{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:043928e5-46f8-41b9-a959-3a7b0192e704","version":1,"metadata":{"timestamp":"2026-11-02T03:07:48Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"e83255948f24e947","type":"file","name":"ossf/scorecard","version":"v5.6.0"}},"components":[{"bom-ref":"pkg:golang/4d63.com/gocheckcompilerdirectives@v1.4.0?package-id=b22e70367d81f8de","type":"library","name":"4d63.com/gocheckcompilerdirectives","version":"v1.4.0","purl":"pkg:golang/4d63.com/gocheckcompilerdirectives@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZLq62rbGWVmQhiZ8kuNVIT/M09xCSTdJz9K3xOdT/CY="}]},{"bom-ref":"pkg:golang/4d63.com/gochecknoglobals@v0.2.2?package-id=558137d7df983327","type":"library","name":"4d63.com/gochecknoglobals","version":"v0.2.2","purl":"pkg:golang/4d63.com/gochecknoglobals@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:H1vdnwnMaZdQW/N+NrkT1SZMTBmcwHe9Vq8lJcYYTtU="}]},{"bom-ref":"pkg:golang/actionlint.kjanat.dev@v1.17.0?package-id=08d4f2bbfef5ac50","type":"library","name":"actionlint.kjanat.dev","version":"v1.17.0","purl":"pkg:golang/actionlint.kjanat.dev@v1.17.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wzkg6amflGqcF4QlkSERw0L1kdGSb/z2KZ7aidlgD74="}]},{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=eec4c423bcb44ff2","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/gitlab.yml"}]},{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=6cfbae5e307d8248","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/integration.yml"}]},{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=ead09b17229bb6de","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d3fe9e4ca6cc9f60","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=521de444252d4363","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/depsreview.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=67bbde49d5bb7474","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/docker.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=4fbffe6175bde478","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/gitlab.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d281d0d11a131efd","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=97de6135e7097bf0","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/integration.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=9db7cdd88e0d2a25","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/lint.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d124ff29c2f74604","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=36a02844334f721a","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/osps-baseline.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=9454d1cde53a650f","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/publishimage.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=35a552b848cb18d7","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/scdiff.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=1fbdfa38d1cbb120","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard-analysis.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=b1e051b54a4cc387","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/security-insights.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=cc9665986c687ab0","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/verify.yml"}]},{"bom-ref":"pkg:github/actions/dependency-review-action@v5.0.0?package-id=0124b2312fbe8e18","type":"library","name":"actions/dependency-review-action","version":"v5.0.0","cpe":"cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/dependency-review-action@v5.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/depsreview.yml"}]},{"bom-ref":"pkg:github/actions/github-script@v9.0.0?package-id=bf8eb5f85cb82c6a","type":"library","name":"actions/github-script","version":"v9.0.0","cpe":"cpe:2.3:a:actions\\/github-script:actions\\/github-script:v9.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/github-script@v9.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github-script:actions\\/github_script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github-script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github_script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github-script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github_script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scdiff.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=1036e58251b1c99f","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=62aa952309a87be7","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docker.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=59b9a354067b95b9","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/gitlab.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=e6e22eb80b69835d","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=2c575e12f71d02a6","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/integration.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=e9c5eb6cab248102","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/lint.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=8abfd0da90bbd34a","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=5a5256793ea1c765","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publishimage.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=b22b592a39a77131","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scdiff.yml"}]},{"bom-ref":"pkg:github/actions/stale@v11.0.0?package-id=363e54783d44c81e","type":"library","name":"actions/stale","version":"v11.0.0","cpe":"cpe:2.3:a:actions\\/stale:actions\\/stale:v11.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/stale@v11.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/stale.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.2?package-id=d4b6e69e4e59254d","type":"library","name":"actions/upload-artifact","version":"v7.0.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/osps-baseline.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.2?package-id=0042a361fcfca15b","type":"library","name":"actions/upload-artifact","version":"v7.0.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard-analysis.yml"}]},{"bom-ref":"pkg:golang/al.essio.dev/pkg/shellescape@v1.6.0?package-id=d75a60140d01607d","type":"library","name":"al.essio.dev/pkg/shellescape","version":"v1.6.0","cpe":"cpe:2.3:a:pkg:shellescape:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/al.essio.dev/pkg/shellescape@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NxFcEqzFSEVCGN2yq7Huv/9hyCEGVa/TncnOOBBeXHA="}]},{"bom-ref":"pkg:golang/bitbucket.org/creachadair/stringset@v0.0.14?package-id=6610d138a1b37c90","type":"library","name":"bitbucket.org/creachadair/stringset","version":"v0.0.14","cpe":"cpe:2.3:a:creachadair:stringset:v0.0.14:*:*:*:*:*:*:*","purl":"pkg:golang/bitbucket.org/creachadair/stringset@v0.0.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:t1ejQyf8utS4GZV/4fM+1gvYucggZkfhb+tMobDxYOE="}]},{"bom-ref":"pkg:golang/cel.dev/expr@v0.25.2?package-id=50296d5ce895996f","type":"library","name":"cel.dev/expr","version":"v0.25.2","purl":"pkg:golang/cel.dev/expr@v0.25.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:K6j46C81hXtZQfuX60cVWQFBJahKSE2gfRbNuvr5bFs="}]},{"bom-ref":"pkg:golang/cel.dev/expr@v0.25.2?package-id=76dba4cf8a4e39b7","type":"library","name":"cel.dev/expr","version":"v0.25.2","purl":"pkg:golang/cel.dev/expr@v0.25.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:K6j46C81hXtZQfuX60cVWQFBJahKSE2gfRbNuvr5bFs="}]},{"bom-ref":"pkg:golang/charm.land/lipgloss/v2@v2.0.6?package-id=aed8b4ffd66115c0","type":"library","name":"charm.land/lipgloss/v2","version":"v2.0.6","cpe":"cpe:2.3:a:lipgloss:v2:v2.0.6:*:*:*:*:*:*:*","purl":"pkg:golang/charm.land/lipgloss/v2@v2.0.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EaGKeuA8FvF+v2BT5VmZd2LoYLaMZJXA5n34th8nCIQ="}]},{"bom-ref":"pkg:golang/cloud.google.com/go@v0.123.0?package-id=419b179104eb109e","type":"library","name":"cloud.google.com/go","version":"v0.123.0","purl":"pkg:golang/cloud.google.com/go@v0.123.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go@v0.123.0?package-id=6689fd5b42f8d15c","type":"library","name":"cloud.google.com/go","version":"v0.123.0","purl":"pkg:golang/cloud.google.com/go@v0.123.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=2ccb27f52b0a4a03","type":"library","name":"cloud.google.com/go/auth","version":"v0.20.0","cpe":"cpe:2.3:a:go:auth:v0.20.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth@v0.20.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kXTssoVb4azsVDoUiF8KvxAqrsQcQtB53DcSgta74CA="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth@v0.23.2?package-id=b6e0bd44411ae85a","type":"library","name":"cloud.google.com/go/auth","version":"v0.23.2","cpe":"cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth@v0.23.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pxSCpfiji41hpzpPdMCftEUCezpgpqmmDdYiAjCKXxo="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=db9b423947e22092","type":"library","name":"cloud.google.com/go/auth/oauth2adapt","version":"v0.2.8","cpe":"cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=e6c75e519700a0b6","type":"library","name":"cloud.google.com/go/auth/oauth2adapt","version":"v0.2.8","cpe":"cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=c14bc92e6fc464c8","type":"library","name":"cloud.google.com/go/compute/metadata","version":"v0.9.0","cpe":"cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=fff4fb187981a37b","type":"library","name":"cloud.google.com/go/compute/metadata","version":"v0.9.0","cpe":"cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/containeranalysis@v0.19.0?package-id=9b6ac0afe0810f4b","type":"library","name":"cloud.google.com/go/containeranalysis","version":"v0.19.0","cpe":"cpe:2.3:a:go:containeranalysis:v0.19.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/containeranalysis@v0.19.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:89ZhFvJHWzX9/jUJy/IEVbtSa2hv4+NtsvwWMEsUYnY="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/iam@v1.12.0?package-id=6b4ac685814b02f9","type":"library","name":"cloud.google.com/go/iam","version":"v1.12.0","cpe":"cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/iam@v1.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Aki3bX9aHUDKPHfnRJfDcTdVedvy6quGBQcTqx3DRXk="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/iam@v1.12.0?package-id=60d4f801cf900e77","type":"library","name":"cloud.google.com/go/iam","version":"v1.12.0","cpe":"cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/iam@v1.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Aki3bX9aHUDKPHfnRJfDcTdVedvy6quGBQcTqx3DRXk="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/kms@v1.32.0?package-id=3b2de97a04aa3299","type":"library","name":"cloud.google.com/go/kms","version":"v1.32.0","cpe":"cpe:2.3:a:go:kms:v1.32.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/kms@v1.32.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:s+rEluaaZKhLVjrIWG7uNBsnWbiitElzNzFGyp6+nIg="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/kms@v1.33.0?package-id=77256f819aab282e","type":"library","name":"cloud.google.com/go/kms","version":"v1.33.0","cpe":"cpe:2.3:a:go:kms:v1.33.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/kms@v1.33.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pG0X78m212b2pv9N4fdMoUO69LuZGQ9kSvn8sHBOFAo="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/longrunning@v1.2.0?package-id=a301c3b317f0e271","type":"library","name":"cloud.google.com/go/longrunning","version":"v1.2.0","cpe":"cpe:2.3:a:go:longrunning:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/longrunning@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WjYH3YHBGCxGJP9M4dWGHBfXr/cFIjMkNgWcJj7/iMM="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/longrunning@v1.2.0?package-id=80de639d5bec6f5b","type":"library","name":"cloud.google.com/go/longrunning","version":"v1.2.0","cpe":"cpe:2.3:a:go:longrunning:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/longrunning@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WjYH3YHBGCxGJP9M4dWGHBfXr/cFIjMkNgWcJj7/iMM="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/monitoring@v1.30.0?package-id=170165bad3bf32a9","type":"library","name":"cloud.google.com/go/monitoring","version":"v1.30.0","cpe":"cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/monitoring@v1.30.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:r/d+JUbyKmJ8b07iznuKfzVzrIXTWxHQ3lBRm3x2LlY="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/monitoring@v1.30.0?package-id=fe25d95d8ff8226c","type":"library","name":"cloud.google.com/go/monitoring","version":"v1.30.0","cpe":"cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/monitoring@v1.30.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:r/d+JUbyKmJ8b07iznuKfzVzrIXTWxHQ3lBRm3x2LlY="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/storage@v1.69.0?package-id=2847351b7c8485be","type":"library","name":"cloud.google.com/go/storage","version":"v1.69.0","cpe":"cpe:2.3:a:go:storage:v1.69.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/storage@v1.69.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jAAMC1411HEh78nKsU0Zns+eFj3TnhjAWIhg5Ud/XBM="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/storage@v1.69.0?package-id=fbe4d5c3ed0bf32f","type":"library","name":"cloud.google.com/go/storage","version":"v1.69.0","cpe":"cpe:2.3:a:go:storage:v1.69.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/storage@v1.69.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jAAMC1411HEh78nKsU0Zns+eFj3TnhjAWIhg5Ud/XBM="}]},{"bom-ref":"pkg:golang/code.gitea.io/sdk/gitea@v0.25.1?package-id=f380e3ab0b1f09d8","type":"library","name":"code.gitea.io/sdk/gitea","version":"v0.25.1","cpe":"cpe:2.3:a:sdk:gitea:v0.25.1:*:*:*:*:*:*:*","purl":"pkg:golang/code.gitea.io/sdk/gitea@v0.25.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yywxWwoV+SdjHtbC6unBiXojWdZOtoHuGhEazEXeWuE="}]},{"bom-ref":"pkg:golang/codeberg.org/chavacava/garif@v0.2.1?package-id=daca2d05f5e156cb","type":"library","name":"codeberg.org/chavacava/garif","version":"v0.2.1","cpe":"cpe:2.3:a:chavacava:garif:v0.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/codeberg.org/chavacava/garif@v0.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:K9oYxSlvlXrHXyW26Z4q61bTpJDo1wbvXcYKar/F/LM="}]},{"bom-ref":"pkg:golang/codeberg.org/polyfloyd/go-errorlint@v1.9.0?package-id=9f2cb430228b0f66","type":"library","name":"codeberg.org/polyfloyd/go-errorlint","version":"v1.9.0","cpe":"cpe:2.3:a:polyfloyd:go-errorlint:v1.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/codeberg.org/polyfloyd/go-errorlint@v1.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:polyfloyd:go_errorlint:v1.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VkdEEmA1VBpH6ecQoMR4LdphVI3fA4RrCh2an7YmodI="}]},{"bom-ref":"pkg:github/codecov/codecov-action@7.1.1?package-id=b13201470bd60eeb","type":"library","name":"codecov/codecov-action","version":"7.1.1","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@7.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/gitlab.yml"}]},{"bom-ref":"pkg:github/codecov/codecov-action@7.1.1?package-id=f2e4a04c6e3ddda2","type":"library","name":"codecov/codecov-action","version":"7.1.1","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@7.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/integration.yml"}]},{"bom-ref":"pkg:github/codecov/codecov-action@7.1.1?package-id=82748ac603a84a93","type":"library","name":"codecov/codecov-action","version":"7.1.1","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@7.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:golang/dario.cat/mergo@v1.0.2?package-id=8a417a55484d15ee","type":"library","name":"dario.cat/mergo","version":"v1.0.2","purl":"pkg:golang/dario.cat/mergo@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8="}]},{"bom-ref":"pkg:golang/dario.cat/mergo@v1.0.2?package-id=0a1f0f4f3ba1e052","type":"library","name":"dario.cat/mergo","version":"v1.0.2","purl":"pkg:golang/dario.cat/mergo@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8="}]},{"bom-ref":"pkg:golang/deps.dev/api/v3@v3.0.0-20260727054525-2946ae4a6141?package-id=8ec60b446a191ff5","type":"library","name":"deps.dev/api/v3","version":"v3.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:api:v3:v3.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/api/v3@v3.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dmEg7AR6e/PtEgf336X3E5wkF15X8ElXXlZDShrxcQQ="}]},{"bom-ref":"pkg:golang/deps.dev/api/v3alpha@v0.0.0-20260727054525-2946ae4a6141?package-id=f384c71df2b604d3","type":"library","name":"deps.dev/api/v3alpha","version":"v0.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:api:v3alpha:v0.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/api/v3alpha@v0.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hXxVV3jEQiuUgwuO9PcbQxAflV7xeU5pXASChgSx91k="}]},{"bom-ref":"pkg:golang/deps.dev/util/maven@v0.0.0-20260727054525-2946ae4a6141?package-id=3ad449ca7701fc27","type":"library","name":"deps.dev/util/maven","version":"v0.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:util:maven:v0.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/util/maven@v0.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QohImycI6wNWSXvso9b4e0Lbr7n82D9pZVLMW3+ItMk="}]},{"bom-ref":"pkg:golang/deps.dev/util/pypi@v0.0.0-20260727054525-2946ae4a6141?package-id=270a6b987c35fd5f","type":"library","name":"deps.dev/util/pypi","version":"v0.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:util:pypi:v0.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/util/pypi@v0.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WEYLTUP83k5nruc5a8FrgNyWP2s+ArFL308X4tVgX38="}]},{"bom-ref":"pkg:golang/deps.dev/util/resolve@v0.0.0-20260727054525-2946ae4a6141?package-id=735fc1059508a05f","type":"library","name":"deps.dev/util/resolve","version":"v0.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:util:resolve:v0.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/util/resolve@v0.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:d9WOtqC8tF8hfBBt14AfWACsr9/j0Zstgph6np5IBvI="}]},{"bom-ref":"pkg:golang/deps.dev/util/semver@v0.0.0-20260727054525-2946ae4a6141?package-id=2a6db37800f3ca9f","type":"library","name":"deps.dev/util/semver","version":"v0.0.0-20260727054525-2946ae4a6141","cpe":"cpe:2.3:a:util:semver:v0.0.0-20260727054525-2946ae4a6141:*:*:*:*:*:*:*","purl":"pkg:golang/deps.dev/util/semver@v0.0.0-20260727054525-2946ae4a6141","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZQY7wh3yBPpxAYfi5M4qq1a4ZJ5Z85KbJCL+awX7snA="}]},{"bom-ref":"pkg:golang/dev.gaijin.team/go/exhaustruct/v4@v4.0.0?package-id=bb2e9e050fc6e85f","type":"library","name":"dev.gaijin.team/go/exhaustruct/v4","version":"v4.0.0","cpe":"cpe:2.3:a:go:exhaustruct\\/v4:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/dev.gaijin.team/go/exhaustruct/v4@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:873r7aNneqoBB3IaFIzhvt2RFYTuHgmMjoKfwODoI1Y="}]},{"bom-ref":"pkg:golang/dev.gaijin.team/go/exhaustruct/v5@v5.2.0?package-id=0270ea44401d5639","type":"library","name":"dev.gaijin.team/go/exhaustruct/v5","version":"v5.2.0","cpe":"cpe:2.3:a:go:exhaustruct\\/v5:v5.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/dev.gaijin.team/go/exhaustruct/v5@v5.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HZB49Fshn8qHJCi9VzYtrcnR1jbLteRHXfnQz8Adams="}]},{"bom-ref":"pkg:golang/dev.gaijin.team/go/golib@v0.8.1?package-id=f26ef32218af180f","type":"library","name":"dev.gaijin.team/go/golib","version":"v0.8.1","cpe":"cpe:2.3:a:go:golib:v0.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/dev.gaijin.team/go/golib@v0.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JYju4x9BSo+QD/AYeHULVDcvEhiFg8wOi6pT0IaZF5E="}]},{"bom-ref":"pkg:golang/github.com/42wim/httpsig@v1.2.4?package-id=689b063461919d0c","type":"library","name":"github.com/42wim/httpsig","version":"v1.2.4","cpe":"cpe:2.3:a:42wim:httpsig:v1.2.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/42wim/httpsig@v1.2.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mI5bH0nm4xn7K18fo1K3okNDRq8CCJ0KbBYWyA6r8lU="}]},{"bom-ref":"pkg:golang/github.com/4meepo/tagalign@v1.4.4?package-id=5f402f357aacb02c","type":"library","name":"github.com/4meepo/tagalign","version":"v1.4.4","cpe":"cpe:2.3:a:4meepo:tagalign:v1.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/4meepo/tagalign@v1.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:052JDGj2pBORc6NkD30dDXpsUpoYszDeUwr9/5YZuVA="}]},{"bom-ref":"pkg:golang/github.com/abirdcfly/dupword@v0.1.8?package-id=c423dd202924ba48","type":"library","name":"github.com/Abirdcfly/dupword","version":"v0.1.8","cpe":"cpe:2.3:a:Abirdcfly:dupword:v0.1.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Abirdcfly/dupword@v0.1.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SrhcUuGsROBuChFxHALRYzyyPODWn9zwghmzPvD9Cd8="}]},{"bom-ref":"pkg:golang/github.com/adminbenni/iota-mixing@v1.0.0?package-id=15460c9c858dc8e2","type":"library","name":"github.com/AdminBenni/iota-mixing","version":"v1.0.0","cpe":"cpe:2.3:a:AdminBenni:iota-mixing:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AdminBenni/iota-mixing@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:AdminBenni:iota_mixing:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Os6lpjG2dp/AE5fYBPAA1zfa2qMdCAWwPMCgpwKq7wo="}]},{"bom-ref":"pkg:golang/github.com/aleksi/pointer@v1.2.0?package-id=1fa97ef3a36923e9","type":"library","name":"github.com/AlekSi/pointer","version":"v1.2.0","cpe":"cpe:2.3:a:AlekSi:pointer:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AlekSi/pointer@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:glcy/gc4h8HnG2Z3ZECSzZ1IX1x2JxRVuDzaJwQE0+w="}]},{"bom-ref":"pkg:golang/github.com/alwxsin/noinlineerr@v1.0.6?package-id=28aa5baf8cc61b94","type":"library","name":"github.com/AlwxSin/noinlineerr","version":"v1.0.6","cpe":"cpe:2.3:a:AlwxSin:noinlineerr:v1.0.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AlwxSin/noinlineerr@v1.0.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KAvuxunTe9QxvqrFB7nZTdb/7Wzas4AvifslTnG0Ld8="}]},{"bom-ref":"pkg:golang/github.com/antonboom/errname@v1.1.2?package-id=cbb89c56b1577a1c","type":"library","name":"github.com/Antonboom/errname","version":"v1.1.2","cpe":"cpe:2.3:a:Antonboom:errname:v1.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Antonboom/errname@v1.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dxwONZJua3VB8Xh/VaCjqAcqF645sWWv7xj26zy7tdQ="}]},{"bom-ref":"pkg:golang/github.com/antonboom/nilnil@v1.1.2?package-id=0e9213706919ca11","type":"library","name":"github.com/Antonboom/nilnil","version":"v1.1.2","cpe":"cpe:2.3:a:Antonboom:nilnil:v1.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Antonboom/nilnil@v1.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aNlFuJhaEseXe4fHO3xbjXlSeEiQVYa2lEkWD2s2hAY="}]},{"bom-ref":"pkg:golang/github.com/antonboom/testifylint@v1.6.4?package-id=bebd82872f7c8eef","type":"library","name":"github.com/Antonboom/testifylint","version":"v1.6.4","cpe":"cpe:2.3:a:Antonboom:testifylint:v1.6.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Antonboom/testifylint@v1.6.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gs9fUEy+egzxkEbq9P4cpcMB6/G0DYdMeiFS87UiqmQ="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=78e59a49f16706fc","type":"library","name":"github.com/Azure/azure-sdk-for-go","version":"v68.0.0+incompatible","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go:v68.0.0\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go@v68.0.0%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go:v68.0.0\\+incompatible:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fcYLmCpyNYRnvJbPerq7U0hS+6+I79yEDJBqVNcqUzU="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=70ae9ea8c0cb3374","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","version":"v1.22.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.22.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aokoqcHvaGjiM3VpjKDfMMnF/8epJ+Q1HLJ7CudztqE="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=555ec70ceace2b09","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/azidentity","version":"v1.14.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CU4+EJeJi3TKYWEcYuSdWsjzw0nVsK/H0MSQOiPcymU="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=284b5f68b3fb0200","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/internal","version":"v1.12.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fhqpLE3UEXi9lPaBRpQ6XuRW0nU7hgg4zlmZZa+a9q4="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=591c859d73cf9f9d","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys","version":"v1.5.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MaKvxE6D0KkjOg6Wd9M00iqP5PR0kUxCfiezes4JweM="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=cbfc916343177c18","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal","version":"v1.2.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4?package-id=9a42b6b211f82d5a","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/storage/azblob","version":"v1.6.4","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/storage\\/azblob:v1.6.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/storage\\/azblob:v1.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jWQK1GI+LeGGUKBADtcH2rRqPxYB1Ljwms5gFA2LqrM="}]},{"bom-ref":"pkg:golang/github.com/azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c?package-id=22d2d3870b47e1ec","type":"library","name":"github.com/Azure/go-ansiterm","version":"v0.0.0-20250102033503-faa5f7b0171c","cpe":"cpe:2.3:a:Azure:go-ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:udKWzYgxTojEKWjV8V+WSxDXJ4NFATAsZjh8iIbsQIg="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest@v14.2.0%2Bincompatible?package-id=689dcbcca23c1ae1","type":"library","name":"github.com/Azure/go-autorest","version":"v14.2.0+incompatible","cpe":"cpe:2.3:a:Azure:go-autorest:v14.2.0\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest@v14.2.0%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest:v14.2.0\\+incompatible:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:V5VMDjClD3GiElqLWO7mz2MxNAK/vTfRHdAubSIPRgs="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest@v0.11.30?package-id=cff899ffe5828f20","type":"library","name":"github.com/Azure/go-autorest/autorest","version":"v0.11.30","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest:v0.11.30:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.30","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest:v0.11.30:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iaZ1RGz/ALZtN5eq4Nr1SOFSlf2E4pDI3Tcsl+dZPVE="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24?package-id=69f4bb4010a5101f","type":"library","name":"github.com/Azure/go-autorest/autorest/adal","version":"v0.9.24","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.9.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest\\/adal:v0.9.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BHZfgGsGwdkHDyZdtQRQk1WeUdW0m2WPAwuHZwUi5i4="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.13?package-id=07e4e9ff37f0a496","type":"library","name":"github.com/Azure/go-autorest/autorest/azure/auth","version":"v0.5.13","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/auth:v0.5.13:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest/azure/auth@v0.5.13","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/auth:v0.5.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ov8avRZi2vmrE2JcXw+tu5K/yB41r7xK9GZDiBF7NdM="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.7?package-id=8094c19610dade89","type":"library","name":"github.com/Azure/go-autorest/autorest/azure/cli","version":"v0.4.7","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/cli:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest/azure/cli@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/cli:v0.4.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Q9R3utmFg9K1B4OYtAZ7ZUUvIUdzQt7G2MN5Hi/d670="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.1?package-id=33364038c99fd1d4","type":"library","name":"github.com/Azure/go-autorest/autorest/date","version":"v0.3.1","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest\\/date:v0.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o9Z8Jyt+VJJTCZ/UORishuHOusBwolhjokt9s5k8I4w="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/logger@v0.2.2?package-id=d1ee4a724ec980fd","type":"library","name":"github.com/Azure/go-autorest/logger","version":"v0.2.2","cpe":"cpe:2.3:a:Azure:go-autorest\\/logger:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/logger@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/logger:v0.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hYqBsEBywrrOSW24kkOCXRcKfKhK76OzLTfF+MYDE2o="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/tracing@v0.6.1?package-id=c4e3067e4dffbf78","type":"library","name":"github.com/Azure/go-autorest/tracing","version":"v0.6.1","cpe":"cpe:2.3:a:Azure:go-autorest\\/tracing:v0.6.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/tracing:v0.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YUMSrC/CeD1ZnnXcNYU4a/fzsO35u2Fsful9L/2nyR0="}]},{"bom-ref":"pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=d432538cac614a7a","type":"library","name":"github.com/AzureAD/microsoft-authentication-library-for-go","version":"v1.7.2","cpe":"cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.7.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.7.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RHK7bS+HQMslb1sZpAokUt+zTVmue0hKSs2C791hhzU="}]},{"bom-ref":"pkg:golang/github.com/burntsushi/toml@v1.6.0?package-id=6d8d86ef9fe513ea","type":"library","name":"github.com/BurntSushi/toml","version":"v1.6.0","cpe":"cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/BurntSushi/toml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk="}]},{"bom-ref":"pkg:golang/github.com/burntsushi/toml@v1.6.0?package-id=01d408e606929efe","type":"library","name":"github.com/BurntSushi/toml","version":"v1.6.0","cpe":"cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/BurntSushi/toml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk="}]},{"bom-ref":"pkg:golang/github.com/clickhouse/clickhouse-go-linter@v1.2.1?package-id=0776f3c6f29a70b9","type":"library","name":"github.com/ClickHouse/clickhouse-go-linter","version":"v1.2.1","cpe":"cpe:2.3:a:ClickHouse:clickhouse-go-linter:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ClickHouse/clickhouse-go-linter@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ClickHouse:clickhouse_go_linter:v1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zGEKIyd5YL08ieWG/LOUmlau2DxbxPVOfAeo+4Jz3ck="}]},{"bom-ref":"pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.11.0?package-id=203e4d08c78fe66c","type":"library","name":"github.com/CycloneDX/cyclonedx-go","version":"v0.11.0","cpe":"cpe:2.3:a:CycloneDX:cyclonedx-go:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX:cyclonedx_go:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GokP8FiRC+foiuwWhSSLpSD5H4hSWtGnR3wo7apkBFI="}]},{"bom-ref":"pkg:golang/github.com/djarvur/go-err113@v0.1.1?package-id=e4a89f3afbdce5ce","type":"library","name":"github.com/Djarvur/go-err113","version":"v0.1.1","cpe":"cpe:2.3:a:Djarvur:go-err113:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Djarvur/go-err113@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Djarvur:go_err113:v0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eHfopDqXRwAi+YmCUas75ZE0+hoBHJ2GQNLYRSxao4g="}]},{"bom-ref":"pkg:golang/github.com/gehirninc/crypt@v0.0.0-20230320061759-8cc1b52080c5?package-id=1f3555263afce68d","type":"library","name":"github.com/GehirnInc/crypt","version":"v0.0.0-20230320061759-8cc1b52080c5","cpe":"cpe:2.3:a:GehirnInc:crypt:v0.0.0-20230320061759-8cc1b52080c5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GehirnInc/crypt@v0.0.0-20230320061759-8cc1b52080c5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IEjq88XO4PuBDcvmjQJcQGg+w+UaafSy8G5Kcb5tBhI="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.35.0?package-id=3192ade2d1af36ea","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp","version":"v1.35.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.35.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.35.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.35.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bN1gA3of5bXtbnLsRPrwfmbbe7A5UWFlcTHseujLnpc="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.35.0?package-id=1e16193c921b0535","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp","version":"v1.35.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.35.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.35.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.35.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bN1gA3of5bXtbnLsRPrwfmbbe7A5UWFlcTHseujLnpc="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.57.0?package-id=c2284fdaf11798b9","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric","version":"v0.57.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jLdiS1vO+XJFyDSWRHBx56r4s/NNtcl5J6KyCcWUX/w="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.57.0?package-id=fbc3e92f11428691","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric","version":"v0.57.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jLdiS1vO+XJFyDSWRHBx56r4s/NNtcl5J6KyCcWUX/w="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0?package-id=966cccaf87fde20d","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping","version":"v0.57.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RoO5+d7uCmDqovLrHCr2/BuViUXvdcrNxyNM1pN9dDQ="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0?package-id=a08fbb8bef3b9f9d","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping","version":"v0.57.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RoO5+d7uCmDqovLrHCr2/BuViUXvdcrNxyNM1pN9dDQ="}]},{"bom-ref":"pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=2eb322cb31b3e1fa","type":"library","name":"github.com/Masterminds/goutils","version":"v1.1.1","cpe":"cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/Masterminds/goutils@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI="}]},{"bom-ref":"pkg:golang/github.com/masterminds/semver/v3@v3.4.0?package-id=1b729e4bc7f52e64","type":"library","name":"github.com/Masterminds/semver/v3","version":"v3.4.0","cpe":"cpe:2.3:a:Masterminds:semver\\/v3:v3.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/semver/v3@v3.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1Xbatp0="}]},{"bom-ref":"pkg:golang/github.com/masterminds/semver/v3@v3.5.0?package-id=587e1151b23e9d59","type":"library","name":"github.com/Masterminds/semver/v3","version":"v3.5.0","cpe":"cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/semver/v3@v3.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kQceYJfbupGfZOKZQg0kou0DgAKhzDg2NZPAwZ/2OOE="}]},{"bom-ref":"pkg:golang/github.com/masterminds/sprig/v3@v3.3.0?package-id=658e929465101923","type":"library","name":"github.com/Masterminds/sprig/v3","version":"v3.3.0","cpe":"cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe3tPhs="}]},{"bom-ref":"pkg:golang/github.com/microsoft/go-winio@v0.6.2?package-id=ba625c058b77a432","type":"library","name":"github.com/Microsoft/go-winio","version":"v0.6.2","cpe":"cpe:2.3:a:Microsoft:go-winio:v0.6.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Microsoft/go-winio@v0.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Microsoft:go_winio:v0.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY="}]},{"bom-ref":"pkg:golang/github.com/microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29?package-id=fc378e330b798bc4","type":"library","name":"github.com/Microsoft/go-winio","version":"v0.6.3-0.20251027160822-ad3df93bed29","cpe":"cpe:2.3:a:Microsoft:go-winio:v0.6.3-0.20251027160822-ad3df93bed29:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Microsoft/go-winio@v0.6.3-0.20251027160822-ad3df93bed29","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Microsoft:go_winio:v0.6.3-0.20251027160822-ad3df93bed29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0kQAzHq8vLs7Pptv+7TxjdETLf/nIqJpIB4oC6Ba4vY="}]},{"bom-ref":"pkg:golang/github.com/mirrexone/unqueryvet@v1.5.4?package-id=29422ee4b3c43d33","type":"library","name":"github.com/MirrexOne/unqueryvet","version":"v1.5.4","cpe":"cpe:2.3:a:MirrexOne:unqueryvet:v1.5.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/MirrexOne/unqueryvet@v1.5.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:38QOxShO7JmMWT+eCdDMbcUgGCOeJphVkzzRgyLJgsQ="}]},{"bom-ref":"pkg:golang/github.com/openpeedeep/depguard/v2@v2.2.1?package-id=ceed7202258b6fe2","type":"library","name":"github.com/OpenPeeDeeP/depguard/v2","version":"v2.2.1","cpe":"cpe:2.3:a:OpenPeeDeeP:depguard\\/v2:v2.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/OpenPeeDeeP/depguard/v2@v2.