10.2?package-id=c64f39822b990e63","type":"library","name":"github.com/akavel/rsrc","version":"v0.10.2","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:akavel:rsrc:v0.10.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/akavel/rsrc@v0.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:Zxm8V5eI1hW4gGaYsJQUhxpjkENuG91ki8B4zCrvEsw="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=4b7f4d17e7911c1a","type":"library","name":"github.com/beorn7/perks","version":"v1.0.1","cpe":"cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/beorn7/perks@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="}]},{"bom-ref":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=5e9265ff67aa38c8","type":"library","name":"github.com/cenkalti/backoff/v5","version":"v5.0.3","cpe":"cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/displaywidth@v0.10.0?package-id=ac876197a1ca9215","type":"library","name":"github.com/clipperhouse/displaywidth","version":"v0.10.0","cpe":"cpe:2.3:a:clipperhouse:displaywidth:v0.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/displaywidth@v0.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GhBG8WuerxjFQQYeuZAeVTuyxuX+UraiZGD4HJQ3Y8g="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.6.0?package-id=b0d3ca28f0df54f1","type":"library","name":"github.com/clipperhouse/uax29/v2","version":"v2.6.0","cpe":"cpe:2.3:a:clipperhouse:uax29\\/v2:v2.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:z0cDbUV+aPASdFb2/ndFnS9ts/WNXgTNNGFoKXuhpos="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0?package-id=ed44243e87038928","type":"library","name":"github.com/clipperhouse/uax29/v2","version":"v2.7.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJv2v7Vk="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7?package-id=7213409f646ddf27","type":"library","name":"github.com/cpuguy83/go-md2man/v2","version":"v2.0.7","cpe":"cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cpuguy83:go_md2man\\/v2:v2.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zbFlGlXEAKlwXpmvle3d8Oe3YnkKIK4xSRTd3sHPnBo="}]},{"bom-ref":"pkg:golang/github.com/davecgh/go-spew@v1.1.0?package-id=5a22273f6effebcf","type":"library","name":"github.com/davecgh/go-spew","version":"v1.1.0","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:davecgh:go-spew:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davecgh/go-spew@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davecgh:go_spew:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1?package-id=13b8b4fc23607aa8","type":"library","name":"github.com/decred/dcrd/dcrec/secp256k1/v4","version":"v4.4.1","cpe":"cpe:2.3:a:decred:dcrd\\/dcrec\\/secp256k1\\/v4:v4.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5RVFMOWjMyRy8cARdy79nAmgYw3hK/4HUq48LQ6Wwqo="}]},{"bom-ref":"pkg:golang/github.com/dgraph-io/badger/v4@v4.9.6?package-id=d9ea0fda245d227b","type":"library","name":"github.com/dgraph-io/badger/v4","version":"v4.9.6","cpe":"cpe:2.3:a:dgraph-io:badger\\/v4:v4.9.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dgraph-io/badger/v4@v4.9.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dgraph_io:badger\\/v4:v4.9.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dgraph:badger\\/v4:v4.9.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IQqMPVGLNCQr1b4Mu8lHkYm/xyqFRsyKaFEtyLi9CCQ="}]},{"bom-ref":"pkg:golang/github.com/dgraph-io/ristretto/v2@v2.2.0?package-id=dd81cb314136208e","type":"library","name":"github.com/dgraph-io/ristretto/v2","version":"v2.2.0","cpe":"cpe:2.3:a:dgraph-io:ristretto\\/v2:v2.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dgraph-io/ristretto/v2@v2.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dgraph_io:ristretto\\/v2:v2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dgraph:ristretto\\/v2:v2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bkY3XzJcXoMuELV8F+vS8kzNgicwQFAaGINAEJdWGOM="}]},{"bom-ref":"pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=8432997ae2bcf2c7","type":"library","name":"github.com/dustin/go-humanize","version":"v1.0.1","cpe":"cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dustin/go-humanize@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="}]},{"bom-ref":"pkg:golang/github.com/fatih/color@v1.18.0?package-id=42c16c13a5380dfc","type":"library","name":"github.com/fatih/color","version":"v1.18.0","cpe":"cpe:2.3:a:fatih:color:v1.18.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fatih/color@v1.18.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0?package-id=21924c216340421a","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.1.0","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc="}]},{"bom-ref":"pkg:golang/github.com/fortytw2/leaktest@v1.3.0?package-id=119ff4399e2df1e7","type":"library","name":"github.com/fortytw2/leaktest","version":"v1.3.0","cpe":"cpe:2.3:a:fortytw2:leaktest:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fortytw2/leaktest@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u8491cBMTQ8ft8aeV+adlcytMZylmA5nnwwkRZjI8vw="}]},{"bom-ref":"pkg:golang/github.com/foxcpp/go-mockdns@v1.2.0?package-id=1220807364802a1f","type":"library","name":"github.com/foxcpp/go-mockdns","version":"v1.2.0","cpe":"cpe:2.3:a:foxcpp:go-mockdns:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/foxcpp/go-mockdns@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:foxcpp:go_mockdns:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:omK3OrHRD1IWJz1FuFBCFquhXslXoF17OvBS6JPzZF0="}]},{"bom-ref":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=73529cb77374f1e3","type":"library","name":"github.com/fsnotify/fsnotify","version":"v1.10.1","cpe":"cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.4?package-id=5d64ad5913a6841c","type":"library","name":"github.com/go-logr/logr","version":"v1.4.4","cpe":"cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ed7921825a53d3f4","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/gobwas/glob@v1.0.0?package-id=f299b1550dcae316","type":"library","name":"github.com/gobwas/glob","version":"v1.0.0","cpe":"cpe:2.3:a:gobwas:glob:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gobwas/glob@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:p+FKbLEIsK1yZ39/OINwFvqNb5oyPY4H8xcy6uYu8dg="}]},{"bom-ref":"pkg:golang/github.com/goccy/go-json@v0.10.6?package-id=fee6a9226de1485e","type":"library","name":"github.com/goccy/go-json","version":"v0.10.6","cpe":"cpe:2.3:a:goccy:go-json:v0.10.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goccy/go-json@v0.10.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:goccy:go_json:v0.10.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:p8HrPJzOakx/mn/bQtjgNjdTcN+/S6FcG2CTtQOrHVU="}]},{"bom-ref":"pkg:golang/github.com/google/flatbuffers@v25.2.10%2Bincompatible?package-id=076fc839d6d5ca7e","type":"library","name":"github.com/google/flatbuffers","version":"v25.2.10+incompatible","cpe":"cpe:2.3:a:google:flatbuffers:v25.2.10\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/flatbuffers@v25.2.10%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:F3vclr7C3HpB1k9mxCGRMXq6FdUalZ6H/pNX4FP1v0Q="}]},{"bom-ref":"pkg:golang/github.com/google/go-cmdtest@v0.4.1-0.20220921163831-55ab3332a786?package-id=c926a69be63f0d41","type":"library","name":"github.com/google/go-cmdtest","version":"v0.4.1-0.20220921163831-55ab3332a786","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:google:go-cmdtest:v0.4.1-0.20220921163831-55ab3332a786:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmdtest@v0.4.1-0.20220921163831-55ab3332a786","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmdtest:v0.4.1-0.20220921163831-55ab3332a786:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:rcv+Ippz6RAtvaGgKxc+8FQIpxHgsF+HBzPyYL2cyVU="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=f63d5b1773b33165","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=473d0adb4b419c7e","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="}]},{"bom-ref":"pkg:golang/github.com/google/go-github/v76@v76.0.0?package-id=a8f3321daaeccc26","type":"library","name":"github.com/google/go-github/v76","version":"v76.0.0","cpe":"cpe:2.3:a:google:go-github\\/v76:v76.