{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:0653f123-2cbe-474c-bea5-29d99b8be39b","version":1,"metadata":{"timestamp":"2026-11-02T03:08:01Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"6a97611d0a6ddb46","type":"file","name":"rezmoss/sbomlyze","version":"v0.6.0"}},"components":[{"bom-ref":"b0d97de1dd9401fd","type":"library","name":"./","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/:.\\/:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/marketplace-smoke.yml"}]},{"bom-ref":"pkg:github/actions/attest@v4.2.2?package-id=0c0ef97bc85929c0","type":"library","name":"actions/attest","version":"v4.2.2","cpe":"cpe:2.3:a:actions\\/attest:actions\\/attest:v4.2.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/attest@v4.2.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=24e61621b123a71e","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=54ca44d8afa94843","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/deploy-site.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=33376e3bf89e4e61","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/marketplace-smoke.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=613f18a892077286","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/monthly-maintenance.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=ce8584d3a40ca81d","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release-please.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=ae6fd725c63fbcb6","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=28cb93222728331c","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=aa4fe2c7eb1736a8","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/sync-site-version.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=5f155eafd46772c7","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/update-pkg-repo.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=3ac770d5779c3309","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=9aac42bb2a5d9b75","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/monthly-maintenance.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=ab626cffdbf9de84","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/anchore/sbom-action@v0.24.2?package-id=6d66f8f0c795e7a0#download-syft","type":"library","name":"anchore/sbom-action/download-syft","version":"v0.24.2","cpe":"cpe:2.3:a:anchore\\/sbom-action\\/download-syft:anchore\\/sbom-action\\/download-syft:v0.24.2:*:*:*:*:*:*:*","purl":"pkg:github/anchore/sbom-action@v0.24.2#download-syft","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action\\/download-syft:anchore\\/sbom_action\\/download_syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action\\/download_syft:anchore\\/sbom-action\\/download-syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action\\/download_syft:anchore\\/sbom_action\\/download_syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action\\/download:anchore\\/sbom-action\\/download-syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action\\/download:anchore\\/sbom_action\\/download_syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action\\/download:anchore\\/sbom-action\\/download-syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action\\/download:anchore\\/sbom_action\\/download_syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom-action\\/download-syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom_action\\/download_syft:v0.24.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.12.0?package-id=5f0109a749bf9b17","type":"library","name":"github.com/CycloneDX/cyclonedx-go","version":"v0.12.0","cpe":"cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/7Jum36UA6V043tQZ/fE3jf+Nf9gn/qxUFfd7QReMy8="}]},{"bom-ref":"pkg:golang/github.com/anchore/go-struct-converter@v0.1.0?package-id=7997500b1202e5fd","type":"library","name":"github.com/anchore/go-struct-converter","version":"v0.1.0","cpe":"cpe:2.3:a:anchore:go-struct-converter:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/anchore/go-struct-converter@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore:go_struct_converter:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2rDRssAl6mgKBSLNiVCMADgZRhoqtw9dedlWa0OhD30="}]},{"bom-ref":"pkg:golang/github.com/atotto/clipboard@v0.1.4?package-id=aab02fd2812f41a4","type":"library","name":"github.com/atotto/clipboard","version":"v0.1.4","cpe":"cpe:2.3:a:atotto:clipboard:v0.1.