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vckeWVESWp6Qog7UZSARNqfu/cZqvki8zsuj3piCMx4="}]},{"bom-ref":"pkg:golang/github.com/protonmail/go-crypto@v1.4.1?package-id=6d5b046a5726eafa","type":"library","name":"github.com/ProtonMail/go-crypto","version":"v1.4.1","cpe":"cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9RfcZHqEQUvP8RzecWEUafnZVtEvrBVL9BiF67IQOfM="}]},{"bom-ref":"pkg:golang/github.com/protonmail/go-crypto@v1.4.1?package-id=54ddd1b323b6aac1","type":"library","name":"github.com/ProtonMail/go-crypto","version":"v1.4.1","cpe":"cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9RfcZHqEQUvP8RzecWEUafnZVtEvrBVL9BiF67IQOfM="}]},{"bom-ref":"pkg:golang/github.com/velocidex/json@v0.0.0-20220224052537-92f3c0326e5a?package-id=2c2c169dc6942f7d","type":"library","name":"github.com/Velocidex/json","version":"v0.0.0-20220224052537-92f3c0326e5a","cpe":"cpe:2.3:a:Velocidex:json:v0.0.0-20220224052537-92f3c0326e5a:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Velocidex/json@v0.0.0-20220224052537-92f3c0326e5a","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AeXPUzhU0yhID/v5JJEIkjaE85ASe+Vh4Kuv1RSLL+4="}]},{"bom-ref":"pkg:golang/github.com/velocidex/ordereddict@v0.0.0-20250821063524-02dc06e46238?package-id=1ec53b1cfc7a54dd","type":"library","name":"github.com/Velocidex/ordereddict","version":"v0.0.0-20250821063524-02dc06e46238","cpe":"cpe:2.3:a:Velocidex:ordereddict:v0.0.0-20250821063524-02dc06e46238:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Velocidex/ordereddict@v0.0.0-20250821063524-02dc06e46238","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Q2DFf1f4fiz1/V4cu2wojDKF6/DfjIY7QmfVAr/UnJY="}]},{"bom-ref":"pkg:golang/github.com/velocidex/yaml/v2@v2.2.8?package-id=9343f513e63d3297","type":"library","name":"github.com/Velocidex/yaml/v2","version":"v2.2.8","cpe":"cpe:2.3:a:Velocidex:yaml\\/v2:v2.2.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Velocidex/yaml/v2@v2.2.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GUrSy4SBJ6RjGt43k6MeBKtw2z/27gh4A3hfFmFY3No="}]},{"bom-ref":"pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6?package-id=76e4e0dd582324a1","type":"library","name":"github.com/aead/serpent","version":"v0.0.0-20160714141033-fba169763ea6","cpe":"cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5L8Mj9Co9sJVgW3TpYk2gxGJnDjsYuboNTcRmbtGKGs="}]},{"bom-ref":"pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=64d88b1cfcc4917a","type":"library","name":"github.com/agext/levenshtein","version":"v1.2.3","cpe":"cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/agext/levenshtein@v1.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo="}]},{"bom-ref":"pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=8a5eb4eaaab4bf41","type":"library","name":"github.com/agnivade/levenshtein","version":"v1.2.1","cpe":"cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/agnivade/levenshtein@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="}]},{"bom-ref":"pkg:golang/github.com/alecthomas/chroma/v2@v2.27.0?package-id=3eec62f17ce9ee56","type":"library","name":"github.com/alecthomas/chroma/v2","version":"v2.27.0","cpe":"cpe:2.3:a:alecthomas:chroma\\/v2:v2.27.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alecthomas/chroma/v2@v2.27.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FodwmyOBgJULFYmDqibcp9pvfDLWdtPRh9v/r5BXYZs="}]},{"bom-ref":"pkg:golang/github.com/alecthomas/go-check-sumtype@v0.5.1-0.20260828200218-ae6904d28606?package-id=e700421f30f0d023","type":"library","name":"github.com/alecthomas/go-check-sumtype","version":"v0.5.1-0.20260828200218-ae6904d28606","cpe":"cpe:2.3:a:alecthomas:go-check-sumtype:v0.5.1-0.20260828200218-ae6904d28606:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alecthomas/go-check-sumtype@v0.5.1-0.20260828200218-ae6904d28606","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alecthomas:go_check_sumtype:v0.5.1-0.20260828200218-ae6904d28606:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dXPJ+uOJLWb8rjlAuLX7JPiRJtZKw/53Ol+WxdDJ1Eo="}]},{"bom-ref":"pkg:golang/github.com/alexkohler/nakedret/v2@v2.0.6?package-id=cbbd3ece2852933a","type":"library","name":"github.com/alexkohler/nakedret/v2","version":"v2.0.6","cpe":"cpe:2.3:a:alexkohler:nakedret\\/v2:v2.0.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alexkohler/nakedret/v2@v2.0.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ME3Qef1/KIKr3kWX3nti3hhgNxw6aqN5pZmQiFSsuzQ="}]},{"bom-ref":"pkg:golang/github.com/alexkohler/prealloc@v1.1.0?package-id=c77b80d3d5420d4a","type":"library","name":"github.com/alexkohler/prealloc","version":"v1.1.0","cpe":"cpe:2.3:a:alexkohler:prealloc:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alexkohler/prealloc@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cKGRBqlXw5iyQGLYhrXrDlcHxugXpTq4tQ5c91wkf8M="}]},{"bom-ref":"pkg:golang/github.com/alfatraining/structtag@v1.0.0?package-id=d733263734b030f5","type":"library","name":"github.com/alfatraining/structtag","version":"v1.0.0","cpe":"cpe:2.3:a:alfatraining:structtag:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alfatraining/structtag@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2qmcUqNcCoyVJ0up879K614L9PazjBSFruTB0GOFjCc="}]},{"bom-ref":"pkg:golang/github.com/alingse/asasalint@v0.0.11?package-id=c47880db76d0c814","type":"library","name":"github.com/alingse/asasalint","version":"v0.0.11","cpe":"cpe:2.3:a:alingse:asasalint:v0.0.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alingse/asasalint@v0.0.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SFwnQXJ49Kx/1GghOFz1XGqHYKp21Kq1nHad/0WQRnw="}]},{"bom-ref":"pkg:golang/github.com/alingse/nilnesserr@v0.2.0?package-id=5c9add3e2a550e97","type":"library","name":"github.com/alingse/nilnesserr","version":"v0.2.0","cpe":"cpe:2.3:a:alingse:nilnesserr:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alingse/nilnesserr@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:raLem5KG7EFVb4UIDAXgrv3N2JIaffeKNtcEXkEWd/w="}]},{"bom-ref":"pkg:golang/github.com/anchore/go-lzo@v0.1.0?package-id=7298cbdb17ec86e4","type":"library","name":"github.com/anchore/go-lzo","version":"v0.1.0","cpe":"cpe:2.3:a:anchore:go-lzo:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/anchore/go-lzo@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore:go_lzo:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NgAacnzqPeGH49Ky19QKLBZEuFRqtTG9cdaucc3Vncs="}]},{"bom-ref":"pkg:golang/github.com/anchore/go-macholibre@v0.0.0-20250826193721-3cd206ca93aa?package-id=8b7e96bc200ff730","type":"library","name":"github.com/anchore/go-macholibre","version":"v0.0.0-20250826193721-3cd206ca93aa","cpe":"cpe:2.3:a:anchore:go-macholibre:v0.0.0-20250826193721-3cd206ca93aa:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/anchore/go-macholibre@v0.0.0-20250826193721-3cd206ca93aa","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore:go_macholibre:v0.0.0-20250826193721-3cd206ca93aa:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KPEP8f3enFJeus3Wo51I+riVuCvlf4OEYl2B4IfycbQ="}]},{"bom-ref":"pkg:golang/github.com/anchore/go-struct-converter@v0.1.0?package-id=7997500b1202e5fd","type":"library","name":"github.com/anchore/go-struct-converter","version":"v0.1.0","cpe":"cpe:2.3:a:anchore:go-struct-converter:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/anchore/go-struct-converter@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore:go_struct_converter:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2rDRssAl6mgKBSLNiVCMADgZRhoqtw9dedlWa0OhD30="}]},{"bom-ref":"pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=b2bb7d209ccf6b8f","type":"library","name":"github.com/asaskevich/govalidator","version":"v0.0.0-20230301143203-a9d515a09cc2","cpe":"cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="}]},{"bom-ref":"pkg:golang/github.com/ashanbrown/forbidigo/v2@v2.3.1?package-id=4bb2ec9fb8292a89","type":"library","name":"github.com/ashanbrown/forbidigo/v2","version":"v2.3.1","cpe":"cpe:2.3:a:ashanbrown:forbidigo\\/v2:v2.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ashanbrown/forbidigo/v2@v2.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KAZijvQ7zeIBKbhikT4jCm0TLYXC4u78bTiLh/8JROI="}]},{"bom-ref":"pkg:golang/github.com/ashanbrown/makezero/v2@v2.2.1?package-id=74b89df59f32078e","type":"library","name":"github.com/ashanbrown/makezero/v2","version":"v2.2.1","cpe":"cpe:2.3:a:ashanbrown:makezero\\/v2:v2.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ashanbrown/makezero/v2@v2.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A7uU8dgB1PA9aelTxHMfHIQ8Qev8AB3JLxJUBUsejqM="}]},{"bom-ref":"pkg:golang/github.com/atc0005/go-teams-notify/v2@v2.14.0?package-id=cd7a8e2d32903115","type":"library","name":"github.com/atc0005/go-teams-notify/v2","version":"v2.14.0","cpe":"cpe:2.3:a:atc0005:go-teams-notify\\/v2:v2.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/atc0005/go-teams-notify/v2@v2.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:atc0005:go_teams_notify\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7N+xw+COnYANLREaAveQ65rsNQ12nIZJED9nMLyscCo="}]},{"bom-ref":"pkg:golang/github.com/avast/retry-go/v4@v4.7.0?package-id=69a2f2f7d314a296","type":"library","name":"github.com/avast/retry-go/v4","version":"v4.7.0","cpe":"cpe:2.3:a:avast:retry-go\\/v4:v4.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/avast/retry-go/v4@v4.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:avast:retry_go\\/v4:v4.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yjDs35SlGvKwRNSykujfjdMxMhMQQM0TnIjJaHB+Zio="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.1?package-id=da4247646cc05072","type":"library","name":"github.com/aws/aws-sdk-go-v2","version":"v1.47.1","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2:v1.47.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2:v1.47.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uOIZnp4PK3ZhKI0dNrJrhTEsLxbpXHTAJlwoS1pvAtw="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.20?package-id=66d889c61355c565","type":"library","name":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","version":"v1.7.20","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.20","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GPRlPwz40I2B2VrBEASOA3Bi77NyeqejNLkifosX0rs="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.6?package-id=a87d87b814360bc5","type":"library","name":"github.com/aws/aws-sdk-go-v2/config","version":"v1.33.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.33.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.33.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MBjkSTLczek/UgiK+EYPIoRTqE7gP8vtW3OFbFo7Nug="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.6?package-id=217d75de746cf1d3","type":"library","name":"github.com/aws/aws-sdk-go-v2/credentials","version":"v1.20.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.20.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.20.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NpAFXCU7NzXNkdGK3zQTtsRJ+3v9tZQV0xcdRw8uBdw="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.1?package-id=d8a337da4dcea3d8","type":"library","name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","version":"v1.20.1","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.20.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.20.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8gALAAmacnIXh+z6VkdDanv4/IkG5APdg4DZLDTmLog="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.21.1?package-id=13f38774251499f8","type":"library","name":"github.com/aws/aws-sdk-go-v2/feature/s3/manager","version":"v1.21.1","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/s3\\/manager:v1.21.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.21.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/s3\\/manager:v1.21.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1hWFp+52Vq8Fevy/KUhbW/1MEApMz7uitCF/PQXRJpk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager@v0.4.11?package-id=a11764623653b5b9","type":"library","name":"github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager","version":"v0.4.11","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/s3\\/transfermanager:v0.4.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager@v0.4.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/s3\\/transfermanager:v0.4.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u0Ee5K3dl/T3atM4SudF9RKwpjOBbcrypL+EnPzh+7Y="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.4?package-id=ea00cbbeabcaa6ab","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/configsources","version":"v1.5.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.5.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.5.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CLq4+8UHCI+ZZYl/EuJxXovaIVN2xeeT8JV+dsApQ5E="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.4?package-id=9ab88dd3eaeab08a","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","version":"v2.8.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.8.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.8.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dD4MR81I7YkpEBRk6UP9rocC2QnT3qVuXwzlYTtfGEs="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.4?package-id=28b4395cdd4b10a6","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/v4a","version":"v1.5.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.5.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.5.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7Wo47d/xn/7KttCSBd8EGYeZ7ULRFRkUHr6vkZPBzVQ="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.56.0?package-id=b3d369d9c7673308","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/ecr","version":"v1.56.0","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecr:v1.56.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.56.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecr:v1.56.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XxNya31nOtsClGghvQ2VkhIB2S/rggb64x5vkHl4xZQ="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.11?package-id=8a2644b38cf7792d","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/ecrpublic","version":"v1.38.11","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecrpublic:v1.38.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecrpublic:v1.38.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2T9NCuNzzBh6RUrwYZBFl1D9lLJ2r2CCbg7w383DjQE="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.19?package-id=2151c9ce88846eb0","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding","version":"v1.13.19","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.19","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bAdDl/HkGCcGPoe25ToSHEw23VIxt6CT5fLcg111BKg="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.11.5?package-id=200f7aedf73a20b6","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/checksum","version":"v1.11.5","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.11.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.11.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.11.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/TYsZXdA8UTa+WCtCYSAJIr1vwl0+eho6TUgJGwFFO8="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.4?package-id=8d0e08a10eca3d80","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","version":"v1.14.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.14.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.14.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:29SvnfGhXjTl8ONxFwbj2rs6lbhiFXD2CgFQmbT/bXY="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.20.4?package-id=1b52d9cd67db9bac","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/s3shared","version":"v1.20.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.20.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.20.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.20.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pPiWfgeNxqluKEph7hvU88kuGKBPOWzO+Dk9t2zqqNs="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.52.0?package-id=86a0482797b9e83f","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/kms","version":"v1.52.0","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/kms:v1.52.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.52.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/kms:v1.52.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QNtg+Mtj1zmepk568+UKBD5DFfqh+ESTUUqQT27JkQc="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.113.4?package-id=b445fb448d4cf435","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/s3","version":"v1.113.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.113.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.113.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.113.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:n6kO3OlBvnDEksQpvBLbAldjHwGlu8kErvhHJkhlaRY="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.1?package-id=42d66ceefa42e9f0","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/signin","version":"v1.10.1","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.10.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DzCCWLzcIRQ77F3DEUljud7bEjTgFOIKXP52NmVRyhU="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.1?package-id=f8c04287cbd7e813","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/sso","version":"v1.38.1","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.38.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.38.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Umtl/0YZhng4xndfW3lKJrYYP7NLEjI6bGXVomwLcs0="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.1?package-id=75f577d6ffd895fc","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","version":"v1.43.1","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.43.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.43.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:orIWdNiLgzrhu/11RcPPKO/SBzUUymbUQuZbSPImghg="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.1?package-id=916d8b5b95e26f49","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/sts","version":"v1.51.1","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.51.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.51.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0HOqZXRvMytH6bFHVIc0oJX07sZjfhz0zXtjs6gdE8s="}]},{"bom-ref":"pkg:golang/github.com/aws/smithy-go@v1.28.1?package-id=49f83c1364d6f2b3","type":"library","name":"github.com/aws/smithy-go","version":"v1.28.1","cpe":"cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/smithy-go@v1.28.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:R/nXH00c8qcfCzQVELtRw+eLQWtzv+VAIEFJ1/xxXlQ="}]},{"bom-ref":"pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=3bd6db9f3769892e","type":"library","name":"github.com/awslabs/amazon-ecr-credential-helper/ecr-login","version":"v0.12.0","cpe":"cpe:2.3:a:awslabs:amazon-ecr-credential-helper\\/ecr-login:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:awslabs:amazon_ecr_credential_helper\\/ecr_login:v0.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JFWXO6QPihCknDdnL6VaQE57km4ZKheHIGd9YiOGcTo="}]},{"bom-ref":"pkg:golang/github.com/ayoubfaouzi/pkcs7@v0.2.3?package-id=3069607b00ba34ae","type":"library","name":"github.com/ayoubfaouzi/pkcs7","version":"v0.2.3","cpe":"cpe:2.3:a:ayoubfaouzi:pkcs7:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ayoubfaouzi/pkcs7@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XGCYHteXgclHnNlPdCF8aFyoUKwP9VhLQp+VX+hBZ3U="}]},{"bom-ref":"pkg:golang/github.com/bahlo/generic-list-go@v0.2.0?package-id=6cf22d82187e75a3","type":"library","name":"github.com/bahlo/generic-list-go","version":"v0.2.0","cpe":"cpe:2.3:a:bahlo:generic-list-go:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bahlo/generic-list-go@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:bahlo:generic_list_go:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5sz/EEAK+ls5wF+NeqDpk5+iNdMDXrh3z3nPnH1Wvgk="}]},{"bom-ref":"pkg:golang/github.com/bazelbuild/buildtools@v0.0.0-20260716142318-04cf7de1434f?package-id=72d6824e53650ed9","type":"library","name":"github.com/bazelbuild/buildtools","version":"v0.0.0-20260716142318-04cf7de1434f","cpe":"cpe:2.3:a:bazelbuild:buildtools:v0.0.0-20260716142318-04cf7de1434f:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bazelbuild/buildtools@v0.0.0-20260716142318-04cf7de1434f","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2mT6QcXmMFtvg7bezs1Fef7nnpJyeCmfWoWNjwtvNZ4="}]},{"bom-ref":"pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=d6a808ea2ca0ee75","type":"library","name":"github.com/beorn7/perks","version":"v1.0.1","cpe":"cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/beorn7/perks@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="}]},{"bom-ref":"pkg:golang/github.com/bkielbasa/cyclop@v1.2.3?package-id=d1be44599068f412","type":"library","name":"github.com/bkielbasa/cyclop","version":"v1.2.3","cpe":"cpe:2.3:a:bkielbasa:cyclop:v1.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bkielbasa/cyclop@v1.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:faIVMIGDIANuGPWH031CZJTi2ymOQBULs9H21HSMa5w="}]},{"bom-ref":"pkg:golang/github.com/blacktop/go-dwarf@v1.0.14?package-id=d8553db32a556d6d","type":"library","name":"github.com/blacktop/go-dwarf","version":"v1.0.14","cpe":"cpe:2.3:a:blacktop:go-dwarf:v1.0.14:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/blacktop/go-dwarf@v1.0.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:blacktop:go_dwarf:v1.0.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OjmzfSgg/qAKckn2tWFebcgKgJ7HOqCj7bS+CiE1lrY="}]},{"bom-ref":"pkg:golang/github.com/blacktop/go-macho@v1.1.263?package-id=9f7f0355b3d9a7e2","type":"library","name":"github.com/blacktop/go-macho","version":"v1.1.263","cpe":"cpe:2.3:a:blacktop:go-macho:v1.1.263:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/blacktop/go-macho@v1.1.263","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:blacktop:go_macho:v1.1.263:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wzcLdip1PD2UwOZ5liKijF4YlYbFFF7XdqjLp3VQ1d0="}]},{"bom-ref":"pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb?package-id=2bb525d5859ca93a","type":"library","name":"github.com/blakesmith/ar","version":"v0.0.0-20190502131153-809d4375e1fb","cpe":"cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:m935MPodAbYS46DG4pJSv7WO+VECIWUQ7OJYSoTrMh4="}]},{"bom-ref":"pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=d942247e3765d779","type":"library","name":"github.com/blang/semver","version":"v3.5.1+incompatible","cpe":"cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ="}]},{"bom-ref":"pkg:golang/github.com/blizzy78/varnamelen@v0.8.0?package-id=fb2024f4e83a896b","type":"library","name":"github.com/blizzy78/varnamelen","version":"v0.8.0","cpe":"cpe:2.3:a:blizzy78:varnamelen:v0.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/blizzy78/varnamelen@v0.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oqSblyuQvFsW1hbBHh1zfwrKe3kcSj0rnXkKzsQ089M="}]},{"bom-ref":"pkg:golang/github.com/bluesky-social/indigo@v0.0.0-20240813042137-4006c0eca043?package-id=dc00f72ab8eaf753","type":"library","name":"github.com/bluesky-social/indigo","version":"v0.0.0-20240813042137-4006c0eca043","cpe":"cpe:2.3:a:bluesky-social:indigo:v0.0.0-20240813042137-4006c0eca043:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bluesky-social/indigo@v0.0.0-20240813042137-4006c0eca043","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:bluesky_social:indigo:v0.0.0-20240813042137-4006c0eca043:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:bluesky:indigo:v0.0.0-20240813042137-4006c0eca043:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:927VIkxPFKpfJKVDtCNgSQtlhksARaLvsLxppR2FukM="}]},{"bom-ref":"pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0?package-id=70cd0b1898788493","type":"library","name":"github.com/bmatcuk/doublestar/v4","version":"v4.10.0","cpe":"cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zU9WiOla1YA122oLM6i4EXvGW62DvKZVxIe6TYWexEs="}]},{"bom-ref":"pkg:golang/github.com/bmatcuk/doublestar/v4@v4.8.1?package-id=75c4ed5d3bf28980","type":"library","name":"github.com/bmatcuk/doublestar/v4","version":"v4.8.1","cpe":"cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bmatcuk/doublestar/v4@v4.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:54Bopc5c2cAvhLRAzqOGCYHYyhcDHsFF4wWIR5wKP38="}]},{"bom-ref":"pkg:golang/github.com/bombsimon/logrusr/v2@v2.0.1?package-id=3724716c79c5c468","type":"library","name":"github.com/bombsimon/logrusr/v2","version":"v2.0.1","cpe":"cpe:2.3:a:bombsimon:logrusr\\/v2:v2.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bombsimon/logrusr/v2@v2.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1VgxVNQMCvjirZIYaT9JYn6sAVGVEcNtRE0y4mvaOAM="}]},{"bom-ref":"pkg:golang/github.com/bombsimon/wsl/v4@v4.7.0?package-id=a1b8481fe6e351f1","type":"library","name":"github.com/bombsimon/wsl/v4","version":"v4.7.0","cpe":"cpe:2.3:a:bombsimon:wsl\\/v4:v4.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bombsimon/wsl/v4@v4.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1Ilm9JBPRczjyUs6hvOPKvd7VL1Q++PL8M0SXBDf+jQ="}]},{"bom-ref":"pkg:golang/github.com/bombsimon/wsl/v5@v5.9.0?package-id=62b87152bb786622","type":"library","name":"github.com/bombsimon/wsl/v5","version":"v5.9.0","cpe":"cpe:2.3:a:bombsimon:wsl\\/v5:v5.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bombsimon/wsl/v5@v5.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WCrgZ7RQnZO5oEwbVTlYgBdU3wL294kR1BSWV8vTfsU="}]},{"bom-ref":"pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.19.0?package-id=6420f3156121050a","type":"library","name":"github.com/bradleyfalzon/ghinstallation/v2","version":"v2.19.0","cpe":"cpe:2.3:a:bradleyfalzon:ghinstallation\\/v2:v2.19.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.19.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KQfD+43pRw9NUJhGycGrFr9vF1MubZacksKol1gomFI="}]},{"bom-ref":"pkg:golang/github.com/breml/bidichk@v0.3.3?package-id=841e5d34319ce675","type":"library","name":"github.com/breml/bidichk","version":"v0.3.3","cpe":"cpe:2.3:a:breml:bidichk:v0.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/breml/bidichk@v0.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WSM67ztRusf1sMoqH6/c4OBCUlRVTKq+CbSeo0R17sE="}]},{"bom-ref":"pkg:golang/github.com/breml/errchkjson@v0.4.1?package-id=9cce479ce27f52a7","type":"library","name":"github.com/breml/errchkjson","version":"v0.4.1","cpe":"cpe:2.3:a:breml:errchkjson:v0.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/breml/errchkjson@v0.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:keFSS8D7A2T0haP9kzZTi7o26r7kE3vymjZNeNDRDwg="}]},{"bom-ref":"pkg:golang/github.com/buger/jsonparser@v1.6.1?package-id=7b52ba9ef2e7c4e8","type":"library","name":"github.com/buger/jsonparser","version":"v1.6.1","cpe":"cpe:2.3:a:buger:jsonparser:v1.6.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/buger/jsonparser@v1.6.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:I0phFv0PlbLHnM7TZAVjZ2MJ2/eWRTDyuO7GLR98IEs="}]},{"bom-ref":"pkg:golang/github.com/butuzov/ireturn@v0.4.1?package-id=57e15dc41a485925","type":"library","name":"github.com/butuzov/ireturn","version":"v0.4.1","cpe":"cpe:2.3:a:butuzov:ireturn:v0.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/butuzov/ireturn@v0.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vWb3NO4t77iku/sjCQ/2pHTQeOmxEhjIriJqRLg1Y+I="}]},{"bom-ref":"pkg:golang/github.com/butuzov/mirror@v1.3.3?package-id=21b41172f0aadcc1","type":"library","name":"github.com/butuzov/mirror","version":"v1.3.3","cpe":"cpe:2.3:a:butuzov:mirror:v1.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/butuzov/mirror@v1.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:v0RsWBhfFc1RQqE/f3sHpSttKDtodFn0gFmtYyD4/hA="}]},{"bom-ref":"pkg:golang/github.com/caarlos0/env/v11@v11.4.1?package-id=350b1b30bac3fe40","type":"library","name":"github.com/caarlos0/env/v11","version":"v11.4.1","cpe":"cpe:2.3:a:caarlos0:env\\/v11:v11.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/caarlos0/env/v11@v11.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fYwH0sWEsBSMPG7t4e/PEfTFzrWrpjyygXyUnWiSwEw="}]},{"bom-ref":"pkg:golang/github.com/caarlos0/env/v6@v6.10.1?package-id=0e83a9ff06c86968","type":"library","name":"github.com/caarlos0/env/v6","version":"v6.10.1","cpe":"cpe:2.3:a:caarlos0:env\\/v6:v6.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/caarlos0/env/v6@v6.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:t1mPSxNpei6M5yAeu1qtRdPAK29Nbcf/n3G7x+b3/II="}]},{"bom-ref":"pkg:golang/github.com/caarlos0/go-reddit/v3@v3.0.1?package-id=cfab59ef2a5bdb65","type":"library","name":"github.com/caarlos0/go-reddit/v3","version":"v3.0.1","cpe":"cpe:2.3:a:caarlos0:go-reddit\\/v3:v3.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/caarlos0/go-reddit/v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:caarlos0:go_reddit\\/v3:v3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w8ugvsrHhaE/m4ez0BO/sTBOBWI9WZTjG7VTecHnql4="}]},{"bom-ref":"pkg:golang/github.com/caarlos0/go-version@v0.2.2?package-id=8571855ca4925d25","type":"library","name":"github.com/caarlos0/go-version","version":"v0.2.2","cpe":"cpe:2.3:a:caarlos0:go-version:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/caarlos0/go-version@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:caarlos0:go_version:v0.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5r+nlrg4H2wOVwWjqRqRRIRbZ7ytRmjC9xoMIP0a5kQ="}]},{"bom-ref":"pkg:golang/github.com/caarlos0/log@v0.6.2?package-id=22e4e6a130329b1c","type":"library","name":"github.com/caarlos0/log","version":"v0.6.2","cpe":"cpe:2.3:a:caarlos0:log:v0.6.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/caarlos0/log@v0.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZeP1TBAEiF0XF6VoJze/KNKeRqsQ0frHuDLhtNDvRys="}]},{"bom-ref":"pkg:golang/github.com/canonical/chisel-manifest@v1.2.0?package-id=65027a860c94de28","type":"library","name":"github.com/canonical/chisel-manifest","version":"v1.2.0","cpe":"cpe:2.3:a:canonical:chisel-manifest:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/canonical/chisel-manifest@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:canonical:chisel_manifest:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kFB9fBP33CvH+RLbTYLuKtFFICpq2JmH4xtYvBqpj3I="}]},{"bom-ref":"pkg:golang/github.com/carlmjohnson/versioninfo@v0.22.5?package-id=247cf4590ac53b8a","type":"library","name":"github.com/carlmjohnson/versioninfo","version":"v0.22.5","cpe":"cpe:2.3:a:carlmjohnson:versioninfo:v0.22.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/carlmjohnson/versioninfo@v0.22.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O00sjOLUAFxYQjlN/bzYTuZiS0y6fWDQjMRvwtKgwwc="}]},{"bom-ref":"pkg:golang/github.com/catenacyber/perfsprint@v0.10.1?package-id=5fd9279d0d69b897","type":"library","name":"github.com/catenacyber/perfsprint","version":"v0.10.1","cpe":"cpe:2.3:a:catenacyber:perfsprint:v0.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/catenacyber/perfsprint@v0.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u7Riei30bk46XsG8nknMhKLXG9BcXz3+3tl/WpKm0PQ="}]},{"bom-ref":"pkg:golang/github.com/cavaliergopher/cpio@v1.0.1?package-id=0564f1a68284682c","type":"library","name":"github.com/cavaliergopher/cpio","version":"v1.0.1","cpe":"cpe:2.3:a:cavaliergopher:cpio:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cavaliergopher/cpio@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KQFSeKmZhv0cr+kawA3a0xTQCU4QxXF1vhU7P7av2KM="}]},{"bom-ref":"pkg:golang/github.com/ccojocar/zxcvbn-go@v1.0.4?package-id=0abf4ead6b085faa","type":"library","name":"github.com/ccojocar/zxcvbn-go","version":"v1.0.4","cpe":"cpe:2.3:a:ccojocar:zxcvbn-go:v1.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ccojocar/zxcvbn-go@v1.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ccojocar:zxcvbn_go:v1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FWnCIRMXPj43ukfX000kvBZvV6raSxakYr1nzyNrUcc="}]},{"bom-ref":"pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=d1930c2753fa3ef6","type":"library","name":"github.com/cenkalti/backoff/v4","version":"v4.3.0","cpe":"cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8="}]},{"bom-ref":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=d6b318680e2c53d6","type":"library","name":"github.com/cenkalti/backoff/v5","version":"v5.0.3","cpe":"cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=16862f010c148df0","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/charithe/durationcheck@v0.0.11?package-id=f54b64fccfd18afe","type":"library","name":"github.com/charithe/durationcheck","version":"v0.0.11","cpe":"cpe:2.3:a:charithe:durationcheck:v0.0.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charithe/durationcheck@v0.0.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:g1/EX1eIiKS57NTWsYtHDZ/APfeXKhye1DidBcABctk="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3?package-id=e29e3fa457d1a971","type":"library","name":"github.com/charmbracelet/colorprofile","version":"v0.4.3","cpe":"cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QPa1IWkYI+AOB+fE+mg/5/4HRMZcaXex9t5KX76i20Q="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/fang@v1.0.0?package-id=edd6adbd4703eac3","type":"library","name":"github.com/charmbracelet/fang","version":"v1.0.0","cpe":"cpe:2.3:a:charmbracelet:fang:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/fang@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jESBY40agJOlLYnnv9jE0mLqDGTxEk0hkOnx7YGyRlQ="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/ultraviolet@v0.0.0-20260811164956-006e29f97886?package-id=ea8969ab10657009","type":"library","name":"github.com/charmbracelet/ultraviolet","version":"v0.0.0-20260811164956-006e29f97886","cpe":"cpe:2.3:a:charmbracelet:ultraviolet:v0.0.0-20260811164956-006e29f97886:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/ultraviolet@v0.0.0-20260811164956-006e29f97886","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rdnVWKgJpTVXKuKuJyxDJ+NFJdUaUqGvyGy61OcvlbA="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/ansi@v0.11.8?package-id=3201bd8d41767f08","type":"library","name":"github.com/charmbracelet/x/ansi","version":"v0.11.8","cpe":"cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/ansi@v0.11.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JMFwp0CgDC2+jcOB162HH5k7I3FVbgFSMMYg7dSPBQQ="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/exp/charmtone@v0.0.0-20250603201427-c31516f43444?package-id=858c66ab27bb73ca","type":"library","name":"github.com/charmbracelet/x/exp/charmtone","version":"v0.0.0-20250603201427-c31516f43444","cpe":"cpe:2.3:a:charmbracelet:x\\/exp\\/charmtone:v0.0.0-20250603201427-c31516f43444:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/exp/charmtone@v0.0.0-20250603201427-c31516f43444","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IJDiTgVE56gkAGfq0lBEloWgkXMk4hl/bmuPoicI4R0="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/term@v0.2.2?package-id=be45d45a45565120","type":"library","name":"github.com/charmbracelet/x/term","version":"v0.2.2","cpe":"cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/term@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xVRT/S2ZcKdhhOuSP4t5cLi5o+JxklsoEObBSgfgZRk="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/termios@v0.1.1?package-id=88815082ec86f867","type":"library","name":"github.com/charmbracelet/x/termios","version":"v0.1.1","cpe":"cpe:2.3:a:charmbracelet:x\\/termios:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/termios@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o3Q2bT8eqzGnGPOYheoYS8eEleT5ZVNYNy8JawjaNZY="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/windows@v0.2.2?package-id=1af6f8988d422da8","type":"library","name":"github.com/charmbracelet/x/windows","version":"v0.2.2","cpe":"cpe:2.3:a:charmbracelet:x\\/windows:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/windows@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IofanmuvaxnKHuV04sC0eBy/smG6kIKrWG2/jYn2GuM="}]},{"bom-ref":"pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=d1375ce637552ca2","type":"library","name":"github.com/chrismellard/docker-credential-acr-env","version":"v0.0.0-20230304212654-82a0ddb27589","cpe":"cpe:2.3:a:chrismellard:docker-credential-acr-env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:chrismellard:docker_credential_acr_env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:krfRl01rzPzxSxyLyrChD+U+MzsBXbm0OwYYB67uF+4="}]},{"bom-ref":"pkg:golang/github.com/ckaznocha/intrange@v0.3.1?package-id=e8506c9e796df842","type":"library","name":"github.com/ckaznocha/intrange","version":"v0.3.1","cpe":"cpe:2.3:a:ckaznocha:intrange:v0.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ckaznocha/intrange@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j1onQyXvHUsPWujDH6WIjhyH26gkRt/txNlV7LspvJs="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0?package-id=49c42b24ed2b8b26","type":"library","name":"github.com/clipperhouse/displaywidth","version":"v0.11.0","cpe":"cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lBc6kY44VFw+TDx4I8opi/EtL9m20WSEFgwIwO+UVM8="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0?package-id=dfa0b50ab9a7e8bd","type":"library","name":"github.com/clipperhouse/uax29/v2","version":"v2.7.0","cpe":"cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJv2v7Vk="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0?package-id=6ff80b69c316008b","type":"library","name":"github.com/clipperhouse/uax29/v2","version":"v2.7.0","cpe":"cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJv2v7Vk="}]},{"bom-ref":"pkg:golang/github.com/cloudflare/circl@v1.6.3?package-id=ceeb381812a33192","type":"library","name":"github.com/cloudflare/circl","version":"v1.6.3","cpe":"cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/cloudflare/circl@v1.6.