{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:5e046494-90a8-41d5-bd24-6e1515942c01","version":1,"metadata":{"timestamp":"2026-11-02T03:08:37Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"61fc0a60f76c5386","type":"file","name":"securego/gosec","version":"v2.30.0"}},"components":[{"bom-ref":"2d93ccb6f2cf0581","type":"library","name":"./","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/:.\\/:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/action-integration.yml"}]},{"bom-ref":"pkg:github/cyclonedx/gh-gomod-generate-sbom@v2?package-id=1b593c342adb7a8b","type":"library","name":"CycloneDX/gh-gomod-generate-sbom","version":"v2","cpe":"cpe:2.3:a:CycloneDX\\/gh-gomod-generate-sbom:CycloneDX\\/gh-gomod-generate-sbom:v2:*:*:*:*:*:*:*","purl":"pkg:github/CycloneDX/gh-gomod-generate-sbom@v2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh-gomod-generate-sbom:CycloneDX\\/gh_gomod_generate_sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh_gomod_generate_sbom:CycloneDX\\/gh-gomod-generate-sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh_gomod_generate_sbom:CycloneDX\\/gh_gomod_generate_sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh-gomod-generate:CycloneDX\\/gh-gomod-generate-sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh-gomod-generate:CycloneDX\\/gh_gomod_generate_sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh_gomod_generate:CycloneDX\\/gh-gomod-generate-sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh_gomod_generate:CycloneDX\\/gh_gomod_generate_sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh-gomod:CycloneDX\\/gh-gomod-generate-sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh-gomod:CycloneDX\\/gh_gomod_generate_sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh_gomod:CycloneDX\\/gh-gomod-generate-sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh_gomod:CycloneDX\\/gh_gomod_generate_sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh:CycloneDX\\/gh-gomod-generate-sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:CycloneDX\\/gh:CycloneDX\\/gh_gomod_generate_sbom:v2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/cache@v6?package-id=501516be0864461b","type":"library","name":"actions/cache","version":"v6","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=73442977dceb0cbe","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/action-integration.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=9a4a42e99035d113","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=bb3ee20c4bbd5097","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7?package-id=67c38009619ed5ee","type":"library","name":"actions/checkout","version":"v7","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/scan.yml"}]},{"bom-ref":"pkg:github/actions/github-script@v9?package-id=f7302ee543c760ea","type":"library","name":"actions/github-script","version":"v9","cpe":"cpe:2.3:a:actions\\/github-script:actions\\/github-script:v9:*:*:*:*:*:*:*","purl":"pkg:github/actions/github-script@v9","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github-script:actions\\/github_script:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github-script:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github_script:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github-script:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github_script:v9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/action-integration.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7?package-id=c40e816065946fa1","type":"library","name":"actions/setup-go","version":"v7","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7?package-id=d3a4bd4f6d8cf618","type":"library","name":"actions/setup-go","version":"v7","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7?package-id=213d3ef507e2c6b0","type":"library","name":"actions/upload-artifact","version":"v7","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/action-integration.yml"}]},{"bom-ref":"pkg:github/ccojocar/barry@main?package-id=c7ef058301bac298","type":"library","name":"ccojocar/barry","version":"main","cpe":"cpe:2.3:a:ccojocar\\/barry:ccojocar\\/barry:main:*:*:*:*:*:*:*","purl":"pkg:github/ccojocar/barry@main","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:golang/cloud.google.com/go@v0.123.0?package-id=419b179104eb109e","type":"library","name":"cloud.google.com/go","version":"v0.123.0","purl":"pkg:golang/cloud.google.com/go@v0.123.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth@v0.24.1?package-id=0a505b2cbe7fe5b3","type":"library","name":"cloud.google.com/go/auth","version":"v0.24.1","cpe":"cpe:2.3:a:go:auth:v0.24.1:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth@v0.24.