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/atotto/clipboard@v0.1.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EH0zSVneZPSuFR11BlR9YppQTVDbh5+16AmcJi4g1z4="}]},{"bom-ref":"pkg:golang/github.com/aymanbagabas/go-osc52/v2@v2.0.1?package-id=3d7292ae0be0db1e","type":"library","name":"github.com/aymanbagabas/go-osc52/v2","version":"v2.0.1","cpe":"cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aymanbagabas/go-osc52/v2@v2.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/bubbles@v1.0.0?package-id=97cfbf7b3355753f","type":"library","name":"github.com/charmbracelet/bubbles","version":"v1.0.0","cpe":"cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/bubbles@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:12J8/ak/uCZEMQ6KU7pcfwceyjLlWsDLAxB5fXonfvc="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10?package-id=0877d4ed51165bc6","type":"library","name":"github.com/charmbracelet/bubbletea","version":"v1.3.10","cpe":"cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:otUDHWMMzQSB0Pkc87rm691KZ3SWa4KUlvF9nRvCICw="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/colorprofile@v0.4.1?package-id=9582034781cf6acb","type":"library","name":"github.com/charmbracelet/colorprofile","version":"v0.4.1","cpe":"cpe:2.3:a:charmbracelet:colorprofile:v0.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/colorprofile@v0.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:a1lO03qTrSIRaK8c3JRxJDZOvhvIeSco3ej+ngLk1kk="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0?package-id=5717a8e54439ceaf","type":"library","name":"github.com/charmbracelet/lipgloss","version":"v1.1.0","cpe":"cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vYXsiLHVkK7fp74RkV7b2kq9+zDLoEU4MZoFqR/noCY="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/ansi@v0.11.6?package-id=d16466e5c11c9c7c","type":"library","name":"github.com/charmbracelet/x/ansi","version":"v0.11.6","cpe":"cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/ansi@v0.11.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GhV21SiDz/45W9AnV2R61xZMRri5NlLnl6CVF7ihZW8="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/cellbuf@v0.0.15?package-id=da86d400c320b7cd","type":"library","name":"github.com/charmbracelet/x/cellbuf","version":"v0.0.15","cpe":"cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/cellbuf@v0.0.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ur3pZy0o6z/R7EylET877CBxaiE1Sp1GMxoFPAIztPI="}]},{"bom-ref":"pkg:golang/github.com/charmbracelet/x/term@v0.2.2?package-id=e16502c875bce6ab","type":"library","name":"github.com/charmbracelet/x/term","version":"v0.2.2","cpe":"cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/charmbracelet/x/term@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xVRT/S2ZcKdhhOuSP4t5cLi5o+JxklsoEObBSgfgZRk="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/displaywidth@v0.9.0?package-id=b1922201881fd276","type":"library","name":"github.com/clipperhouse/displaywidth","version":"v0.9.0","cpe":"cpe:2.3:a:clipperhouse:displaywidth:v0.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/displaywidth@v0.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Qb4KOhYwRiN3viMv1v/3cTBlz3AcAZX3+y9OLhMtAtA="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/stringish@v0.1.1?package-id=9795481afef48435","type":"library","name":"github.com/clipperhouse/stringish","version":"v0.1.1","cpe":"cpe:2.3:a:clipperhouse:stringish:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/stringish@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+NSqMOr3GR6k1FdRhhnXrLfztGzuG+VuFDfatpWHKCs="}]},{"bom-ref":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.5.0?package-id=8da735de27bb34ad","type":"library","name":"github.com/clipperhouse/uax29/v2","version":"v2.5.0","cpe":"cpe:2.3:a:clipperhouse:uax29\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clipperhouse/uax29/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:x7T0T4eTHDONxFJsL94uKNKPHrclyFI0lm7+w94cO8U="}]},{"bom-ref":"pkg:golang/github.com/erikgeiser/coninput@v0.0.0-20211004153227-1c3628e74d0f?package-id=1284b838dcd5a2b7","type":"library","name":"github.com/erikgeiser/coninput","version":"v0.0.0-20211004153227-1c3628e74d0f","cpe":"cpe:2.3:a:erikgeiser:coninput:v0.0.0-20211004153227-1c3628e74d0f:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/erikgeiser/coninput@v0.0.0-20211004153227-1c3628e74d0f","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Y/CXytFA4m6baUTXGLOoWe4PQhGxaX0KpnayAqC48p4="}]},{"bom-ref":"pkg:golang/github.com/github/go-spdx/v2@v2.8.0?package-id=48f3e68cec6710c0","type":"library","name":"github.com/github/go-spdx/v2","version":"v2.8.0","cpe":"cpe:2.3:a:github:go-spdx\\/v2:v2.