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-github/v76@v76.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_github\\/v76:v76.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/release/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MCa9VQn+VG5GG7Y7BAkBvSRUN3o+QpaEOuZwFPJmdFA="}]},{"bom-ref":"pkg:golang/github.com/google/go-querystring@v1.1.0?package-id=7b48ef08a79ae286","type":"library","name":"github.com/google/go-querystring","version":"v1.1.0","cpe":"cpe:2.3:a:google:go-querystring:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-querystring@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_querystring:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/release/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8="}]},{"bom-ref":"pkg:golang/github.com/google/renameio@v0.1.0?package-id=61c2b685d43f56f2","type":"library","name":"github.com/google/renameio","version":"v0.1.0","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:google:renameio:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/renameio@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:GOZbcHa3HfsPKPlmyPyN2KEohoMXOhdMbHrvbpl2QaA="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.30.0?package-id=dbbf8163aeb38ff9","type":"library","name":"github.com/grpc-ecosystem/grpc-gateway/v2","version":"v2.30.0","cpe":"cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.30.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/Tnpcb2E0Pz/tN9s3bfEY2Q8ePCEX9iuS+cneUwncnw="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7?package-id=fc804484ec9835b3","type":"library","name":"github.com/hashicorp/golang-lru/v2","version":"v2.0.7","cpe":"cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k="}]},{"bom-ref":"pkg:golang/github.com/huandu/go-clone@v1.7.3?package-id=c1b342ff2267b057","type":"library","name":"github.com/huandu/go-clone","version":"v1.7.3","cpe":"cpe:2.3:a:huandu:go-clone:v1.7.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/huandu/go-clone@v1.7.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:huandu:go_clone:v1.7.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rtQODA+ABThEn6J5LBTppJfKmZy/FwfpMUWa8d01TTQ="}]},{"bom-ref":"pkg:golang/github.com/huandu/go-sqlbuilder@v1.43.0?package-id=00031c62cf95889e","type":"library","name":"github.com/huandu/go-sqlbuilder","version":"v1.43.0","cpe":"cpe:2.3:a:huandu:go-sqlbuilder:v1.43.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/huandu/go-sqlbuilder@v1.43.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:huandu:go_sqlbuilder:v1.43.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PdY4cnRR5Ed0wOmDFY4SLr1dQ/1iZicADMnfHNQliGM="}]},{"bom-ref":"pkg:golang/github.com/huandu/xstrings@v1.4.0?package-id=9b89c0ebbbd8a946","type":"library","name":"github.com/huandu/xstrings","version":"v1.4.0","cpe":"cpe:2.3:a:huandu:xstrings:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/huandu/xstrings@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:D17IlohoQq4UcpqD7fDk80P7l+lwAmlFaBHgOipl2FU="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/josephspurrier/goversioninfo@v1.7.0?package-id=1757833b4eee4129","type":"library","name":"github.com/josephspurrier/goversioninfo","version":"v1.7.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:josephspurrier:goversioninfo:v1.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/josephspurrier/goversioninfo@v1.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:LQzXOlVm/CtbwJ9/UHl5a2HT0BjcLAwid5gqGd7ZUJ8="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/klauspost/compress@v1.20.0?package-id=a1156147601ced7b","type":"library","name":"github.com/klauspost/compress","version":"v1.20.0","cpe":"cpe:2.3:a:klauspost:compress:v1.20.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/compress@v1.20.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:a3C1ke2ohxFymNlb2HWAHjDeKCI90scRskErZkR0ezA="}]},{"bom-ref":"pkg:golang/github.com/kr/pretty@v0.3.1?package-id=b76d4050a948c5b8","type":"library","name":"github.com/kr/pretty","version":"v0.3.1","cpe":"cpe:2.3:a:kr:pretty:v0.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kr/pretty@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE="}]},{"bom-ref":"pkg:golang/github.com/kr/text@v0.2.0?package-id=149bb08a88b6158e","type":"library","name":"github.com/kr/text","version":"v0.2.0","cpe":"cpe:2.3:a:kr:text:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kr/text@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY="}]},{"bom-ref":"pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=054bf546a3d78ff8","type":"library","name":"github.com/kylelemons/godebug","version":"v1.1.0","cpe":"cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kylelemons/godebug@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=467dfc2aaacc1a64","type":"library","name":"github.com/lestrrat-go/blackmagic","version":"v1.0.4","cpe":"cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/dsig@v1.4.0?package-id=f0adff5ce4e8e0ae","type":"library","name":"github.com/lestrrat-go/dsig","version":"v1.4.0","cpe":"cpe:2.3:a:lestrrat-go:dsig:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/dsig@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:g7LUjK8cT74A5DzBXJI5HzsJuLhoYN0Wzj4nuOMIrH8="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0?package-id=d65a56cfe6081f49","type":"library","name":"github.com/lestrrat-go/dsig-secp256k1","version":"v1.0.0","cpe":"cpe:2.3:a:lestrrat-go:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat-go:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JpDe4Aybfl0soBvoVwjqDbp+9S1Y2OM7gcrVVMFPOzY="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=77082979d5501f35","type":"library","name":"github.com/lestrrat-go/httpcc","version":"v1.0.1","cpe":"cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.6?package-id=cf71aec7b96d212c","type":"library","name":"github.com/lestrrat-go/httprc/v3","version":"v3.0.6","cpe":"cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4FpLQ18KK/ypPbVU3NLWJNRvH3kcYiqKqWfKGqNWxxI="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/jwx/v3@v3.3.0?package-id=271323b202a092f0","type":"library","name":"github.com/lestrrat-go/jwx/v3","version":"v3.3.0","cpe":"cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/jwx/v3@v3.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:jwx\\/v3:v3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OXcYvQOQ7cxWzeZ/Q9sYk8ABe/kCSI371WmuACiCT+4="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=304fb132333f206a","type":"library","name":"github.com/lestrrat-go/option/v2","version":"v2.0.0","cpe":"cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-colorable@v0.1.14?package-id=08b5338f302cc464","type":"library","name":"github.com/mattn/go-colorable","version":"v0.1.14","cpe":"cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-colorable@v0.1.