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8="}]},{"bom-ref":"pkg:golang/github.com/cloudflare/circl@v1.6.4?package-id=cb1f4cab4c2a23b3","type":"library","name":"github.com/cloudflare/circl","version":"v1.6.4","cpe":"cpe:2.3:a:cloudflare:circl:v1.6.4:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/cloudflare/circl@v1.6.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pOXuDTCEYyzydgUpQ0CQz3LsinKjiSk6nNP5Lt5K64U="}]},{"bom-ref":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2?package-id=8f94fd943c978725","type":"library","name":"github.com/cncf/xds/go","version":"v0.0.0-20260202195803-dba9d589def2","cpe":"cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aBangftG7EVZoUb69Os8IaYg++6uMOdKK83QtkkvJik="}]},{"bom-ref":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2?package-id=19297b61ce06637b","type":"library","name":"github.com/cncf/xds/go","version":"v0.0.0-20260202195803-dba9d589def2","cpe":"cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aBangftG7EVZoUb69Os8IaYg++6uMOdKK83QtkkvJik="}]},{"bom-ref":"pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=d3bc55ddcd7e2737","type":"library","name":"github.com/common-nighthawk/go-figure","version":"v0.0.0-20210622060536-734e95fb86be","cpe":"cpe:2.3:a:common-nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:common-nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common_nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common_nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:J5BL2kskAlV9ckgEsNQXscjIaLiOYiZ75d4e94E6dcQ="}]},{"bom-ref":"pkg:golang/github.com/compose-spec/compose-go/v2@v2.14.0?package-id=b733f7777cd62433","type":"library","name":"github.com/compose-spec/compose-go/v2","version":"v2.14.0","cpe":"cpe:2.3:a:compose-spec:compose-go\\/v2:v2.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/compose-spec/compose-go/v2@v2.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose-spec:compose_go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose_spec:compose-go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose_spec:compose_go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose:compose-go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compose:compose_go\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uaJeo5B3+OVlu+Rx2qLBcAdXPEUUzm5nQrRiGJafRAQ="}]},{"bom-ref":"pkg:golang/github.com/containerd/containerd/api@v1.11.1?package-id=9c3ce79e595a4342","type":"library","name":"github.com/containerd/containerd/api","version":"v1.11.1","cpe":"cpe:2.3:a:containerd:containerd\\/api:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/containerd/api@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h8nfoDW9+fNsC/9TwiAHj8B1GzXKtR4eFtkhi/X5RLU="}]},{"bom-ref":"pkg:golang/github.com/containerd/errdefs@v1.0.0?package-id=9500bbb18a20f8fd","type":"library","name":"github.com/containerd/errdefs","version":"v1.0.0","cpe":"cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/errdefs@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI="}]},{"bom-ref":"pkg:golang/github.com/containerd/errdefs@v1.0.0?package-id=37228d83e3057546","type":"library","name":"github.com/containerd/errdefs","version":"v1.0.0","cpe":"cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/errdefs@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI="}]},{"bom-ref":"pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0?package-id=d39d8b735782a363","type":"library","name":"github.com/containerd/errdefs/pkg","version":"v0.3.0","cpe":"cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE="}]},{"bom-ref":"pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0?package-id=7e74fc80b673c54d","type":"library","name":"github.com/containerd/errdefs/pkg","version":"v0.3.0","cpe":"cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE="}]},{"bom-ref":"pkg:golang/github.com/containerd/typeurl/v2@v2.3.0?package-id=4d8c3323d78d639c","type":"library","name":"github.com/containerd/typeurl/v2","version":"v2.3.0","cpe":"cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/containerd/typeurl/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HZHPhRWo5XMy3QGQoPrUzbW/2ckwjfweHmOwlkIrPAQ="}]},{"bom-ref":"pkg:golang/github.com/coreos/go-oidc/v3@v3.20.0?package-id=3a0b9fb8feada1df","type":"library","name":"github.com/coreos/go-oidc/v3","version":"v3.20.0","cpe":"cpe:2.3:a:coreos:go-oidc\\/v3:v3.20.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/coreos/go-oidc/v3@v3.20.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:coreos:go_oidc\\/v3:v3.20.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EtE0WIBHk03N+DqGkY4+UONzzZHk7amKt6IyNd7OsZE="}]},{"bom-ref":"pkg:golang/github.com/curioswitch/go-reassign@v0.3.0?package-id=55d6e1dcd1e6a701","type":"library","name":"github.com/curioswitch/go-reassign","version":"v0.3.0","cpe":"cpe:2.3:a:curioswitch:go-reassign:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/curioswitch/go-reassign@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:curioswitch:go_reassign:v0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dh3kpQHuADL3cobV/sSGETA8DOv457dwl+fbBAhrQPs="}]},{"bom-ref":"pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=8cf5363103dd4975","type":"library","name":"github.com/cyberphone/json-canonicalization","version":"v0.0.0-20241213102144-19d51d7fe467","cpe":"cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uX1JmpONuD549D73r6cgnxyUu18Zb7yHAy5AYU0Pm4Q="}]},{"bom-ref":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1?package-id=714e730d9a8fd30e","type":"library","name":"github.com/cyphar/filepath-securejoin","version":"v0.6.1","cpe":"cpe:2.3:a:cyphar:filepath-securejoin:v0.6.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cyphar:filepath_securejoin:v0.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5CeZ1jPXEiYt3+Z6zqprSAgSWiggmpVyciv8syjIpVE="}]},{"bom-ref":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0?package-id=b481af457ff3ec17","type":"library","name":"github.com/cyphar/filepath-securejoin","version":"v0.7.0","cpe":"cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:s0Y3ITPy6sQn5xt54DuYvTF8hu134ooYLUb58DX/HjE="}]},{"bom-ref":"pkg:golang/github.com/daixiang0/gci@v0.13.7?package-id=88d83adcdd9ea7e3","type":"library","name":"github.com/daixiang0/gci","version":"v0.13.7","cpe":"cpe:2.3:a:daixiang0:gci:v0.13.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/daixiang0/gci@v0.13.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+0bG5eK9vlI08J+J/NWGbWPTNiXPG4WhNLJOkSxWITQ="}]},{"bom-ref":"pkg:golang/github.com/dave/dst@v0.27.3?package-id=5e08ec60e96cb2a8","type":"library","name":"github.com/dave/dst","version":"v0.27.3","cpe":"cpe:2.3:a:dave:dst:v0.27.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dave/dst@v0.27.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:P1HPoMza3cMEquVf9kKy8yXsFirry4zEnWOdYPOoIzY="}]},{"bom-ref":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=e1e0f1232be39ea0","type":"library","name":"github.com/davecgh/go-spew","version":"v1.1.2-0.20180830191138-d8f796af33cc","cpe":"cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="}]},{"bom-ref":"pkg:golang/github.com/davidmz/go-pageant@v1.0.2?package-id=0cf2d9fc3b819220","type":"library","name":"github.com/davidmz/go-pageant","version":"v1.0.2","cpe":"cpe:2.3:a:davidmz:go-pageant:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davidmz/go-pageant@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davidmz:go_pageant:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bPblRCh5jGU+Uptpz6LgMZGD5hJoOt7otgT454WvHn0="}]},{"bom-ref":"pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb?package-id=21fe7058dddd40ea","type":"library","name":"github.com/deitch/magic","version":"v0.0.0-20240306090643-c67ab88f10cb","cpe":"cpe:2.3:a:deitch:magic:v0.0.0-20240306090643-c67ab88f10cb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/deitch/magic@v0.0.0-20240306090643-c67ab88f10cb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4W/2rQ3wzEimF5s+J6OY3ODiQtJZ5W1sForSgogVXkY="}]},{"bom-ref":"pkg:golang/github.com/denis-tingaikin/go-header@v0.5.0?package-id=7a84cc3130a5d24a","type":"library","name":"github.com/denis-tingaikin/go-header","version":"v0.5.0","cpe":"cpe:2.3:a:denis-tingaikin:go-header:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/denis-tingaikin/go-header@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:denis-tingaikin:go_header:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:denis_tingaikin:go-header:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:denis_tingaikin:go_header:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:denis:go-header:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:denis:go_header:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SRdnP5ZKvcO9KKRP1KJrhFR3RrlGuD+42t4429eC9k8="}]},{"bom-ref":"pkg:golang/github.com/dghubble/go-twitter@v0.0.0-20220716041154-837915ec2f79?package-id=a7b994c96970d7c8","type":"library","name":"github.com/dghubble/go-twitter","version":"v0.0.0-20220716041154-837915ec2f79","cpe":"cpe:2.3:a:dghubble:go-twitter:v0.0.0-20220716041154-837915ec2f79:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dghubble/go-twitter@v0.0.0-20220716041154-837915ec2f79","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dghubble:go_twitter:v0.0.0-20220716041154-837915ec2f79:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Z9wtGrNgCDhG7u+hVTlcBl9jeNdSfqzvg3piJNR4VX0="}]},{"bom-ref":"pkg:golang/github.com/dghubble/oauth1@v0.7.3?package-id=e4f7b4a579d4f761","type":"library","name":"github.com/dghubble/oauth1","version":"v0.7.3","cpe":"cpe:2.3:a:dghubble:oauth1:v0.7.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dghubble/oauth1@v0.7.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EkEM/zMDMp3zOsX2DC/ZQ2vnEX3ELK0/l9kb+vs4ptE="}]},{"bom-ref":"pkg:golang/github.com/dghubble/sling@v1.4.0?package-id=10e536b70eb6050f","type":"library","name":"github.com/dghubble/sling","version":"v1.4.0","cpe":"cpe:2.3:a:dghubble:sling:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dghubble/sling@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/n8MRosVTthvMbwlNZgLx579OGVjUOy3GNEv5BIqAWY="}]},{"bom-ref":"pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c?package-id=f8917f6b5afe53e1","type":"library","name":"github.com/digitorus/pkcs7","version":"v0.0.0-20250730155240-ffadbf3f398c","cpe":"cpe:2.3:a:digitorus:pkcs7:v0.0.0-20250730155240-ffadbf3f398c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:g349iS+CtAvba7i0Ee9EP1TlTZ9w+UncBY6HSmsFZa0="}]},{"bom-ref":"pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea?package-id=df605c6f3334b134","type":"library","name":"github.com/digitorus/timestamp","version":"v0.0.0-20250524132541-c45532741eea","cpe":"cpe:2.3:a:digitorus:timestamp:v0.0.0-20250524132541-c45532741eea:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ALRwvjsSP53QmnN3Bcj0NpR8SsFLnskny/EIMebAk1c="}]},{"bom-ref":"pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=0f45a061c0408caf","type":"library","name":"github.com/dimchansky/utfbom","version":"v1.1.1","cpe":"cpe:2.3:a:dimchansky:utfbom:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dimchansky/utfbom@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U="}]},{"bom-ref":"pkg:golang/github.com/diskfs/go-diskfs@v1.7.0?package-id=6010a82c7ac8537d","type":"library","name":"github.com/diskfs/go-diskfs","version":"v1.7.0","cpe":"cpe:2.3:a:diskfs:go-diskfs:v1.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/diskfs/go-diskfs@v1.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:diskfs:go_diskfs:v1.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vonWmt5CMowXwUc79jWyGrf2DIMeoOjkLlMnQYGVOs8="}]},{"bom-ref":"pkg:golang/github.com/distribution/reference@v0.6.0?package-id=5cf5bbf310c710d0","type":"library","name":"github.com/distribution/reference","version":"v0.6.0","cpe":"cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/distribution/reference@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk="}]},{"bom-ref":"pkg:golang/github.com/distribution/reference@v0.6.0?package-id=0e89bc05b664608e","type":"library","name":"github.com/distribution/reference","version":"v0.6.0","cpe":"cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/distribution/reference@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk="}]},{"bom-ref":"pkg:golang/github.com/djherbis/times@v1.6.0?package-id=5151ccce279e791c","type":"library","name":"github.com/djherbis/times","version":"v1.6.0","cpe":"cpe:2.3:a:djherbis:times:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/djherbis/times@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w2ctJ92J8fBvWPxugmXIv7Nz7Q3iDMKNx9v5ocVH20c="}]},{"bom-ref":"pkg:golang/github.com/dlclark/regexp2/v2@v2.2.1?package-id=5a68bff55303921f","type":"library","name":"github.com/dlclark/regexp2/v2","version":"v2.2.1","cpe":"cpe:2.3:a:dlclark:regexp2\\/v2:v2.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dlclark/regexp2/v2@v2.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mf4KkFUj0gJuarK8P+LgiS+Lit7m9N1yAwEfPbee7R0="}]},{"bom-ref":"pkg:golang/github.com/docker/cli@v29.7.2%2Bincompatible?package-id=6e2cfe0165378e7b","type":"library","name":"github.com/docker/cli","version":"v29.7.2+incompatible","cpe":"cpe:2.3:a:docker:cli:v29.7.2\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/cli@v29.7.2%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dlkwallR8XqfeVnA2ELEhdwvb4lsSwuB4IgsG8Q9cLY="}]},{"bom-ref":"pkg:golang/github.com/docker/cli@v29.7.2%2Bincompatible?package-id=b89b7a28d26f2917","type":"library","name":"github.com/docker/cli","version":"v29.7.2+incompatible","cpe":"cpe:2.3:a:docker:cli:v29.7.2\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/cli@v29.7.2%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dlkwallR8XqfeVnA2ELEhdwvb4lsSwuB4IgsG8Q9cLY="}]},{"bom-ref":"pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=d57b1f5509068054","type":"library","name":"github.com/docker/docker-credential-helpers","version":"v0.9.5","cpe":"cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EFNN8DHvaiK8zVqFA2DT6BjXE0GzfLOZ38ggPTKePkY="}]},{"bom-ref":"pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8?package-id=21583d883112ee03","type":"library","name":"github.com/docker/docker-credential-helpers","version":"v0.9.8","cpe":"cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bIREROb7So6PRlq6KTtdS9MPEjC29OQRkFNlvK2OX8Q="}]},{"bom-ref":"pkg:golang/github.com/docker/go-connections@v0.7.0?package-id=de2c687b902008fb","type":"library","name":"github.com/docker/go-connections","version":"v0.7.0","cpe":"cpe:2.3:a:docker:go-connections:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/go-connections@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:go_connections:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6SsRfJddP22WMrCkj19x9WKjEDTB+ahsdiGYf0mN39c="}]},{"bom-ref":"pkg:golang/github.com/docker/go-connections@v0.8.1?package-id=166704c30495edb9","type":"library","name":"github.com/docker/go-connections","version":"v0.8.1","cpe":"cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/go-connections@v0.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JibmG5hULs5qXSr/cp/w3Pw5fZuStt4MOHMUExb29/M="}]},{"bom-ref":"pkg:golang/github.com/docker/go-units@v0.5.0?package-id=a9271522b4f3233c","type":"library","name":"github.com/docker/go-units","version":"v0.5.0","cpe":"cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/go-units@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4="}]},{"bom-ref":"pkg:golang/github.com/docker/go-units@v0.5.0?package-id=3271ffb86cb4007c","type":"library","name":"github.com/docker/go-units","version":"v0.5.0","cpe":"cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/go-units@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4="}]},{"bom-ref":"pkg:golang/github.com/dprotaso/go-yit@v0.0.0-20260209000607-dfb86291624d?package-id=523b6aab093e167f","type":"library","name":"github.com/dprotaso/go-yit","version":"v0.0.0-20260209000607-dfb86291624d","cpe":"cpe:2.3:a:dprotaso:go-yit:v0.0.0-20260209000607-dfb86291624d:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dprotaso/go-yit@v0.0.0-20260209000607-dfb86291624d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dprotaso:go_yit:v0.0.0-20260209000607-dfb86291624d:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/USl0X37Afc2SyjRG4/eNrbm4CZRfZLdzwTy9YXxowA="}]},{"bom-ref":"pkg:golang/github.com/dsoprea/go-exfat@v0.0.0-20190906070738-5e932fbdb589?package-id=3d94d3e5c36ff57e","type":"library","name":"github.com/dsoprea/go-exfat","version":"v0.0.0-20190906070738-5e932fbdb589","cpe":"cpe:2.3:a:dsoprea:go-exfat:v0.0.0-20190906070738-5e932fbdb589:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dsoprea/go-exfat@v0.0.0-20190906070738-5e932fbdb589","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dsoprea:go_exfat:v0.0.0-20190906070738-5e932fbdb589:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LzrKhEeL5tqo8i86+5a8JgL5cEJBRspVm4FsKRK/gxA="}]},{"bom-ref":"pkg:golang/github.com/dsoprea/go-logging@v0.0.0-20200710184922-b02d349568dd?package-id=d7d000a9876efc27","type":"library","name":"github.com/dsoprea/go-logging","version":"v0.0.0-20200710184922-b02d349568dd","cpe":"cpe:2.3:a:dsoprea:go-logging:v0.0.0-20200710184922-b02d349568dd:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dsoprea/go-logging@v0.0.0-20200710184922-b02d349568dd","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dsoprea:go_logging:v0.0.0-20200710184922-b02d349568dd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:l+vLbuxptsC6VQyQsfD7NnEC8BZuFpz45PgY+pH8YTg="}]},{"bom-ref":"pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=8432997ae2bcf2c7","type":"library","name":"github.com/dustin/go-humanize","version":"v1.0.1","cpe":"cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dustin/go-humanize@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="}]},{"bom-ref":"pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=a741463b3501f60b","type":"library","name":"github.com/dustin/go-humanize","version":"v1.0.1","cpe":"cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dustin/go-humanize@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="}]},{"bom-ref":"pkg:golang/github.com/edsrzf/mmap-go@v1.2.0?package-id=df3b112da95d7dfb","type":"library","name":"github.com/edsrzf/mmap-go","version":"v1.2.0","cpe":"cpe:2.3:a:edsrzf:mmap-go:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/edsrzf/mmap-go@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:edsrzf:mmap_go:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hXLYlkbaPzt1SaQk+anYwKSRNhufIDCchSPkUD6dD84="}]},{"bom-ref":"pkg:golang/github.com/elliotwutingfeng/asciiset@v0.0.0-20260801111138-45c5fff54b41?package-id=465587111cd64492","type":"library","name":"github.com/elliotwutingfeng/asciiset","version":"v0.0.0-20260801111138-45c5fff54b41","cpe":"cpe:2.3:a:elliotwutingfeng:asciiset:v0.0.0-20260801111138-45c5fff54b41:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/elliotwutingfeng/asciiset@v0.0.0-20260801111138-45c5fff54b41","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:k6IHOr6orJ0s8nQ0b8QmuO8RVj0K3WYruDcQfcdqm8g="}]},{"bom-ref":"pkg:golang/github.com/emicklei/go-restful/v3@v3.12.2?package-id=0d53b82aa47150e9","type":"library","name":"github.com/emicklei/go-restful/v3","version":"v3.12.2","cpe":"cpe:2.3:a:emicklei:go-restful\\/v3:v3.12.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emicklei/go-restful/v3@v3.12.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:emicklei:go_restful\\/v3:v3.12.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU="}]},{"bom-ref":"pkg:golang/github.com/emirpasic/gods@v1.18.1?package-id=091896950bf83083","type":"library","name":"github.com/emirpasic/gods","version":"v1.18.1","cpe":"cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emirpasic/gods@v1.18.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc="}]},{"bom-ref":"pkg:golang/github.com/emirpasic/gods@v1.18.1?package-id=f3e515083e1eb345","type":"library","name":"github.com/emirpasic/gods","version":"v1.18.1","cpe":"cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emirpasic/gods@v1.18.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc="}]},{"bom-ref":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0?package-id=77d8e9d5a1ad9592","type":"library","name":"github.com/envoyproxy/go-control-plane/envoy","version":"v1.37.0","cpe":"cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u3riX6BoYRfF4Dr7dwSOroNfdSbEPe9Yyl09/B6wBrQ="}]},{"bom-ref":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0?package-id=5e0024108fcb38e7","type":"library","name":"github.com/envoyproxy/go-control-plane/envoy","version":"v1.37.0","cpe":"cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u3riX6BoYRfF4Dr7dwSOroNfdSbEPe9Yyl09/B6wBrQ="}]},{"bom-ref":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3?package-id=08b32ee1d7cb95d6","type":"library","name":"github.com/envoyproxy/protoc-gen-validate","version":"v1.3.3","cpe":"cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MVQghNeW+LZcmXe7SY1V36Z+WFMDjpqGAGacLe2T0ds="}]},{"bom-ref":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3?package-id=54c6c178ec443865","type":"library","name":"github.com/envoyproxy/protoc-gen-validate","version":"v1.3.3","cpe":"cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MVQghNeW+LZcmXe7SY1V36Z+WFMDjpqGAGacLe2T0ds="}]},{"bom-ref":"pkg:golang/github.com/erikvarga/go-rpmdb@v0.0.0-20250523120114-a15a62cd4593?package-id=caf27c41075f12e8","type":"library","name":"github.com/erikvarga/go-rpmdb","version":"v0.0.0-20250523120114-a15a62cd4593","cpe":"cpe:2.3:a:erikvarga:go-rpmdb:v0.0.0-20250523120114-a15a62cd4593:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/erikvarga/go-rpmdb@v0.0.0-20250523120114-a15a62cd4593","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:erikvarga:go_rpmdb:v0.0.0-20250523120114-a15a62cd4593:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cIQ/Ziclb/qreqg1nqGEtH4V9UJCTaNSKz9gBRaeZlA="}]},{"bom-ref":"pkg:golang/github.com/ettle/strcase@v0.2.0?package-id=52a9e9c27ffbc0a0","type":"library","name":"github.com/ettle/strcase","version":"v0.2.0","cpe":"cpe:2.3:a:ettle:strcase:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ettle/strcase@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fGNiVF21fHXpX1niBgk0aROov1LagYsOwV/xqKDKR/Q="}]},{"bom-ref":"pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11?package-id=96c68b6fcd966dff","type":"library","name":"github.com/evanphx/json-patch/v5","version":"v5.9.11","cpe":"cpe:2.3:a:evanphx:json-patch\\/v5:v5.9.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:evanphx:json_patch\\/v5:v5.9.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/8HVnzMq13/3x9TPvjG08wUGqBTmZBsCWzjTM0wiaDU="}]},{"bom-ref":"pkg:golang/github.com/fatih/color@v1.19.0?package-id=71360e4063543be3","type":"library","name":"github.com/fatih/color","version":"v1.19.0","cpe":"cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fatih/color@v1.19.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Zp3PiM21/9Ld6FzSKyL5c/BULoe/ONr9KlbYVOfG8+w="}]},{"bom-ref":"pkg:golang/github.com/fatih/color@v1.19.0?package-id=1edb54382d923020","type":"library","name":"github.com/fatih/color","version":"v1.19.0","cpe":"cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fatih/color@v1.19.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Zp3PiM21/9Ld6FzSKyL5c/BULoe/ONr9KlbYVOfG8+w="}]},{"bom-ref":"pkg:golang/github.com/fatih/structtag@v1.2.0?package-id=5bf535041c576d56","type":"library","name":"github.com/fatih/structtag","version":"v1.2.0","cpe":"cpe:2.3:a:fatih:structtag:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fatih/structtag@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/OdNE99OxoI/PqaW/SuSK9uxxT3f/tcSZgon/ssNSx4="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0?package-id=21924c216340421a","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.1.0","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0?package-id=8b80c0b224532067","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.1.0","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc="}]},{"bom-ref":"pkg:golang/github.com/firefart/nonamedreturns@v1.0.8?package-id=a13218b461137363","type":"library","name":"github.com/firefart/nonamedreturns","version":"v1.0.8","cpe":"cpe:2.3:a:firefart:nonamedreturns:v1.0.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/firefart/nonamedreturns@v1.0.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iB32Dl17zJl1zlVEj/WlUWgx0HiRyQ85OUw1WHa4/II="}]},{"bom-ref":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=db68a1c90338b848","type":"library","name":"github.com/fsnotify/fsnotify","version":"v1.10.1","cpe":"cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho="}]},{"bom-ref":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=69d156e101aa4070","type":"library","name":"github.com/fxamacker/cbor/v2","version":"v2.9.0","cpe":"cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="}]},{"bom-ref":"pkg:golang/github.com/fzipp/gocyclo@v0.6.0?package-id=efcc63caed825dd4","type":"library","name":"github.com/fzipp/gocyclo","version":"v0.6.0","cpe":"cpe:2.3:a:fzipp:gocyclo:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fzipp/gocyclo@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lsblElZG7d3ALtGMx9fmxeTKZaLLpU8mET09yN4BBLo="}]},{"bom-ref":"pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13?package-id=60e1091697c4331d","type":"library","name":"github.com/gabriel-vasile/mimetype","version":"v1.4.13","cpe":"cpe:2.3:a:gabriel-vasile:mimetype:v1.4.13:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:gabriel_vasile:mimetype:v1.4.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gabriel:mimetype:v1.4.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:46nXokslUBsAJE/wMsp5gtO500a4F3Nkz9Ufpk2AcUM="}]},{"bom-ref":"pkg:golang/github.com/ghostiam/protogetter@v1.0.1?package-id=1b151aadba511f28","type":"library","name":"github.com/ghostiam/protogetter","version":"v1.0.1","cpe":"cpe:2.3:a:ghostiam:protogetter:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ghostiam/protogetter@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:q4LLTx2KJHJpxrfO3BniUDWoFkoqWD/UlHhClBlUlLM="}]},{"bom-ref":"pkg:golang/github.com/github/smimesign@v0.2.0?package-id=649dfc48a2fe6eb5","type":"library","name":"github.com/github/smimesign","version":"v0.2.0","cpe":"cpe:2.3:a:github:smimesign:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/github/smimesign@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Hho4YcX5N1I9XNqhq0fNx0Sts8MhLonHd+HRXVGNjvk="}]},{"bom-ref":"pkg:golang/github.com/go-critic/go-critic@v0.15.0?package-id=90a455410a23e113","type":"library","name":"github.com/go-critic/go-critic","version":"v0.15.0","cpe":"cpe:2.3:a:go-critic:go-critic:v0.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-critic/go-critic@v0.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-critic:go_critic:v0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_critic:go-critic:v0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_critic:go_critic:v0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-critic:v0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_critic:v0.15.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MDUZIQKytIl+vPEc0Igw51m4uLTdi1ZGz2jatEqNs1g="}]},{"bom-ref":"pkg:golang/github.com/go-errors/errors@v1.5.1?package-id=29e62402733f875c","type":"library","name":"github.com/go-errors/errors","version":"v1.5.1","cpe":"cpe:2.3:a:go-errors:errors:v1.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-errors/errors@v1.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_errors:errors:v1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:errors:v1.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZwEMSLRCapFLflTpT7NKaAc7ukJ8ZPEjzlxt8rPN8bk="}]},{"bom-ref":"pkg:golang/github.com/go-fed/httpsig@v1.1.0?package-id=1fef288c54d69120","type":"library","name":"github.com/go-fed/httpsig","version":"v1.1.0","cpe":"cpe:2.3:a:go-fed:httpsig:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-fed/httpsig@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_fed:httpsig:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:httpsig:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9M+hb0jkEICD8/cAiNqEB66R87tTINszBRTjwjQzWcI="}]},{"bom-ref":"pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376?package-id=9363818d11b9e55a","type":"library","name":"github.com/go-git/gcfg","version":"v1.5.1-0.20230307220236-3a3c6141e376","cpe":"cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI="}]},{"bom-ref":"pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376?package-id=0e627b148576f484","type":"library","name":"github.com/go-git/gcfg","version":"v1.5.1-0.20230307220236-3a3c6141e376","cpe":"cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI="}]},{"bom-ref":"pkg:golang/github.com/go-git/go-billy/v5@v5.9.2?package-id=1b1784d962e6c9eb","type":"library","name":"github.com/go-git/go-billy/v5","version":"v5.9.2","cpe":"cpe:2.3:a:go-git:go-billy\\/v5:v5.9.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/go-billy/v5@v5.9.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-git:go_billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go-billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go_billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OXFSRyz4g20upsGDJgQG9Bak1l/ZEv8GHVYB52O71sE="}]},{"bom-ref":"pkg:golang/github.com/go-git/go-billy/v5@v5.9.2?package-id=62a54609b759be11","type":"library","name":"github.com/go-git/go-billy/v5","version":"v5.9.2","cpe":"cpe:2.3:a:go-git:go-billy\\/v5:v5.9.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/go-billy/v5@v5.9.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-git:go_billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go-billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go_billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_billy\\/v5:v5.9.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OXFSRyz4g20upsGDJgQG9Bak1l/ZEv8GHVYB52O71sE="}]},{"bom-ref":"pkg:golang/github.com/go-git/go-git/v5@v5.19.2?package-id=f72234d1e43d1306","type":"library","name":"github.com/go-git/go-git/v5","version":"v5.19.2","cpe":"cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/go-git/v5@v5.19.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wkfn7vOlUBu8ivAWKBWisTiwJK4jYHzTF8Ndv1LyGqY="}]},{"bom-ref":"pkg:golang/github.com/go-git/go-git/v5@v5.19.3?package-id=a8147a5775d40a75","type":"library","name":"github.com/go-git/go-git/v5","version":"v5.19.3","cpe":"cpe:2.3:a:go-git:go-git\\/v5:v5.19.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-git/go-git/v5@v5.19.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-git:go_git\\/v5:v5.19.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go-git\\/v5:v5.19.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_git:go_git\\/v5:v5.19.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-git\\/v5:v5.19.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_git\\/v5:v5.19.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qHttbZ+Am7wEjdTpR1XMQ4rl42FK9SIXzZ4o9x7s6M4="}]},{"bom-ref":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=41a8099e429d2e26","type":"library","name":"github.com/go-jose/go-jose/v4","version":"v4.1.4","cpe":"cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA="}]},{"bom-ref":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=3b69ec0b362124e0","type":"library","name":"github.com/go-jose/go-jose/v4","version":"v4.1.4","cpe":"cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.4?package-id=5d64ad5913a6841c","type":"library","name":"github.com/go-logr/logr","version":"v1.4.4","cpe":"cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.4?package-id=d58270ea2b34e48c","type":"library","name":"github.com/go-logr/logr","version":"v1.4.4","cpe":"cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ed7921825a53d3f4","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=1287e5dbe9653700","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/go-ole/go-ole@v1.3.0?package-id=6ead74d90d43108e","type":"library","name":"github.com/go-ole/go-ole","version":"v1.3.0","cpe":"cpe:2.3:a:go-ole:go-ole:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-ole/go-ole@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-ole:go_ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_ole:go-ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_ole:go_ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_ole:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Dt6ye7+vXGIKZ7Xtk4s6/xVdGDQynvom7xCFEdWr6uE="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/analysis@v0.25.5?package-id=f4c216628b128ac5","type":"library","name":"github.com/go-openapi/analysis","version":"v0.25.5","cpe":"cpe:2.3:a:go-openapi:analysis:v0.25.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/analysis@v0.25.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:analysis:v0.25.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:analysis:v0.25.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xPYEvTb90o1y0epuiOPAoG4QqahjP3cdp5xNlHeKJRI="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=c22a3c5495a9cd4d","type":"library","name":"github.com/go-openapi/errors","version":"v0.22.8","cpe":"cpe:2.3:a:go-openapi:errors:v0.22.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/errors@v0.22.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:errors:v0.22.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:errors:v0.22.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oP7sW7TWc3wFFjrzzj0nI83H2qMBkNjNfSd+XRejk/I="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=0221911ceb4d252e","type":"library","name":"github.com/go-openapi/jsonpointer","version":"v0.23.1","cpe":"cpe:2.3:a:go-openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonpointer:v0.23.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1HBACs7XIwR2RcmItfdSFlALhGbe6S92p0ry4d1GWg4="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonpointer@v1.0.0?package-id=5c561fdf7557f4d9","type":"library","name":"github.com/go-openapi/jsonpointer","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:jsonpointer:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonpointer@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonpointer:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonpointer:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kR9tHqY0CtZaOPVFm622dPVNhrvYpwr4uCxgL3h1H8s="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=4a88fb1e16697104","type":"library","name":"github.com/go-openapi/jsonreference","version":"v0.21.6","cpe":"cpe:2.3:a:go-openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonreference@v0.21.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonreference:v0.21.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NZ5nGfnaM1n4I43Xjm1e5/M2GjOwQwndQz22uhxwD+Y="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonreference@v1.0.0?package-id=d7b3ce4dc5dfb998","type":"library","name":"github.com/go-openapi/jsonreference","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:jsonreference:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonreference@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonreference:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonreference:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jlmTr6torcd1YgDQvSfNmRtKzYDO4FGBkrAdlAVWnpY="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/loads@v0.25.0?package-id=6176b7086555d1d4","type":"library","name":"github.com/go-openapi/loads","version":"v0.25.0","cpe":"cpe:2.3:a:go-openapi:loads:v0.25.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/loads@v0.25.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:loads:v0.25.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:loads:v0.25.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:74Bc2snfaVlsHzwdQj/3gsA9XJz3daXTJVs+4ZaK7jI="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/runtime@v0.33.0?package-id=1d60e054f8db2f64","type":"library","name":"github.com/go-openapi/runtime","version":"v0.33.0","cpe":"cpe:2.3:a:go-openapi:runtime:v0.33.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/runtime@v0.33.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime:v0.33.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime:v0.33.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Dd3Oj2ig+WH8ckK95l0Wn2V8a4bH/UqWPRZVT0vc8yU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=eb5c3b158efabbea","type":"library","name":"github.com/go-openapi/runtime/server-middleware","version":"v0.30.0","cpe":"cpe:2.3:a:go-openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8rPoJ/xv7JL8BsovaqboKETlpWBArVh8n+0L/GyePog="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/spec@v0.22.9?package-id=9c72b03cf453d9cb","type":"library","name":"github.com/go-openapi/spec","version":"v0.22.9","cpe":"cpe:2.3:a:go-openapi:spec:v0.22.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/spec@v0.22.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:spec:v0.22.