{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:96b1e0d9-11fe-4bf4-beba-1e66d0851bf1","version":1,"metadata":{"timestamp":"2026-11-02T03:07:46Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"702afba10913d26c","type":"file","name":"pyupio/safety","version":"3.8.1"}},"components":[{"bom-ref":"4fc711c0f4cf8625","type":"library","name":"./.github/workflows/ci.yml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/ci.yml:.\\/.github\\/workflows\\/ci.yml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/cd.yml"}]},{"bom-ref":"a61c93b8de9acdba","type":"library","name":"./.github/workflows/reusable-build.yml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable-build.yml:.\\/.github\\/workflows\\/reusable-build.yml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable-build.yml:.\\/.github\\/workflows\\/reusable_build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable_build.yml:.\\/.github\\/workflows\\/reusable-build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable_build.yml:.\\/.github\\/workflows\\/reusable_build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable:.\\/.github\\/workflows\\/reusable-build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable:.\\/.github\\/workflows\\/reusable_build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cd.yml"}]},{"bom-ref":"c447efd650466f81","type":"library","name":"./.github/workflows/reusable-build.yml","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable-build.yml:.\\/.github\\/workflows\\/reusable-build.yml:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable-build.yml:.\\/.github\\/workflows\\/reusable_build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable_build.yml:.\\/.github\\/workflows\\/reusable-build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable_build.yml:.\\/.github\\/workflows\\/reusable_build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable:.\\/.github\\/workflows\\/reusable-build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/workflows\\/reusable:.\\/.github\\/workflows\\/reusable_build.yml:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pr.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v3?package-id=3c678f0c668c2e14","type":"library","name":"actions/checkout","version":"v3","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v3:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/issue_responder.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=9897a827ae1ecfc3","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=d3c9f9c1a3d1f126","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/bump.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=e1fd75e0fa63092f","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/cd.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=fa2e67b8c20f75f3","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=a08b15a1b8a71a75","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/reusable-build.yml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v4?package-id=ebb52d3edc793930","type":"library","name":"actions/download-artifact","version":"v4","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cd.yml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v4?package-id=3a6ece1494f754ae","type":"library","name":"actions/download-artifact","version":"v4","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/reusable-build.yml"}]},{"bom-ref":"pkg:github/actions/github-script@v7?package-id=009a15f0a03f0a6e","type":"library","name":"actions/github-script","version":"v7","cpe":"cpe:2.3:a:actions\\/github-script:actions\\/github-script:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/github-script@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github-script:actions\\/github_script:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github-script:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github_script:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github-script:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github_script:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pr-comment.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5?package-id=d2a39767f25cb887","type":"library","name":"actions/setup-python","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5?package-id=4dafd5f69d93b1e6","type":"library","name":"actions/setup-python","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/bump.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5?package-id=0ac68409cceaeece","type":"library","name":"actions/setup-python","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5?package-id=602a75fc4fa49f26","type":"library","name":"actions/setup-python","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/reusable-build.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4?package-id=ceab5bb063e57dc3","type":"library","name":"actions/upload-artifact","version":"v4","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/reusable-build.yml"}]},{"bom-ref":"pkg:github/azure/login@v2?package-id=7154e687bc31be26","type":"library","name":"azure/login","version":"v2","cpe":"cpe:2.3:a:azure\\/login:azure\\/login:v2:*:*:*:*:*:*:*","purl":"pkg:github/azure/login@v2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/reusable-build.yml"}]},{"bom-ref":"pkg:github/azure/trusted-signing-action@v0.5?package-id=6420202b5f1d0d40","type":"library","name":"azure/trusted-signing-action","version":"v0.5","cpe":"cpe:2.3:a:azure\\/trusted-signing-action:azure\\/trusted-signing-action:v0.5:*:*:*:*:*:*:*","purl":"pkg:github/azure/trusted-signing-action@v0.5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted-signing-action:azure\\/trusted_signing_action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted_signing_action:azure\\/trusted-signing-action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted_signing_action:azure\\/trusted_signing_action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted-signing:azure\\/trusted-signing-action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted-signing:azure\\/trusted_signing_action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted_signing:azure\\/trusted-signing-action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted_signing:azure\\/trusted_signing_action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted:azure\\/trusted-signing-action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:azure\\/trusted:azure\\/trusted_signing_action:v0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/reusable-build.yml"}]},{"bom-ref":"pkg:github/crazy-max/ghaction-import-gpg@v6?package-id=9618a630f8a5ec61","type":"library","name":"crazy-max/ghaction-import-gpg","version":"v6","cpe":"cpe:2.3:a:crazy-max\\/ghaction-import-gpg:crazy-max\\/ghaction-import-gpg:v6:*:*:*:*:*:*:*","purl":"pkg:github/crazy-max/ghaction-import-gpg@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy-max\\/ghaction-import-gpg:crazy_max\\/ghaction_import_gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy_max\\/ghaction_import_gpg:crazy-max\\/ghaction-import-gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy_max\\/ghaction_import_gpg:crazy_max\\/ghaction_import_gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy-max\\/ghaction-import:crazy-max\\/ghaction-import-gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy-max\\/ghaction-import:crazy_max\\/ghaction_import_gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy_max\\/ghaction_import:crazy-max\\/ghaction-import-gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy_max\\/ghaction_import:crazy_max\\/ghaction_import_gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy-max\\/ghaction:crazy-max\\/ghaction-import-gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy-max\\/ghaction:crazy_max\\/ghaction_import_gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy_max\\/ghaction:crazy-max\\/ghaction-import-gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy_max\\/ghaction:crazy_max\\/ghaction_import_gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy:crazy-max\\/ghaction-import-gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crazy:crazy_max\\/ghaction_import_gpg:v6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/bump.yml"}]},{"bom-ref":"pkg:github/docker/build-push-action@v4?package-id=a844d434e5a3d51d","type":"library","name":"docker/build-push-action","version":"v4","cpe":"cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:v4:*:*:*:*:*:*:*","purl":"pkg:github/docker/build-push-action@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build-push-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build_push_action:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/docker/metadata-action@v5?package-id=ee0fde18a6e0da03","type":"library","name":"docker/metadata-action","version":"v5","cpe":"cpe:2.3:a:docker\\/metadata-action:docker\\/metadata-action:v5:*:*:*:*:*:*:*","purl":"pkg:github/docker/metadata-action@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata-action:docker\\/metadata_action:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata_action:docker\\/metadata-action:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata_action:docker\\/metadata_action:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata:docker\\/metadata-action:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata:docker\\/metadata_action:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v3?package-id=f2d18e3817cd6a81","type":"library","name":"docker/setup-buildx-action","version":"v3","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/pypa/gh-action-pypi-publish@release%2Fv1?package-id=57f735bc539a6dc9","type":"library","name":"pypa/gh-action-pypi-publish","version":"release/v1","cpe":"cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*","purl":"pkg:github/pypa/gh-action-pypi-publish@release%2Fv1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh-action:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh_action:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh-action-pypi-publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pypa\\/gh:pypa\\/gh_action_pypi_publish:release\\/v1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cd.yml"}]},{"bom-ref":"pkg:github/sigstore/cosign-installer@v4.0.0?package-id=d2f89570a974a686","type":"library","name":"sigstore/cosign-installer","version":"v4.0.0","cpe":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/cosign-installer@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/reusable-build.yml"}]},{"bom-ref":"pkg:github/softprops/action-gh-release@v2.0.1?package-id=75cfd1437fc027a3","type":"library","name":"softprops/action-gh-release","version":"v2.0.1","cpe":"cpe:2.3:a:softprops\\/action-gh-release:softprops\\/action-gh-release:v2.0.1:*:*:*:*:*:*:*","purl":"pkg:github/softprops/action-gh-release@v2.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action-gh-release:softprops\\/action_gh_release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action_gh_release:softprops\\/action-gh-release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action_gh_release:softprops\\/action_gh_release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action-gh:softprops\\/action-gh-release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action-gh:softprops\\/action_gh_release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action_gh:softprops\\/action-gh-release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action_gh:softprops\\/action_gh_release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action:softprops\\/action-gh-release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:softprops\\/action:softprops\\/action_gh_release:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cd.yml"}]},{"bom-ref":"ebff2c81fbaf921b","type":"file","name":"/.github/workflows/build.yml","hashes":[{"alg":"SHA-1","content":"554fb0b474f51d4a9da8a1bf2d096e3037d6e41c"},{"alg":"SHA-256","content":"d98f5d2aabe24f30477e594cbce2207f5dc2a4b5ff7c6328fca6bd23c55ccc78"}]},{"bom-ref":"9ab781f90b429cc2","type":"file","name":"/.github/workflows/bump.yml","hashes":[{"alg":"SHA-1","content":"1979764c280781a84af2582eed05c85b798759e8"},{"alg":"SHA-256","content":"89a1f8bc0342a1cf6f179da6edb85eeaada9139b873aedc48688299259aed627"}]},{"bom-ref":"cfe30a14602ea165","type":"file","name":"/.github/workflows/cd.yml","hashes":[{"alg":"SHA-1","content":"8020d2080aacf9fd0b504340054340b21d7d4eae"},{"alg":"SHA-256","content":"55d3826f57953aa3443eaf9d6fb490b2c73308635d4aec5629f436f67bb6de11"}]},{"bom-ref":"7561d461b00ff11d","type":"file","name":"/.github/workflows/ci.yml","hashes":[{"alg":"SHA-1","content":"724faf6f724fcc2090a250e4d48ffa77544c74f7"},{"alg":"SHA-256","content":"10d33e4c1ea01aea81706789f88883603307573766dba304ae93cf62b41ce757"}]},{"bom-ref":"4dd5ad16024feea6","type":"file","name":"/.github/workflows/issue_responder.yml","hashes":[{"alg":"SHA-1","content":"3ca6a01ae45128cb4858f6fc6169bce7dcca7823"},{"alg":"SHA-256","content":"4703e4e57720ab1fa117c942bed4a779d9b453d04938f1351d2a65ca86767b1c"}]},{"bom-ref":"15aa86bee85f9de8","type":"file","name":"/.github/workflows/pr-comment.yml","hashes":[{"alg":"SHA-1","content":"287e7def96964fc87d7573b6b46a78120686a2ef"},{"alg":"SHA-256","content":"bd8053f7957b53f2dbe2c20e7d2f3dc9875286a66421718d8070bfdcade1db23"}]},{"bom-ref":"b74f611d328412ed","type":"file","name":"/.github/workflows/pr.yml","hashes":[{"alg":"SHA-1","content":"1246de0d7a7a5b72705e88ca72edc732d53b3877"},{"alg":"SHA-256","content":"db1953dbd5ec860f3c561f6f84d5418efb582528cd142b871167a96fa86644dc"}]},{"bom-ref":"eab51b8a8abbb9b6","type":"file","name":"/.github/workflows/reusable-build.yml","hashes":[{"alg":"SHA-1","content":"c0401d8331e1d1414abb36de9f6f4a3693e6b565"},{"alg":"SHA-256","content":"5a5565a48f061e7ead6915da4ca4543ee737a0dd650f063b7ffb28f570110504"}]}]}