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.20?package-id=f4619afab7c4111c","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.20","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.20","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.19?package-id=2424c9dad0739e6e","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.19","cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.19:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.19","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.19:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:v++JhqYnZuu5jSKrk9RbgF5v4CGUjqRfBm05byFGLdw="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.23?package-id=374970206ad824ba","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.23","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.23:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.23","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.23:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:7ykA0T0jkPpzSvMS5i9uoNn2Xy3R383f9HDx3RybWcw="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/miekg/dns@v1.1.57?package-id=f9bd5044e7637cbf","type":"library","name":"github.com/miekg/dns","version":"v1.1.57","cpe":"cpe:2.3:a:miekg:dns:v1.1.57:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/miekg/dns@v1.1.57","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Jzi7ApEIzwEPLHWRcafCN9LZSBbqQpxjt/wpgvg7wcM="}]},{"bom-ref":"pkg:golang/github.com/mna/pigeon@v1.3.0?package-id=9c0f0950787db579","type":"library","name":"github.com/mna/pigeon","version":"v1.3.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:mna:pigeon:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mna/pigeon@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:/3fzVrl1C2RK3x04tyL+ribn+3S3VSEFFbCFLmRPAoc="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=2d33de0c2e03c980","type":"library","name":"github.com/munnerz/goautoneg","version":"v0.0.0-20191010083416-a7dc8b61c822","cpe":"cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="}]},{"bom-ref":"pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6?package-id=bebcd8c7e0abbf91","type":"library","name":"github.com/olekukonko/cat","version":"v0.0.0-20250911104152-50322a0618f6","cpe":"cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zrbMGy9YXpIeTnGj4EljqMiZsIcE09mmF8XsD5AYOJc="}]},{"bom-ref":"pkg:golang/github.com/olekukonko/errors@v1.2.0?package-id=b37731489e65ea4f","type":"library","name":"github.com/olekukonko/errors","version":"v1.2.0","cpe":"cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/olekukonko/errors@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:10Zcn4GeV59t/EGqJc8fUjtFT/FuUh5bTMzZ1XwmCRo="}]},{"bom-ref":"pkg:golang/github.com/olekukonko/ll@v0.1.6?package-id=9eebc3ddf477ca22","type":"library","name":"github.com/olekukonko/ll","version":"v0.1.6","cpe":"cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/olekukonko/ll@v0.1.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lGVTHO+Qc4Qm+fce/2h2m5y9LvqaW+DCN7xW9hsU3uA="}]},{"bom-ref":"pkg:golang/github.com/olekukonko/tablewriter@v1.1.5?package-id=064ec294ff87da38","type":"library","name":"github.com/olekukonko/tablewriter","version":"v1.1.5","cpe":"cpe:2.3:a:olekukonko:tablewriter:v1.1.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/olekukonko/tablewriter@v1.1.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4LoZSfMySpMQY3PT8RWJsJeuEuMIoo9xGRgvmqjg6IQ="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=19989b5d142f3073","type":"library","name":"github.com/opencontainers/go-digest","version":"v1.0.0","cpe":"cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=10613df95c6a2b3e","type":"library","name":"github.com/opencontainers/image-spec","version":"v1.1.1","cpe":"cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="}]},{"bom-ref":"pkg:golang/github.com/pmezard/go-difflib@v1.0.0?package-id=e260b500d146c4d6","type":"library","name":"github.com/pmezard/go-difflib","version":"v1.0.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:pmezard:go-difflib:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pmezard/go-difflib@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pmezard:go_difflib:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_golang@v1.24.1?package-id=a514cc48df50cef4","type":"library","name":"github.com/prometheus/client_golang","version":"v1.24.1","cpe":"cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_golang@v1.24.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JnJkREXzWxUdCuPFpIWZiPispT9xVV59uiuyR2bPlnU="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_model@v0.6.3?package-id=238472447a143bfc","type":"library","name":"github.com/prometheus/client_model","version":"v0.6.3","cpe":"cpe:2.3:a:prometheus:client-model:v0.6.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_model@v0.6.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_model:v0.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O0jaTVAYNxTHYInEPFJt5I3+sN8zqBtVMPTB1qyxiEo="}]},{"bom-ref":"pkg:golang/github.com/prometheus/common@v0.70.1?package-id=0f58d85c7e917ff8","type":"library","name":"github.com/prometheus/common","version":"v0.70.1","cpe":"cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/common@v0.70.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1HvjP4D5oL3t8RsPlwxA9onvvStjtIHYE5XuuwOi/PY="}]},{"bom-ref":"pkg:golang/github.com/prometheus/procfs@v0.21.1?package-id=878089afee5fa76e","type":"library","name":"github.com/prometheus/procfs","version":"v0.21.1","cpe":"cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/procfs@v0.21.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GljZCt+zSTS+NZq88cyQ1LjZ+RCHp3uVuabBWA5+OJI="}]},{"bom-ref":"pkg:golang/github.com/reeflective/readline@v1.3.0?package-id=40b8465280fb6883","type":"library","name":"github.com/reeflective/readline","version":"v1.3.0","cpe":"cpe:2.3:a:reeflective:readline:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/reeflective/readline@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uh9c2SEmyoy7A/auequfXZjvK0NP5HVEAJFcL9Uf7qE="}]},{"bom-ref":"pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=2c0de3c260aa0d91","type":"library","name":"github.com/rivo/uniseg","version":"v0.4.7","cpe":"cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rivo/uniseg@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="}]},{"bom-ref":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0?package-id=0f406cede8fddc72","type":"library","name":"github.com/rogpeppe/go-internal","version":"v1.16.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:rogpeppe:go-internal:v1.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogpeppe:go_internal:v1.16.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:O9DK+vNMDVGLr2BeZqmpLeMjiMNkuXfcqntWbZV6S5g="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0?package-id=21a01a44856d2683","type":"library","name":"github.com/rogpeppe/go-internal","version":"v1.16.0","cpe":"cpe:2.3:a:rogpeppe:go-internal:v1.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogpeppe:go_internal:v1.16.