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:spec:v0.22.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/vKIFDcGKp0ktZWGbym/tJEWbk6/XOEmAVU0kqKMH+w="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/strfmt@v0.27.0?package-id=afe8ab962b5a741e","type":"library","name":"github.com/go-openapi/strfmt","version":"v0.27.0","cpe":"cpe:2.3:a:go-openapi:strfmt:v0.27.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/strfmt@v0.27.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:strfmt:v0.27.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:strfmt:v0.27.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kbcTeaD9TXuXD0hhMXzuYa1sdTo6+dWGvwjW93E80IM="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=06f074cd3e93d9a2","type":"library","name":"github.com/go-openapi/swag","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:l5sVEyVpwj+DDYeZyo7wQI/Ebn/mKYIyGB/pFwAfGoQ="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag@v0.28.0?package-id=bdc84d743ce0cdf5","type":"library","name":"github.com/go-openapi/swag","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xkgbOSKj6DZziNpyqRRAOt3GJGtgjgsd2RoyT30VWuw="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=623266487228668d","type":"library","name":"github.com/go-openapi/swag/cmdutils","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f2iE1ijYaJ3nuu5PaEMx3zpEhzhZFgivCJObWEObLIQ="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.28.0?package-id=1dc556b0b6036000","type":"library","name":"github.com/go-openapi/swag/cmdutils","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/cmdutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7TOeNtkYru1SG8Y34tDh9WBbLsMqGnptuxWiHREPZ4Q="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=b72a3e09355d992b","type":"library","name":"github.com/go-openapi/swag/conv","version":"v0.27.0","cpe":"cpe:2.3:a:go-openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/conv@v0.27.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/conv:v0.27.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EKOH4feXrvdo8DbSsXSAqRT8fz1epEnS5O2IfXUOzE8="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/conv@v0.28.0?package-id=ec7b67ee7d074879","type":"library","name":"github.com/go-openapi/swag/conv","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/conv:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/conv@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/conv:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/conv:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GtqqbyFe7vR5Y7ehxG9W6/OvrSFdf1OLeTGp40TqxH8="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=1247050fee4d978e","type":"library","name":"github.com/go-openapi/swag/fileutils","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:K1XCM2CGhfNsc6YDt6v7Q5+1e59rftYWdcu/isZhvFw="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.28.0?package-id=16c9dd6a3ff9254a","type":"library","name":"github.com/go-openapi/swag/fileutils","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/fileutils:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/fileutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/fileutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Z04XWQD7R8Eq+7GnOrjovBxPPmZzsS4gt2H2GPGIViU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=51bb87c97ac543ac","type":"library","name":"github.com/go-openapi/swag/jsonname","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VReupaV6WxlAsCn0e4DUfgV6bPmINnPpyJDLqSfNPcE="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=9d09f0bcac2e9bca","type":"library","name":"github.com/go-openapi/swag/jsonutils","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2hdBfFkHg+7Wrz2VsCbeyR6hzkRDs7AztnMR2u84yOY="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.28.0?package-id=a253f5b8d8b2215a","type":"library","name":"github.com/go-openapi/swag/jsonutils","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/jsonutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YIch6FwO7RXzeAnbO8Tu7dWBZeUEH+4nA0HXltVTnv4="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=08823204f20b21bb","type":"library","name":"github.com/go-openapi/swag/loading","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/loading@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/loading:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:E9K4wqXeROlhjFQ13K9zMz6ojFGXIggGe+ad1odrK9w="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/loading@v0.28.0?package-id=2a2de0333d1ececd","type":"library","name":"github.com/go-openapi/swag/loading","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/loading:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/loading@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/loading:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/loading:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:td8QZdZC9MIYGGSnSPKShKiK22I2tU5UQvuUhIBPRLU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=7b43efe3ddfbd8c3","type":"library","name":"github.com/go-openapi/swag/mangling","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gpYI4WuPKFJJVjV5cDLGlDVJhFIxYjQc7yN5eEb4CqM="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/mangling@v0.28.0?package-id=5b68c913b0de3a5b","type":"library","name":"github.com/go-openapi/swag/mangling","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/mangling:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/mangling@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/mangling:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/mangling:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pH8eyeNO9SLYsTMWJrurnNfKmDa28XrlA+HePVD53VM="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=91b9e060f6ed2a2e","type":"library","name":"github.com/go-openapi/swag/netutils","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BNctoc39WTAUMxyAs355fExOPzMZtPbZ0ZZ1Am2FR5M="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/netutils@v0.28.0?package-id=925623f6cc28ba53","type":"library","name":"github.com/go-openapi/swag/netutils","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/netutils:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/netutils@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/netutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/netutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YXN6TALEi2pzts8/8GNm6T61HTAZsieukGZidap989k="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/pools@v0.28.0?package-id=266ae62a3c1740bd","type":"library","name":"github.com/go-openapi/swag/pools","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/pools:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/pools@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/pools:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/pools:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HPMZWSAfce3rdVTFcjFiCIBtDg9h4x2QlRrHipwhxeU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=4b69eb9ac3ad6ec3","type":"library","name":"github.com/go-openapi/swag/stringutils","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f88uYyTso7TnHrKM/bUBsQ5e2wKf37cpgo6pvbzd9yU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.28.0?package-id=94fbb6020fab7fad","type":"library","name":"github.com/go-openapi/swag/stringutils","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/stringutils:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/stringutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/stringutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ixsc9iYgDPubHL/8nSkbnryEHpD2VRlBMLKpQyPXcDU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=7db133785ecf414a","type":"library","name":"github.com/go-openapi/swag/typeutils","version":"v0.27.0","cpe":"cpe:2.3:a:go-openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aCf4MSGo8NLwZP8Q6t32DWLJSvl/WwNqgmEG+xJ6v2o="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.28.0?package-id=34d25e7d815baa63","type":"library","name":"github.com/go-openapi/swag/typeutils","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/typeutils:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/typeutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/typeutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nRBKSBXjDgf01VDPB3fWeD9nQuhCOVeIYAkUx2tbkyY="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=e9e753776a8e96bc","type":"library","name":"github.com/go-openapi/swag/yamlutils","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0TSLK+lXs9vfIhAWzBeI/lOzEnIoot6WTCO1aAeWFTk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.28.0?package-id=75c307bc01522a56","type":"library","name":"github.com/go-openapi/swag/yamlutils","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/yamlutils:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TV3JXH6DS46KUroDtMLAYHGkdWf5VDq3wVWFirmzROY="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/testify/enable/yaml/v2@v2.8.0?package-id=919bf7d49ded1213","type":"library","name":"github.com/go-openapi/testify/enable/yaml/v2","version":"v2.8.0","cpe":"cpe:2.3:a:go-openapi:testify\\/enable\\/yaml\\/v2:v2.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/testify/enable/yaml/v2@v2.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:testify\\/enable\\/yaml\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:testify\\/enable\\/yaml\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dvOQNZ2ovOdogn902NYq7i6jUI9Dma4qyjTXABY5YTY="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/testify/v2@v2.8.0?package-id=2284ceb715fbb86b","type":"library","name":"github.com/go-openapi/testify/v2","version":"v2.8.0","cpe":"cpe:2.3:a:go-openapi:testify\\/v2:v2.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/testify/v2@v2.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:testify\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:testify\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:19QDx5b57p8KjO2E4sgs/woL4Akp+FGLRlVm2xn0Rho="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/validate@v0.26.1?package-id=12f25a4514a49d44","type":"library","name":"github.com/go-openapi/validate","version":"v0.26.1","cpe":"cpe:2.3:a:go-openapi:validate:v0.26.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/validate@v0.26.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:validate:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:validate:v0.26.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pZSbvtRO8G2R2FpWTYRn3w8LrsNwbtaVhP2dWiBa0Us="}]},{"bom-ref":"pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha?package-id=ef53ed4c6fbe2f06","type":"library","name":"github.com/go-restruct/restruct","version":"v1.2.0-alpha","cpe":"cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2Lp474S/9660+SJjpVxoKuWX09JsXHSrdV7Nv3/gkvc="}]},{"bom-ref":"pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha?package-id=a3fd8541f61c9cc3","type":"library","name":"github.com/go-restruct/restruct","version":"v1.2.0-alpha","cpe":"cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2Lp474S/9660+SJjpVxoKuWX09JsXHSrdV7Nv3/gkvc="}]},{"bom-ref":"pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0?package-id=5722741857d8df35","type":"library","name":"github.com/go-task/slim-sprig/v3","version":"v3.0.0","cpe":"cpe:2.3:a:go-task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI="}]},{"bom-ref":"pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0?package-id=fe340d52faebf31a","type":"library","name":"github.com/go-task/slim-sprig/v3","version":"v3.0.0","cpe":"cpe:2.3:a:go-task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI="}]},{"bom-ref":"pkg:golang/github.com/go-toolsmith/astcast@v1.1.0?package-id=1a3c67f63bdde660","type":"library","name":"github.com/go-toolsmith/astcast","version":"v1.1.0","cpe":"cpe:2.3:a:go-toolsmith:astcast:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-toolsmith/astcast@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_toolsmith:astcast:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:astcast:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+JN9xZV1A+Re+95pgnMgDboWNVnIMMQXwfBwLRPgSC8="}]},{"bom-ref":"pkg:golang/github.com/go-toolsmith/astcopy@v1.1.0?package-id=0f14c4464c0ae128","type":"library","name":"github.com/go-toolsmith/astcopy","version":"v1.1.0","cpe":"cpe:2.3:a:go-toolsmith:astcopy:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-toolsmith/astcopy@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_toolsmith:astcopy:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:astcopy:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YGwBN0WM+ekI/6SS6+52zLDEf8Yvp3n2seZITCUBt5s="}]},{"bom-ref":"pkg:golang/github.com/go-toolsmith/astequal@v1.2.0?package-id=dd019a5cc262c33c","type":"library","name":"github.com/go-toolsmith/astequal","version":"v1.2.0","cpe":"cpe:2.3:a:go-toolsmith:astequal:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-toolsmith/astequal@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_toolsmith:astequal:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:astequal:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3Fs3CYZ1k9Vo4FzFhwwewC3CHISHDnVUPC4x0bI2+Cw="}]},{"bom-ref":"pkg:golang/github.com/go-toolsmith/astfmt@v1.1.0?package-id=14d938011124afbe","type":"library","name":"github.com/go-toolsmith/astfmt","version":"v1.1.0","cpe":"cpe:2.3:a:go-toolsmith:astfmt:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-toolsmith/astfmt@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_toolsmith:astfmt:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:astfmt:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iJVPDPp6/7AaeLJEruMsBUlOYCmvg0MoCfJprsOmcco="}]},{"bom-ref":"pkg:golang/github.com/go-toolsmith/astp@v1.1.0?package-id=94c115cc6a39bea6","type":"library","name":"github.com/go-toolsmith/astp","version":"v1.1.0","cpe":"cpe:2.3:a:go-toolsmith:astp:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-toolsmith/astp@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_toolsmith:astp:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:astp:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dXPuCl6u2llURjdPLLDxJeZInAeZ0/eZwFJmqZMnpQA="}]},{"bom-ref":"pkg:golang/github.com/go-toolsmith/strparse@v1.1.0?package-id=35db6fff7638a82b","type":"library","name":"github.com/go-toolsmith/strparse","version":"v1.1.0","cpe":"cpe:2.3:a:go-toolsmith:strparse:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-toolsmith/strparse@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_toolsmith:strparse:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:strparse:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GAioeZUK9TGxnLS+qfdqNbA4z0SSm5zVNtCQiyP2Bvw="}]},{"bom-ref":"pkg:golang/github.com/go-toolsmith/typep@v1.1.0?package-id=721074066f480413","type":"library","name":"github.com/go-toolsmith/typep","version":"v1.1.0","cpe":"cpe:2.3:a:go-toolsmith:typep:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-toolsmith/typep@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_toolsmith:typep:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:typep:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fIRYDyF+JywLfqzyhdiHzRop/GQDxxNhLGQ6gFUNHus="}]},{"bom-ref":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=69e67edfc2286e18","type":"library","name":"github.com/go-viper/mapstructure/v2","version":"v2.5.0","cpe":"cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="}]},{"bom-ref":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=9623878e40ae2ee0","type":"library","name":"github.com/go-viper/mapstructure/v2","version":"v2.5.0","cpe":"cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="}]},{"bom-ref":"pkg:golang/github.com/go-xmlfmt/xmlfmt@v1.1.3?package-id=7c9980765c9464cb","type":"library","name":"github.com/go-xmlfmt/xmlfmt","version":"v1.1.3","cpe":"cpe:2.3:a:go-xmlfmt:xmlfmt:v1.1.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-xmlfmt/xmlfmt@v1.1.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_xmlfmt:xmlfmt:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:xmlfmt:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:t8Ey3Uy7jDSEisW2K3somuMKIpzktkWptA0iFCnRUWY="}]},{"bom-ref":"pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=7e6951e683212209","type":"library","name":"github.com/gobwas/glob","version":"v0.2.3","cpe":"cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gobwas/glob@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="}]},{"bom-ref":"pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=e4992ff71b0c8ddd","type":"library","name":"github.com/gobwas/glob","version":"v0.2.3","cpe":"cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gobwas/glob@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="}]},{"bom-ref":"pkg:golang/github.com/godoc-lint/godoc-lint@v0.11.4?package-id=3df09a7393b0eae1","type":"library","name":"github.com/godoc-lint/godoc-lint","version":"v0.11.4","cpe":"cpe:2.3:a:godoc-lint:godoc-lint:v0.11.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/godoc-lint/godoc-lint@v0.11.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:godoc-lint:godoc_lint:v0.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:godoc_lint:godoc-lint:v0.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:godoc_lint:godoc_lint:v0.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:godoc:godoc-lint:v0.11.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:godoc:godoc_lint:v0.11.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N9zUYVJ/OkznBbrBsU/zODvua64EUplMBLQWStO3+1M="}]},{"bom-ref":"pkg:golang/github.com/gofrs/flock@v0.13.1?package-id=1759badd3cbf85b6","type":"library","name":"github.com/gofrs/flock","version":"v0.13.1","cpe":"cpe:2.3:a:gofrs:flock:v0.13.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gofrs/flock@v0.13.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jjREztyBeSKBZYAC+mgc1laB+xsgy4kYMf3FbKF2UBo="}]},{"bom-ref":"pkg:golang/github.com/gogo/protobuf@v1.3.2?package-id=c69af6e95dbe309b","type":"library","name":"github.com/gogo/protobuf","version":"v1.3.2","cpe":"cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gogo/protobuf@v1.3.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q="}]},{"bom-ref":"pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=175e8f8770db836d","type":"library","name":"github.com/golang-jwt/jwt/v4","version":"v4.5.2","cpe":"cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI="}]},{"bom-ref":"pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=d46846fc7c560c37","type":"library","name":"github.com/golang-jwt/jwt/v4","version":"v4.5.2","cpe":"cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI="}]},{"bom-ref":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=618d69b4119b2408","type":"library","name":"github.com/golang-jwt/jwt/v5","version":"v5.3.1","cpe":"cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY="}]},{"bom-ref":"pkg:golang/github.com/golang/glog@v1.2.5?package-id=4512c48e5450aa36","type":"library","name":"github.com/golang/glog","version":"v1.2.5","cpe":"cpe:2.3:a:golang:glog:v1.2.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang/glog@v1.2.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DrW6hGnjIhtvhOIiAKT6Psh/Kd/ldepEa81DKeiRJ5I="}]},{"bom-ref":"pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8?package-id=bd00e3e04a73c5bc","type":"library","name":"github.com/golang/groupcache","version":"v0.0.0-20241129210726-2c02b8208cf8","cpe":"cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ="}]},{"bom-ref":"pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8?package-id=c64d24a02522475e","type":"library","name":"github.com/golang/groupcache","version":"v0.0.0-20241129210726-2c02b8208cf8","cpe":"cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ="}]},{"bom-ref":"pkg:golang/github.com/golangci/asciicheck@v0.5.0?package-id=731b3df66f67879e","type":"library","name":"github.com/golangci/asciicheck","version":"v0.5.0","cpe":"cpe:2.3:a:golangci:asciicheck:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/asciicheck@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jczN/BorERZwK8oiFBOGvlGPknhvq0bjnysTj4nUfo0="}]},{"bom-ref":"pkg:golang/github.com/golangci/canonicalheader@v0.0.0-20260827115959-a25c71c521f6?package-id=adbccf1d2a90d087","type":"library","name":"github.com/golangci/canonicalheader","version":"v0.0.0-20260827115959-a25c71c521f6","cpe":"cpe:2.3:a:golangci:canonicalheader:v0.0.0-20260827115959-a25c71c521f6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/canonicalheader@v0.0.0-20260827115959-a25c71c521f6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fVLolA3dG6s0brGetsiDAtcnpMSwVa2LqXJEw/9RJG4="}]},{"bom-ref":"pkg:golang/github.com/golangci/dupl@v0.0.0-20260401084720-c99c5cf5c202?package-id=a66e8a08e5323ff7","type":"library","name":"github.com/golangci/dupl","version":"v0.0.0-20260401084720-c99c5cf5c202","cpe":"cpe:2.3:a:golangci:dupl:v0.0.0-20260401084720-c99c5cf5c202:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/dupl@v0.0.0-20260401084720-c99c5cf5c202","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CbTB8KpqnViI6lIXxp03Oclc4VFHi3K4BWC1TacsZ+A="}]},{"bom-ref":"pkg:golang/github.com/golangci/go-printf-func-name@v0.1.1?package-id=400fa485396f2d35","type":"library","name":"github.com/golangci/go-printf-func-name","version":"v0.1.1","cpe":"cpe:2.3:a:golangci:go-printf-func-name:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/go-printf-func-name@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci:go_printf_func_name:v0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hIYTFJqAGp1iwoIfsNTpoq1xZAarogrvjO9AfiW3B4U="}]},{"bom-ref":"pkg:golang/github.com/golangci/gofmt@v0.0.0-20260820135601-e84e05053792?package-id=e0293ce64ccbb0f8","type":"library","name":"github.com/golangci/gofmt","version":"v0.0.0-20260820135601-e84e05053792","cpe":"cpe:2.3:a:golangci:gofmt:v0.0.0-20260820135601-e84e05053792:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/gofmt@v0.0.0-20260820135601-e84e05053792","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WL8YKrt3UbOBqSRU7GpP5BTtQTMWtVtj+mfPijgZeIg="}]},{"bom-ref":"pkg:golang/github.com/golangci/golangci-lint/v2@v2.14.0?package-id=84611f7c0bd60e4c","type":"library","name":"github.com/golangci/golangci-lint/v2","version":"v2.14.0","cpe":"cpe:2.3:a:golangci:golangci-lint\\/v2:v2.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/golangci-lint/v2@v2.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci:golangci_lint\\/v2:v2.14.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ot8QffRa4LzAAEgtvNYrVs9esxQ7xoTwoAv6uhp4ngA="}]},{"bom-ref":"pkg:golang/github.com/golangci/golines@v0.15.0?package-id=1c6edbc81c82d007","type":"library","name":"github.com/golangci/golines","version":"v0.15.0","cpe":"cpe:2.3:a:golangci:golines:v0.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/golines@v0.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Qnph25g8Y1c5fdo1X7GaRDGgnMHgnxh4Gk4VfPTtRx0="}]},{"bom-ref":"pkg:golang/github.com/golangci/misspell@v0.8.0?package-id=a731311686652a0d","type":"library","name":"github.com/golangci/misspell","version":"v0.8.0","cpe":"cpe:2.3:a:golangci:misspell:v0.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/misspell@v0.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qvxQhiE2/5z+BVRo1kwYA8yGz+lOlu5Jfvtx2b04Jbg="}]},{"bom-ref":"pkg:golang/github.com/golangci/plugin-module-register@v0.1.2?package-id=c6d949e4e3d7e9e7","type":"library","name":"github.com/golangci/plugin-module-register","version":"v0.1.2","cpe":"cpe:2.3:a:golangci:plugin-module-register:v0.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/plugin-module-register@v0.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci:plugin_module_register:v0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:e5WM6PO6NIAEcij3B053CohVp3HIYbzSuP53UAYgOpg="}]},{"bom-ref":"pkg:golang/github.com/golangci/revgrep@v0.8.0?package-id=a3673894224e3bb1","type":"library","name":"github.com/golangci/revgrep","version":"v0.8.0","cpe":"cpe:2.3:a:golangci:revgrep:v0.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/revgrep@v0.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EZBctwbVd0aMeRnNUsFogoyayvKHyxlV3CdUA46FX2s="}]},{"bom-ref":"pkg:golang/github.com/golangci/rowserrcheck@v0.0.0-20260419091836-c5f79b8a11ba?package-id=10be07e2b1f645f5","type":"library","name":"github.com/golangci/rowserrcheck","version":"v0.0.0-20260419091836-c5f79b8a11ba","cpe":"cpe:2.3:a:golangci:rowserrcheck:v0.0.0-20260419091836-c5f79b8a11ba:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/rowserrcheck@v0.0.0-20260419091836-c5f79b8a11ba","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lqtcnSMDuuJdu/LrKWi5RJzpSNLOJXYe/nzQutTI5kg="}]},{"bom-ref":"pkg:golang/github.com/golangci/swaggoswag@v0.0.0-20250504205917-77f2aca3143e?package-id=a2e1b2d4801dd7fb","type":"library","name":"github.com/golangci/swaggoswag","version":"v0.0.0-20250504205917-77f2aca3143e","cpe":"cpe:2.3:a:golangci:swaggoswag:v0.0.0-20250504205917-77f2aca3143e:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/swaggoswag@v0.0.0-20250504205917-77f2aca3143e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ai0EfmVYE2bRA5htgAG9r7s3tHsfjIhN98WshBTJ9jM="}]},{"bom-ref":"pkg:golang/github.com/golangci/unconvert@v0.0.0-20250410112200-a129a6e6413e?package-id=e0b3e9764d800b57","type":"library","name":"github.com/golangci/unconvert","version":"v0.0.0-20250410112200-a129a6e6413e","cpe":"cpe:2.3:a:golangci:unconvert:v0.0.0-20250410112200-a129a6e6413e:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golangci/unconvert@v0.0.0-20250410112200-a129a6e6413e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gD6P7NEo7Eqtt0ssnqSJNNndxe69DOQ24A5h7+i3KpM="}]},{"bom-ref":"pkg:golang/github.com/google/addlicense@v1.2.0?package-id=17cce9b548e5b8c5","type":"library","name":"github.com/google/addlicense","version":"v1.2.0","cpe":"cpe:2.3:a:google:addlicense:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/addlicense@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W+DP4A639JGkcwBGMDvjSurZHvaq2FN0pP7se9czsKA="}]},{"bom-ref":"pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=d14e1b10acca6c5c","type":"library","name":"github.com/google/certificate-transparency-go","version":"v1.3.3","cpe":"cpe:2.3:a:google:certificate-transparency-go:v1.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/certificate-transparency-go@v1.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:certificate_transparency_go:v1.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hq/rSxztSkXN2tx/3jQqF6Xc0O565UQPdHrOWvZwybo="}]},{"bom-ref":"pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=879c470a8b8bf38a","type":"library","name":"github.com/google/gnostic-models","version":"v0.7.0","cpe":"cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/gnostic-models@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=473d0adb4b419c7e","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=be9b291eda8d5538","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="}]},{"bom-ref":"pkg:golang/github.com/google/go-containerregistry@v0.22.1?package-id=a0b833e866fd1de5","type":"library","name":"github.com/google/go-containerregistry","version":"v0.22.1","cpe":"cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-containerregistry@v0.22.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RZuuSYhTvlDvtsK+NkutoCZ//C0X2ebLK8X8l3ULs84="}]},{"bom-ref":"pkg:golang/github.com/google/go-containerregistry@v0.22.1?package-id=e4081c52405de652","type":"library","name":"github.com/google/go-containerregistry","version":"v0.22.1","cpe":"cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-containerregistry@v0.22.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RZuuSYhTvlDvtsK+NkutoCZ//C0X2ebLK8X8l3ULs84="}]},{"bom-ref":"pkg:golang/github.com/google/go-github/v82@v82.0.0?package-id=0ca37ae7b1a00f8f","type":"library","name":"github.com/google/go-github/v82","version":"v82.0.0","cpe":"cpe:2.3:a:google:go-github\\/v82:v82.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-github/v82@v82.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_github\\/v82:v82.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OH09ESON2QwKCUVMYmMcVu1IFKFoaZHwqYaUtr/MVfk="}]},{"bom-ref":"pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=a5e6dda16e96720b","type":"library","name":"github.com/google/go-github/v88","version":"v88.0.0","cpe":"cpe:2.3:a:google:go-github\\/v88:v88.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-github/v88@v88.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_github\\/v88:v88.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dZA9IKkPK1eXZj4ypngnpRj5FwdpTv4whix2PrQMP7M="}]},{"bom-ref":"pkg:golang/github.com/google/go-github/v92@v92.0.0?package-id=827bb0fc6741b423","type":"library","name":"github.com/google/go-github/v92","version":"v92.0.0","cpe":"cpe:2.3:a:google:go-github\\/v92:v92.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-github/v92@v92.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_github\\/v92:v92.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4vW4RVffwIvoEfIA4RX09mRSB47qQX557/2+HgeWRRg="}]},{"bom-ref":"pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=b574b3fe7741eeff","type":"library","name":"github.com/google/go-querystring","version":"v1.2.0","cpe":"cpe:2.3:a:google:go-querystring:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-querystring@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_querystring:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0="}]},{"bom-ref":"pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=ce8b91135fd3f88d","type":"library","name":"github.com/google/go-querystring","version":"v1.2.0","cpe":"cpe:2.3:a:google:go-querystring:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-querystring@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_querystring:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0="}]},{"bom-ref":"pkg:golang/github.com/google/ko@v0.19.1?package-id=9094417633c80858","type":"library","name":"github.com/google/ko","version":"v0.19.1","cpe":"cpe:2.3:a:google:ko:v0.19.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/ko@v0.19.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FggFTOgqz3sCdac8DvF2uU7FjphG3zNvZ9QMLOuVhZ8="}]},{"bom-ref":"pkg:golang/github.com/google/osv-scalibr@v0.5.3?package-id=eb0599a735a9c431","type":"library","name":"github.com/google/osv-scalibr","version":"v0.5.3","cpe":"cpe:2.3:a:google:osv-scalibr:v0.5.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/osv-scalibr@v0.5.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:osv_scalibr:v0.5.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LcXnN8MLhrQF9O4jrFP2mv3Ae1afO516t+3QdPpbhqM="}]},{"bom-ref":"pkg:golang/github.com/google/osv-scanner/v2@v2.5.1?package-id=bf4925df58ece27c","type":"library","name":"github.com/google/osv-scanner/v2","version":"v2.5.1","cpe":"cpe:2.3:a:google:osv-scanner\\/v2:v2.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/osv-scanner/v2@v2.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:osv_scanner\\/v2:v2.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gagd2nRWMouRjRS1oHuhuB8+jHnV/Ifd/rtDu89w/0E="}]},{"bom-ref":"pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3?package-id=0f80dceb464406c3","type":"library","name":"github.com/google/pprof","version":"v0.0.0-20260802141513-ef3492d7dac3","cpe":"cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LMLX+LgTNWpfvCBdFebv6EsYotImrt/Ppc5cXIriCSo="}]},{"bom-ref":"pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3?package-id=d15d17367d8293fa","type":"library","name":"github.com/google/pprof","version":"v0.0.0-20260802141513-ef3492d7dac3","cpe":"cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LMLX+LgTNWpfvCBdFebv6EsYotImrt/Ppc5cXIriCSo="}]},{"bom-ref":"pkg:golang/github.com/google/rpmpack@v0.7.1?package-id=19425ce508411674","type":"library","name":"github.com/google/rpmpack","version":"v0.7.1","cpe":"cpe:2.3:a:google:rpmpack:v0.7.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/rpmpack@v0.7.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YdWh1IpzOjBz60Wvdw0TU0A5NWP+JTVHA5poDqwMO2o="}]},{"bom-ref":"pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=ac7cd253b4e1753e","type":"library","name":"github.com/google/s2a-go","version":"v0.1.9","cpe":"cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/s2a-go@v0.1.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0="}]},{"bom-ref":"pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=a0fdaa7b1561a5e8","type":"library","name":"github.com/google/s2a-go","version":"v0.1.9","cpe":"cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/s2a-go@v0.1.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=4a9f97460f930629","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/google/wire@v0.7.0?package-id=f8e6d4af0490d34d","type":"library","name":"github.com/google/wire","version":"v0.7.0","cpe":"cpe:2.3:a:google:wire:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/wire@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JxUKI6+CVBgCO2WToKy/nQk0sS+amI9z9EjVmdaocj4="}]},{"bom-ref":"pkg:golang/github.com/google/wire@v0.7.0?package-id=025043cbbf00abea","type":"library","name":"github.com/google/wire","version":"v0.7.0","cpe":"cpe:2.3:a:google:wire:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/wire@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JxUKI6+CVBgCO2WToKy/nQk0sS+amI9z9EjVmdaocj4="}]},{"bom-ref":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.17?package-id=48dddab5d81a53f1","type":"library","name":"github.com/googleapis/enterprise-certificate-proxy","version":"v0.3.17","cpe":"cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.17:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.17","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.17:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:73NfMHdiqo9JFU9+7a5ExpVa10/R29pXfZIaW559nrg="}]},{"bom-ref":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20?package-id=e396afd2c4faa8ea","type":"library","name":"github.com/googleapis/enterprise-certificate-proxy","version":"v0.3.20","cpe":"cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:t/xL64VUoN69MuMRQuJETqYGOw4Z9mSRJK9epIEtwFk="}]},{"bom-ref":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2?package-id=2946d2fad4a39755","type":"library","name":"github.com/googleapis/gax-go/v2","version":"v2.26.2","cpe":"cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ydkmNXxj7bEmmeK5AihkKnWxyOyBR9TDebvp5L5izk8="}]},{"bom-ref":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2?package-id=d054f13b2404427f","type":"library","name":"github.com/googleapis/gax-go/v2","version":"v2.26.2","cpe":"cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ydkmNXxj7bEmmeK5AihkKnWxyOyBR9TDebvp5L5izk8="}]},{"bom-ref":"pkg:golang/github.com/gordonklaus/ineffassign@v0.2.0?package-id=d7e7d65cc2d45e2c","type":"library","name":"github.com/gordonklaus/ineffassign","version":"v0.2.0","cpe":"cpe:2.3:a:gordonklaus:ineffassign:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gordonklaus/ineffassign@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Uths4KnmwxNJNzq87fwQQDDnbNb7De00VOk9Nu0TySs="}]},{"bom-ref":"pkg:golang/github.com/goreleaser/chglog@v0.7.4?package-id=24a1c7d3dca91081","type":"library","name":"github.com/goreleaser/chglog","version":"v0.7.4","cpe":"cpe:2.3:a:goreleaser:chglog:v0.7.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goreleaser/chglog@v0.7.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3pnNt/XCrUcAOq+KC91Azlgp5CRv4GHo1nl8Aws7OzI="}]},{"bom-ref":"pkg:golang/github.com/goreleaser/fileglob@v1.4.1?package-id=75459842b5ae2516","type":"library","name":"github.com/goreleaser/fileglob","version":"v1.4.1","cpe":"cpe:2.3:a:goreleaser:fileglob:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goreleaser/fileglob@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4/SXlDDzfKCorA28/S3aXd/6D8VHDZjGXGIttVSjxhU="}]},{"bom-ref":"pkg:golang/github.com/goreleaser/go-shellwords@v1.0.13?package-id=bdd6e632e518eb28","type":"library","name":"github.com/goreleaser/go-shellwords","version":"v1.0.13","cpe":"cpe:2.3:a:goreleaser:go-shellwords:v1.0.13:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goreleaser/go-shellwords@v1.0.13","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser:go_shellwords:v1.0.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ivvhC/RvUyud74c0urb1ZGYWPYGibY5QiFzcwHCege4="}]},{"bom-ref":"pkg:golang/github.com/goreleaser/goreleaser/v2@v2.18.3?package-id=f7be13d4df5b20b7","type":"library","name":"github.com/goreleaser/goreleaser/v2","version":"v2.18.3","cpe":"cpe:2.3:a:goreleaser:goreleaser\\/v2:v2.18.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goreleaser/goreleaser/v2@v2.18.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QZyKdRAHzffgURxr0cODOjAE0Ywma7p43/fbwCi0mjs="}]},{"bom-ref":"pkg:golang/github.com/goreleaser/nfpm/v2@v2.47.0?package-id=e63a8c002c4868d5","type":"library","name":"github.com/goreleaser/nfpm/v2","version":"v2.47.0","cpe":"cpe:2.3:a:goreleaser:nfpm\\/v2:v2.47.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goreleaser/nfpm/v2@v2.