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/github/go-spdx/v2@v2.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:github:go_spdx\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WKCnF2Ee/x+zwSIEeQdm6+be0H6PiCNLQmSZ5CFmxMI="}]},{"bom-ref":"pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0?package-id=d229ca92394c07d7","type":"library","name":"github.com/lucasb-eyer/go-colorful","version":"v1.3.0","cpe":"cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2/yBRLdWBZKrf7gB40FoiKfAWYQ0lqNcbuQwVHXptag="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.24?package-id=993ea55f7ccdb0d0","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.24","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tGZZoVgT/KiqK1c8ocVLeDS8BSWMRd47J3Lbz7vsReI="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-localereader@v0.0.1?package-id=33f9337f163bac50","type":"library","name":"github.com/mattn/go-localereader","version":"v0.0.1","cpe":"cpe:2.3:a:mattn:go-localereader:v0.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-localereader@v0.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_localereader:v0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ygSAOl7ZXTx4RdPYinUpg6W99U8jWvWi9Ye2JC/oIi4="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.19?package-id=2424c9dad0739e6e","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.19","cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.19:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.19","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.19:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:v++JhqYnZuu5jSKrk9RbgF5v4CGUjqRfBm05byFGLdw="}]},{"bom-ref":"pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6?package-id=bf26c8fc89989d9d","type":"library","name":"github.com/muesli/ansi","version":"v0.0.0-20230316100256-276c6243b2f6","cpe":"cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZK8zHtRHOkbHy6Mmr5D264iyp3TiX5OmNcI5cIARiQI="}]},{"bom-ref":"pkg:golang/github.com/muesli/cancelreader@v0.2.2?package-id=952b970833d2dae7","type":"library","name":"github.com/muesli/cancelreader","version":"v0.2.2","cpe":"cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/cancelreader@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3I4Kt4BQjOR54NavqnDogx/MIoWBFa0StPA8ELUXHmA="}]},{"bom-ref":"pkg:golang/github.com/muesli/termenv@v0.16.0?package-id=eda57fee892a5a88","type":"library","name":"github.com/muesli/termenv","version":"v0.16.0","cpe":"cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/muesli/termenv@v0.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S5AlUN9dENB57rsbnkPyfdGuWIlkmzJjbFf0Tf5FWUc="}]},{"bom-ref":"pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=2c0de3c260aa0d91","type":"library","name":"github.com/rivo/uniseg","version":"v0.4.7","cpe":"cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rivo/uniseg@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="}]},{"bom-ref":"pkg:golang/github.com/sahilm/fuzzy@v0.1.1?package-id=ddf8d6c0698ebb3f","type":"library","name":"github.com/sahilm/fuzzy","version":"v0.1.1","cpe":"cpe:2.3:a:sahilm:fuzzy:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sahilm/fuzzy@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ceu5RHF8DGgoi+/dR5PsECjCDH1BE3Fnmpo7aVXOdRA="}]},{"bom-ref":"pkg:golang/github.com/spdx/tools-golang@v0.5.7?package-id=5e97ba94fb7276eb","type":"library","name":"github.com/spdx/tools-golang","version":"v0.5.7","cpe":"cpe:2.3:a:spdx:tools-golang:v0.5.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spdx/tools-golang@v0.5.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:spdx:tools_golang:v0.5.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+sWcKGnhwp3vLdMqPcLdA6QK679vd86cK9hQWH3AwCg="}]},{"bom-ref":"pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e?package-id=470cccbaad5c75a4","type":"library","name":"github.com/xo/terminfo","version":"v0.0.0-20220910002029-abceb7e1c41e","cpe":"cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JVG44RsyaB9T2KIHavMF/ppJZNG9ZpyihvCd0w101no="}]},{"bom-ref":"pkg:github/github/codeql-action@v4.38.2?package-id=9788eebfae733a0d#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v4.38.2","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.38.2#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4.38.