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O9DK+vNMDVGLr2BeZqmpLeMjiMNkuXfcqntWbZV6S5g="}]},{"bom-ref":"pkg:golang/github.com/russross/blackfriday/v2@v2.1.0?package-id=322467568497145e","type":"library","name":"github.com/russross/blackfriday/v2","version":"v2.1.0","cpe":"cpe:2.3:a:russross:blackfriday\\/v2:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/russross/blackfriday/v2@v2.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk="}]},{"bom-ref":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3?package-id=c20b008a43f442ea","type":"library","name":"github.com/santhosh-tekuri/jsonschema/v6","version":"v6.0.3","cpe":"cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1EYB5IzjZawrrnELUi78f9fPu57HuXjmddZPjrls/28="}]},{"bom-ref":"pkg:golang/github.com/segmentio/asm@v1.2.1?package-id=6e2ce7675f03c1d0","type":"library","name":"github.com/segmentio/asm","version":"v1.2.1","cpe":"cpe:2.3:a:segmentio:asm:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/segmentio/asm@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DTNbBqs57ioxAD4PrArqftgypG4/qNpXoJx8TVXxPR0="}]},{"bom-ref":"pkg:golang/github.com/sergi/go-diff@v1.4.0?package-id=eadb73b749fc4f5b","type":"library","name":"github.com/sergi/go-diff","version":"v1.4.0","cpe":"cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sergi/go-diff@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw="}]},{"bom-ref":"pkg:golang/github.com/sirupsen/logrus@v1.10.2?package-id=a50d10c5a936e134","type":"library","name":"github.com/sirupsen/logrus","version":"v1.10.2","cpe":"cpe:2.3:a:turbopuffer:logrus:v1.10.2:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/sirupsen/logrus@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G2SED73/qrAu6YwbdxOD6peLkCBI3z7L+ykJFTXJBBo="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=aaf4307e8bf5eb4c","type":"library","name":"github.com/spf13/cobra","version":"v1.10.2","cpe":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=ec9ed93888749dc0","type":"library","name":"github.com/spf13/pflag","version":"v1.0.10","cpe":"cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="}]},{"bom-ref":"pkg:golang/github.com/stretchr/testify@v1.6.1?package-id=c49abab92cc57817","type":"library","name":"github.com/stretchr/testify","version":"v1.6.1","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:stretchr:testify:v1.6.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/testify@v1.6.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:hDPOHmpOpP40lSULcqw7IrRb/u7w6RpDC9399XyoNd0="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/tetratelabs/wazero@v1.12.0?package-id=ce49657b84f26bbe","type":"library","name":"github.com/tetratelabs/wazero","version":"v1.12.0","cpe":"cpe:2.3:a:tetratelabs:wazero:v1.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tetratelabs/wazero@v1.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DuWcpNu/FzgEXgGBDp8J1Spc+CWOvvtvVyjKlaZopYU="}]},{"bom-ref":"pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=9ccc7f3f5098c217","type":"library","name":"github.com/valyala/fastjson","version":"v1.6.10","cpe":"cpe:2.3:a:valyala:fastjson:v1.6.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/valyala/fastjson@v1.6.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/yjJg8jaVQdYR3arGxPE2X5z89xrlhS0eGXdv+ADTh4="}]},{"bom-ref":"pkg:golang/github.com/vbauerster/mpb/v8@v8.12.1?package-id=1c62e1fd456b9cae","type":"library","name":"github.com/vbauerster/mpb/v8","version":"v8.12.1","licenses":[{"license":{"id":"Unlicense"}}],"cpe":"cpe:2.3:a:vbauerster:mpb\\/v8:v8.12.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/vbauerster/mpb/v8@v8.12.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:pyj3yQ2ZGQJgUXm4h17QpR+eERaNz5OQ1ftPSEE/sMM="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/github.com/vektah/gqlparser/v2@v2.5.58?package-id=fefa6e0df8e1504c","type":"library","name":"github.com/vektah/gqlparser/v2","version":"v2.5.58","cpe":"cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.58:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/vektah/gqlparser/v2@v2.5.58","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yHxQ3EjU2OGuDMh6noxxmZova1HkBM3CbdGtL+rvjOc="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=8d3359a3be622488","type":"library","name":"github.com/xeipuuv/gojsonpointer","version":"v0.0.0-20190905194746-02993c407bfb","cpe":"cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=2429773a33fd3e90","type":"library","name":"github.com/xeipuuv/gojsonreference","version":"v0.0.0-20180127040603-bd5ef7bd5415","cpe":"cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="}]},{"bom-ref":"pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=a435657526b949cf","type":"library","name":"github.com/yashtewari/glob-intersection","version":"v0.2.0","cpe":"cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg="}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.2?package-id=3d500e9aa5ab6a84#analyze","type":"library","name":"github/codeql-action/analyze","version":"v4.38.2","cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v4.38.2:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.2#analyze","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.2?package-id=d618dacff1a6ff17#init","type":"library","name":"github/codeql-action/init","version":"v4.38.2","cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v4.38.2:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.2#init","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.2?package-id=dd1445e14d852876#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v4.38.2","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.2#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecards.yml"}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a00544d9cf935bfa","type":"library","name":"go.opentelemetry.io/auto/sdk","version":"v1.2.1","cpe":"cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/bridges/prometheus@v0.71.0?package-id=e59b7a7e99598b4a","type":"library","name":"go.opentelemetry.io/contrib/bridges/prometheus","version":"v0.71.0","cpe":"cpe:2.3:a:contrib:bridges\\/prometheus:v0.71.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/bridges/prometheus@v0.71.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9qgxsFLskbDMXl8WMqThoF6w8yGJgCumn9qRc67OmnI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.71.0?package-id=6f30d1ccb9c91d63","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","version":"v0.71.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.71.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.71.