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0bioJAjWaMPntgDqynP4ze0Wt4zYqYSFJ5/BBy9XIGI="}]},{"bom-ref":"pkg:golang/github.com/goreleaser/quill@v0.0.0-20260630015114-8310f3e9a321?package-id=9bbcd4d10efb7c99","type":"library","name":"github.com/goreleaser/quill","version":"v0.0.0-20260630015114-8310f3e9a321","cpe":"cpe:2.3:a:goreleaser:quill:v0.0.0-20260630015114-8310f3e9a321:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goreleaser/quill@v0.0.0-20260630015114-8310f3e9a321","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/O7X5L3FuwXHT055Aar5b53A3pwUtL4z/1W8EqicJHQ="}]},{"bom-ref":"pkg:golang/github.com/gorilla/websocket@v1.5.3?package-id=c76482dee4d5435e","type":"library","name":"github.com/gorilla/websocket","version":"v1.5.3","cpe":"cpe:2.3:a:gorilla:websocket:v1.5.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gorilla/websocket@v1.5.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg="}]},{"bom-ref":"pkg:golang/github.com/gostaticanalysis/analysisutil@v0.7.1?package-id=2a7045c95f32a1ea","type":"library","name":"github.com/gostaticanalysis/analysisutil","version":"v0.7.1","cpe":"cpe:2.3:a:gostaticanalysis:analysisutil:v0.7.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gostaticanalysis/analysisutil@v0.7.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZMCjoue3DtDWQ5WyU16YbjbQEQ3VuzwxALrpYd+HeKk="}]},{"bom-ref":"pkg:golang/github.com/gostaticanalysis/comment@v1.5.0?package-id=6c0d0a908c0d69af","type":"library","name":"github.com/gostaticanalysis/comment","version":"v1.5.0","cpe":"cpe:2.3:a:gostaticanalysis:comment:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gostaticanalysis/comment@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:X82FLl+TswsUMpMh17srGRuKaaXprTaytmEpgnKIDu8="}]},{"bom-ref":"pkg:golang/github.com/gostaticanalysis/forcetypeassert@v0.2.0?package-id=1b7abc085ac89205","type":"library","name":"github.com/gostaticanalysis/forcetypeassert","version":"v0.2.0","cpe":"cpe:2.3:a:gostaticanalysis:forcetypeassert:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gostaticanalysis/forcetypeassert@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uSnWrrUEYDr86OCxWa4/Tp2jeYDlogZiZHzGkWFefTk="}]},{"bom-ref":"pkg:golang/github.com/gostaticanalysis/nilerr@v0.1.2?package-id=9f6c2f0d89801695","type":"library","name":"github.com/gostaticanalysis/nilerr","version":"v0.1.2","cpe":"cpe:2.3:a:gostaticanalysis:nilerr:v0.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gostaticanalysis/nilerr@v0.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S6nk8a9N8g062nsx63kUkF6AzbHGw7zzyHMcpu52xQU="}]},{"bom-ref":"pkg:golang/github.com/grafeas/kritis@v0.2.3-0.20210120183821-faeba81c520c?package-id=9bfed3d0c4fe010f","type":"library","name":"github.com/grafeas/kritis","version":"v0.2.3-0.20210120183821-faeba81c520c","cpe":"cpe:2.3:a:grafeas:kritis:v0.2.3-0.20210120183821-faeba81c520c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/grafeas/kritis@v0.2.3-0.20210120183821-faeba81c520c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VZq2x/CpmG4wyKTBeMSIOT0OJ9Xhq15mLIUhcmAla8w="}]},{"bom-ref":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.30.0?package-id=edfa137f6ec1840b","type":"library","name":"github.com/grpc-ecosystem/grpc-gateway/v2","version":"v2.30.0","cpe":"cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.30.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/Tnpcb2E0Pz/tN9s3bfEY2Q8ePCEX9iuS+cneUwncnw="}]},{"bom-ref":"pkg:golang/github.com/h2non/filetype@v1.1.3?package-id=1a8b793729a12763","type":"library","name":"github.com/h2non/filetype","version":"v1.1.3","cpe":"cpe:2.3:a:h2non:filetype:v1.1.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/h2non/filetype@v1.1.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FKkx9QbD7HR/zjK1Ia5XiBsq9zdLi5Kf3zGyFTAFkGg="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=34e8abdc19dbdf3a","type":"library","name":"github.com/hashicorp/errwrap","version":"v1.1.0","cpe":"cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=912d0981a4a0e36c","type":"library","name":"github.com/hashicorp/go-cleanhttp","version":"v0.5.2","cpe":"cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=fd450b60af126646","type":"library","name":"github.com/hashicorp/go-cleanhttp","version":"v0.5.2","cpe":"cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-immutable-radix/v2@v2.1.0?package-id=208a95c930807282","type":"library","name":"github.com/hashicorp/go-immutable-radix/v2","version":"v2.1.0","cpe":"cpe:2.3:a:hashicorp:go-immutable-radix\\/v2:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-immutable-radix/v2@v2.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_immutable_radix\\/v2:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CUW5RYIcysz+D3B+l1mDeXrQ7fUvGGCwJfdASSzbrfo="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=30c4964e2f947170","type":"library","name":"github.com/hashicorp/go-multierror","version":"v1.1.1","cpe":"cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=82e2538e01314882","type":"library","name":"github.com/hashicorp/go-retryablehttp","version":"v0.7.8","cpe":"cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=bae93ee3fe631dab","type":"library","name":"github.com/hashicorp/go-retryablehttp","version":"v0.7.8","cpe":"cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-version@v1.9.0?package-id=12b2a96e9e756abd","type":"library","name":"github.com/hashicorp/go-version","version":"v1.9.0","cpe":"cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-version@v1.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CeOIz6k+LoN3qX9Z0tyQrPtiB1DFYRPfCIBtaXPSCnA="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/golang-lru@v1.0.2?package-id=c103f18704dc7afe","type":"library","name":"github.com/hashicorp/golang-lru","version":"v1.0.2","cpe":"cpe:2.3:a:hashicorp:golang-lru:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/golang-lru@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:golang_lru:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dV3g9Z/unq5DpblPpw+Oqcv4dU/1omnb4Ok8iPY6p1c="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7?package-id=fc9eeceaf09cfe12","type":"library","name":"github.com/hashicorp/golang-lru/v2","version":"v2.0.7","cpe":"cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k="}]},{"bom-ref":"pkg:golang/github.com/hexops/gotextdiff@v1.0.3?package-id=db6f61e03666be7f","type":"library","name":"github.com/hexops/gotextdiff","version":"v1.0.3","cpe":"cpe:2.3:a:hexops:gotextdiff:v1.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hexops/gotextdiff@v1.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM="}]},{"bom-ref":"pkg:golang/github.com/hmarr/codeowners@v1.2.1?package-id=1c1d8c3590ab1794","type":"library","name":"github.com/hmarr/codeowners","version":"v1.2.1","cpe":"cpe:2.3:a:hmarr:codeowners:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hmarr/codeowners@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+9yndrwG0UVP1GkLBEQMSbSUNeLpbrbL924SRthA/9k="}]},{"bom-ref":"pkg:golang/github.com/huandu/xstrings@v1.5.0?package-id=09b7dad473d1e839","type":"library","name":"github.com/huandu/xstrings","version":"v1.5.0","cpe":"cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/huandu/xstrings@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI="}]},{"bom-ref":"pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20260724033716-83e58baca724?package-id=48b7c99b4d437e40","type":"library","name":"github.com/ianlancetaylor/demangle","version":"v0.0.0-20260724033716-83e58baca724","cpe":"cpe:2.3:a:ianlancetaylor:demangle:v0.0.0-20260724033716-83e58baca724:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20260724033716-83e58baca724","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QixF8Mcbe87ET7pK/fPbBJ9GXFddmEY8yYMepzMzo30="}]},{"bom-ref":"pkg:golang/github.com/icholy/digest@v1.2.0?package-id=d33af7054bd74273","type":"library","name":"github.com/icholy/digest","version":"v1.2.0","cpe":"cpe:2.3:a:icholy:digest:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/icholy/digest@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oTbG4IsNOmidJ+421ehG7Ty93yt1yotq13kFMG569yw="}]},{"bom-ref":"pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=b49317b38e020536","type":"library","name":"github.com/in-toto/attestation","version":"v1.2.0","cpe":"cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/in-toto/attestation@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aPRUZ3azbqD7yEBD5fP3TD8Dszf+YHo284SOcpahjQk="}]},{"bom-ref":"pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=0e75feabaaf02013","type":"library","name":"github.com/in-toto/attestation","version":"v1.2.0","cpe":"cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/in-toto/attestation@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aPRUZ3azbqD7yEBD5fP3TD8Dszf+YHo284SOcpahjQk="}]},{"bom-ref":"pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=9d9aa9fd84d17824","type":"library","name":"github.com/in-toto/in-toto-golang","version":"v0.11.0","cpe":"cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nfidMYBFx+E0lnmX5KUnN2Pdm8zdNKal1ayjJuzzRoA="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=a94df7b7da34efb3","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/invopop/jsonschema@v0.14.0?package-id=545152321b1d0396","type":"library","name":"github.com/invopop/jsonschema","version":"v0.14.0","cpe":"cpe:2.3:a:invopop:jsonschema:v0.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/invopop/jsonschema@v0.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MHQqLhvpNUZfw+hM3AZDYK7jxO8FZoQeQM77g8iyZjg="}]},{"bom-ref":"pkg:golang/github.com/ipfs/bbloom@v0.0.4?package-id=1b3ba90071ce65e6","type":"library","name":"github.com/ipfs/bbloom","version":"v0.0.4","cpe":"cpe:2.3:a:ipfs:bbloom:v0.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/bbloom@v0.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Gi+8EGJ2y5qiD5FbsbpX/TMNcJw8gSqr7eyjHa4Fhvs="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-block-format@v0.2.0?package-id=871c802e28a64144","type":"library","name":"github.com/ipfs/go-block-format","version":"v0.2.0","cpe":"cpe:2.3:a:ipfs:go-block-format:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-block-format@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_block_format:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZqrkxBA2ICbDRbK8KJs/u0O3dlp6gmAuuXUJNiW1Ycs="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-cid@v0.4.1?package-id=10120976e4290bd3","type":"library","name":"github.com/ipfs/go-cid","version":"v0.4.1","cpe":"cpe:2.3:a:ipfs:go-cid:v0.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-cid@v0.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_cid:v0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A/T3qGvxi4kpKWWcPC/PgbvDA2bjVLO7n4UeVwnbs/s="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-datastore@v0.6.0?package-id=b77e03d2bc783655","type":"library","name":"github.com/ipfs/go-datastore","version":"v0.6.0","cpe":"cpe:2.3:a:ipfs:go-datastore:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-datastore@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_datastore:v0.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JKyz+Gvz1QEZw0LsX1IBn+JFCJQH4SJVFtM4uWU0Myk="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-ipfs-blockstore@v1.3.1?package-id=aa4a7c9bcbec4d43","type":"library","name":"github.com/ipfs/go-ipfs-blockstore","version":"v1.3.1","cpe":"cpe:2.3:a:ipfs:go-ipfs-blockstore:v1.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-ipfs-blockstore@v1.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_ipfs_blockstore:v1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cEI9ci7V0sRNivqaOr0elDsamxXFxJMMMy7PTTDQNsQ="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-ipfs-ds-help@v1.1.1?package-id=f598f15e0e73a814","type":"library","name":"github.com/ipfs/go-ipfs-ds-help","version":"v1.1.1","cpe":"cpe:2.3:a:ipfs:go-ipfs-ds-help:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-ipfs-ds-help@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_ipfs_ds_help:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:B5UJOH52IbcfS56+Ul+sv8jnIV10lbjLF5eOO0C66Nw="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-ipfs-util@v0.0.3?package-id=17bc52affc123da3","type":"library","name":"github.com/ipfs/go-ipfs-util","version":"v0.0.3","cpe":"cpe:2.3:a:ipfs:go-ipfs-util:v0.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-ipfs-util@v0.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_ipfs_util:v0.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2RFdGez6bu2ZlZdI+rWfIdbQb1KudQp3VGwPtdNCmE0="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-ipld-cbor@v0.1.0?package-id=fa272330260cfda8","type":"library","name":"github.com/ipfs/go-ipld-cbor","version":"v0.1.0","cpe":"cpe:2.3:a:ipfs:go-ipld-cbor:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-ipld-cbor@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_ipld_cbor:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dx0nS0kILVivGhfWuB6dUpMa/LAwElHPw1yOGYopoYs="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-ipld-format@v0.6.0?package-id=cef5d40c194a8303","type":"library","name":"github.com/ipfs/go-ipld-format","version":"v0.6.0","cpe":"cpe:2.3:a:ipfs:go-ipld-format:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-ipld-format@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_ipld_format:v0.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VEJlA2kQ3LqFSIm5Vu6eIlSxD/Ze90xtc4Meten1F5U="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-log@v1.0.5?package-id=6c2fd66aebd8b6e3","type":"library","name":"github.com/ipfs/go-log","version":"v1.0.5","cpe":"cpe:2.3:a:ipfs:go-log:v1.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-log@v1.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_log:v1.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2dOuUCB1Z7uoczMWgAyDck5JLb72zHzrMnGnCNNbvY8="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-log/v2@v2.5.1?package-id=f63d48bddc50fa5d","type":"library","name":"github.com/ipfs/go-log/v2","version":"v2.5.1","cpe":"cpe:2.3:a:ipfs:go-log\\/v2:v2.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-log/v2@v2.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_log\\/v2:v2.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1XdUzF7048prq4aBjDQQ4SL5RxftpRGdXhNRwKSAlcY="}]},{"bom-ref":"pkg:golang/github.com/ipfs/go-metrics-interface@v0.0.1?package-id=546770a1afa023a5","type":"library","name":"github.com/ipfs/go-metrics-interface","version":"v0.0.1","cpe":"cpe:2.3:a:ipfs:go-metrics-interface:v0.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ipfs/go-metrics-interface@v0.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipfs:go_metrics_interface:v0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j+cpbjYvu4R8zbleSs36gvB7jR+wsL2fGD6n0jO4kdg="}]},{"bom-ref":"pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99?package-id=bcb720b429ff9158","type":"library","name":"github.com/jbenet/go-context","version":"v0.0.0-20150711004518-d14ea06fba99","cpe":"cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A="}]},{"bom-ref":"pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99?package-id=c2f014134751a1de","type":"library","name":"github.com/jbenet/go-context","version":"v0.0.0-20150711004518-d14ea06fba99","cpe":"cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BQSFePA1RWJOlocH6Fxy8MmwDt+yVQYULKfN0RoTN8A="}]},{"bom-ref":"pkg:golang/github.com/jbenet/goprocess@v0.1.4?package-id=00d247c98969b524","type":"library","name":"github.com/jbenet/goprocess","version":"v0.1.4","cpe":"cpe:2.3:a:jbenet:goprocess:v0.1.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jbenet/goprocess@v0.1.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DRGOFReOMqqDNXwW70QkacFW0YN9QnwLV0Vqk+3oU0o="}]},{"bom-ref":"pkg:golang/github.com/jedib0t/go-pretty/v6@v6.8.3?package-id=c52b7808b1ddc1da","type":"library","name":"github.com/jedib0t/go-pretty/v6","version":"v6.8.3","cpe":"cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.8.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jedib0t/go-pretty/v6@v6.8.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.8.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yVSk5aemoYHCvcrtqyXklwqcgHQIQzmy/oUzFlmffSQ="}]},{"bom-ref":"pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20241212093149-d2f9f49435c7?package-id=51a7ce4291ec2a0c","type":"library","name":"github.com/jedisct1/go-minisign","version":"v0.0.0-20241212093149-d2f9f49435c7","cpe":"cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20241212093149-d2f9f49435c7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20241212093149-d2f9f49435c7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20241212093149-d2f9f49435c7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FWpSWRD8FbVkKQu8M1DM9jF5oXFLyE+XpisIYfdzbic="}]},{"bom-ref":"pkg:golang/github.com/jgautheron/goconst@v1.11.0?package-id=75c0cc7b39e7ecc8","type":"library","name":"github.com/jgautheron/goconst","version":"v1.11.0","cpe":"cpe:2.3:a:jgautheron:goconst:v1.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jgautheron/goconst@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KgN90z5qXt5f0Uzf3cWXev3hfMMFUyNeKdpkSBRvLDk="}]},{"bom-ref":"pkg:golang/github.com/jjti/go-spancheck@v0.6.5?package-id=18e5cb899ba7ae3a","type":"library","name":"github.com/jjti/go-spancheck","version":"v0.6.5","cpe":"cpe:2.3:a:jjti:go-spancheck:v0.6.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jjti/go-spancheck@v0.6.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jjti:go_spancheck:v0.6.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lmi7pKxa37oKYIMScialXUK6hP3iY5F1gu+mLBPgYB8="}]},{"bom-ref":"pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=b71b97451ba45321","type":"library","name":"github.com/json-iterator/go","version":"v1.1.12","cpe":"cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/json-iterator/go@v1.1.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="}]},{"bom-ref":"pkg:golang/github.com/julz/importas@v0.2.0?package-id=9cd2dab96431b121","type":"library","name":"github.com/julz/importas","version":"v0.2.0","cpe":"cpe:2.3:a:julz:importas:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/julz/importas@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y+MJN/UdL63QbFJHws9BVC5RpA2iq0kpjrFajTGivjQ="}]},{"bom-ref":"pkg:golang/github.com/karamaru-alpha/copyloopvar@v1.2.2?package-id=4377f84bc2e7ca19","type":"library","name":"github.com/karamaru-alpha/copyloopvar","version":"v1.2.2","cpe":"cpe:2.3:a:karamaru-alpha:copyloopvar:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/karamaru-alpha/copyloopvar@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:karamaru_alpha:copyloopvar:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:karamaru:copyloopvar:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yfNQvP9YaGQR7VaWLYcfZUlRP2eo2vhExWKxD/fP6q0="}]},{"bom-ref":"pkg:golang/github.com/kevinburke/ssh_config@v1.2.0?package-id=dbd9fc11a2f7f879","type":"library","name":"github.com/kevinburke/ssh_config","version":"v1.2.0","cpe":"cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kevinburke/ssh_config@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4="}]},{"bom-ref":"pkg:golang/github.com/kevinburke/ssh_config@v1.6.0?package-id=77b24a7fa945737a","type":"library","name":"github.com/kevinburke/ssh_config","version":"v1.6.0","cpe":"cpe:2.3:a:kevinburke:ssh-config:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kevinburke/ssh_config@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:kevinburke:ssh_config:v1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:J1FBfmuVosPHf5GRdltRLhPJtJpTlMdKTBjRgTaQBFY="}]},{"bom-ref":"pkg:golang/github.com/kisielk/errcheck@v1.20.0?package-id=41075ea9d981e0c1","type":"library","name":"github.com/kisielk/errcheck","version":"v1.20.0","cpe":"cpe:2.3:a:kisielk:errcheck:v1.20.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kisielk/errcheck@v1.20.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9rwHBNKzd4wkDWcROy3DvFGNqEPlkxBg305rvk7HabI="}]},{"bom-ref":"pkg:golang/github.com/kkhaike/contextcheck@v1.1.6?package-id=f514815c44281bf9","type":"library","name":"github.com/kkHAIKE/contextcheck","version":"v1.1.6","cpe":"cpe:2.3:a:kkHAIKE:contextcheck:v1.1.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kkHAIKE/contextcheck@v1.1.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7HIyRcnyzxL9Lz06NGhiKvenXq7Zw6Q0UQu/ttjfJCE="}]},{"bom-ref":"pkg:golang/github.com/klauspost/compress@v1.19.2?package-id=be20faa6079a31ca","type":"library","name":"github.com/klauspost/compress","version":"v1.19.2","cpe":"cpe:2.3:a:klauspost:compress:v1.19.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/compress@v1.19.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8="}]},{"bom-ref":"pkg:golang/github.com/klauspost/compress@v1.20.1?package-id=76e86a8615504ca8","type":"library","name":"github.com/klauspost/compress","version":"v1.20.1","cpe":"cpe:2.3:a:klauspost:compress:v1.20.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/compress@v1.20.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:T7kKElXUMXrUJ2E9QhQhxFtcK5rPyLdsGZvdbLMPdiQ="}]},{"bom-ref":"pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0?package-id=e5bb5f5dc09be4fa","type":"library","name":"github.com/klauspost/cpuid/v2","version":"v2.3.0","cpe":"cpe:2.3:a:klauspost:cpuid\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y="}]},{"bom-ref":"pkg:golang/github.com/klauspost/pgzip@v1.2.6?package-id=aa80712eda354246","type":"library","name":"github.com/klauspost/pgzip","version":"v1.2.6","cpe":"cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/pgzip@v1.2.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8RXeL5crjEUFnR2/Sn6GJNWtSQ3Dk8pq4CL3jvdDyjU="}]},{"bom-ref":"pkg:golang/github.com/kulti/thelper@v0.7.1?package-id=c45ab99308aeca80","type":"library","name":"github.com/kulti/thelper","version":"v0.7.1","cpe":"cpe:2.3:a:kulti:thelper:v0.7.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kulti/thelper@v0.7.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fI8QITAoFVLx+y+vSyuLBP+rcVIB8jKooNSCT2EiI98="}]},{"bom-ref":"pkg:golang/github.com/kunwardeep/paralleltest@v1.0.15?package-id=2342a1b1e5a80c6a","type":"library","name":"github.com/kunwardeep/paralleltest","version":"v1.0.15","cpe":"cpe:2.3:a:kunwardeep:paralleltest:v1.0.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kunwardeep/paralleltest@v1.0.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZMk4Qt306tHIgKISHWFJAO1IDQJLc6uDyJMLyncOb6w="}]},{"bom-ref":"pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=f5fea653f90380d4","type":"library","name":"github.com/kylelemons/godebug","version":"v1.1.0","cpe":"cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kylelemons/godebug@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="}]},{"bom-ref":"pkg:golang/github.com/ldez/exptostd@v0.4.5?package-id=2ef857873cdae6fd","type":"library","name":"github.com/ldez/exptostd","version":"v0.4.5","cpe":"cpe:2.3:a:ldez:exptostd:v0.4.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ldez/exptostd@v0.4.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kv2ZGUVI6VwRfp/+bcQ6Nbx0ghFWcGIKInkG/oFn1aQ="}]},{"bom-ref":"pkg:golang/github.com/ldez/gomoddirectives@v0.10.0?package-id=76c9519ae18edf0a","type":"library","name":"github.com/ldez/gomoddirectives","version":"v0.10.0","cpe":"cpe:2.3:a:ldez:gomoddirectives:v0.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ldez/gomoddirectives@v0.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Zb23rfMMkG21B6pZ9OfESzemByP5Qr7YvWcXQZE/S3Q="}]},{"bom-ref":"pkg:golang/github.com/ldez/grignotin@v0.10.1?package-id=a44d56437352abe6","type":"library","name":"github.com/ldez/grignotin","version":"v0.10.1","cpe":"cpe:2.3:a:ldez:grignotin:v0.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ldez/grignotin@v0.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:keYi9rYsgbvqAZGI1liek5c+jv9UUjbvdj3Tbn5fn4o="}]},{"bom-ref":"pkg:golang/github.com/ldez/structtags@v0.6.1?package-id=00ac75e5d2717870","type":"library","name":"github.com/ldez/structtags","version":"v0.6.1","cpe":"cpe:2.3:a:ldez:structtags:v0.6.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ldez/structtags@v0.6.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bUooFLbXx41tW8SvkfwfFkkjPYvFFs59AAMgVg6DUBk="}]},{"bom-ref":"pkg:golang/github.com/ldez/tagliatelle@v0.8.0?package-id=ad4acd78c44fdfe6","type":"library","name":"github.com/ldez/tagliatelle","version":"v0.8.0","cpe":"cpe:2.3:a:ldez:tagliatelle:v0.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ldez/tagliatelle@v0.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QczqVPa22JdT40p3m5JTTVmPMv5wDORqdomJn6/Pnn0="}]},{"bom-ref":"pkg:golang/github.com/ldez/usetesting@v0.5.0?package-id=c29bc012204dbaae","type":"library","name":"github.com/ldez/usetesting","version":"v0.5.0","cpe":"cpe:2.3:a:ldez:usetesting:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ldez/usetesting@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3/QtzZObBKLy1F4F8jLuKJiKBjjVFi1IavpoWbmqLwc="}]},{"bom-ref":"pkg:golang/github.com/leonklingele/grouper@v1.1.2?package-id=ba458f586a1c45c1","type":"library","name":"github.com/leonklingele/grouper","version":"v1.1.2","cpe":"cpe:2.3:a:leonklingele:grouper:v1.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/leonklingele/grouper@v1.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o1ARBDLOmmasUaNDesWqWCIFH3u7hoFlM84YrjT3mIY="}]},{"bom-ref":"pkg:golang/github.com/lucasb-eyer/go-colorful@v1.4.1?package-id=cc642c5fb6fcda4c","type":"library","name":"github.com/lucasb-eyer/go-colorful","version":"v1.4.1","cpe":"cpe:2.3:a:lucasb-eyer:go-colorful:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lucasb-eyer/go-colorful@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb-eyer:go_colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb_eyer:go-colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb_eyer:go_colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb:go-colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb:go_colorful:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1EO+WB73+EH8EVbzlrG3KLAfEypQWVHIBqlTf+2hNss="}]},{"bom-ref":"pkg:golang/github.com/lunixbochs/struc@v0.0.0-20241101090106-8d528fa2c543?package-id=d9d20256daac88a6","type":"library","name":"github.com/lunixbochs/struc","version":"v0.0.0-20241101090106-8d528fa2c543","cpe":"cpe:2.3:a:lunixbochs:struc:v0.0.0-20241101090106-8d528fa2c543:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lunixbochs/struc@v0.0.0-20241101090106-8d528fa2c543","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GxMuVb9tJajC1QpbQwYNY1ZAo1EIE8I+UclBjOfjz/M="}]},{"bom-ref":"pkg:golang/github.com/macabu/inamedparam@v0.2.0?package-id=921ab83b57f62866","type":"library","name":"github.com/macabu/inamedparam","version":"v0.2.0","cpe":"cpe:2.3:a:macabu:inamedparam:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/macabu/inamedparam@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VyPYpOc10nkhI2qeNUdh3Zket4fcZjEWe35poddBCpE="}]},{"bom-ref":"pkg:golang/github.com/manuelarte/embeddedstructfieldcheck@v0.4.0?package-id=fea9ba21b97c7e0d","type":"library","name":"github.com/manuelarte/embeddedstructfieldcheck","version":"v0.4.0","cpe":"cpe:2.3:a:manuelarte:embeddedstructfieldcheck:v0.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/manuelarte/embeddedstructfieldcheck@v0.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3mAIyaGRtjK6EO9E73JlXLtiy7ha80b2ZVGyacxgfww="}]},{"bom-ref":"pkg:golang/github.com/manuelarte/funcorder@v0.6.0?package-id=194e70b48fd45734","type":"library","name":"github.com/manuelarte/funcorder","version":"v0.6.0","cpe":"cpe:2.3:a:manuelarte:funcorder:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/manuelarte/funcorder@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0hBngc4fa1IgNiI65A7sFGkMvoMCc878RjqB5V7rWP0="}]},{"bom-ref":"pkg:golang/github.com/maratori/testableexamples@v1.0.1?package-id=e4dcd51597121af7","type":"library","name":"github.com/maratori/testableexamples","version":"v1.0.1","cpe":"cpe:2.3:a:maratori:testableexamples:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/maratori/testableexamples@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HfOQXs+XgfeRBJ+Wz0XfH+FHnoY9TVqL6Fcevpzy4q8="}]},{"bom-ref":"pkg:golang/github.com/maratori/testpackage@v1.1.2?package-id=38b02f6d08aace8f","type":"library","name":"github.com/maratori/testpackage","version":"v1.1.2","cpe":"cpe:2.3:a:maratori:testpackage:v1.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/maratori/testpackage@v1.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ffDSh+AgqluCLMXhM19f/cpvQAKygKAJXFl9aUjmbqs="}]},{"bom-ref":"pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20260423010602-fe51f5b5e52b?package-id=4176aa0fbf2d51a4","type":"library","name":"github.com/masahiro331/go-ext4-filesystem","version":"v0.0.0-20260423010602-fe51f5b5e52b","cpe":"cpe:2.3:a:masahiro331:go-ext4-filesystem:v0.0.0-20260423010602-fe51f5b5e52b:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/masahiro331/go-ext4-filesystem@v0.0.0-20260423010602-fe51f5b5e52b","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:masahiro331:go_ext4_filesystem:v0.0.0-20260423010602-fe51f5b5e52b:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IAYuiQq6BVizPeXTKBoY3Jcin3gGn8No7h31lvH0aKo="}]},{"bom-ref":"pkg:golang/github.com/matoous/godox@v1.1.0?package-id=5387a63b1e180eb5","type":"library","name":"github.com/matoous/godox","version":"v1.1.0","cpe":"cpe:2.3:a:matoous:godox:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/matoous/godox@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W5mqwbyWrwZv6OQ5Z1a/DHGMOvXYCBP3+Ht7KMoJhq4="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-colorable@v0.1.15?package-id=373728952659f9dc","type":"library","name":"github.com/mattn/go-colorable","version":"v0.1.15","cpe":"cpe:2.3:a:mattn:go-colorable:v0.1.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-colorable@v0.1.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_colorable:v0.1.15:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+u9SLTRGnXv73cEsnsmoZBom+dMU88B2M0aDcWy0/jY="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-colorable@v0.1.15?package-id=8c536dc8f83f87fb","type":"library","name":"github.com/mattn/go-colorable","version":"v0.1.15","cpe":"cpe:2.3:a:mattn:go-colorable:v0.1.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-colorable@v0.1.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_colorable:v0.1.15:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+u9SLTRGnXv73cEsnsmoZBom+dMU88B2M0aDcWy0/jY="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.22?package-id=ffdd91059ba80d9e","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.22","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.22:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.22","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.22:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j8l17JJ9i6VGPUFUYoTUKPSgKe/83EYU2zBC7YNKMw4="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.24?package-id=993ea55f7ccdb0d0","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.24","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tGZZoVgT/KiqK1c8ocVLeDS8BSWMRd47J3Lbz7vsReI="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-mastodon@v0.0.13?package-id=355c5d9030db1227","type":"library","name":"github.com/mattn/go-mastodon","version":"v0.0.13","cpe":"cpe:2.3:a:mattn:go-mastodon:v0.0.13:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-mastodon@v0.0.13","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_mastodon:v0.0.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZQaij7lw7N81KuqbYJeTMSfsO53GZETpi1mXcxsuYIQ="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.24?package-id=0d13e48086880462","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.24","cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cpokDiIn0MGnhdHwuWnJBITySJ20QyNGnY2kR/ay2DU="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.28?package-id=ca2513f0e02a4131","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.28","cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.28:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.28","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.28:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rPyg2ybwEKPebvpzVWe1gKBkH8EQFkxO4Y0hjBeLaBU="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-shellwords@v1.0.14?package-id=04ad98a47da456fe","type":"library","name":"github.com/mattn/go-shellwords","version":"v1.0.14","cpe":"cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-shellwords@v1.0.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yUKzIgsCnosndOASY6/enly1EAuaXeFSQ7cdyA3OuYg="}]},{"bom-ref":"pkg:golang/github.com/mgechev/revive@v1.17.0?package-id=c17c1f726e4c0c5d","type":"library","name":"github.com/mgechev/revive","version":"v1.17.0","cpe":"cpe:2.3:a:mgechev:revive:v1.17.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mgechev/revive@v1.17.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hwTTVC3svSv9X2FA2hiYT17Uws+lfxDWhPxzBZZCREg="}]},{"bom-ref":"pkg:golang/github.com/micromdm/plist@v0.2.2?package-id=3e315d4dab2efa06","type":"library","name":"github.com/micromdm/plist","version":"v0.2.2","cpe":"cpe:2.3:a:micromdm:plist:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/micromdm/plist@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:a5Yt/coion6hwVEW0da8a5P8IyAchXZ6eC+oBA0uJW8="}]},{"bom-ref":"pkg:golang/github.com/microsoft/azure-devops-go-api/azuredevops/v7@v7.1.0?package-id=528b3b4609abd715","type":"library","name":"github.com/microsoft/azure-devops-go-api/azuredevops/v7","version":"v7.1.0","cpe":"cpe:2.3:a:microsoft:azure-devops-go-api\\/azuredevops\\/v7:v7.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/microsoft/azure-devops-go-api/azuredevops/v7@v7.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:microsoft:azure_devops_go_api\\/azuredevops\\/v7:v7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mmJCWLe63QvybxhW1iBmQWEaCKdc4SKgALfTNZ+OphU="}]},{"bom-ref":"pkg:golang/github.com/minio/sha256-simd@v1.0.1?package-id=3e3ef56286998072","type":"library","name":"github.com/minio/sha256-simd","version":"v1.0.1","cpe":"cpe:2.3:a:minio:sha256-simd:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/minio/sha256-simd@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:minio:sha256_simd:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6kaan5IFmwTNynnKKpDHe6FWHohJOHhCPchzK49dzMM="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0?package-id=b2da178b4843deea","type":"library","name":"github.com/mitchellh/copystructure","version":"v1.2.0","cpe":"cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=550490a4b465e1a0","type":"library","name":"github.com/mitchellh/go-homedir","version":"v1.1.0","cpe":"cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/go-homedir@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2?package-id=844e2a88805dba1e","type":"library","name":"github.com/mitchellh/reflectwalk","version":"v1.0.2","cpe":"cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ="}]},{"bom-ref":"pkg:golang/github.com/moby/buildkit@v0.32.2?package-id=ec3701d3bb3e8095","type":"library","name":"github.com/moby/buildkit","version":"v0.32.2","cpe":"cpe:2.3:a:moby:buildkit:v0.32.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/buildkit@v0.32.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Sfy7+u6dUv/2yuBc9KCoK70Re8atuV8aPZ5UOC068Vc="}]},{"bom-ref":"pkg:golang/github.com/moby/docker-image-spec@v1.3.1?package-id=96770404d2af75ce","type":"library","name":"github.com/moby/docker-image-spec","version":"v1.3.1","cpe":"cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/docker-image-spec@v1.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3Nl2EsFP0="}]},{"bom-ref":"pkg:golang/github.com/moby/docker-image-spec@v1.3.1?package-id=a649223126497a88","type":"library","name":"github.com/moby/docker-image-spec","version":"v1.3.1","cpe":"cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/docker-image-spec@v1.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3Nl2EsFP0="}]},{"bom-ref":"pkg:golang/github.com/moby/moby/api@v1.55.0?package-id=3aebbdf00f80f1b3","type":"library","name":"github.com/moby/moby/api","version":"v1.55.0","cpe":"cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/moby/api@v1.55.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2/sexvQyqIWS8pRSCFddBfpW2qE7vR7FCL+vN8pxwMc="}]},{"bom-ref":"pkg:golang/github.com/moby/moby/api@v1.55.0?package-id=8ff2e1d464b5c5ff","type":"library","name":"github.com/moby/moby/api","version":"v1.55.0","cpe":"cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/moby/api@v1.55.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2/sexvQyqIWS8pRSCFddBfpW2qE7vR7FCL+vN8pxwMc="}]},{"bom-ref":"pkg:golang/github.com/moby/moby/client@v0.5.1?package-id=ff329376ab2ad4b2","type":"library","name":"github.com/moby/moby/client","version":"v0.5.1","cpe":"cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/moby/client@v0.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tYNaJno4c0HXz12y5BiqEDy0rVTYkWzI26lGvnTMiJw="}]},{"bom-ref":"pkg:golang/github.com/moby/moby/client@v0.5.1?package-id=1d9bd1eb82269fe9","type":"library","name":"github.com/moby/moby/client","version":"v0.5.1","cpe":"cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/moby/client@v0.