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard.yml"}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.46.0?package-id=dc0aa5509e7233b9","type":"library","name":"golang.org/x/sys","version":"v0.46.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.39.0?package-id=834486224b22487e","type":"library","name":"golang.org/x/text","version":"v0.39.0","cpe":"cpe:2.3:a:golang:text:v0.39.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.39.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UbZz4pLOvn600D6Oh6GGEI6VAmndrEBLv8/6BEXzyus="}]},{"bom-ref":"pkg:github/golang/govulncheck-action@v1.1.0?package-id=bf18c7f22ba45b7f","type":"library","name":"golang/govulncheck-action","version":"v1.1.0","cpe":"cpe:2.3:a:golang\\/govulncheck-action:golang\\/govulncheck-action:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:github/golang/govulncheck-action@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck-action:golang\\/govulncheck_action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck_action:golang\\/govulncheck-action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck_action:golang\\/govulncheck_action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck:golang\\/govulncheck-action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck:golang\\/govulncheck_action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/golang/govulncheck-action@v1.1.0?package-id=7d53708a654d2552","type":"library","name":"golang/govulncheck-action","version":"v1.1.0","cpe":"cpe:2.3:a:golang\\/govulncheck-action:golang\\/govulncheck-action:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:github/golang/govulncheck-action@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck-action:golang\\/govulncheck_action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck_action:golang\\/govulncheck-action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck_action:golang\\/govulncheck_action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck:golang\\/govulncheck-action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang\\/govulncheck:golang\\/govulncheck_action:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/golangci/golangci-lint-action@v9.3.0?package-id=04b2b97793f9c77f","type":"library","name":"golangci/golangci-lint-action","version":"v9.3.0","cpe":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*","purl":"pkg:github/golangci/golangci-lint-action@v9.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/googleapis/release-please-action@v5.0.0?package-id=47cb5c861942839a","type":"library","name":"googleapis/release-please-action","version":"v5.0.0","cpe":"cpe:2.3:a:googleapis\\/release-please-action:googleapis\\/release-please-action:v5.0.0:*:*:*:*:*:*:*","purl":"pkg:github/googleapis/release-please-action@v5.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release-please-action:googleapis\\/release_please_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release_please_action:googleapis\\/release-please-action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release_please_action:googleapis\\/release_please_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release-please:googleapis\\/release-please-action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release-please:googleapis\\/release_please_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release_please:googleapis\\/release-please-action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release_please:googleapis\\/release_please_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release:googleapis\\/release-please-action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis\\/release:googleapis\\/release_please_action:v5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release-please.yml"}]},{"bom-ref":"pkg:github/goreleaser/goreleaser-action@v7.2.3?package-id=273907f5fd83fae7","type":"library","name":"goreleaser/goreleaser-action","version":"v7.2.3","cpe":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*","purl":"pkg:github/goreleaser/goreleaser-action@v7.2.3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser-action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser_action:v7.