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3g7B90UzBltIDKq1/5mrTGxTnOFDV0ICOhLoxiZ8jlg="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel@v1.46.0?package-id=142d52ab49e2757e","type":"library","name":"go.opentelemetry.io/otel","version":"v1.46.0","cpe":"cpe:2.3:a:opentelemetry:opentelemetry:v1.46.0:*:*:*:*:go:*:*","purl":"pkg:golang/go.opentelemetry.io/otel@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FHt5/CDyVxi/8IM1CH7VE/rRgq3kLHa2mSTVMO8AWyc="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.46.0?package-id=11eb08e4f8311636","type":"library","name":"go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc","version":"v1.46.0","cpe":"cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetricgrpc:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qkDYCAFiZXLcs1L4aY+tP2wguQ4kURANqHOQMA2et2s="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.46.0?package-id=f7a3a0b828e7ad87","type":"library","name":"go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp","version":"v1.46.0","cpe":"cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetrichttp:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AP23h/mFgb/lc7tdck1Kfn9qxsM8TAeNPCU5C3pzaps="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.46.0?package-id=ef0188dfa5cff2a2","type":"library","name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace","version":"v1.46.0","cpe":"cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OFnwLJr+pF3iHrlGSzbxyuo6/6HyBlnlN1CWEJmBVcw="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.46.0?package-id=a4c7063266a48b41","type":"library","name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc","version":"v1.46.0","cpe":"cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w53CDeOA/Kurp7yRsegSr6pbbr759dOvJ+yNmWM6Hxs="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.46.0?package-id=84d35b4ea993d0cb","type":"library","name":"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp","version":"v1.46.0","cpe":"cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracehttp:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KrC1YrQeSt46ITMWAbgQx1M1eV1/1TKzttrBzymPmss="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0?package-id=6ad8192bde1540ac","type":"library","name":"go.opentelemetry.io/otel/metric","version":"v1.46.0","cpe":"cpe:2.3:a:otel:metric:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yBnkXvgV7AXFILZc5K6IZe/CBFF3OS7BJ8ov6/lj0K8="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0?package-id=0d828e6d6cb4bd97","type":"library","name":"go.opentelemetry.io/otel/sdk","version":"v1.46.0","cpe":"cpe:2.3:a:otel:sdk:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h5CNQQjEbuQXY/JfZtgt3i7HVFV3aHPO2OAwO2eTYPI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0?package-id=349f5205ae75feb6","type":"library","name":"go.opentelemetry.io/otel/sdk/metric","version":"v1.46.0","cpe":"cpe:2.3:a:otel:sdk\\/metric:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0piZ26EG4RBfebb2jhDH6ERCYHoVWduc3kLgPCwSnSE="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0?package-id=63c323eece5da87c","type":"library","name":"go.opentelemetry.io/otel/trace","version":"v1.46.0","cpe":"cpe:2.3:a:otel:trace:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OULy7ccdJnZtJ0UDYFOIGaCmiWzJ8Vi2G/Rsu60qs1c="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.0?package-id=674544feea23c77b","type":"library","name":"go.opentelemetry.io/proto/otlp","version":"v1.11.0","cpe":"cpe:2.3:a:proto:otlp:v1.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5rrYs0Ykyj50sdU/JU0x8etU+LubXWb+gED6TbEdMIk="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5?package-id=4fc93c87aeebc64b","type":"library","name":"go.yaml.in/yaml/v3","version":"v3.0.5","cpe":"cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.57.0?package-id=4a7180a3454dcfdc","type":"library","name":"golang.org/x/crypto","version":"v0.57.0","cpe":"cpe:2.3:a:golang:crypto:v0.57.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.35.0?package-id=f6aa430025cced58","type":"library","name":"golang.org/x/mod","version":"v0.35.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/mod:v0.35.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.35.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:Ww1D637e6Pg+Zb2KrWfHQUnH2dQRLBQyAtpr/haaJeM="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.41.0?package-id=56d232e7120c3a8b","type":"library","name":"golang.org/x/mod","version":"v0.41.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.41.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.60.0?package-id=e090465aca4b3a43","type":"library","name":"golang.org/x/net","version":"v0.60.0","cpe":"cpe:2.3:a:golang:networking:v0.60.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.60.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.60.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU="}]},{"bom-ref":"pkg:golang/golang.org/x/perf@v0.0.0-20260512194132-3cf34090a3db?package-id=25d694936e6bcb12","type":"library","name":"golang.org/x/perf","version":"v0.0.0-20260512194132-3cf34090a3db","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/perf:v0.0.0-20260512194132-3cf34090a3db:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/perf@v0.0.0-20260512194132-3cf34090a3db","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:1EdY5INjhh724sLDk1O/nIzRZ8wmHbmiF8K2cK/mNLw="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.23.0?package-id=33eb39d6a6b80e36","type":"library","name":"golang.org/x/sync","version":"v0.23.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.23.0?package-id=1c59d62db54de586","type":"library","name":"golang.org/x/sync","version":"v0.23.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.44.0?package-id=9082cc062854d97f","type":"library","name":"golang.org/x/sys","version":"v0.44.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/sys:v0.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:ildZl3J4uzeKP07r2F++Op7E9B29JRUy+a27EibtBTQ="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.48.0?package-id=22bf94b873e909e4","type":"library","name":"golang.org/x/sys","version":"v0.48.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.48.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo="}]},{"bom-ref":"pkg:golang/golang.org/x/telemetry@v0.0.0-20260421165255-392afab6f40e?package-id=2e7c0e589e113696","type":"library","name":"golang.org/x/telemetry","version":"v0.0.0-20260421165255-392afab6f40e","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/telemetry:v0.0.0-20260421165255-392afab6f40e:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/telemetry@v0.0.0-20260421165255-392afab6f40e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:OXgN37M6hqjaAvb7CJK9vJ+7Z/6lvIm5bXho5poo/Wk="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.46.0?package-id=83f613fa5c9f7fb9","type":"library","name":"golang.org/x/term","version":"v0.46.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3+OXuTbaKDgwk8jTi3aSLHRlmWqHEUDUtxnbFigO4YE="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.42.0?package-id=8946d0e2b7ce5ab6","type":"library","name":"golang.org/x/text","version":"v0.42.0","cpe":"cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.42.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI="}]},{"bom-ref":"pkg:golang/golang.org/x/time@v0.16.0?package-id=90e57fc7c651498e","type":"library","name":"golang.org/x/time","version":"v0.16.0","cpe":"cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/time@v0.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vMb6ptszcQMkcwiRTAuNNU50gom6++Q/6gY2hDM6VDE="}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.44.0?package-id=e555827a4a402b5b","type":"library","name":"golang.org/x/tools","version":"v0.44.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/tools:v0.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:UP4ajHPIcuMjT1GqzDWRlalUEoY+uzoZKnhOjbIPD2c="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.49.0?package-id=1d0c1f0fc356ce03","type":"library","name":"golang.org/x/tools","version":"v0.49.0","cpe":"cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.49.