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tYNaJno4c0HXz12y5BiqEDy0rVTYkWzI26lGvnTMiJw="}]},{"bom-ref":"pkg:golang/github.com/moby/term@v0.5.2?package-id=5c3ece45c3dd9db8","type":"library","name":"github.com/moby/term","version":"v0.5.2","cpe":"cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/term@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ="}]},{"bom-ref":"pkg:golang/github.com/modelcontextprotocol/registry@v1.8.1?package-id=b83ecf0a6f21ebfb","type":"library","name":"github.com/modelcontextprotocol/registry","version":"v1.8.1","cpe":"cpe:2.3:a:modelcontextprotocol:registry:v1.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modelcontextprotocol/registry@v1.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:baHVpbY9xc/lyCi/Wemcy7idVBNKROJZbSgzosCEuEo="}]},{"bom-ref":"pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=a36fc4a176d0ee4a","type":"library","name":"github.com/modern-go/concurrent","version":"v0.0.0-20180306012644-bacd9c7ef1dd","cpe":"cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="}]},{"bom-ref":"pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=b199fcf302d10783","type":"library","name":"github.com/modern-go/reflect2","version":"v1.0.3-0.20250322232337-35a7c28c31ee","cpe":"cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="}]},{"bom-ref":"pkg:golang/github.com/moricho/tparallel@v0.3.2?package-id=104771ca48900e5e","type":"library","name":"github.com/moricho/tparallel","version":"v0.3.2","cpe":"cpe:2.3:a:moricho:tparallel:v0.3.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moricho/tparallel@v0.3.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:odr8aZVFA3NZrNybggMkYO3rgPRcqjeQUlBBFVxKHTI="}]},{"bom-ref":"pkg:golang/github.com/mr-tron/base58@v1.2.0?package-id=3b1e62fcb8d39a5d","type":"library","name":"github.com/mr-tron/base58","version":"v1.2.0","cpe":"cpe:2.3:a:mr-tron:base58:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mr-tron/base58@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mr_tron:base58:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mr:base58:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:T/HDJBh4ZCPbU39/+c3rRvE0uKBQlU27+QI8LJ4t64o="}]},{"bom-ref":"pkg:golang/github.com/muesli/cancelreader@v0.2.2?package-id=aaeb719570c4525b","type":"library","name":"github.com/muesli/cancelreader","version":"v0.2.2","cpe":"cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/cancelreader@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3I4Kt4BQjOR54NavqnDogx/MIoWBFa0StPA8ELUXHmA="}]},{"bom-ref":"pkg:golang/github.com/muesli/mango@v0.2.0?package-id=c61cc3b487d22814","type":"library","name":"github.com/muesli/mango","version":"v0.2.0","cpe":"cpe:2.3:a:muesli:mango:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/mango@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iNNc0c5VLQ6fsMgAqGQofByNUBH2Q2nEbD6TaI+5yyQ="}]},{"bom-ref":"pkg:golang/github.com/muesli/mango-cobra@v1.3.0?package-id=579237f45246cee2","type":"library","name":"github.com/muesli/mango-cobra","version":"v1.3.0","cpe":"cpe:2.3:a:muesli:mango-cobra:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/mango-cobra@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:muesli:mango_cobra:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vQy5GvPg3ndOSpduxutqFoINhWk3vD5K2dXo5E8pqec="}]},{"bom-ref":"pkg:golang/github.com/muesli/mango-pflag@v0.1.0?package-id=c84e7b06d4037c2f","type":"library","name":"github.com/muesli/mango-pflag","version":"v0.1.0","cpe":"cpe:2.3:a:muesli:mango-pflag:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/mango-pflag@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:muesli:mango_pflag:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UADqbYgpUyRoBja3g6LUL+3LErjpsOwaC9ywvBWe7Sg="}]},{"bom-ref":"pkg:golang/github.com/muesli/roff@v0.1.0?package-id=e7a2ff5d39c313a1","type":"library","name":"github.com/muesli/roff","version":"v0.1.0","cpe":"cpe:2.3:a:muesli:roff:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/roff@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YD0lalCotmYuF5HhZliKWlIx7IEhiXeSfq7hNjFqGF8="}]},{"bom-ref":"pkg:golang/github.com/multiformats/go-base32@v0.1.0?package-id=750a112c4e20fcd1","type":"library","name":"github.com/multiformats/go-base32","version":"v0.1.0","cpe":"cpe:2.3:a:multiformats:go-base32:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/multiformats/go-base32@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:multiformats:go_base32:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pVx9xoSPqEIQG8o+UbAe7DNi51oej1NtK+aGkbLYxPE="}]},{"bom-ref":"pkg:golang/github.com/multiformats/go-base36@v0.2.0?package-id=6cf1760ac808f321","type":"library","name":"github.com/multiformats/go-base36","version":"v0.2.0","cpe":"cpe:2.3:a:multiformats:go-base36:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/multiformats/go-base36@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:multiformats:go_base36:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lFsAbNOGeKtuKozrtBsAkSVhv1p9D0/qedU9rQyccr0="}]},{"bom-ref":"pkg:golang/github.com/multiformats/go-multibase@v0.2.0?package-id=7bf94c862eaa9c9c","type":"library","name":"github.com/multiformats/go-multibase","version":"v0.2.0","cpe":"cpe:2.3:a:multiformats:go-multibase:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/multiformats/go-multibase@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:multiformats:go_multibase:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:isdYCVLvksgWlMW9OZRYJEa9pZETFivncJHmHnnd87g="}]},{"bom-ref":"pkg:golang/github.com/multiformats/go-multihash@v0.2.3?package-id=df3c7e972f395d42","type":"library","name":"github.com/multiformats/go-multihash","version":"v0.2.3","cpe":"cpe:2.3:a:multiformats:go-multihash:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/multiformats/go-multihash@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:multiformats:go_multihash:v0.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7Lyc8XfX/IY2jWb/gI7JP+o7JEq9hOa7BFvVU9RSh+U="}]},{"bom-ref":"pkg:golang/github.com/multiformats/go-varint@v0.0.7?package-id=2647b60987149b13","type":"library","name":"github.com/multiformats/go-varint","version":"v0.0.7","cpe":"cpe:2.3:a:multiformats:go-varint:v0.0.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/multiformats/go-varint@v0.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:multiformats:go_varint:v0.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sWSGR+f/eu5ABZA2ZpYKBILXTTs9JWpdEM/nEGOHFS8="}]},{"bom-ref":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=2d33de0c2e03c980","type":"library","name":"github.com/munnerz/goautoneg","version":"v0.0.0-20191010083416-a7dc8b61c822","cpe":"cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="}]},{"bom-ref":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=35372ba265313699","type":"library","name":"github.com/munnerz/goautoneg","version":"v0.0.0-20191010083416-a7dc8b61c822","cpe":"cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="}]},{"bom-ref":"pkg:golang/github.com/nakabonne/nestif@v0.3.1?package-id=ed4df6932649e6ca","type":"library","name":"github.com/nakabonne/nestif","version":"v0.3.1","cpe":"cpe:2.3:a:nakabonne:nestif:v0.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/nakabonne/nestif@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wm28nZjhQY5HyYPx+weN3Q65k6ilSBxDb8v5S81B81U="}]},{"bom-ref":"pkg:golang/github.com/ncruces/go-strftime@v1.0.0?package-id=1144b4da6fcfdc60","type":"library","name":"github.com/ncruces/go-strftime","version":"v1.0.0","cpe":"cpe:2.3:a:ncruces:go-strftime:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ncruces/go-strftime@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncruces:go_strftime:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOFAw7w="}]},{"bom-ref":"pkg:golang/github.com/nishanths/exhaustive@v0.13.0?package-id=7aa94d4f1000c248","type":"library","name":"github.com/nishanths/exhaustive","version":"v0.13.0","cpe":"cpe:2.3:a:nishanths:exhaustive:v0.13.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/nishanths/exhaustive@v0.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Rof0axOSNQaaPaPmLK5RxcRrJV2Vcv+vfUmuRy+2EAM="}]},{"bom-ref":"pkg:golang/github.com/nishanths/predeclared@v0.2.2?package-id=cc99372f901581f0","type":"library","name":"github.com/nishanths/predeclared","version":"v0.2.2","cpe":"cpe:2.3:a:nishanths:predeclared:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/nishanths/predeclared@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:V2EPdZPliZymNAn79T8RkNApBjMmVKh5XRpLm/w98Vk="}]},{"bom-ref":"pkg:golang/github.com/nunnatsa/ginkgolinter@v0.24.0?package-id=5d02ecdc4ea8476f","type":"library","name":"github.com/nunnatsa/ginkgolinter","version":"v0.24.0","cpe":"cpe:2.3:a:nunnatsa:ginkgolinter:v0.24.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/nunnatsa/ginkgolinter@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Mp0EagluLFP98JatP6nqp/gGEoljNG97uf9AcxcBVy8="}]},{"bom-ref":"pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=0045c6c2323f72fa","type":"library","name":"github.com/oklog/ulid/v2","version":"v2.1.1","cpe":"cpe:2.3:a:oklog:ulid\\/v2:v2.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/oklog/ulid/v2@v2.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:suPZ4ARWLOJLegGFiZZ1dFAkqzhMjL3J1TzI+5wHz8s="}]},{"bom-ref":"pkg:golang/github.com/olekukonko/errors@v1.1.0?package-id=7b870bcf188ab90f","type":"library","name":"github.com/olekukonko/errors","version":"v1.1.0","cpe":"cpe:2.3:a:olekukonko:errors:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/olekukonko/errors@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RNuGIh15QdDenh+hNvKrJkmxxjV4hcS50Db478Ou5sM="}]},{"bom-ref":"pkg:golang/github.com/olekukonko/ll@v0.0.9?package-id=b4770d35d5642cdf","type":"library","name":"github.com/olekukonko/ll","version":"v0.0.9","cpe":"cpe:2.3:a:olekukonko:ll:v0.0.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/olekukonko/ll@v0.0.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Y+1YqDfVkqMWuEQMclsF9HUR5+a82+dxJuL1HHSRpxI="}]},{"bom-ref":"pkg:golang/github.com/olekukonko/tablewriter@v1.0.9?package-id=0ff37ebfb70c33e7","type":"library","name":"github.com/olekukonko/tablewriter","version":"v1.0.9","cpe":"cpe:2.3:a:olekukonko:tablewriter:v1.0.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/olekukonko/tablewriter@v1.0.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XGwRsYLC2bY7bNd93Dk51bcPZksWZmLYuaTHR0FqfL8="}]},{"bom-ref":"pkg:golang/github.com/onsi/ginkgo/v2@v2.33.0?package-id=3c8ceb74af469bef","type":"library","name":"github.com/onsi/ginkgo/v2","version":"v2.33.0","cpe":"cpe:2.3:a:onsi:ginkgo\\/v2:v2.33.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/onsi/ginkgo/v2@v2.33.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C8gBA6Uc2ZEubiV+SXiu5tZnMTwEmXHgkJwGozKtZf8="}]},{"bom-ref":"pkg:golang/github.com/onsi/ginkgo/v2@v2.33.0?package-id=8ff1c2315b826fed","type":"library","name":"github.com/onsi/ginkgo/v2","version":"v2.33.0","cpe":"cpe:2.3:a:onsi:ginkgo\\/v2:v2.33.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/onsi/ginkgo/v2@v2.33.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C8gBA6Uc2ZEubiV+SXiu5tZnMTwEmXHgkJwGozKtZf8="}]},{"bom-ref":"pkg:golang/github.com/onsi/gomega@v1.44.0?package-id=f7610f61d316b75e","type":"library","name":"github.com/onsi/gomega","version":"v1.44.0","cpe":"cpe:2.3:a:onsi:gomega:v1.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/onsi/gomega@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eAiGl3Pw5jz5GQdDff0BcxYpAX1JxW8xD7mFUuwNfZQ="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=19989b5d142f3073","type":"library","name":"github.com/opencontainers/go-digest","version":"v1.0.0","cpe":"cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=1628c9d45044a1ed","type":"library","name":"github.com/opencontainers/go-digest","version":"v1.0.0","cpe":"cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=10613df95c6a2b3e","type":"library","name":"github.com/opencontainers/image-spec","version":"v1.1.1","cpe":"cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=f465914f3f1bfe48","type":"library","name":"github.com/opencontainers/image-spec","version":"v1.1.1","cpe":"cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="}]},{"bom-ref":"pkg:golang/github.com/opentracing/opentracing-go@v1.2.0?package-id=d7d4d54666339f36","type":"library","name":"github.com/opentracing/opentracing-go","version":"v1.2.0","cpe":"cpe:2.3:a:opentracing:opentracing-go:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opentracing/opentracing-go@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opentracing:opentracing_go:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uEJPy/1a5RIPAJ0Ov+OIO8OxWu77jEv+1B0VhjKrZUs="}]},{"bom-ref":"pkg:golang/github.com/ossf/osv-schema/bindings/go@v0.0.0-20260730052020-9509daabeece?package-id=3bd93553d471842d","type":"library","name":"github.com/ossf/osv-schema/bindings/go","version":"v0.0.0-20260730052020-9509daabeece","cpe":"cpe:2.3:a:ossf:osv-schema\\/bindings\\/go:v0.0.0-20260730052020-9509daabeece:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ossf/osv-schema/bindings/go@v0.0.0-20260730052020-9509daabeece","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf:osv_schema\\/bindings\\/go:v0.0.0-20260730052020-9509daabeece:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PSGyVVj2mqBaGj9sa/8yv/XNni3JCPZC4xAVdnwww2M="}]},{"bom-ref":"pkg:golang/github.com/otiai10/copy@v1.14.1?package-id=23f7030fd4200e15","type":"library","name":"github.com/otiai10/copy","version":"v1.14.1","cpe":"cpe:2.3:a:otiai10:copy:v1.14.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/otiai10/copy@v1.14.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8="}]},{"bom-ref":"pkg:golang/github.com/otiai10/mint@v1.6.3?package-id=df0c1ea017f38440","type":"library","name":"github.com/otiai10/mint","version":"v1.6.3","cpe":"cpe:2.3:a:otiai10:mint:v1.6.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/otiai10/mint@v1.6.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs="}]},{"bom-ref":"pkg:golang/github.com/owenrumney/go-sarif/v3@v3.3.1?package-id=e2900b5584bc44c7","type":"library","name":"github.com/owenrumney/go-sarif/v3","version":"v3.3.1","cpe":"cpe:2.3:a:owenrumney:go-sarif\\/v3:v3.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/owenrumney/go-sarif/v3@v3.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:owenrumney:go_sarif\\/v3:v3.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bKY8YnWcY8zYTiGVObC5wZLlfEvMkCxK9XMGXBbzEtQ="}]},{"bom-ref":"pkg:golang/github.com/package-url/packageurl-go@v0.1.6?package-id=ff00ac471a3e7081","type":"library","name":"github.com/package-url/packageurl-go","version":"v0.1.6","cpe":"cpe:2.3:a:package-url:packageurl-go:v0.1.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/package-url/packageurl-go@v0.1.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-url:packageurl_go:v0.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_url:packageurl-go:v0.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_url:packageurl_go:v0.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:packageurl-go:v0.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:packageurl_go:v0.1.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YO3p6u1XmCUliivUg/qWphaY8vI6hxSnnPv7Bfg3m5M="}]},{"bom-ref":"pkg:golang/github.com/pandatix/go-cvss@v0.6.2?package-id=08c2216e94387abd","type":"library","name":"github.com/pandatix/go-cvss","version":"v0.6.2","cpe":"cpe:2.3:a:pandatix:go-cvss:v0.6.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pandatix/go-cvss@v0.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pandatix:go_cvss:v0.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TFiHlzUkT67s6UkelHmK6s1INKVUG7nlKYiWWDTITGI="}]},{"bom-ref":"pkg:golang/github.com/pb33f/ordered-map/v2@v2.3.1?package-id=0c903519dacb5bdb","type":"library","name":"github.com/pb33f/ordered-map/v2","version":"v2.3.1","cpe":"cpe:2.3:a:pb33f:ordered-map\\/v2:v2.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pb33f/ordered-map/v2@v2.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pb33f:ordered_map\\/v2:v2.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5319HDO0aw4DA4gzi+zv4FXU9UlSs3xGZ40wcP1nBjY="}]},{"bom-ref":"pkg:golang/github.com/pelletier/go-toml@v1.9.5?package-id=e4153ccfa2c28ef2","type":"library","name":"github.com/pelletier/go-toml","version":"v1.9.5","cpe":"cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pelletier/go-toml@v1.9.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4yBQzkHv+7BHq2PQUZF3Mx0IYxG7LsP222s7Agd3ve8="}]},{"bom-ref":"pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3?package-id=1713e14d1c343070","type":"library","name":"github.com/pelletier/go-toml/v2","version":"v2.4.3","cpe":"cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GTRvJQutkOSftxIFD5xw9aepkYNuPWmVJpffdDPYVpY="}]},{"bom-ref":"pkg:golang/github.com/pierrec/lz4/v4@v4.1.27?package-id=bfde10bfc0aa75fd","type":"library","name":"github.com/pierrec/lz4/v4","version":"v4.1.27","cpe":"cpe:2.3:a:pierrec:lz4\\/v4:v4.1.27:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pierrec/lz4/v4@v4.1.27","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+PhzhWDrjRj89TH2sw43nE3+4+W8lSxIuQadEHZyjUk="}]},{"bom-ref":"pkg:golang/github.com/pjbgf/sha1cd@v0.6.0?package-id=67f062dca98dc7b0","type":"library","name":"github.com/pjbgf/sha1cd","version":"v0.6.0","cpe":"cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pjbgf/sha1cd@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3WJ8Wz8gvDz29quX1OcEmkAlUg9diU4GxJHqs0/XiwU="}]},{"bom-ref":"pkg:golang/github.com/pjbgf/sha1cd@v0.7.0?package-id=c280216068a7157e","type":"library","name":"github.com/pjbgf/sha1cd","version":"v0.7.0","cpe":"cpe:2.3:a:pjbgf:sha1cd:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pjbgf/sha1cd@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZRNPKHj+gfkLBf0KJv/p1Hmz+7bqCT5o311YX0nq+DA="}]},{"bom-ref":"pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=69ee3af59b76154d","type":"library","name":"github.com/pkg/browser","version":"v0.0.0-20240102092130-5ac0b6a4141c","cpe":"cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ="}]},{"bom-ref":"pkg:golang/github.com/pkg/errors@v0.9.1?package-id=2f2b4a7ce7872628","type":"library","name":"github.com/pkg/errors","version":"v0.9.1","cpe":"cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/errors@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="}]},{"bom-ref":"pkg:golang/github.com/pkg/errors@v0.9.1?package-id=29c5a34d349ec41e","type":"library","name":"github.com/pkg/errors","version":"v0.9.1","cpe":"cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/errors@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="}]},{"bom-ref":"pkg:golang/github.com/pkg/xattr@v0.4.12?package-id=6223a1a56b452ce1","type":"library","name":"github.com/pkg/xattr","version":"v0.4.12","cpe":"cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/xattr@v0.4.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rRTkSyFNTRElv6pkA3zpjHpQ90p/OdHQC1GmGh1aTjM="}]},{"bom-ref":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=63efd6ebb5d1e9e9","type":"library","name":"github.com/planetscale/vtprotobuf","version":"v0.6.1-0.20240319094008-0393e58bdf10","cpe":"cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo="}]},{"bom-ref":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=4a883834d7d63049","type":"library","name":"github.com/planetscale/vtprotobuf","version":"v0.6.1-0.20240319094008-0393e58bdf10","cpe":"cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo="}]},{"bom-ref":"pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2?package-id=687547b3b9e2c718","type":"library","name":"github.com/pmezard/go-difflib","version":"v1.0.1-0.20181226105442-5d4384ee4fb2","cpe":"cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U="}]},{"bom-ref":"pkg:golang/github.com/polydawn/refmt@v0.89.1-0.20221221234430-40501e09de1f?package-id=a399ded926f89dd1","type":"library","name":"github.com/polydawn/refmt","version":"v0.89.1-0.20221221234430-40501e09de1f","cpe":"cpe:2.3:a:polydawn:refmt:v0.89.1-0.20221221234430-40501e09de1f:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/polydawn/refmt@v0.89.1-0.20221221234430-40501e09de1f","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VXTQfuJj9vKR4TCkEuWIckKvdHFeJH/huIFJ9/cXOB0="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_golang@v1.24.1?package-id=bdd9906d141f5d6e","type":"library","name":"github.com/prometheus/client_golang","version":"v1.24.1","cpe":"cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_golang@v1.24.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JnJkREXzWxUdCuPFpIWZiPispT9xVV59uiuyR2bPlnU="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_model@v0.6.2?package-id=cc6610cf07227d1b","type":"library","name":"github.com/prometheus/client_model","version":"v0.6.2","cpe":"cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_model@v0.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk="}]},{"bom-ref":"pkg:golang/github.com/prometheus/common@v0.70.1?package-id=73f9d86ab0c63544","type":"library","name":"github.com/prometheus/common","version":"v0.70.1","cpe":"cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/common@v0.70.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1HvjP4D5oL3t8RsPlwxA9onvvStjtIHYE5XuuwOi/PY="}]},{"bom-ref":"pkg:golang/github.com/prometheus/procfs@v0.21.1?package-id=4775af2f339ae5e2","type":"library","name":"github.com/prometheus/procfs","version":"v0.21.1","cpe":"cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/procfs@v0.21.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GljZCt+zSTS+NZq88cyQ1LjZ+RCHp3uVuabBWA5+OJI="}]},{"bom-ref":"pkg:golang/github.com/quasilyte/go-ruleguard@v0.4.5?package-id=395cc8a764bb1a77","type":"library","name":"github.com/quasilyte/go-ruleguard","version":"v0.4.5","cpe":"cpe:2.3:a:quasilyte:go-ruleguard:v0.4.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/quasilyte/go-ruleguard@v0.4.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:quasilyte:go_ruleguard:v0.4.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AGY0tiOT5hJX9BTdx/xBdoCubQUAE2grkqY2lSwvZcA="}]},{"bom-ref":"pkg:golang/github.com/quasilyte/go-ruleguard/dsl@v0.3.23?package-id=6a562af6e4176fbf","type":"library","name":"github.com/quasilyte/go-ruleguard/dsl","version":"v0.3.23","cpe":"cpe:2.3:a:quasilyte:go-ruleguard\\/dsl:v0.3.23:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/quasilyte/go-ruleguard/dsl@v0.3.23","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:quasilyte:go_ruleguard\\/dsl:v0.3.23:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lxjt5B6ZCiBeeNO8/oQsegE6fLeCzuMRoVWSkXC4uvY="}]},{"bom-ref":"pkg:golang/github.com/quasilyte/gogrep@v0.5.0?package-id=ef57453045aa6fac","type":"library","name":"github.com/quasilyte/gogrep","version":"v0.5.0","cpe":"cpe:2.3:a:quasilyte:gogrep:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/quasilyte/gogrep@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eTKODPXbI8ffJMN+W2aE0+oL0z/nh8/5eNdiO34SOAo="}]},{"bom-ref":"pkg:golang/github.com/quasilyte/regex/syntax@v0.0.0-20210819130434-b3f0c404a727?package-id=36e86bc491b835aa","type":"library","name":"github.com/quasilyte/regex/syntax","version":"v0.0.0-20210819130434-b3f0c404a727","cpe":"cpe:2.3:a:quasilyte:regex\\/syntax:v0.0.0-20210819130434-b3f0c404a727:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/quasilyte/regex/syntax@v0.0.0-20210819130434-b3f0c404a727","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TCg2WBOl980XxGFEZSS6KlBGIV0diGdySzxATTWoqaU="}]},{"bom-ref":"pkg:golang/github.com/quasilyte/stdinfo@v0.0.0-20220114132959-f7386bf02567?package-id=82eb7736cf7784f8","type":"library","name":"github.com/quasilyte/stdinfo","version":"v0.0.0-20220114132959-f7386bf02567","cpe":"cpe:2.3:a:quasilyte:stdinfo:v0.0.0-20220114132959-f7386bf02567:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/quasilyte/stdinfo@v0.0.0-20220114132959-f7386bf02567","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:M8mH9eK4OUR4lu7Gd+PU1fV2/qnDNfzT635KRSObncs="}]},{"bom-ref":"pkg:golang/github.com/raeperd/recvcheck@v0.3.1?package-id=8eb1af4d9ff68459","type":"library","name":"github.com/raeperd/recvcheck","version":"v0.3.1","cpe":"cpe:2.3:a:raeperd:recvcheck:v0.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/raeperd/recvcheck@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:p7nZMxiCWkdUtY2i3o+pv1h4fJCR5gpvqAXr9326hEY="}]},{"bom-ref":"pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec?package-id=82caff8370081f6f","type":"library","name":"github.com/remyoudompheng/bigfft","version":"v0.0.0-20230129092748-24d4a6f8daec","cpe":"cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE="}]},{"bom-ref":"pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=2c0de3c260aa0d91","type":"library","name":"github.com/rivo/uniseg","version":"v0.4.7","cpe":"cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rivo/uniseg@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="}]},{"bom-ref":"pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=c2a6904869f27fc1","type":"library","name":"github.com/rivo/uniseg","version":"v0.4.7","cpe":"cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rivo/uniseg@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="}]},{"bom-ref":"pkg:golang/github.com/robfig/cron/v3@v3.0.1?package-id=efaa710aa22a7afd","type":"library","name":"github.com/robfig/cron/v3","version":"v3.0.1","cpe":"cpe:2.3:a:robfig:cron\\/v3:v3.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/robfig/cron/v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs="}]},{"bom-ref":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0?package-id=9bbc8b0422413c72","type":"library","name":"github.com/rogpeppe/go-internal","version":"v1.16.0","cpe":"cpe:2.3:a:rogpeppe:go-internal:v1.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogpeppe:go_internal:v1.16.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O9DK+vNMDVGLr2BeZqmpLeMjiMNkuXfcqntWbZV6S5g="}]},{"bom-ref":"pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c?package-id=5e103b6f10fbeebc","type":"library","name":"github.com/rust-secure-code/go-rustaudit","version":"v0.0.0-20250226111315-e20ec32e963c","cpe":"cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8gOLsYwaY2JwlTMT4brS5/9XJdrdIbmk2obvQ748CC0="}]},{"bom-ref":"pkg:golang/github.com/ryancurrah/gomodguard@v1.4.1?package-id=4b04f64e00a8e3ed","type":"library","name":"github.com/ryancurrah/gomodguard","version":"v1.4.1","cpe":"cpe:2.3:a:ryancurrah:gomodguard:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ryancurrah/gomodguard@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eWC8eUMNZ/wM/PWuZBv7JxxqT5fiIKSIyTvjb7Elr+g="}]},{"bom-ref":"pkg:golang/github.com/ryancurrah/gomodguard/v2@v2.1.3?package-id=8414cb89dd4d284b","type":"library","name":"github.com/ryancurrah/gomodguard/v2","version":"v2.1.3","cpe":"cpe:2.3:a:ryancurrah:gomodguard\\/v2:v2.1.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ryancurrah/gomodguard/v2@v2.1.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:E7sz3PJwE9Ba1reVxSpF6XLCPJZ74Kfw/LabTNM4GIA="}]},{"bom-ref":"pkg:golang/github.com/ryanrolds/sqlclosecheck@v0.6.0?package-id=a539bb438ec5d506","type":"library","name":"github.com/ryanrolds/sqlclosecheck","version":"v0.6.0","cpe":"cpe:2.3:a:ryanrolds:sqlclosecheck:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ryanrolds/sqlclosecheck@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pEyL9okISdg1F1SEpJNlrEotkTGerv5BMk7U4AG0eVg="}]},{"bom-ref":"pkg:golang/github.com/saferwall/pe@v1.6.5?package-id=00a1b15dde385769","type":"library","name":"github.com/saferwall/pe","version":"v1.6.5","cpe":"cpe:2.3:a:saferwall:pe:v1.6.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/saferwall/pe@v1.6.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CxgDvikdp9mnLb2kHKVyyRHbK/JSMrtslCaveXxIQ8M="}]},{"bom-ref":"pkg:golang/github.com/sagikazarmark/locafero@v0.12.0?package-id=cd177a02ec40074f","type":"library","name":"github.com/sagikazarmark/locafero","version":"v0.12.0","cpe":"cpe:2.3:a:sagikazarmark:locafero:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sagikazarmark/locafero@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/NQhBAkUb4+fH1jivKHWusDYFjMOOKU88eegjfxfHb4="}]},{"bom-ref":"pkg:golang/github.com/sanposhiho/wastedassign/v2@v2.1.0?package-id=e926ce7b849f37cb","type":"library","name":"github.com/sanposhiho/wastedassign/v2","version":"v2.1.0","cpe":"cpe:2.3:a:sanposhiho:wastedassign\\/v2:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sanposhiho/wastedassign/v2@v2.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:crurBF7fJKIORrV85u9UUpePDYGWnwvv3+A96WvwXT0="}]},{"bom-ref":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=f4c44df82aa4e49e","type":"library","name":"github.com/santhosh-tekuri/jsonschema/v5","version":"v5.3.1","cpe":"cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4="}]},{"bom-ref":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3?package-id=c20b008a43f442ea","type":"library","name":"github.com/santhosh-tekuri/jsonschema/v6","version":"v6.0.3","cpe":"cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1EYB5IzjZawrrnELUi78f9fPu57HuXjmddZPjrls/28="}]},{"bom-ref":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3?package-id=8d586434bf55f66a","type":"library","name":"github.com/santhosh-tekuri/jsonschema/v6","version":"v6.0.3","cpe":"cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1EYB5IzjZawrrnELUi78f9fPu57HuXjmddZPjrls/28="}]},{"bom-ref":"pkg:golang/github.com/sashamelentyev/interfacebloat@v1.1.0?package-id=a8a8157f8eaa6001","type":"library","name":"github.com/sashamelentyev/interfacebloat","version":"v1.1.0","cpe":"cpe:2.3:a:sashamelentyev:interfacebloat:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sashamelentyev/interfacebloat@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xdRdJp0irL086OyW1H/RTZTr1h/tMEOsumirXcOJqAw="}]},{"bom-ref":"pkg:golang/github.com/sashamelentyev/usestdlibvars@v1.29.0?package-id=17eeaf07f52cb3d4","type":"library","name":"github.com/sashamelentyev/usestdlibvars","version":"v1.29.0","cpe":"cpe:2.3:a:sashamelentyev:usestdlibvars:v1.29.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sashamelentyev/usestdlibvars@v1.29.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8J0MoRrw4/NAXtjQqTHrbW9NN+3iMf7Knkq057v4XOQ="}]},{"bom-ref":"pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=e6ae76e45159cefd","type":"library","name":"github.com/sassoftware/relic","version":"v7.2.1+incompatible","cpe":"cpe:2.3:a:sassoftware:relic:v7.2.1\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A="}]},{"bom-ref":"pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e?package-id=0afb7042c6407f48","type":"library","name":"github.com/scylladb/go-set","version":"v1.0.3-0.20200225121959-cc7b2070d91e","cpe":"cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7q6NSFZDeGfvvtIRwBrU/aegEYJYmvev0cHAwo17zZQ="}]},{"bom-ref":"pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=5af52920e2ee0ecb","type":"library","name":"github.com/secure-systems-lab/go-securesystemslib","version":"v0.11.0","cpe":"cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iuCR9kcMFD4QurdKrGvPLoKZLv9YvwPYVr0473BdtFs="}]},{"bom-ref":"pkg:golang/github.com/securego/gosec/v2@v2.29.0?package-id=e7e99f9ec960be7a","type":"library","name":"github.com/securego/gosec/v2","version":"v2.29.0","cpe":"cpe:2.3:a:securego:gosec\\/v2:v2.29.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/securego/gosec/v2@v2.29.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pF2HSLcnY5voqpxQumEe0O5YAAbvF4Syu4qeIewpLyc="}]},{"bom-ref":"pkg:golang/github.com/sergi/go-diff@v1.4.0?package-id=eadb73b749fc4f5b","type":"library","name":"github.com/sergi/go-diff","version":"v1.4.0","cpe":"cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sergi/go-diff@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw="}]},{"bom-ref":"pkg:golang/github.com/sergi/go-diff@v1.4.0?package-id=e54ec04bb9007f8e","type":"library","name":"github.com/sergi/go-diff","version":"v1.4.0","cpe":"cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sergi/go-diff@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw="}]},{"bom-ref":"pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=1d7cae0308057d41","type":"library","name":"github.com/shibumi/go-pathspec","version":"v1.3.0","cpe":"cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shibumi/go-pathspec@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI="}]},{"bom-ref":"pkg:golang/github.com/shirou/gopsutil@v3.21.11%2Bincompatible?package-id=237a3d65765a58a6","type":"library","name":"github.com/shirou/gopsutil","version":"v3.21.11+incompatible","cpe":"cpe:2.3:a:shirou:gopsutil:v3.21.11\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shirou/gopsutil@v3.21.11%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI="}]},{"bom-ref":"pkg:golang/github.com/shopspring/decimal@v1.4.0?package-id=ef24ba527352e9aa","type":"library","name":"github.com/shopspring/decimal","version":"v1.4.0","cpe":"cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shopspring/decimal@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k="}]},{"bom-ref":"pkg:golang/github.com/shurcool/githubv4@v0.0.0-20201206200315-234843c633fa?package-id=c2b967f8a655c7b6","type":"library","name":"github.com/shurcooL/githubv4","version":"v0.0.0-20201206200315-234843c633fa","cpe":"cpe:2.3:a:shurcooL:githubv4:v0.0.0-20201206200315-234843c633fa:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shurcooL/githubv4@v0.0.0-20201206200315-234843c633fa","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jozR3igKlnYCj9IVHOVump59bp07oIRoLQ/CcjMYIUA="}]},{"bom-ref":"pkg:golang/github.com/shurcool/graphql@v0.0.0-20200928012149-18c5c3165e3a?package-id=876e389af92e2309","type":"library","name":"github.com/shurcooL/graphql","version":"v0.0.0-20200928012149-18c5c3165e3a","cpe":"cpe:2.3:a:shurcooL:graphql:v0.0.0-20200928012149-18c5c3165e3a:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shurcooL/graphql@v0.0.0-20200928012149-18c5c3165e3a","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KikTa6HtAK8cS1qjvUvvq4QO21QnwC+EfvB+OAuZ/ZU="}]},{"bom-ref":"pkg:golang/github.com/sigstore/cosign/v3@v3.1.1?package-id=ca00dfd377e60aca","type":"library","name":"github.com/sigstore/cosign/v3","version":"v3.1.1","cpe":"cpe:2.3:a:sigstore:cosign\\/v3:v3.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/cosign/v3@v3.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vYdLHfelistuiexNAM8rXAL5aru55g6p8KxzTOR8MO8="}]},{"bom-ref":"pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=d34f319e9e549aff","type":"library","name":"github.com/sigstore/protobuf-specs","version":"v0.5.1","cpe":"cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/5OPaNuolRJmQfeZLayJGFXMpsRJEdgC6ah1/+7Px7U="}]},{"bom-ref":"pkg:golang/github.com/sigstore/rekor@v1.5.2?package-id=db5cd694b3d648c7","type":"library","name":"github.com/sigstore/rekor","version":"v1.5.2","cpe":"cpe:2.3:a:sigstore:rekor:v1.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/rekor@v1.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:k6pX4o1zFAzAvDbXiVIp5IHj1b0wcDaxsbsbNpuRO8o="}]},{"bom-ref":"pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.2-0.20260601073857-5d098a2b6443?package-id=cff6f88a5345d484","type":"library","name":"github.com/sigstore/rekor-tiles/v2","version":"v2.2.2-0.20260601073857-5d098a2b6443","cpe":"cpe:2.3:a:sigstore:rekor-tiles\\/v2:v2.2.2-0.20260601073857-5d098a2b6443:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.2-0.20260601073857-5d098a2b6443","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:rekor_tiles\\/v2:v2.2.2-0.20260601073857-5d098a2b6443:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/CO8F6m3Bo/f59bZo5dv1sTIfUnQqVnepIdDV24KoDw="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=0b01fe5ea917fe62","type":"library","name":"github.com/sigstore/sigstore","version":"v1.10.8","cpe":"cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore@v1.10.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1Mgkxvkw4AXMfIP1DOjc6kw0GkUgA8pGVpveN/EfOq4="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore-go@v1.2.1?package-id=94b9c43f433c024d","type":"library","name":"github.com/sigstore/sigstore-go","version":"v1.2.1","cpe":"cpe:2.3:a:sigstore:sigstore-go:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore-go@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:sigstore_go:v1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YWP/rDbBaEBvtbkj6xtwsSj38ZCFEhTVVadNOXjVe3A="}]},{"bom-ref":"pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=6820b3ef742c2e14","type":"library","name":"github.com/sigstore/timestamp-authority/v2","version":"v2.1.2","cpe":"cpe:2.3:a:sigstore:timestamp-authority\\/v2:v2.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:timestamp_authority\\/v2:v2.