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/ossf/scorecard-action@v2.4.4?package-id=e2238c393074504a","type":"library","name":"ossf/scorecard-action","version":"v2.4.4","cpe":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:github/ossf/scorecard-action@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard-action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard_action:v2.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard.yml"}]},{"bom-ref":"pkg:github/peaceiris/actions-hugo@v3.2.1?package-id=dda81eedc6140ae9","type":"library","name":"peaceiris/actions-hugo","version":"v3.2.1","cpe":"cpe:2.3:a:peaceiris\\/actions-hugo:peaceiris\\/actions-hugo:v3.2.1:*:*:*:*:*:*:*","purl":"pkg:github/peaceiris/actions-hugo@v3.2.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peaceiris\\/actions-hugo:peaceiris\\/actions_hugo:v3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peaceiris\\/actions_hugo:peaceiris\\/actions-hugo:v3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peaceiris\\/actions_hugo:peaceiris\\/actions_hugo:v3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peaceiris\\/actions:peaceiris\\/actions-hugo:v3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peaceiris\\/actions:peaceiris\\/actions_hugo:v3.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/deploy-site.yml"}]},{"bom-ref":"pkg:github/peter-evans/create-pull-request@v8.1.1?package-id=459439a6457b9747","type":"library","name":"peter-evans/create-pull-request","version":"v8.1.1","cpe":"cpe:2.3:a:peter-evans\\/create-pull-request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-pull-request@v8.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull-request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull_request:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_pull:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-pull-request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_pull_request:v8.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/monthly-maintenance.yml"}]},{"bom-ref":"7561d461b00ff11d","type":"file","name":"/.github/workflows/ci.yml","hashes":[{"alg":"SHA-1","content":"84b57b1ec2b2b938e7b4a4cf05edb8a761947a62"},{"alg":"SHA-256","content":"17a31035cb8fd07694974240ba0de6461e3f93dea10b48775dbbf9ada53dcf39"}]},{"bom-ref":"eebf2b46178c0ad6","type":"file","name":"/.github/workflows/deploy-site.yml","hashes":[{"alg":"SHA-1","content":"acd6d3638d1ee641e1ab0861213c50095979e28d"},{"alg":"SHA-256","content":"208cab1c7ba3f29b9c76fb67b10625c65b5a67a07fd7f627137195ea9d429e56"}]},{"bom-ref":"82bafd5d16b75394","type":"file","name":"/.github/workflows/marketplace-smoke.yml","hashes":[{"alg":"SHA-1","content":"9eeabfbc4320e2afccda0f342903fcb142aa2309"},{"alg":"SHA-256","content":"11b350eb6a282b8ff1e5578cf496335b02897c75a7b77df39b6a1b56c6b6e1dd"}]},{"bom-ref":"aeeb23c037666ad6","type":"file","name":"/.github/workflows/monthly-maintenance.yml","hashes":[{"alg":"SHA-1","content":"94ed71d2a11124e264ac800b040c1abc3463440f"},{"alg":"SHA-256","content":"9a81d3634f7f5ae831e7777832b6a966c25da7a1252293bfc0e993bc3919ec31"}]},{"bom-ref":"d32325a1d771740e","type":"file","name":"/.github/workflows/release-please.yml","hashes":[{"alg":"SHA-1","content":"32a316bb085757627921a1416d95d2294bcdb92e"},{"alg":"SHA-256","content":"e9e8e6becc1cde43ab2cf001b593cf7645413dda602644153d9150e4e27d4887"}]},{"bom-ref":"cc210d8a1a5f5704","type":"file","name":"/.github/workflows/release.yml","hashes":[{"alg":"SHA-1","content":"4f1f9dc4932d1535c30d3752ca89ced007afe13e"},{"alg":"SHA-256","content":"948c3dd5773e4a71d194d41c2c0b76d3d85dfa10f883a60bfadb3b3070e9c9e5"}]},{"bom-ref":"f175f3b2ff568407","type":"file","name":"/.github/workflows/scorecard.yml","hashes":[{"alg":"SHA-1","content":"8c97e93307f1105eda2ac53ac48df3f033524bb3"},{"alg":"SHA-256","content":"35f7b6159534d6b63ab08db614be8110f078e661315bfd9c0c225f8403808eb8"}]},{"bom-ref":"547ee95080473ef1","type":"file","name":"/.github/workflows/sync-site-version.yml","hashes":[{"alg":"SHA-1","content":"3ad11436c7f148cb4e05c36726f9049c3a632ad0"},{"alg":"SHA-256","content":"a38f3316ccf57b43e4f8ee18484f2860521250afe2b3b013d9ea39f25a71adb3"}]},{"bom-ref":"5b92ee89b5960569","type":"file","name":"/.github/workflows/update-pkg-repo.yml","hashes":[{"alg":"SHA-1","content":"850fb90abe19db50edfc05acfe291f87dda03aa4"},{"alg":"SHA-256","content":"d1f6543abd1e880650c11ea2551536d7bdd927a5276203cf4e0626062901f4b6"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"4b34362bdb297adbb3391ce99e0a4cb112a54db6"},{"alg":"SHA-256","content":"e1dbbfa361e400e610858f980c690a0ad6d0d526af0bb628db31a9a1a27b31db"}]}]}