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI="}]},{"bom-ref":"pkg:golang/golang.org/x/tools/go/expect@v0.1.1-deprecated?package-id=0f6ecf0cb019c127","type":"library","name":"golang.org/x/tools/go/expect","version":"v0.1.1-deprecated","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/tools\\/go\\/expect:v0.1.1-deprecated:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools/go/expect@v0.1.1-deprecated","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:jpBZDwmgPhXsKZC6WhL20P4b/wmnpsEAGHaNy0n/rJM="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/golang.org/x/tools/go/packages/packagestest@v0.1.1-deprecated?package-id=a8672324b993f0ed","type":"library","name":"golang.org/x/tools/go/packages/packagestest","version":"v0.1.1-deprecated","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/tools\\/go\\/packages\\/packagestest:v0.1.1-deprecated:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools/go/packages/packagestest@v0.1.1-deprecated","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/golang.org/x/vuln@v1.3.0?package-id=4a85c73c42c6f8d0","type":"library","name":"golang.org/x/vuln","version":"v1.3.0","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:golang:x\\/vuln:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/vuln@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:hZYzR8uRhYhDSX88d+40TWbKAVw7BIvRWm26rtEn8jw="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688?package-id=6f6a76a0e0d33b13","type":"library","name":"google.golang.org/genproto/googleapis/api","version":"v0.0.0-20260819154853-08b0e4226688","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ax2KzoSRIZU/M0cIxri3pKxy99vniH1PVxWC6si/eZI="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688?package-id=1c231c21367d6661","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20260819154853-08b0e4226688","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cYNAzI2sUwhmCcoj9TxvihSrqsxt6uIkj3rDRhSDmW4="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.84.0?package-id=54bcc746f2ab7987","type":"library","name":"google.golang.org/grpc","version":"v1.84.0","cpe":"cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.84.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:soMyaPJ8pAak5PIQ0DGBUir0XRo2fRoMqhNWMLlLxO0="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=b23533d1fd40d404","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=0055873c0ce1a39b","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12","cpe":"cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc="}]},{"bom-ref":"pkg:golang/gopkg.in/check.v1@v1.0.0-20201130134442-10cb98267c6c?package-id=f3606cbd54002165","type":"library","name":"gopkg.in/check.v1","version":"v1.0.0-20201130134442-10cb98267c6c","purl":"pkg:golang/gopkg.in/check.v1@v1.0.0-20201130134442-10cb98267c6c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk="}]},{"bom-ref":"pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=8f99b4759d521906","type":"library","name":"gopkg.in/ini.v1","version":"v1.67.3","purl":"pkg:golang/gopkg.in/ini.v1@v1.67.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw="}]},{"bom-ref":"pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1?package-id=49f92b8296741bb6","type":"library","name":"gopkg.in/natefinch/lumberjack.v2","version":"v2.2.1","purl":"pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bBRl1b0OH9s/DuPhuXpNl+VtCaJXFZ5/uEFST95x9zc="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=9e39c9e7709132af","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","licenses":[{"license":{"id":"Apache-2.0"}},{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/build/tools/go.mod"},{"name":"syft:metadata:architecture","value":"amd64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="},{"name":"syft:metadata:os","value":"linux"}]},{"bom-ref":"pkg:github/jdx/mise-action@v4.3.0?package-id=3c4721482529809f","type":"library","name":"jdx/mise-action","version":"v4.3.0","cpe":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*","purl":"pkg:github/jdx/mise-action@v4.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks-nightly.yaml"}]},{"bom-ref":"pkg:github/jdx/mise-action@v4.3.0?package-id=6c4ff08efecf8575","type":"library","name":"jdx/mise-action","version":"v4.3.0","cpe":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*","purl":"pkg:github/jdx/mise-action@v4.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-merge.yaml"}]},{"bom-ref":"pkg:github/jdx/mise-action@v4.3.0?package-id=3004bb427cb89597","type":"library","name":"jdx/mise-action","version":"v4.3.0","cpe":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*","purl":"pkg:github/jdx/mise-action@v4.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/post-tag.yaml"}]},{"bom-ref":"pkg:github/jdx/mise-action@v4.3.0?package-id=6c3f833452cff021","type":"library","name":"jdx/mise-action","version":"v4.3.0","cpe":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*","purl":"pkg:github/jdx/mise-action@v4.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise-action:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise_action:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise-action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jdx\\/mise:jdx\\/mise_action:v4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/lycheeverse/lychee-action@v2.9.0?package-id=5fe82db199969f62","type":"library","name":"lycheeverse/lychee-action","version":"v2.9.0","cpe":"cpe:2.3:a:lycheeverse\\/lychee-action:lycheeverse\\/lychee-action:v2.9.0:*:*:*:*:*:*:*","purl":"pkg:github/lycheeverse/lychee-action@v2.9.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee-action:lycheeverse\\/lychee_action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee_action:lycheeverse\\/lychee-action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee_action:lycheeverse\\/lychee_action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee:lycheeverse\\/lychee-action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee:lycheeverse\\/lychee_action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/link-checker.yaml"}]},{"bom-ref":"pkg:github/open-policy-agent/setup-opa@v2.4.0?package-id=00b34adc47fe1b80","type":"library","name":"open-policy-agent/setup-opa","version":"v2.4.0","cpe":"cpe:2.3:a:open-policy-agent\\/setup-opa:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*","purl":"pkg:github/open-policy-agent/setup-opa@v2.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup-opa:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup_opa:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup_opa:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/benchmarks.yaml"}]},{"bom-ref":"pkg:github/open-policy-agent/setup-opa@v2.4.0?package-id=a0456916a9f2f103","type":"library","name":"open-policy-agent/setup-opa","version":"v2.4.0","cpe":"cpe:2.3:a:open-policy-agent\\/setup-opa:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*","purl":"pkg:github/open-policy-agent/setup-opa@v2.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup-opa:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup_opa:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup_opa:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open:open-policy-agent\\/setup-opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open:open_policy_agent\\/setup_opa:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:github/open-policy-agent/setup-regal@v2.0.0?package-id=04b761a9e099fdcf","type":"library","name":"open-policy-agent/setup-regal","version":"v2.0.0","cpe":"cpe:2.3:a:open-policy-agent\\/setup-regal:open-policy-agent\\/setup-regal:v2.0.0:*:*:*:*:*:*:*","purl":"pkg:github/open-policy-agent/setup-regal@v2.