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7DDhnknLL4w8VwomyvW2W8qblOS9LDR8oihna+jc7Ls="}]},{"bom-ref":"pkg:golang/github.com/sirupsen/logrus@v1.10.2?package-id=a50d10c5a936e134","type":"library","name":"github.com/sirupsen/logrus","version":"v1.10.2","cpe":"cpe:2.3:a:turbopuffer:logrus:v1.10.2:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/sirupsen/logrus@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G2SED73/qrAu6YwbdxOD6peLkCBI3z7L+ykJFTXJBBo="}]},{"bom-ref":"pkg:golang/github.com/sirupsen/logrus@v1.10.2?package-id=112aadf5a5101906","type":"library","name":"github.com/sirupsen/logrus","version":"v1.10.2","cpe":"cpe:2.3:a:turbopuffer:logrus:v1.10.2:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/sirupsen/logrus@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G2SED73/qrAu6YwbdxOD6peLkCBI3z7L+ykJFTXJBBo="}]},{"bom-ref":"pkg:golang/github.com/sivchari/containedctx@v1.0.3?package-id=71e66fba91e8dbbd","type":"library","name":"github.com/sivchari/containedctx","version":"v1.0.3","cpe":"cpe:2.3:a:sivchari:containedctx:v1.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sivchari/containedctx@v1.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:x+etemjbsh2fB5ewm5FeLNi5bUjK0V8n0RB+Wwfd0XE="}]},{"bom-ref":"pkg:golang/github.com/skeema/knownhosts@v1.3.1?package-id=44804b8120b85a3f","type":"library","name":"github.com/skeema/knownhosts","version":"v1.3.1","cpe":"cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/skeema/knownhosts@v1.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:X2osQ+RAjK76shCbvhHHHVl3ZlgDm8apHEHFqRjnBY8="}]},{"bom-ref":"pkg:golang/github.com/skeema/knownhosts@v1.3.2?package-id=71d9fe37442f8273","type":"library","name":"github.com/skeema/knownhosts","version":"v1.3.2","cpe":"cpe:2.3:a:skeema:knownhosts:v1.3.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/skeema/knownhosts@v1.3.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EDL9mgf4NzwMXCTfaxSD/o/a5fxDw/xL9nkU28JjdBg="}]},{"bom-ref":"pkg:golang/github.com/slack-go/slack@v0.29.0?package-id=e9ad7fc77888f912","type":"library","name":"github.com/slack-go/slack","version":"v0.29.0","cpe":"cpe:2.3:a:slack-go:slack:v0.29.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/slack-go/slack@v0.29.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:slack_go:slack:v0.29.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slack:slack:v0.29.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ohhMNgp9DmPKiLhH/pNZV4NxhOXKgNy0SH8FzVHNerI="}]},{"bom-ref":"pkg:golang/github.com/sonatard/noctx@v0.5.1?package-id=d7257b8036ea421c","type":"library","name":"github.com/sonatard/noctx","version":"v0.5.1","cpe":"cpe:2.3:a:sonatard:noctx:v0.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sonatard/noctx@v0.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wklWg9c9ZYugOAk7qG4yP4PBrlQsmSLPTvW1K4PRQMs="}]},{"bom-ref":"pkg:golang/github.com/sourcegraph/go-diff@v0.9.0?package-id=8b39571db45f2154","type":"library","name":"github.com/sourcegraph/go-diff","version":"v0.9.0","cpe":"cpe:2.3:a:sourcegraph:go-diff:v0.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sourcegraph/go-diff@v0.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sourcegraph:go_diff:v0.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7xcVsayWHhvxZGrqt1o89vvBApCa4nyCgO7tNxDHJ+Q="}]},{"bom-ref":"pkg:golang/github.com/spaolacci/murmur3@v1.1.0?package-id=647a97e0eebf324a","type":"library","name":"github.com/spaolacci/murmur3","version":"v1.1.0","cpe":"cpe:2.3:a:spaolacci:murmur3:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spaolacci/murmur3@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7c1g84S4BPRrfL5Xrdp6fOJ206sU9y293DDHaoy0bLI="}]},{"bom-ref":"pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb?package-id=77b6a97fae96f2c5","type":"library","name":"github.com/spdx/gordf","version":"v0.0.0-20250128162952-000978ccd6fb","cpe":"cpe:2.3:a:spdx:gordf:v0.0.0-20250128162952-000978ccd6fb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spdx/gordf@v0.0.0-20250128162952-000978ccd6fb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7G2Czq97VORM5xNRrD8tSQdhoXPRs8s+Otlc7st9TS0="}]},{"bom-ref":"pkg:golang/github.com/spdx/tools-golang@v0.5.7?package-id=5e97ba94fb7276eb","type":"library","name":"github.com/spdx/tools-golang","version":"v0.5.7","cpe":"cpe:2.3:a:spdx:tools-golang:v0.5.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spdx/tools-golang@v0.5.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:spdx:tools_golang:v0.5.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+sWcKGnhwp3vLdMqPcLdA6QK679vd86cK9hQWH3AwCg="}]},{"bom-ref":"pkg:golang/github.com/spf13/afero@v1.15.0?package-id=57a3ff81c176d507","type":"library","name":"github.com/spf13/afero","version":"v1.15.0","cpe":"cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/afero@v1.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="}]},{"bom-ref":"pkg:golang/github.com/spf13/cast@v1.10.0?package-id=e7a53bac7e43dcf4","type":"library","name":"github.com/spf13/cast","version":"v1.10.0","cpe":"cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cast@v1.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=aaf4307e8bf5eb4c","type":"library","name":"github.com/spf13/cobra","version":"v1.10.2","cpe":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=c1821bcc8d0be6d8","type":"library","name":"github.com/spf13/cobra","version":"v1.10.2","cpe":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=ec9ed93888749dc0","type":"library","name":"github.com/spf13/pflag","version":"v1.0.10","cpe":"cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=6a9d5cf044ee8c3a","type":"library","name":"github.com/spf13/pflag","version":"v1.0.10","cpe":"cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="}]},{"bom-ref":"pkg:golang/github.com/spf13/viper@v1.21.0?package-id=386a99ae44051710","type":"library","name":"github.com/spf13/viper","version":"v1.21.0","cpe":"cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/viper@v1.21.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="}]},{"bom-ref":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=19c7011cfc5a1b62","type":"library","name":"github.com/spiffe/go-spiffe/v2","version":"v2.7.0","cpe":"cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uXe1MflJoHw58wAUvxVlcM7WpKtijWG7I1UidcGh6g4="}]},{"bom-ref":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=32365a68d26a5027","type":"library","name":"github.com/spiffe/go-spiffe/v2","version":"v2.7.0","cpe":"cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uXe1MflJoHw58wAUvxVlcM7WpKtijWG7I1UidcGh6g4="}]},{"bom-ref":"pkg:golang/github.com/ssgreg/nlreturn/v2@v2.2.1?package-id=4af9ae3be2799ef3","type":"library","name":"github.com/ssgreg/nlreturn/v2","version":"v2.2.1","cpe":"cpe:2.3:a:ssgreg:nlreturn\\/v2:v2.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ssgreg/nlreturn/v2@v2.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:X4XDI7jstt3ySqGU86YGAURbxw3oTDPK9sPEi6YEwQ0="}]},{"bom-ref":"pkg:golang/github.com/stbenjam/no-sprintf-host-port@v0.3.1?package-id=d76dcc966b658b58","type":"library","name":"github.com/stbenjam/no-sprintf-host-port","version":"v0.3.1","cpe":"cpe:2.3:a:stbenjam:no-sprintf-host-port:v0.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stbenjam/no-sprintf-host-port@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:stbenjam:no_sprintf_host_port:v0.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AyX7+dxI4IdLBPtDbsGAyqiTSLpCP9hWRrXQDU4Cm/g="}]},{"bom-ref":"pkg:golang/github.com/stretchr/objx@v0.5.3?package-id=fe58719909196778","type":"library","name":"github.com/stretchr/objx","version":"v0.5.3","cpe":"cpe:2.3:a:stretchr:objx:v0.5.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/objx@v0.5.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jmXUvGomnU1o3W/V5h2VEradbpJDwGrzugQQvL0POH4="}]},{"bom-ref":"pkg:golang/github.com/stretchr/testify@v1.12.1?package-id=904a9b851a1f8e27","type":"library","name":"github.com/stretchr/testify","version":"v1.12.1","cpe":"cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/testify@v1.12.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWDWE="}]},{"bom-ref":"pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=0f91e5ec09ff9c41","type":"library","name":"github.com/subosito/gotenv","version":"v1.6.0","cpe":"cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/subosito/gotenv@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="}]},{"bom-ref":"pkg:golang/github.com/tetafro/godot@v1.5.6?package-id=c08222486f6d4d04","type":"library","name":"github.com/tetafro/godot","version":"v1.5.6","cpe":"cpe:2.3:a:tetafro:godot:v1.5.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tetafro/godot@v1.5.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IEkrFCwXaYHlOn4mGzGS3F3dkP6m9t0jpwqBFPIkKiA="}]},{"bom-ref":"pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=a931e14c04cbbc9c","type":"library","name":"github.com/theupdateframework/go-tuf","version":"v0.7.0","cpe":"cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI="}]},{"bom-ref":"pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=dd25c75a7efb4e1d","type":"library","name":"github.com/theupdateframework/go-tuf/v2","version":"v2.4.2","cpe":"cpe:2.3:a:theupdateframework:go-tuf\\/v2:v2.4.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:theupdateframework:go_tuf\\/v2:v2.4.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w7976/W8uTwlsegP5nRymlpjPgrwSh+AXUf85is6nJk="}]},{"bom-ref":"pkg:golang/github.com/thoas/go-funk@v0.9.3?package-id=51c6a19b84ad1ac6","type":"library","name":"github.com/thoas/go-funk","version":"v0.9.3","cpe":"cpe:2.3:a:thoas:go-funk:v0.9.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/thoas/go-funk@v0.9.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:thoas:go_funk:v0.9.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7+nAEx3kn5ZJcnDm2Bh23N2yOtweO14bi//dvRtgLpw="}]},{"bom-ref":"pkg:golang/github.com/tidwall/gjson@v1.19.0?package-id=04338fb47390afd1","type":"library","name":"github.com/tidwall/gjson","version":"v1.19.0","cpe":"cpe:2.3:a:tidwall:gjson:v1.19.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/gjson@v1.19.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xwxm7n691Uf3u5OFjzngavjGTh55KX5q/9w9xHW88JU="}]},{"bom-ref":"pkg:golang/github.com/tidwall/jsonc@v0.3.3?package-id=3b6238052db5e671","type":"library","name":"github.com/tidwall/jsonc","version":"v0.3.3","cpe":"cpe:2.3:a:tidwall:jsonc:v0.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/jsonc@v0.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RVQqL3xFfDkKKXIDsrBiVQiEpBtxoKbmMXONb2H/y2w="}]},{"bom-ref":"pkg:golang/github.com/tidwall/match@v1.2.0?package-id=c49f85af4acbcaf6","type":"library","name":"github.com/tidwall/match","version":"v1.2.0","cpe":"cpe:2.3:a:tidwall:match:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/match@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0pt8FlkOwjN2fPt4bIl4BoNxb98gGHN2ObFEDkrfZnM="}]},{"bom-ref":"pkg:golang/github.com/tidwall/pretty@v1.2.1?package-id=fdfa75cc6c742ae7","type":"library","name":"github.com/tidwall/pretty","version":"v1.2.1","cpe":"cpe:2.3:a:tidwall:pretty:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/pretty@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4="}]},{"bom-ref":"pkg:golang/github.com/timakin/bodyclose@v0.0.0-20260723120731-857993a2939c?package-id=baa2bafe768ad70e","type":"library","name":"github.com/timakin/bodyclose","version":"v0.0.0-20260723120731-857993a2939c","cpe":"cpe:2.3:a:timakin:bodyclose:v0.0.0-20260723120731-857993a2939c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/timakin/bodyclose@v0.0.0-20260723120731-857993a2939c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:d/FUP8GD4QiY/rdFzZmBu3KqL9eBNVzMu7W/5pGkaMM="}]},{"bom-ref":"pkg:golang/github.com/timonwong/loggercheck@v0.12.0?package-id=7f032e9d541e81ac","type":"library","name":"github.com/timonwong/loggercheck","version":"v0.12.0","cpe":"cpe:2.3:a:timonwong:loggercheck:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/timonwong/loggercheck@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7Cb9XGLJZSWYNjgL459DIhpSiEHupD+MLQ6vaN2Pl3g="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go/v2@v2.7.0?package-id=8e899e6183c7616b","type":"library","name":"github.com/tink-crypto/tink-go/v2","version":"v2.7.0","cpe":"cpe:2.3:a:tink-crypto:tink-go\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go\\/v2:v2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:k7QnUXJ1cRDpvoy/5l1FimZqMAArRff8vjUqzi5N04o="}]},{"bom-ref":"pkg:golang/github.com/tklauser/go-sysconf@v0.4.0?package-id=003adf9d2b04f89f","type":"library","name":"github.com/tklauser/go-sysconf","version":"v0.4.0","cpe":"cpe:2.3:a:tklauser:go-sysconf:v0.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tklauser/go-sysconf@v0.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tklauser:go_sysconf:v0.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7H0uAN+7RkwWRaxhYXDLqa5V3LPrJeV8wmD9dRUgPQU="}]},{"bom-ref":"pkg:golang/github.com/tklauser/numcpus@v0.12.0?package-id=29f3bd5e07a2ca65","type":"library","name":"github.com/tklauser/numcpus","version":"v0.12.0","cpe":"cpe:2.3:a:tklauser:numcpus:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tklauser/numcpus@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NR85qdvHA9pFse3x3weVZ0r0ST8R6l5RHbZrlRaqob4="}]},{"bom-ref":"pkg:golang/github.com/tomarrell/wrapcheck/v2@v2.12.0?package-id=61bb9a7837442b0a","type":"library","name":"github.com/tomarrell/wrapcheck/v2","version":"v2.12.0","cpe":"cpe:2.3:a:tomarrell:wrapcheck\\/v2:v2.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tomarrell/wrapcheck/v2@v2.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:H/qQ1aNWz/eeIhxKAFvkfIA+N7YDvq6TWVFL27Of9is="}]},{"bom-ref":"pkg:golang/github.com/tommy-muehle/go-mnd/v2@v2.5.1?package-id=80d21b319bcce46d","type":"library","name":"github.com/tommy-muehle/go-mnd/v2","version":"v2.5.1","cpe":"cpe:2.3:a:tommy-muehle:go-mnd\\/v2:v2.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tommy-muehle/go-mnd/v2@v2.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tommy-muehle:go_mnd\\/v2:v2.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tommy_muehle:go-mnd\\/v2:v2.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tommy_muehle:go_mnd\\/v2:v2.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tommy:go-mnd\\/v2:v2.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tommy:go_mnd\\/v2:v2.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NowYhSdyE/1zwK9QCLeRb6USWdoif80Ie+v+yU8u1Zw="}]},{"bom-ref":"pkg:golang/github.com/tomnomnom/linkheader@v0.0.0-20250811210735-e5fe3b51442e?package-id=339235c7dbd5ef29","type":"library","name":"github.com/tomnomnom/linkheader","version":"v0.0.0-20250811210735-e5fe3b51442e","cpe":"cpe:2.3:a:tomnomnom:linkheader:v0.0.0-20250811210735-e5fe3b51442e:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tomnomnom/linkheader@v0.0.0-20250811210735-e5fe3b51442e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tD38/4xg4nuQCASJ/JxcvCHNb46w0cdAaJfkzQOO1bA="}]},{"bom-ref":"pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0?package-id=8cade2e123c43e3f","type":"library","name":"github.com/tonistiigi/go-csvvalue","version":"v0.0.0-20240814133006-030d3b2625d0","cpe":"cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2f304B10LaZdB8kkVEaoXvAMVan2tl9AiK4G0odjQtE="}]},{"bom-ref":"pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=9833931968c24282","type":"library","name":"github.com/transparency-dev/formats","version":"v0.1.1","cpe":"cpe:2.3:a:transparency-dev:formats:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/transparency-dev/formats@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency_dev:formats:v0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency:formats:v0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI="}]},{"bom-ref":"pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=a3dd07099d4b3c8a","type":"library","name":"github.com/transparency-dev/merkle","version":"v0.0.2","cpe":"cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/transparency-dev/merkle@v0.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4="}]},{"bom-ref":"pkg:golang/github.com/ulikunitz/xz@v0.5.16?package-id=dddc558a2e41841e","type":"library","name":"github.com/ulikunitz/xz","version":"v0.5.16","cpe":"cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ulikunitz/xz@v0.5.16","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ld6NyySjx5lowVKwJvMRLnW5nxKX/xnpSiFYZ/Lxur0="}]},{"bom-ref":"pkg:golang/github.com/ulikunitz/xz@v0.5.17?package-id=fb02d0b14499945f","type":"library","name":"github.com/ulikunitz/xz","version":"v0.5.17","cpe":"cpe:2.3:a:ulikunitz:xz:v0.5.17:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ulikunitz/xz@v0.5.17","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:flR0y/x1hgM8EGV1AW3Xll6T413G0glV8UfBwR617V4="}]},{"bom-ref":"pkg:golang/github.com/ultraware/funlen@v0.2.0?package-id=4f8b685f0578571f","type":"library","name":"github.com/ultraware/funlen","version":"v0.2.0","cpe":"cpe:2.3:a:ultraware:funlen:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ultraware/funlen@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gCHmCn+d2/1SemTdYMiKLAHFYxTYz7z9VIDRaTGyLkI="}]},{"bom-ref":"pkg:golang/github.com/ultraware/whitespace@v0.2.0?package-id=2f7878587090ea40","type":"library","name":"github.com/ultraware/whitespace","version":"v0.2.0","cpe":"cpe:2.3:a:ultraware:whitespace:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ultraware/whitespace@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TYowo2m9Nfj1baEQBjuHzvMRbp19i+RCcRYrSWoFa+g="}]},{"bom-ref":"pkg:golang/github.com/uudashr/gocognit@v1.2.1?package-id=93f01d16f3d84db0","type":"library","name":"github.com/uudashr/gocognit","version":"v1.2.1","cpe":"cpe:2.3:a:uudashr:gocognit:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/uudashr/gocognit@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CSJynt5txTnORn/DkhiB4mZjwPuifyASC8/6Q0I/QS4="}]},{"bom-ref":"pkg:golang/github.com/uudashr/iface@v1.5.1?package-id=ec6b163cb3f36038","type":"library","name":"github.com/uudashr/iface","version":"v1.5.1","cpe":"cpe:2.3:a:uudashr:iface:v1.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/uudashr/iface@v1.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BS3yrgaT55s3dAtJoxuTnsZNbsejq/mVuzp49YDyfBA="}]},{"bom-ref":"pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20230925121702-07e42b3cdba0?package-id=c034d92bd00be06a","type":"library","name":"github.com/wagoodman/go-progress","version":"v0.0.0-20230925121702-07e42b3cdba0","cpe":"cpe:2.3:a:wagoodman:go-progress:v0.0.0-20230925121702-07e42b3cdba0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20230925121702-07e42b3cdba0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:wagoodman:go_progress:v0.0.0-20230925121702-07e42b3cdba0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0KGbf+0SMg+UFy4e1A/CPVvXn21f1qtWdeJwxZFoQG8="}]},{"bom-ref":"pkg:golang/github.com/whyrusleeping/cbor-gen@v0.1.3-0.20240731173018-74d74643234c?package-id=eee69ccaea1fe4c4","type":"library","name":"github.com/whyrusleeping/cbor-gen","version":"v0.1.3-0.20240731173018-74d74643234c","cpe":"cpe:2.3:a:whyrusleeping:cbor-gen:v0.1.3-0.20240731173018-74d74643234c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/whyrusleeping/cbor-gen@v0.1.3-0.20240731173018-74d74643234c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:whyrusleeping:cbor_gen:v0.1.3-0.20240731173018-74d74643234c:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Jmc9fHbd0LKFmS5CkLgczNUyW36UbiyvbHCG9xCTyiw="}]},{"bom-ref":"pkg:golang/github.com/x448/float16@v0.8.4?package-id=413366d78e6a286c","type":"library","name":"github.com/x448/float16","version":"v0.8.4","cpe":"cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/x448/float16@v0.8.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="}]},{"bom-ref":"pkg:golang/github.com/xanzy/ssh-agent@v0.3.3?package-id=a40a80bb17249690","type":"library","name":"github.com/xanzy/ssh-agent","version":"v0.3.3","cpe":"cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xanzy/ssh-agent@v0.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM="}]},{"bom-ref":"pkg:golang/github.com/xanzy/ssh-agent@v0.3.3?package-id=43e4bddd5fe095bf","type":"library","name":"github.com/xanzy/ssh-agent","version":"v0.3.3","cpe":"cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xanzy/ssh-agent@v0.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=8d3359a3be622488","type":"library","name":"github.com/xeipuuv/gojsonpointer","version":"v0.0.0-20190905194746-02993c407bfb","cpe":"cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=2429773a33fd3e90","type":"library","name":"github.com/xeipuuv/gojsonreference","version":"v0.0.0-20180127040603-bd5ef7bd5415","cpe":"cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0?package-id=806b0d14bbdc7157","type":"library","name":"github.com/xeipuuv/gojsonschema","version":"v1.2.0","cpe":"cpe:2.3:a:xeipuuv:gojsonschema:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74="}]},{"bom-ref":"pkg:golang/github.com/xen0n/gosmopolitan@v1.3.0?package-id=5c77fd15a1bd2a6e","type":"library","name":"github.com/xen0n/gosmopolitan","version":"v1.3.0","cpe":"cpe:2.3:a:xen0n:gosmopolitan:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xen0n/gosmopolitan@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zAZI1zefvo7gcpbCOrPSHJZJYA9ZgLfJqtKzZ5pHqQM="}]},{"bom-ref":"pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0?package-id=e613d28352f68667","type":"library","name":"github.com/xhit/go-str2duration/v2","version":"v2.1.0","cpe":"cpe:2.3:a:xhit:go-str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:xhit:go_str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lxklc02Drh6ynqX+DdPyp5pCKLUQpRT8bp8Ydu2Bstc="}]},{"bom-ref":"pkg:golang/github.com/xo/terminfo@v1.0.0?package-id=c186771adaa31ea9","type":"library","name":"github.com/xo/terminfo","version":"v1.0.0","cpe":"cpe:2.3:a:xo:terminfo:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xo/terminfo@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2ZpYzqWzyyytjk3TP6aJVDhkMAkc99/1xKQdA3TDTBY="}]},{"bom-ref":"pkg:golang/github.com/yagipy/maintidx@v1.0.0?package-id=e7a5d9a89fe42dee","type":"library","name":"github.com/yagipy/maintidx","version":"v1.0.0","cpe":"cpe:2.3:a:yagipy:maintidx:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yagipy/maintidx@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h5NvIsCz+nRDapQ0exNv4aJ0yXSI0420omVANTv3GJM="}]},{"bom-ref":"pkg:golang/github.com/yeya24/promlinter@v0.3.0?package-id=74b9780f9d7812d8","type":"library","name":"github.com/yeya24/promlinter","version":"v0.3.0","cpe":"cpe:2.3:a:yeya24:promlinter:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yeya24/promlinter@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JVDbMp08lVCP7Y6NP3qHroGAO6z2yGKQtS5JsjqtoFs="}]},{"bom-ref":"pkg:golang/github.com/ykadowak/zerologlint@v0.1.5?package-id=2b87dcd976812964","type":"library","name":"github.com/ykadowak/zerologlint","version":"v0.1.5","cpe":"cpe:2.3:a:ykadowak:zerologlint:v0.1.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ykadowak/zerologlint@v0.1.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Gy/fMz1dFQN9JZTPjv1hxEk+sRWm05row04Yoolgdiw="}]},{"bom-ref":"pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=28cab0ee9de4556f","type":"library","name":"github.com/youmark/pkcs8","version":"v0.0.0-20240726163527-a2c0da244d78","cpe":"cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ilQV1hzziu+LLM3zUTJ0trRztfwgjqKnBWNtSRkbmwM="}]},{"bom-ref":"pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4?package-id=fcec6f9de843b76d","type":"library","name":"github.com/yusufpapurcu/wmi","version":"v1.2.4","cpe":"cpe:2.3:a:yusufpapurcu:wmi:v1.2.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0="}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.3?package-id=92efad8e95f27ddb#analyze","type":"library","name":"github/codeql-action/analyze","version":"v4.38.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v4.38.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.3#analyze","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.3?package-id=c4dfc48f20db0b89#autobuild","type":"library","name":"github/codeql-action/autobuild","version":"v4.38.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v4.38.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.3#autobuild","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.3?package-id=792e1a741b04c512#init","type":"library","name":"github/codeql-action/init","version":"v4.38.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v4.38.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.3#init","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.3?package-id=6097c379badceebc#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v4.38.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4.38.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.3#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4.38.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard-analysis.yml"}]},{"bom-ref":"pkg:golang/gitlab.com/bosi/decorder@v0.4.2?package-id=f95fa79b8e67398c","type":"library","name":"gitlab.com/bosi/decorder","version":"v0.4.2","cpe":"cpe:2.3:a:bosi:decorder:v0.4.2:*:*:*:*:*:*:*","purl":"pkg:golang/gitlab.com/bosi/decorder@v0.4.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qbQaV3zgwnBZ4zPMhGLW4KZe7A7NwxEhJx39R3shffo="}]},{"bom-ref":"pkg:golang/gitlab.com/digitalxero/go-conventional-commit@v1.0.7?package-id=d1e86d0e8ae0e9b9","type":"library","name":"gitlab.com/digitalxero/go-conventional-commit","version":"v1.0.7","cpe":"cpe:2.3:a:digitalxero:go-conventional-commit:v1.0.7:*:*:*:*:*:*:*","purl":"pkg:golang/gitlab.com/digitalxero/go-conventional-commit@v1.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:digitalxero:go_conventional_commit:v1.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8/dO6WWG+98PMhlZowt/YjuiKhqhGlOCwlIV8SqqGh8="}]},{"bom-ref":"pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=bfa0b6b279141ede","type":"library","name":"gitlab.com/gitlab-org/api/client-go","version":"v1.46.0","cpe":"cpe:2.3:a:gitlab-org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab-org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab_org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab_org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YxBWFZIFYKcGESCb9fpkwzouo+apyB9pr/XTWzNoL24="}]},{"bom-ref":"pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=c7730ac55cdee616","type":"library","name":"gitlab.com/gitlab-org/api/client-go","version":"v1.46.0","cpe":"cpe:2.3:a:gitlab-org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab-org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab_org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab_org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YxBWFZIFYKcGESCb9fpkwzouo+apyB9pr/XTWzNoL24="}]},{"bom-ref":"pkg:golang/go-simpler.org/musttag@v0.14.0?package-id=a13a478cf7ea414b","type":"library","name":"go-simpler.org/musttag","version":"v0.14.0","purl":"pkg:golang/go-simpler.org/musttag@v0.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XGySZATqQYSEV3/YTy+iX+aofbZZllJaqwFWs+RTtSo="}]},{"bom-ref":"pkg:golang/go-simpler.org/sloglint@v0.12.0?package-id=5965b100a733e993","type":"library","name":"go-simpler.org/sloglint","version":"v0.12.0","purl":"pkg:golang/go-simpler.org/sloglint@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UzWDlLWNE5FLqsvyq3tWYHuQMbqrervOhT8qPl4Mmw4="}]},{"bom-ref":"pkg:golang/go.augendre.info/arangolint@v0.4.0?package-id=efdf6813ce194467","type":"library","name":"go.augendre.info/arangolint","version":"v0.4.0","purl":"pkg:golang/go.augendre.info/arangolint@v0.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xSCZjRoS93nXazBSg5d0OGCi9APPLNMmmLrC995tR50="}]},{"bom-ref":"pkg:golang/go.augendre.info/fatcontext@v0.10.1?package-id=2e8068fb35263cb7","type":"library","name":"go.augendre.info/fatcontext","version":"v0.10.1","purl":"pkg:golang/go.augendre.info/fatcontext@v0.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HCS/+eob32cM0mEtmZM6NiXdqvS5KiZmsR+fCubTpbc="}]},{"bom-ref":"pkg:golang/go.digitalxero.dev/go-msix@v0.3.1?package-id=28eb8d1e2d3c35a6","type":"library","name":"go.digitalxero.dev/go-msix","version":"v0.3.1","purl":"pkg:golang/go.digitalxero.dev/go-msix@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:V5E8PuFkA3Fr3VFYX6pTUutriogYC9sgxIWhzf9sSKw="}]},{"bom-ref":"pkg:golang/go.etcd.io/bbolt@v1.5.0?package-id=ca77a2c7fc710584","type":"library","name":"go.etcd.io/bbolt","version":"v1.5.0","purl":"pkg:golang/go.etcd.io/bbolt@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S7GAl7Fxv12yohbwFfIbQCGDWbQbtDGPET4P/bD4lxU="}]},{"bom-ref":"pkg:golang/go.mozilla.org/pkcs7@v0.9.0?package-id=0d170d6f8261016b","type":"library","name":"go.mozilla.org/pkcs7","version":"v0.9.0","purl":"pkg:golang/go.mozilla.org/pkcs7@v0.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yM4/HS9dYv7ri2biPtxt8ikvB37a980dg69/pKmS+eI="}]},{"bom-ref":"pkg:golang/go.opencensus.io@v0.24.0?package-id=1b1445bd5d28512a","type":"library","name":"go.opencensus.io","version":"v0.24.0","purl":"pkg:golang/go.opencensus.io@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a00544d9cf935bfa","type":"library","name":"go.opentelemetry.io/auto/sdk","version":"v1.2.1","cpe":"cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=b0b8363b475428c5","type":"library","name":"go.opentelemetry.io/auto/sdk","version":"v1.2.1","cpe":"cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.45.0?package-id=93fe61f064c053cc","type":"library","name":"go.opentelemetry.io/contrib/detectors/gcp","version":"v1.45.0","cpe":"cpe:2.3:a:contrib:detectors\\/gcp:v1.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9jR0ZPRok9ryaOQ2Wx8rg5F7Aon59mxrqbVI60/vlBk="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.45.0?package-id=f8038b07d8ff4e6b","type":"library","name":"go.opentelemetry.io/contrib/detectors/gcp","version":"v1.45.0","cpe":"cpe:2.3:a:contrib:detectors\\/gcp:v1.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9jR0ZPRok9ryaOQ2Wx8rg5F7Aon59mxrqbVI60/vlBk="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.69.0?package-id=86898f25c2487373","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc","version":"v0.69.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.69.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.69.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2yEATaop1/a1I4psnSLgWVPLWwCzkqWakgJy7xTDVy0="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.70.0?package-id=c72edd5661753827","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc","version":"v0.70.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.70.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.70.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oECp5f+hN7nkwjU/8BxQ/q23bGPb8FIrD839owX222E="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0?package-id=2e5e2097a23c0dc3","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","version":"v0.70.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.70.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LMuyCAyfalSjDyjdC65nK6N0zoTT63+E/u95X0JovZI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0?package-id=31de8eb7ba2c0a71","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","version":"v0.70.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.70.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.70.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LMuyCAyfalSjDyjdC65nK6N0zoTT63+E/u95X0JovZI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel@v1.45.0?package-id=f27770650f676674","type":"library","name":"go.opentelemetry.io/otel","version":"v1.45.0","cpe":"cpe:2.3:a:opentelemetry:opentelemetry:v1.45.0:*:*:*:*:go:*:*","purl":"pkg:golang/go.opentelemetry.io/otel@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pdrWmLHofpubmArBv1LgFSv1Z0Ie/ppdZzu+kUN5EeU="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel@v1.46.0?package-id=b6a9f7b8d715745f","type":"library","name":"go.opentelemetry.io/otel","version":"v1.46.0","cpe":"cpe:2.3:a:opentelemetry:opentelemetry:v1.46.0:*:*:*:*:go:*:*","purl":"pkg:golang/go.opentelemetry.io/otel@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FHt5/CDyVxi/8IM1CH7VE/rRgq3kLHa2mSTVMO8AWyc="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0?package-id=f9a727401b6a9791","type":"library","name":"go.opentelemetry.io/otel/metric","version":"v1.45.0","cpe":"cpe:2.3:a:otel:metric:v1.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7Eg1uH7CJ5cXv9is6tnBe1FI6rj1nwUdbFypRm3br/M="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0?package-id=1e4e83998f7ff479","type":"library","name":"go.opentelemetry.io/otel/metric","version":"v1.46.0","cpe":"cpe:2.3:a:otel:metric:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yBnkXvgV7AXFILZc5K6IZe/CBFF3OS7BJ8ov6/lj0K8="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.45.0?package-id=df478624a6075e9d","type":"library","name":"go.opentelemetry.io/otel/sdk","version":"v1.45.0","cpe":"cpe:2.3:a:otel:sdk:v1.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4VVSMgQ83dUgW2aoX5f6JgLvHwIvzcuLnF9lUdCSpCw="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0?package-id=ea0276298788651c","type":"library","name":"go.opentelemetry.io/otel/sdk","version":"v1.46.0","cpe":"cpe:2.3:a:otel:sdk:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h5CNQQjEbuQXY/JfZtgt3i7HVFV3aHPO2OAwO2eTYPI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.45.0?package-id=cb1500f908452274","type":"library","name":"go.opentelemetry.io/otel/sdk/metric","version":"v1.45.0","cpe":"cpe:2.3:a:otel:sdk\\/metric:v1.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oVFszMfyj1Am6s24Vtc7wBb8BKLcwepJjNEYILuiE3o="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0?package-id=0e53e098f45ac87b","type":"library","name":"go.opentelemetry.io/otel/sdk/metric","version":"v1.46.0","cpe":"cpe:2.3:a:otel:sdk\\/metric:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0piZ26EG4RBfebb2jhDH6ERCYHoVWduc3kLgPCwSnSE="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0?package-id=8e426af775fa3244","type":"library","name":"go.opentelemetry.io/otel/trace","version":"v1.45.0","cpe":"cpe:2.3:a:otel:trace:v1.45.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:l/mP6Uv7oNO7/TblbhpbgMidxhq1uO/rPsikOyVhxag="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0?package-id=c37dc03d5daea5aa","type":"library","name":"go.opentelemetry.io/otel/trace","version":"v1.46.0","cpe":"cpe:2.3:a:otel:trace:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OULy7ccdJnZtJ0UDYFOIGaCmiWzJ8Vi2G/Rsu60qs1c="}]},{"bom-ref":"pkg:golang/go.uber.org/atomic@v1.11.0?package-id=38091b93dc8e6bf5","type":"library","name":"go.uber.org/atomic","version":"v1.11.0","purl":"pkg:golang/go.uber.org/atomic@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZvwS0R+56ePWxUNi+Atn9dWONBPp/AUETXlHW0DxSjE="}]},{"bom-ref":"pkg:golang/go.uber.org/mock@v0.6.0?package-id=a1834554ba05715e","type":"library","name":"go.uber.org/mock","version":"v0.6.0","purl":"pkg:golang/go.uber.org/mock@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hyF9dfmbgIX5EfOdasqLsWD6xqpNZlXblLB/Dbnwv3Y="}]},{"bom-ref":"pkg:golang/go.uber.org/mock@v0.6.0?package-id=82f94846646665e4","type":"library","name":"go.uber.org/mock","version":"v0.6.0","purl":"pkg:golang/go.uber.org/mock@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hyF9dfmbgIX5EfOdasqLsWD6xqpNZlXblLB/Dbnwv3Y="}]},{"bom-ref":"pkg:golang/go.uber.org/multierr@v1.11.0?package-id=ef196337207eb800","type":"library","name":"go.uber.org/multierr","version":"v1.11.0","purl":"pkg:golang/go.uber.org/multierr@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="}]},{"bom-ref":"pkg:golang/go.uber.org/multierr@v1.11.0?package-id=a3cd8330d4a813a0","type":"library","name":"go.uber.org/multierr","version":"v1.11.0","purl":"pkg:golang/go.uber.org/multierr@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="}]},{"bom-ref":"pkg:golang/go.uber.org/zap@v1.28.0?package-id=25dd85e1ded5b566","type":"library","name":"go.uber.org/zap","version":"v1.28.0","purl":"pkg:golang/go.uber.org/zap@v1.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo="}]},{"bom-ref":"pkg:golang/go.uber.org/zap@v1.28.0?package-id=ff1824d03a7a68c1","type":"library","name":"go.uber.org/zap","version":"v1.28.0","purl":"pkg:golang/go.uber.org/zap@v1.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=1794e7f09a134d32","type":"library","name":"go.yaml.in/yaml/v2","version":"v2.4.4","cpe":"cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=eaf923d6ee013588","type":"library","name":"go.yaml.in/yaml/v2","version":"v2.4.4","cpe":"cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5?package-id=4fc93c87aeebc64b","type":"library","name":"go.yaml.in/yaml/v3","version":"v3.0.5","cpe":"cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5?package-id=728efb2a6b39f3e3","type":"library","name":"go.yaml.in/yaml/v3","version":"v3.0.5","cpe":"cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.6?package-id=0a888785800e6604","type":"library","name":"go.yaml.in/yaml/v4","version":"v4.0.0-rc.6","cpe":"cpe:2.3:a:yaml:v4:v4.0.0-rc.6:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1h7H1ohdUh93/FyE4YaDa1Zh64K6VVbjF4K6WUxMtH4="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.6?package-id=17847610279d27d7","type":"library","name":"go.yaml.in/yaml/v4","version":"v4.0.0-rc.6","cpe":"cpe:2.3:a:yaml:v4:v4.0.0-rc.6:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1h7H1ohdUh93/FyE4YaDa1Zh64K6VVbjF4K6WUxMtH4="}]},{"bom-ref":"pkg:golang/gocloud.dev@v0.46.0?package-id=d65e0d883128b536","type":"library","name":"gocloud.dev","version":"v0.46.0","purl":"pkg:golang/gocloud.dev@v0.