{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:26aff72a-7aa7-4a68-822f-e3deea9fc95f","version":1,"metadata":{"timestamp":"2026-11-02T03:08:12Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"87c103024bb2ba4f","type":"file","name":"presidentbeef/brakeman","version":"v8.1.0"}},"components":[{"bom-ref":"pkg:github/actions/checkout@v3?package-id=dca52114613f7663","type":"library","name":"actions/checkout","version":"v3","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v3:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/docker-hub-push.yml"}]},{"bom-ref":"pkg:github/docker/build-push-action@v3?package-id=3c85884675ccae7a","type":"library","name":"docker/build-push-action","version":"v3","cpe":"cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/build-push-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build-push-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build_push_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docker-hub-push.yml"}]},{"bom-ref":"pkg:github/docker/login-action@v2?package-id=643d389ae9a064f5","type":"library","name":"docker/login-action","version":"v2","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v2:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docker-hub-push.yml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v2?package-id=dfe1ab92d309c6df","type":"library","name":"docker/setup-buildx-action","version":"v2","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v2:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docker-hub-push.yml"}]},{"bom-ref":"pkg:github/docker/setup-qemu-action@v2?package-id=ff462e01009792df","type":"library","name":"docker/setup-qemu-action","version":"v2","cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v2:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-qemu-action@v2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/docker-hub-push.yml"}]},{"bom-ref":"557c27188fa727f3","type":"file","name":"/.github/workflows/docker-hub-push.yml","hashes":[{"alg":"SHA-1","content":"d538d669e777910503b2b255de17145fa9eca1a3"},{"alg":"SHA-256","content":"87da8916fb1d6351173ae05d4d87b804de412f6504b9145241d342800ec88e7f"}]}]}