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup-regal:open_policy_agent\\/setup_regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup_regal:open-policy-agent\\/setup-regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup_regal:open_policy_agent\\/setup_regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup:open-policy-agent\\/setup-regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy-agent\\/setup:open_policy_agent\\/setup_regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup:open-policy-agent\\/setup-regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent\\/setup:open_policy_agent\\/setup_regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy:open-policy-agent\\/setup-regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy:open_policy_agent\\/setup_regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy:open-policy-agent\\/setup-regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy:open_policy_agent\\/setup_regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open:open-policy-agent\\/setup-regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open:open_policy_agent\\/setup_regal:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"pkg:golang/oras.land/oras-go/v2@v2.6.2?package-id=883597e705b9f817","type":"library","name":"oras.land/oras-go/v2","version":"v2.6.2","cpe":"cpe:2.3:a:linuxfoundation:oras:v2.6.2:*:*:*:*:go:*:*","purl":"pkg:golang/oras.land/oras-go/v2@v2.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N04RXngAp1LJKTG6ifz3xHPipasEkWr+hFmInja5YKo="}]},{"bom-ref":"pkg:github/ossf/scorecard-action@v2.4.4?package-id=f27ab09243ec6ee9","type":"library","name":"ossf/scorecard-action","version":"v2.4.4","cpe":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:github/ossf/scorecard-action@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecards.yml"}]},{"bom-ref":"pkg:github/peter-evans/create-issue-from-file@v6.0.0?package-id=0a63ec3f37959b32","type":"library","name":"peter-evans/create-issue-from-file","version":"v6.0.0","cpe":"cpe:2.3:a:peter-evans\\/create-issue-from-file:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-issue-from-file@v6.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from-file:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from_file:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from_file:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/link-checker.yaml"}]},{"bom-ref":"pkg:github/peter-evans/create-pull-request@v8.1.1?package-id=9d9dd4da562d893e","type":"library","name":"peter-evans/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:peter-evans\\/create-pull-request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull-request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/update-implementations.yaml"}]},{"bom-ref":"pkg:github/slackapi/slack-github-action@v4.0.0?package-id=88a658ad0f0e5d8b","type":"library","name":"slackapi/slack-github-action","version":"v4.0.0","cpe":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/slackapi/slack-github-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/nightly.yaml"}]},{"bom-ref":"pkg:github/slackapi/slack-github-action@v4.0.0?package-id=1b195364e838d8c2","type":"library","name":"slackapi/slack-github-action","version":"v4.0.0","cpe":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/slackapi/slack-github-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-vulnerability-check.yaml"}]},{"bom-ref":"pkg:github/slackapi/slack-github-action@v4.0.0?package-id=38ab20ac0716ef02","type":"library","name":"slackapi/slack-github-action","version":"v4.0.0","cpe":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/slackapi/slack-github-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-envoy-with-opa.yaml"}]},{"bom-ref":"pkg:github/slackapi/slack-github-action@v4.0.0?package-id=5628420db5355800","type":"library","name":"slackapi/slack-github-action","version":"v4.0.0","cpe":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/slackapi/slack-github-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-ocp-with-opa.yaml"}]},{"bom-ref":"pkg:github/slackapi/slack-github-action@v4.0.0?package-id=259b6df670a741cc","type":"library","name":"slackapi/slack-github-action","version":"v4.0.0","cpe":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/slackapi/slack-github-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github-action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github_action:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack-github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack_github:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack-github-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slackapi\\/slack:slackapi\\/slack_github_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-regal-with-opa.yaml"}]},{"bom-ref":"pkg:github/zizmorcore/zizmor-action@v0.6.4?package-id=1ad32c7c2e9a9579","type":"library","name":"zizmorcore/zizmor-action","version":"v0.6.4","cpe":"cpe:2.3:a:zizmorcore\\/zizmor-action:zizmorcore\\/zizmor-action:v0.6.4:*:*:*:*:*:*:*","purl":"pkg:github/zizmorcore/zizmor-action@v0.6.4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor-action:zizmorcore\\/zizmor_action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor_action:zizmorcore\\/zizmor-action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor_action:zizmorcore\\/zizmor_action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor:zizmorcore\\/zizmor-action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zizmorcore\\/zizmor:zizmorcore\\/zizmor_action:v0.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pull-request.yaml"}]},{"bom-ref":"f4603b8ebe1a19d0","type":"file","name":"/.github/actions/build-opa/action.yml","hashes":[{"alg":"SHA-1","content":"c0ac6444e9fafb5c3bee6952b89744da52f2668a"},{"alg":"SHA-256","content":"c32d4cb81f66bcf7c670ec70af1a2637124b63d9ac644910eb05fae1c7d68563"}]},{"bom-ref":"06e264550da4d13b","type":"file","name":"/.github/workflows/benchmarks-nightly.yaml","hashes":[{"alg":"SHA-1","content":"2808f547459573a8d24ec273030d7891079ef41c"},{"alg":"SHA-256","content":"6dbde41f46944821fd13f75b7df3a36d90f97d8db8add04317bc21d630c2c5d4"}]},{"bom-ref":"8015da9214001b91","type":"file","name":"/.github/workflows/benchmarks.yaml","hashes":[{"alg":"SHA-1","content":"1352e6e24ef6de36ee13f092f2cab7f459a935e5"},{"alg":"SHA-256","content":"a0f279f4d4a072acede33bbd599fb03c510f80378f8c92387373066ffddb3065"}]},{"bom-ref":"5e19ea2e1f9dfee4","type":"file","name":"/.github/workflows/codeql-analysis.yml","hashes":[{"alg":"SHA-1","content":"016c0287301d6130e938fb2e86e5603ef99e47fc"},{"alg":"SHA-256","content":"ed1d1fea0dae61ba5d89362cf5788a87502325eca825cd765718d01724956ee0"}]},{"bom-ref":"7c48f0eda6223d2e","type":"file","name":"/.github/workflows/link-checker.yaml","hashes":[{"alg":"SHA-1","content":"82ce651f14cd2c973accd4f999c52f42662e687f"},{"alg":"SHA-256","content":"9ba3edae45b041455a3ab711f09272417077ae608147af9376bda05eb59d3f1d"}]},{"bom-ref":"c150c998ebbdb5dc","type":"file","name":"/.github/workflows/nightly.yaml","hashes":[{"alg":"SHA-1","content":"684a1d076ea91aa4be2c3597e816483bcbad4910"},{"alg":"SHA-256","content