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:niIuZwSjMtBx8K+ITB2s5kZullB13PGOS2ZoQPZxQ4Q="}]},{"bom-ref":"pkg:golang/gocloud.dev@v0.46.0?package-id=aa0a2f00535b8c66","type":"library","name":"gocloud.dev","version":"v0.46.0","purl":"pkg:golang/gocloud.dev@v0.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:niIuZwSjMtBx8K+ITB2s5kZullB13PGOS2ZoQPZxQ4Q="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.57.0?package-id=4a7180a3454dcfdc","type":"library","name":"golang.org/x/crypto","version":"v0.57.0","cpe":"cpe:2.3:a:golang:crypto:v0.57.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.57.0?package-id=c6d5b4ca81240191","type":"library","name":"golang.org/x/crypto","version":"v0.57.0","cpe":"cpe:2.3:a:golang:crypto:v0.57.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M="}]},{"bom-ref":"pkg:golang/golang.org/x/exp/typeparams@v0.0.0-20260811152304-ee035b5b010f?package-id=24b73cf83ff29bb4","type":"library","name":"golang.org/x/exp/typeparams","version":"v0.0.0-20260811152304-ee035b5b010f","cpe":"cpe:2.3:a:golang:x\\/exp\\/typeparams:v0.0.0-20260811152304-ee035b5b010f:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/exp/typeparams@v0.0.0-20260811152304-ee035b5b010f","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+lI8cDJ4uceLipg2f1ODay7fEuLkk0BIHXd6PB8icxo="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.41.0?package-id=56d232e7120c3a8b","type":"library","name":"golang.org/x/mod","version":"v0.41.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.41.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.41.0?package-id=478679905a713816","type":"library","name":"golang.org/x/mod","version":"v0.41.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.41.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.59.0?package-id=037af5a6c7a14ba3","type":"library","name":"golang.org/x/net","version":"v0.59.0","cpe":"cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.59.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.59.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.60.0?package-id=e090465aca4b3a43","type":"library","name":"golang.org/x/net","version":"v0.60.0","cpe":"cpe:2.3:a:golang:networking:v0.60.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.60.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.60.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU="}]},{"bom-ref":"pkg:golang/golang.org/x/oauth2@v0.37.0?package-id=2e730bac8336b8f7","type":"library","name":"golang.org/x/oauth2","version":"v0.37.0","cpe":"cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/oauth2@v0.37.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JUlcxA8oAtauLfiH8FX2/FkAWHAdi0QtGCGc+hofE98="}]},{"bom-ref":"pkg:golang/golang.org/x/oauth2@v0.37.0?package-id=04d28b9d6311f6a2","type":"library","name":"golang.org/x/oauth2","version":"v0.37.0","cpe":"cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/oauth2@v0.37.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JUlcxA8oAtauLfiH8FX2/FkAWHAdi0QtGCGc+hofE98="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.23.0?package-id=1c59d62db54de586","type":"library","name":"golang.org/x/sync","version":"v0.23.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.23.0?package-id=27ffbc6d083b095c","type":"library","name":"golang.org/x/sync","version":"v0.23.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.48.0?package-id=22bf94b873e909e4","type":"library","name":"golang.org/x/sys","version":"v0.48.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.48.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.48.0?package-id=8eb5e38ea029d936","type":"library","name":"golang.org/x/sys","version":"v0.48.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.48.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo="}]},{"bom-ref":"pkg:golang/golang.org/x/telemetry@v0.0.0-20260811182544-a038080d80e5?package-id=32c1f24b024c276e","type":"library","name":"golang.org/x/telemetry","version":"v0.0.0-20260811182544-a038080d80e5","cpe":"cpe:2.3:a:golang:x\\/telemetry:v0.0.0-20260811182544-a038080d80e5:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/telemetry@v0.0.0-20260811182544-a038080d80e5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZUSxONxc981v7AW7QUg+I9WwZzSTTJ019ENBYr5pV/Q="}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.46.0?package-id=83f613fa5c9f7fb9","type":"library","name":"golang.org/x/term","version":"v0.46.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3+OXuTbaKDgwk8jTi3aSLHRlmWqHEUDUtxnbFigO4YE="}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.46.0?package-id=786cc10298720f44","type":"library","name":"golang.org/x/term","version":"v0.46.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3+OXuTbaKDgwk8jTi3aSLHRlmWqHEUDUtxnbFigO4YE="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.42.0?package-id=8946d0e2b7ce5ab6","type":"library","name":"golang.org/x/text","version":"v0.42.0","cpe":"cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.42.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.42.0?package-id=be0afb6a2908e268","type":"library","name":"golang.org/x/text","version":"v0.42.0","cpe":"cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.42.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI="}]},{"bom-ref":"pkg:golang/golang.org/x/time@v0.15.0?package-id=d9baab7c2b8c8a86","type":"library","name":"golang.org/x/time","version":"v0.15.0","cpe":"cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/time@v0.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U="}]},{"bom-ref":"pkg:golang/golang.org/x/time@v0.15.0?package-id=9eeda02aed9103e8","type":"library","name":"golang.org/x/time","version":"v0.15.0","cpe":"cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/time@v0.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U="}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.49.0?package-id=1d0c1f0fc356ce03","type":"library","name":"golang.org/x/tools","version":"v0.49.0","cpe":"cpe:2.3:a:golang:x\\/tools:v0.49.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.49.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI="}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.50.0?package-id=0151862233eb31d6","type":"library","name":"golang.org/x/tools","version":"v0.50.0","cpe":"cpe:2.3:a:golang:x\\/tools:v0.50.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.50.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:c2ifzfcuY7L90lZ2aKd8S4K2NpASF08SZx9ZuJkHmSU="}]},{"bom-ref":"pkg:golang/golang.org/x/vuln@v1.6.0?package-id=818901d20c290082","type":"library","name":"golang.org/x/vuln","version":"v1.6.0","cpe":"cpe:2.3:a:golang:x\\/vuln:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/vuln@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FeMO9Rm/HwyduOztbvKcOw+zvDEPr4I4aQNSfevFcKY="}]},{"bom-ref":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da?package-id=056fc8b658138e7a","type":"library","name":"golang.org/x/xerrors","version":"v0.0.0-20240903120638-7835f813f4da","cpe":"cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:noIWHXmPHxILtqtCOPIhSt0ABwskkZKjD3bXGnZGpNY="}]},{"bom-ref":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da?package-id=e4de42bdbc8b989d","type":"library","name":"golang.org/x/xerrors","version":"v0.0.0-20240903120638-7835f813f4da","cpe":"cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:noIWHXmPHxILtqtCOPIhSt0ABwskkZKjD3bXGnZGpNY="}]},{"bom-ref":"pkg:github/golangci/golangci-lint-action@v8.0.0?package-id=69548be7c9a73a6f","type":"library","name":"golangci/golangci-lint-action","version":"v8.0.0","cpe":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci-lint-action:v8.0.0:*:*:*:*:*:*:*","purl":"pkg:github/golangci/golangci-lint-action@v8.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci_lint_action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci-lint-action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci_lint_action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci-lint-action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci_lint_action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci-lint-action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci_lint_action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci-lint-action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci_lint_action:v8.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/lint.yml"}]},{"bom-ref":"pkg:golang/google.golang.org/api@v0.288.0?package-id=a35a37f4c6c84b7a","type":"library","name":"google.golang.org/api","version":"v0.288.0","cpe":"cpe:2.3:a:google:api:v0.288.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/api@v0.288.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:glhO/J88obKP5I269W3hB73dvBKrjU56ZfmNlNXpgTU="}]},{"bom-ref":"pkg:golang/google.golang.org/api@v0.293.0?package-id=9a0d43b372cb56a4","type":"library","name":"google.golang.org/api","version":"v0.293.0","cpe":"cpe:2.3:a:google:api:v0.293.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/api@v0.293.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:p9XIWOf63U4OgYx120ZwVU8+vl4XTPmWfgVPnmOAS9w="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d?package-id=64224fe56b48ea1d","type":"library","name":"google.golang.org/genproto","version":"v0.0.0-20260715232425-e75dac1f907d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C9v1o0/4quuhOAfmRXA2j+we0PqZIp8traLdeogF3Ms="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d?package-id=267e78c2d7ae1ea0","type":"library","name":"google.golang.org/genproto","version":"v0.0.0-20260715232425-e75dac1f907d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C9v1o0/4quuhOAfmRXA2j+we0PqZIp8traLdeogF3Ms="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d?package-id=f849625c0ca194d1","type":"library","name":"google.golang.org/genproto/googleapis/api","version":"v0.0.0-20260803160001-6ac0973c030d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260803160001-6ac0973c030d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FarXi840EJWSHYTN3ERkADbPWjl307+FGrA22KAVjjc="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688?package-id=a57fa4764d580202","type":"library","name":"google.golang.org/genproto/googleapis/api","version":"v0.0.0-20260819154853-08b0e4226688","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ax2KzoSRIZU/M0cIxri3pKxy99vniH1PVxWC6si/eZI="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260803160001-6ac0973c030d?package-id=eca950a65691f327","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20260803160001-6ac0973c030d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260803160001-6ac0973c030d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260803160001-6ac0973c030d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IL4hdHzcUv2l/gcg98/Rj3FbtE6axwqslOW8SW0C+S0="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688?package-id=9ae72b68f3357aca","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20260819154853-08b0e4226688","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cYNAzI2sUwhmCcoj9TxvihSrqsxt6uIkj3rDRhSDmW4="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.83.2?package-id=73ac7fbf7679b398","type":"library","name":"google.golang.org/grpc","version":"v1.83.2","cpe":"cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.83.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.83.2?package-id=48a5333b1ee1d835","type":"library","name":"google.golang.org/grpc","version":"v1.83.2","cpe":"cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.83.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=0055873c0ce1a39b","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12","cpe":"cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=03f25b92a78152a0","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12","cpe":"cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc="}]},{"bom-ref":"pkg:golang/gopkg.in/alexcesaro/quotedprintable.v3@v3.0.0-20150716171945-2caba252f4dc?package-id=cadeb020e404e48a","type":"library","name":"gopkg.in/alexcesaro/quotedprintable.v3","version":"v3.0.0-20150716171945-2caba252f4dc","purl":"pkg:golang/gopkg.in/alexcesaro/quotedprintable.v3@v3.0.0-20150716171945-2caba252f4dc","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2gGKlE2+asNV9m7xrywl36YYNnBG5ZQ0r/BOOxqPpmk="}]},{"bom-ref":"pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=54838b79820fd4c9","type":"library","name":"gopkg.in/evanphx/json-patch.v4","version":"v4.13.0","purl":"pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:czT3CmqEaQ1aanPc5SdlgQrrEIb8w/wwCvWWnfEbYzo="}]},{"bom-ref":"pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=da26a12b6ed4d20c","type":"library","name":"gopkg.in/inf.v0","version":"v0.9.1","purl":"pkg:golang/gopkg.in/inf.v0@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc="}]},{"bom-ref":"pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=8f99b4759d521906","type":"library","name":"gopkg.in/ini.v1","version":"v1.67.3","purl":"pkg:golang/gopkg.in/ini.v1@v1.67.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw="}]},{"bom-ref":"pkg:golang/gopkg.in/mail.v2@v2.3.1?package-id=a1722361394a9217","type":"library","name":"gopkg.in/mail.v2","version":"v2.3.1","purl":"pkg:golang/gopkg.in/mail.v2@v2.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WYFn/oANrAGP2C0dcV6/pbkPzv8yGzqTjPmTeO7qoXk="}]},{"bom-ref":"pkg:golang/gopkg.in/warnings.v0@v0.1.2?package-id=8ac617c9f7dfb7cd","type":"library","name":"gopkg.in/warnings.v0","version":"v0.1.2","purl":"pkg:golang/gopkg.in/warnings.v0@v0.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME="}]},{"bom-ref":"pkg:golang/gopkg.in/warnings.v0@v0.1.2?package-id=c95cfa28873a5152","type":"library","name":"gopkg.in/warnings.v0","version":"v0.1.2","purl":"pkg:golang/gopkg.in/warnings.v0@v0.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=716c668b92999095","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=c930689fea247305","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:github/goreleaser/goreleaser-action@v7.2.3?package-id=d65a8aa414c59363","type":"library","name":"goreleaser/goreleaser-action","version":"v7.2.3","cpe":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*","purl":"pkg:github/goreleaser/goreleaser-action@v7.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yaml"}]},{"bom-ref":"pkg:golang/honnef.co/go/tools@v0.8.1?package-id=dc79b92987d635f2","type":"library","name":"honnef.co/go/tools","version":"v0.8.1","cpe":"cpe:2.3:a:go:tools:v0.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/honnef.co/go/tools@v0.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+JKf3xJ1ni4CwrhVg4/pqsfPGP6vNAXcKbMXJodYx3w="}]},{"bom-ref":"pkg:golang/k8s.io/api@v0.35.3?package-id=5707c9ef704a1999","type":"library","name":"k8s.io/api","version":"v0.35.3","purl":"pkg:golang/k8s.io/api@v0.35.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pA2fiBc6+N9PDf7SAiluKGEBuScsTzd2uYBkA5RzNWQ="}]},{"bom-ref":"pkg:golang/k8s.io/apimachinery@v0.35.3?package-id=f5828b61683a90de","type":"library","name":"k8s.io/apimachinery","version":"v0.35.3","purl":"pkg:golang/k8s.io/apimachinery@v0.35.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MeaUwQCV3tjKP4bcwWGgZ/cp/vpsRnQzqO6J6tJyoF8="}]},{"bom-ref":"pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=ba0a99f0f3cc74c5","type":"library","name":"k8s.io/apimachinery","version":"v0.36.2","purl":"pkg:golang/k8s.io/apimachinery@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ="}]},{"bom-ref":"pkg:golang/k8s.io/client-go@v0.35.3?package-id=627a6a75439f229a","type":"library","name":"k8s.io/client-go","version":"v0.35.3","purl":"pkg:golang/k8s.io/client-go@v0.35.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:s1lZbpN4uI6IxeTM2cpdtrwHcSOBML1ODNTCCfsP1pg="}]},{"bom-ref":"pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=1239873eaf62af00","type":"library","name":"k8s.io/klog/v2","version":"v2.140.0","cpe":"cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*","purl":"pkg:golang/k8s.io/klog/v2@v2.140.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc="}]},{"bom-ref":"pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=1eb4d393b7c0bdef","type":"library","name":"k8s.io/klog/v2","version":"v2.140.0","cpe":"cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*","purl":"pkg:golang/k8s.io/klog/v2@v2.140.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc="}]},{"bom-ref":"pkg:golang/k8s.io/kube-openapi@v0.0.0-20250910181357-589584f1c912?package-id=9dfabda5f82f30b9","type":"library","name":"k8s.io/kube-openapi","version":"v0.0.0-20250910181357-589584f1c912","purl":"pkg:golang/k8s.io/kube-openapi@v0.0.0-20250910181357-589584f1c912","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Y3gxNAuB0OBLImH611+UDZcmKS3g6CthxToOb37KgwE="}]},{"bom-ref":"pkg:golang/k8s.io/utils@v0.0.0-20251002143259-bc988d571ff4?package-id=96ac4e4233c00ec2","type":"library","name":"k8s.io/utils","version":"v0.0.0-20251002143259-bc988d571ff4","purl":"pkg:golang/k8s.io/utils@v0.0.0-20251002143259-bc988d571ff4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck="}]},{"bom-ref":"pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=8c678dbbe4ad9cfc","type":"library","name":"k8s.io/utils","version":"v0.0.0-20260210185600-b8788abfbbc2","purl":"pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU="}]},{"bom-ref":"pkg:github/ko-build/setup-ko@v0.10?package-id=6d6bd6816d9e13fa","type":"library","name":"ko-build/setup-ko","version":"v0.10","cpe":"cpe:2.3:a:ko-build\\/setup-ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*","purl":"pkg:github/ko-build/setup-ko@v0.10","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup-ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publishimage.yml"}]},{"bom-ref":"pkg:golang/lukechampine.com/blake3@v1.4.1?package-id=111d959acda28881","type":"library","name":"lukechampine.com/blake3","version":"v1.4.1","purl":"pkg:golang/lukechampine.com/blake3@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:I3Smz7gso8w4/TunLKec6K2fn+kyKtDxr/xcQEN84Wg="}]},{"bom-ref":"pkg:golang/modernc.org/libc@v1.74.4?package-id=9341583fe21cc516","type":"library","name":"modernc.org/libc","version":"v1.74.4","purl":"pkg:golang/modernc.org/libc@v1.74.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fX1Omw4o2/1C2iRkkIsrQTasJQldLhRmuPreXLoWs9k="}]},{"bom-ref":"pkg:golang/modernc.org/mathutil@v1.7.1?package-id=610e3c135e640d33","type":"library","name":"modernc.org/mathutil","version":"v1.7.1","purl":"pkg:golang/modernc.org/mathutil@v1.7.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU="}]},{"bom-ref":"pkg:golang/modernc.org/memory@v1.11.0?package-id=e97959334b57993e","type":"library","name":"modernc.org/memory","version":"v1.11.0","purl":"pkg:golang/modernc.org/memory@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o4QC8aMQzmcwCK3t3Ux/ZHmwFPzE6hf2Y5LbkRs+hbI="}]},{"bom-ref":"pkg:golang/modernc.org/sqlite@v1.56.0?package-id=5b4cee8859168f35","type":"library","name":"modernc.org/sqlite","version":"v1.56.0","purl":"pkg:golang/modernc.org/sqlite@v1.56.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/D8e2RfFqoy/Zc6PuC76U28zFwmI/sYx1Kjm4yEn9e0="}]},{"bom-ref":"pkg:golang/mvdan.cc/gofumpt@v0.12.0?package-id=e8ed5d01799e9cec","type":"library","name":"mvdan.cc/gofumpt","version":"v0.12.0","purl":"pkg:golang/mvdan.cc/gofumpt@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1Lbudkz2kpM9Cjz2pL4M19u7q+GaEhCTNf7N9mfpcho="}]},{"bom-ref":"pkg:golang/mvdan.cc/sh/v3@v3.14.1?package-id=59dda5495c00a526","type":"library","name":"mvdan.cc/sh/v3","version":"v3.14.1","cpe":"cpe:2.3:a:sh:v3:v3.14.1:*:*:*:*:*:*:*","purl":"pkg:golang/mvdan.cc/sh/v3@v3.14.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bXkhQWNHCs0KZEChF8hYS6FC+T2N9mUZLbQv9blditI="}]},{"bom-ref":"pkg:golang/mvdan.cc/unparam@v0.0.0-20260823230713-2fa3d841b0c8?package-id=a294ee0cae2e190b","type":"library","name":"mvdan.cc/unparam","version":"v0.0.0-20260823230713-2fa3d841b0c8","purl":"pkg:golang/mvdan.cc/unparam@v0.0.0-20260823230713-2fa3d841b0c8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Re1NRyLpiAt9kB+ImaaoapwWiQXrKwER4tY8fLOkDew="}]},{"bom-ref":"pkg:github/nick-invision/retry@v4.0.0?package-id=18c7805ae54236ba","type":"library","name":"nick-invision/retry","version":"v4.0.0","cpe":"cpe:2.3:a:nick-invision\\/retry:nick-invision\\/retry:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/nick-invision/retry@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick-invision\\/retry:nick_invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick_invision\\/retry:nick-invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick_invision\\/retry:nick_invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick:nick-invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick:nick_invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/nick-invision/retry@v4.0.0?package-id=740ba70b2ac6065d","type":"library","name":"nick-invision/retry","version":"v4.0.0","cpe":"cpe:2.3:a:nick-invision\\/retry:nick-invision\\/retry:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/nick-invision/retry@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick-invision\\/retry:nick_invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick_invision\\/retry:nick-invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick_invision\\/retry:nick_invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick:nick-invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nick:nick_invision\\/retry:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publishimage.yml"}]},{"bom-ref":"pkg:github/ossf/scorecard-action@v2.4.4?package-id=fa5c1be119200937","type":"library","name":"ossf/scorecard-action","version":"v2.4.4","cpe":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:github/ossf/scorecard-action@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard-analysis.yml"}]},{"bom-ref":"pkg:golang/osv.dev/bindings/go@v0.0.0-20260805021707-3a57b89df3b6?package-id=4f5c985a9738da57","type":"library","name":"osv.dev/bindings/go","version":"v0.0.0-20260805021707-3a57b89df3b6","cpe":"cpe:2.3:a:bindings:go:v0.0.0-20260805021707-3a57b89df3b6:*:*:*:*:*:*:*","purl":"pkg:golang/osv.dev/bindings/go@v0.0.0-20260805021707-3a57b89df3b6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1cVzYzGXOOvFVi5B6LOjPeZeqLA59IAowEfYZPwed2g="}]},{"bom-ref":"pkg:github/revanite-io/osps-baseline-action@v1.5.2?package-id=4d7b49156bce54cc","type":"library","name":"revanite-io/osps-baseline-action","version":"v1.5.2","cpe":"cpe:2.3:a:revanite-io\\/osps-baseline-action:revanite-io\\/osps-baseline-action:v1.5.2:*:*:*:*:*:*:*","purl":"pkg:github/revanite-io/osps-baseline-action@v1.5.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/osps-baseline-action:revanite_io\\/osps_baseline_action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/osps_baseline_action:revanite-io\\/osps-baseline-action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/osps_baseline_action:revanite_io\\/osps_baseline_action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/osps-baseline:revanite-io\\/osps-baseline-action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/osps-baseline:revanite_io\\/osps_baseline_action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/osps_baseline:revanite-io\\/osps-baseline-action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/osps_baseline:revanite_io\\/osps_baseline_action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/osps:revanite-io\\/osps-baseline-action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/osps:revanite_io\\/osps_baseline_action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/osps:revanite-io\\/osps-baseline-action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/osps:revanite_io\\/osps_baseline_action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite:revanite-io\\/osps-baseline-action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite:revanite_io\\/osps_baseline_action:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/osps-baseline.yml"}]},{"bom-ref":"pkg:github/revanite-io/security-insights-action@v1.0.0?package-id=afde30f5466c38d9","type":"library","name":"revanite-io/security-insights-action","version":"v1.0.0","cpe":"cpe:2.3:a:revanite-io\\/security-insights-action:revanite-io\\/security-insights-action:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:github/revanite-io/security-insights-action@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/security-insights-action:revanite_io\\/security_insights_action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/security_insights_action:revanite-io\\/security-insights-action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/security_insights_action:revanite_io\\/security_insights_action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/security-insights:revanite-io\\/security-insights-action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/security-insights:revanite_io\\/security_insights_action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/security_insights:revanite-io\\/security-insights-action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/security_insights:revanite_io\\/security_insights_action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/security:revanite-io\\/security-insights-action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite-io\\/security:revanite_io\\/security_insights_action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/security:revanite-io\\/security-insights-action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite_io\\/security:revanite_io\\/security_insights_action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite:revanite-io\\/security-insights-action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:revanite:revanite_io\\/security_insights_action:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/security-insights.yml"}]},{"bom-ref":"pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=ec32c0f5bc606249","type":"library","name":"sigs.k8s.io/json","version":"v0.0.0-20250730193827-2d320260d730","purl":"pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/kind@v0.32.0?package-id=8813c7f72749c971","type":"library","name":"sigs.k8s.io/kind","version":"v0.32.0","purl":"pkg:golang/sigs.k8s.io/kind@v0.32.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:p9hscbj98u/qyrjVpjId86LI70nQmbSsipV7wCG10Xk="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=4bfa21fc21b1ff5b","type":"library","name":"sigs.k8s.io/randfill","version":"v1.0.0","purl":"pkg:golang/sigs.k8s.io/randfill@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/release-utils@v0.11.1?package-id=f4f9ff49c9a66275","type":"library","name":"sigs.k8s.io/release-utils","version":"v0.11.1","purl":"pkg:golang/sigs.k8s.io/release-utils@v0.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hzvXGpHgHJfLOJB6TRuu14bzWc3XEglHmXHJqwClSZE="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0?package-id=e404a69f5c23552f","type":"library","name":"sigs.k8s.io/structured-merge-diff/v6","version":"v6.3.0","cpe":"cpe:2.3:a:structured-merge-diff:v6:v6.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured_merge_diff:v6:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured-merge:v6:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured_merge:v6:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured:v6:v6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jTijUJbW353oVOd9oTlifJqOGEkUw2jB/fXCbTiQEco="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=95ee3a98ac8d2d6e","type":"library","name":"sigs.k8s.io/yaml","version":"v1.6.0","purl":"pkg:golang/sigs.k8s.io/yaml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=b11d01b21b0d0821","type":"library","name":"sigs.k8s.io/yaml","version":"v1.6.0","purl":"pkg:golang/sigs.k8s.io/yaml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="}]},{"bom-ref":"pkg:github/sigstore/cosign-installer@v4.1.2?package-id=386cc88ff709faea","type":"library","name":"sigstore/cosign-installer","version":"v4.1.2","cpe":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/cosign-installer@v4.1.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publishimage.yml"}]},{"bom-ref":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0?package-id=c226ce2c0991655c#.github/workflows/generator_generic_slsa3.yml","type":"library","name":"slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml","version":"v2.1.0","cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0#.github/workflows/generator_generic_slsa3.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yaml"}]},{"bom-ref":"pkg:github/slsa-framework/slsa-verifier@v2.7.1?package-id=283c20e37acf461a#actions/installer","type":"library","name":"slsa-framework/slsa-verifier/actions/installer","version":"v2.7.1","cpe":"cpe:2.3:a:slsa-framework\\/slsa-verifier\\/actions\\/installer:slsa-framework\\/slsa-verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*","purl":"pkg:github/slsa-framework/slsa-verifier@v2.7.1#actions/installer","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-verifier\\/actions\\/installer:slsa_framework\\/slsa_verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_verifier\\/actions\\/installer:slsa-framework\\/slsa-verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_verifier\\/actions\\/installer:slsa_framework\\/slsa_verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa_framework\\/slsa_verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa_framework\\/slsa_verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa_framework\\/slsa_verifier\\/actions\\/installer:v2.7.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yaml"}]},{"bom-ref":"pkg:golang/software.sslmate.com/src/go-pkcs12@v0.7.3?package-id=6519d27a224d537f","type":"library","name":"software.sslmate.com/src/go-pkcs12","version":"v0.7.3","cpe":"cpe:2.3:a:src:go-pkcs12:v0.7.3:*:*:*:*:*:*:*","purl":"pkg:golang/software.sslmate.com/src/go-pkcs12@v0.7.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:src:go_pkcs12:v0.7.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JBQD3FDqYjTeyDAeZQklj2ar88ykBLtALloPJHyAauU="}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=4f2d00b990992955","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=b5234f04a96e0370","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docker.yml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=0789c938f56398a4","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/gitlab.yml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=f1f8922d490c8826","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/goreleaser.yaml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=74e1461eb0e5af03","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/integration.yml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=5c1ab7c7b6a3aea1","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/lint.yml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=a467ca143c528728","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=50a8d9343bfe88c8","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/publishimage.yml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=f6b11f2d3ac9777e","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/stale.yml"}]},{"bom-ref":"pkg:github/step-security/harden-runner@v2.22.1?package-id=d994f05d9f700f71","type":"library","name":"step-security/harden-runner","version":"v2.22.1","cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*","purl":"pkg:github/step-security/harden-runner@v2.22.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step-security\\/harden-runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:step:step_security\\/harden_runner:v2.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/verify.yml"}]},{"bom-ref":"pkg:golang/www.velocidex.com/golang/go-ntfs@v0.2.1?package-id=f3c4c5fa2610877c","type":"library","name":"www.velocidex.com/golang/go-ntfs","version":"v0.2.1","cpe":"cpe:2.3:a:golang:go-ntfs:v0.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/www.velocidex.com/golang/go-ntfs@v0.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:go_ntfs:v0.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9oSN0CpBZTmM75F4cEpUdAiOW55afj0ZALpvRt8cBZw="}]},{"bom-ref":"pkg:golang/www.velocidex.com/golang/regparser@v0.0.0-20250203141505-31e704a67ef7?package-id=b50488d31dadf95e","type":"library","name":"www.velocidex.com/golang/regparser","version":"v0.0.0-20250203141505-31e704a67ef7","cpe":"cpe:2.3:a:golang:regparser:v0.0.0-20250203141505-31e704a67ef7:*:*:*:*:*:*:*","purl":"pkg:golang/www.velocidex.com/golang/regparser@v0.0.0-20250203141505-31e704a67ef7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BMX/37sYwX+8JhHt+YNbPfbx7dXG1w1L1mXonNBtjt0="}]},{"bom-ref":"5e19ea2e1f9dfee4","type":"file","name":"/.github/workflows/codeql-analysis.yml","hashes":[{"alg":"SHA-1","content":"9ab4c1324f78642d6d60245127cccbbd097293c8"},{"alg":"SHA-256","content":"ea62ae1de53e4b77006b4343fdf2eee72008f64a0d04d97f8f483e92bb90c8cc"}]},{"bom-ref":"1aaf5f65e4a438ab","type":"file","name":"/.github/workflows/depsreview.yml","hashes":[{"alg":"SHA-1","content":"6ea75ff2f1d296d80151590b4db865bf147d3e1b"},{"alg":"SHA-256","content":"2be804e96645c3b382b07941445ab35a649ca855781ed5bdd77cf810d44348c5"}]},{"bom-ref":"6500ccf914b270d2","type":"file","name":"/.github/workflows/docker.yml","hashes":[{"alg":"SHA-1","content":"066c83a624a919da43b005994f382337fe63f02c"},{"alg":"SHA-256","content":"07807365c3d71c1f98d1477c213b65ae9472577fe9f05605a7cbe9b146bdb27e"}]},{"bom-ref":"32f370c8f8ba622c","type":"file","name":"/.github/workflows/gitlab.yml","hashes":[{"alg":"SHA-1","content":"21b4b8b43bbdebb0fdaa9d71f9e5db70c3777e51"},{"alg":"SHA-256","content":"5fcedba75e54d61d303dd2228bff85659621fcfa078e5e7ac567647552020e5b"}]},{"bom-ref":"368db8675424a0bf","type":"file","name":"/.github/workflows/goreleaser.yaml","hashes":[{"alg":"SHA-1","content":"7fd042a8028f58f8a562761478b0d580cca40c6c"},{"alg":"SHA-256","content":"f9ab7e63e5e92e88e788697cd3c7b738c212203f487bfa62685bc9af1a6f2eb3"}]},{"bom-ref":"9d1ab6808dde18ba","type":"file","name":"/.github/workflows/integration.yml","hashes":[{"alg":"SHA-1","content":"c46f0a92ede35753278a5a138c503312bb769898"},{"alg":"SHA-256","content":"cd5894114c4317e6ece59a582fd508298761b960ab7603eb5c3585a9e22c5152"}]},{"bom-ref":"5ebde7ddc8076c2b","type":"file","name":"/.github/workflows/lint.yml","hashes":[{"alg":"SHA-1","content":"1870e047b806be4f81230f94a5b48d0a3e3e3f4a"},{"alg":"SHA-256","content":"68d308b428a7864efc92c9b7aba4278f3eb0b8daae187b95b8347b7704619377"}]},{"bom-ref":"61fea7a21173e897","type":"file","name":"/.github/workflows/main.yml","hashes":[{"alg":"SHA-1","content":"50cb7fddd55c1678148343ac059d1455134a5731"},{"alg":"SHA-256","content":"12649841a0a3f20fd8bf54142eee6cd8da41042654cdd5bdb0f9d10429bd2cfa"}]},{"bom-ref":"46f7886afbf707a4","type":"file","name":"/.github/workflows/osps-baseline.yml","hashes":[{"alg":"SHA-1","content":"7612dfb203314d221dd665b899509f2b6af0d79e"},{"alg":"SHA-256","content":"1d0acef327064b29f0b699da4021e78c55ea065f185b31591afb9096a3516200"}]},{"bom-ref":"cbe2a2c55d4da4de","type":"file","name":"/.github/workflows/publishimage.yml","hashes":[{"alg":"SHA-1","content":"2684c46f4073c7fc3f57a82746be2bfeffba4cbf"},{"alg":"SHA-256","content":"4962194242a6e266e197afe9811247a5217b02161d89540c9e05a21eee9f5da9"}]},{"bom-ref":"1528bf04b571e985","type":"file","name":"/.github/workflows/scdiff.yml","hashes":[{"alg":"SHA-1","content":"7137f92dfcdea7810d649c92263bc4226799143f"},{"alg":"SHA-256","content":"09a9d5b1289d31dd1c17464d20b255867ff79efbc7e66014a85d489c7abe0305"}]},{"bom-ref":"0e835470cf6a9fd1","type":"file","name":"/.github/workflows/scorecard-analysis.yml","hashes":[{"alg":"SHA-1","content":"a0f983b82bcf413b6122d9754aea578870bb4dcd"},{"alg":"SHA-256","content":"a8bc10cfe21c6fbfee77fbf98abd2b92fe670da13c918b7edc162ce6b8630a21"}]},{"bom-ref":"ca3e8cb5b3577a0d","type":"file","name":"/.github/workflows/security-insights.yml","hashes":[{"alg":"SHA-1","content":"05ab6ce3f69a0c1a8295f79a9f899d7435ef4b13"},{"alg":"SHA-256","content":"3542560235c72a5f4c00a8b77441393ebb0cefab77cdb2aeb5f46a7e6232d866"}]},{"bom-ref":"ffd6ebf112245b93","type":"file","name":"/.github/workflows/stale.yml","hashes":[{"alg":"SHA-1","content":"205f1fcbe82ea09f68f74145286f54f3c3fe3c3d"},{"alg":"SHA-256","content":"d859a95cb4eefb4bfbb554dbef2029d396c467a9731830255f53b0b53d9d11d2"}]},{"bom-ref":"94fe7cd03b103f3d","type":"file","name":"/.github/workflows/verify.yml","hashes":[{"alg":"SHA-1","content":"5154bae2a960c32747a26e827bcf777b08daf935"},{"alg":"SHA-256","content":"07649bd272f872f9b7c0faf1d171e347f5b6b7b01dd9865f4a1ffc8b8b9aa5f8"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"9bd9c99a1c0fa9a3d6d6b9f323638bcec3bd93ba"},{"alg":"SHA-256","content":"8213d22dd98e66df147438833f55ae85e064e360d4010fa1898be04b282a8562"}]},{"bom-ref":"9a8d257e44c7907a","type":"file","name":"/tools/go.mod","hashes":[{"alg":"SHA-1","content":"991242431774bc34c5ae6a2ac5bc8846e65fd71a"},{"alg":"SHA-256","content":"c234a7cc19f7cdf9b922546af44f6664bc637ef013781a4668f52d7ef5ab3809"}]}]}