":"cb28e4e28cc2badf320cc6ed44b2ce1caab0568fb6e8b672a205a3454489fa33"}]},{"bom-ref":"08e4ea044cf43e0a","type":"file","name":"/.github/workflows/post-merge.yaml","hashes":[{"alg":"SHA-1","content":"de63545bae5d0df6c7ae8954f4453fd80b894748"},{"alg":"SHA-256","content":"e63b54f32af2a9bb519b835c63475214cadc0b9ce58774baa4897e697fea98d7"}]},{"bom-ref":"97e432cafb2dd6b7","type":"file","name":"/.github/workflows/post-tag.yaml","hashes":[{"alg":"SHA-1","content":"aca02fb8beb6aaf21c4b5b6b3f1c0d75c9c7c791"},{"alg":"SHA-256","content":"254acdc87487f936e16cf126590283bfb4a98622d826079e00a9e6a8eb5ac9bf"}]},{"bom-ref":"f7d3093868dc2c8d","type":"file","name":"/.github/workflows/pull-request.yaml","hashes":[{"alg":"SHA-1","content":"9e86841cac52fcd03a0fd4e1f971abc9d54958fe"},{"alg":"SHA-256","content":"048fedb5cc86969901acb531e9cbbce248868239f37fbcadf9cb64dfae4fe0c0"}]},{"bom-ref":"e076e077f1bc041b","type":"file","name":"/.github/workflows/release-vulnerability-check.yaml","hashes":[{"alg":"SHA-1","content":"60edd97f61242222e0300facb56040d1c627e7be"},{"alg":"SHA-256","content":"349d20bb962d04a9671104b0129a74de55e16ded69fea801b00b33094c4897d7"}]},{"bom-ref":"ae8b423421606a94","type":"file","name":"/.github/workflows/scorecards.yml","hashes":[{"alg":"SHA-1","content":"87ab0f5e0c2b830df423ccc7c92aa8aea4506cdb"},{"alg":"SHA-256","content":"a5fb199a5a3eb181357ba2b594ee80f1e8dbd624aa1d5b2abcf7f380fd33c835"}]},{"bom-ref":"d02ba0323c469b0c","type":"file","name":"/.github/workflows/test-envoy-with-opa.yaml","hashes":[{"alg":"SHA-1","content":"3275ded1d5827c1d8eac7edf8ac469b2c667f1ec"},{"alg":"SHA-256","content":"905d484799878eb64ba96e24a4da46b0ca783890d2026d6f4a7cc74f80a5c182"}]},{"bom-ref":"f0b5000c191d388a","type":"file","name":"/.github/workflows/test-ocp-with-opa.yaml","hashes":[{"alg":"SHA-1","content":"be4ac9146edbf1af022ee8fa6d380d373e85c487"},{"alg":"SHA-256","content":"ca9db7463b0a88e8d05f9cdcda3a7cec575ab856d1b3a293ec51cfe464571055"}]},{"bom-ref":"431d92307f10f90c","type":"file","name":"/.github/workflows/test-regal-with-opa.yaml","hashes":[{"alg":"SHA-1","content":"dbb21d0f7fe95b91ba4f41a92f6377d0a84c2d0d"},{"alg":"SHA-256","content":"e87923d97cfcb049b9b51f5537b548ad532e2c60e6bdc322183223da87b94dea"}]},{"bom-ref":"f62b3ceccb92f918","type":"file","name":"/.github/workflows/update-implementations.yaml","hashes":[{"alg":"SHA-1","content":"38fadf302110a7a773137bd8916a2780bdd03b00"},{"alg":"SHA-256","content":"9b3268f7d451b7e7d1dec0d83650acd8790950f7f99e7c466cdef84f1682e42c"}]},{"bom-ref":"de45ffcf2547c421","type":"file","name":"/build/release/go.mod","hashes":[{"alg":"SHA-1","content":"8b0d5973ecaf1376a89739d1770bc0c6c45f2f85"},{"alg":"SHA-256","content":"4f1314b9879b42dcce2d4077ce05dc20156cf9b73e3e577329d8c9d1e01d55b9"}]},{"bom-ref":"ef94ee6455d688dd","type":"file","name":"/build/tools/go.mod","hashes":[{"alg":"SHA-1","content":"6b18de44f9133b001fa5946b0da4fd9c9379bf53"},{"alg":"SHA-256","content":"9ed4d77cbdfb4d60a335b81951509b7aedf68475a6c955071c3e0c3ea0692548"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"979d0f8b397f0474df67bda091013ec9e4ab7f6e"},{"alg":"SHA-256","content":"38e3c2ba97215a1f28cc67933c52c376d3deabe8a13bda3b7f20d98c36907f2f"}]}],"dependencies":[{"ref":"pkg:golang/github.com/filosottile/rsc-cmd/benchlab@v0.0.0-20260520161042-9fc40f0f0431?package-id=403c475ccdc7a6cf","dependsOn":["pkg:golang/github.com/vbauerster/mpb/v8@v8.12.1?package-id=1c62e1fd456b9cae"]},{"ref":"pkg:golang/github.com/google/go-cmdtest@v0.4.1-0.20220921163831-55ab3332a786?package-id=c926a69be63f0d41","dependsOn":["pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=f63d5b1773b33165","pkg:golang/github.com/google/renameio@v0.1.0?package-id=61c2b685d43f56f2"]},{"ref":"pkg:golang/github.com/josephspurrier/goversioninfo@v1.7.0?package-id=1757833b4eee4129","dependsOn":["pkg:golang/github.com/akavel/rsrc@v0.10.2?package-id=c64f39822b990e63","pkg:golang/github.com/stretchr/testify@v1.6.1?package-id=c49abab92cc57817"]},{"ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.23?package-id=374970206ad824ba","dependsOn":["pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0?package-id=ed44243e87038928"]},{"ref":"pkg:golang/github.com/mna/pigeon@v1.3.0?package-id=9c0f0950787db579","dependsOn":["pkg:golang/golang.org/x/tools@v0.44.0?package-id=e555827a4a402b5b"]},{"ref":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0?package-id=0f406cede8fddc72","dependsOn":["pkg:golang/golang.org/x/mod@v0.35.0?package-id=f6aa430025cced58","pkg:golang/golang.org/x/tools@v0.44.0?package-id=e555827a4a402b5b"]},{"ref":"pkg:golang/github.com/stretchr/testify@v1.6.1?package-id=c49abab92cc57817","dependsOn":["pkg:golang/github.com/davecgh/go-spew@v1.1.0?package-id=5a22273f6effebcf","pkg:golang/github.com/pmezard/go-difflib@v1.0.0?package-id=e260b500d146c4d6","pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=9e39c9e7709132af"]},{"ref":"pkg:golang/github.com/vbauerster/mpb/v8@v8.12.1?package-id=1c62e1fd456b9cae","dependsOn":["pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d?package-id=7fa336aa44dc1d66","pkg:golang/github.com/mattn/go-runewidth@v0.0.23?package-id=374970206ad824ba","pkg:golang/github.com/vividcortex/ewma@v1.2.0?package-id=d3cc5c3026505ffb","pkg:golang/golang.org/x/sys@v0.44.0?package-id=9082cc062854d97f"]},{"ref":"pkg:golang/golang.org/x/perf@v0.0.0-20260512194132-3cf34090a3db?package-id=25d694936e6bcb12","dependsOn":["pkg:golang/github.com/aclements/go-moremath@v0.0.0-20210112150236-f10218a38794?package-id=c4a68c343da0c3a4"]},{"ref":"pkg:golang/golang.org/x/telemetry@v0.0.0-20260421165255-392afab6f40e?package-id=2e7c0e589e113696","dependsOn":["pkg:golang/golang.org/x/mod@v0.35.0?package-id=f6aa430025cced58","pkg:golang/golang.org/x/sync@v0.23.0?package-id=33eb39d6a6b80e36"]},{"ref":"pkg:golang/golang.org/x/tools/go/expect@v0.1.1-deprecated?package-id=0f6ecf0cb019c127","dependsOn":["pkg:golang/golang.org/x/mod@v0.35.0?package-id=f6aa430025cced58"]},{"ref":"pkg:golang/golang.org/x/tools/go/packages/packagestest@v0.1.1-deprecated?package-id=a8672324b993f0ed","dependsOn":["pkg:golang/golang.org/x/tools/go/expect@v0.1.1-deprecated?package-id=0f6ecf0cb019c127","pkg:golang/golang.org/x/tools@v0.44.0?package-id=e555827a4a402b5b"]},{"ref":"pkg:golang/golang.org/x/tools@v0.44.0?package-id=e555827a4a402b5b","dependsOn":["pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=f63d5b1773b33165","pkg:golang/golang.org/x/mod@v0.35.0?package-id=f6aa430025cced58","pkg:golang/golang.org/x/sync@v0.23.0?package-id=33eb39d6a6b80e36"]},{"ref":"pkg:golang/golang.org/x/vuln@v1.3.0?package-id=4a85c73c42c6f8d0","dependsOn":["pkg:golang/github.com/google/go-cmdtest@v0.4.1-0.20220921163831-55ab3332a786?package-id=c926a69be63f0d41","pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=f63d5b1773b33165","pkg:golang/golang.org/x/mod@v0.35.0?package-id=f6aa430025cced58","pkg:golang/golang.org/x/sync@v0.23.0?package-id=33eb39d6a6b80e36","pkg:golang/golang.org/x/telemetry@v0.0.0-20260421165255-392afab6f40e?package-id=2e7c0e589e113696","pkg:golang/golang.org/x/tools/go/packages/packagestest@v0.1.1-deprecated?package-id=a8672324b993f0ed","pkg:golang/golang.org/x/tools@v0.44.0?package-id=e555827a4a402b5b"]},{"ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=b23533d1fd40d404","dependsOn":["pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=f63d5b1773b33165"]}]}