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NTmd2iJb4DsGIav0KiqFMYI88nMshA2wnFMBatRmoCs="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0?package-id=c1575fca953a051b","type":"library","name":"cloud.google.com/go/compute/metadata","version":"v0.10.0","cpe":"cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pyKMUQSwchgkIBBJGdILqQbs/BNJXqwSA7Ej6LAvvtY="}]},{"bom-ref":"pkg:github/codecov/codecov-action@v7?package-id=1d25b3fcdac54d03","type":"library","name":"codecov/codecov-action","version":"v7","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:v7:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/docker/build-push-action@v7?package-id=5b17f5938842fa1c","type":"library","name":"docker/build-push-action","version":"v7","cpe":"cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:v7:*:*:*:*:*:*:*","purl":"pkg:github/docker/build-push-action@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build-push-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build_push_action:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/docker/login-action@v4?package-id=5fbf68dc6021cc0d","type":"library","name":"docker/login-action","version":"v4","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/docker/metadata-action@v6?package-id=c6f98806900dd66a","type":"library","name":"docker/metadata-action","version":"v6","cpe":"cpe:2.3:a:docker\\/metadata-action:docker\\/metadata-action:v6:*:*:*:*:*:*:*","purl":"pkg:github/docker/metadata-action@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata-action:docker\\/metadata_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata_action:docker\\/metadata-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata_action:docker\\/metadata_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata:docker\\/metadata-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata:docker\\/metadata_action:v6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v4?package-id=68c4277d1e57979c","type":"library","name":"docker/setup-buildx-action","version":"v4","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v4:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/docker/setup-qemu-action@v4?package-id=4cdf96322ec9d4f4","type":"library","name":"docker/setup-qemu-action","version":"v4","cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v4:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-qemu-action@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:golang/github.com/burntsushi/toml@v1.6.0?package-id=6d8d86ef9fe513ea","type":"library","name":"github.com/BurntSushi/toml","version":"v1.6.0","cpe":"cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/BurntSushi/toml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dRaEfpa2VI55EwlIW72hMRHdWouJeRF7TPYhI+AUQjk="}]},{"bom-ref":"pkg:golang/github.com/masterminds/semver/v3@v3.5.0?package-id=bb0aa2b6ed288b02","type":"library","name":"github.com/Masterminds/semver/v3","version":"v3.5.0","cpe":"cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/semver/v3@v3.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kQceYJfbupGfZOKZQg0kou0DgAKhzDg2NZPAwZ/2OOE="}]},{"bom-ref":"pkg:golang/github.com/anthropics/anthropic-sdk-go@v1.82.0?package-id=86c8f0f4d4f31aaf","type":"library","name":"github.com/anthropics/anthropic-sdk-go","version":"v1.82.0","cpe":"cpe:2.3:a:anthropics:anthropic-sdk-go:v1.82.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/anthropics/anthropic-sdk-go@v1.82.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:anthropics:anthropic_sdk_go:v1.82.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A82J+yHEMbQ3+7ObCagOX4tVm1uyBhELCHd2dDYZYuo="}]},{"bom-ref":"pkg:golang/github.com/bahlo/generic-list-go@v0.2.0?package-id=cf8afb4116b83830","type":"library","name":"github.com/bahlo/generic-list-go","version":"v0.2.0","cpe":"cpe:2.3:a:bahlo:generic-list-go:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bahlo/generic-list-go@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:bahlo:generic_list_go:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5sz/EEAK+ls5wF+NeqDpk5+iNdMDXrh3z3nPnH1Wvgk="}]},{"bom-ref":"pkg:golang/github.com/buger/jsonparser@v1.6.1?package-id=cf1e2017a85db138","type":"library","name":"github.com/buger/jsonparser","version":"v1.6.1","cpe":"cpe:2.3:a:buger:jsonparser:v1.6.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/buger/jsonparser@v1.6.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:I0phFv0PlbLHnM7TZAVjZ2MJ2/eWRTDyuO7GLR98IEs="}]},{"bom-ref":"pkg:golang/github.com/ccojocar/zxcvbn-go@v1.0.4?package-id=925e1e3593322d46","type":"library","name":"github.com/ccojocar/zxcvbn-go","version":"v1.0.4","cpe":"cpe:2.3:a:ccojocar:zxcvbn-go:v1.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ccojocar/zxcvbn-go@v1.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ccojocar:zxcvbn_go:v1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FWnCIRMXPj43ukfX000kvBZvV6raSxakYr1nzyNrUcc="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/coder/websocket@v1.8.15?package-id=6675d81b2adb9cf1","type":"library","name":"github.com/coder/websocket","version":"v1.8.15","cpe":"cpe:2.3:a:coder:websocket:v1.8.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/coder/websocket@v1.8.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6B2JPeOGlpff2Uz6vOEH1Vzpi0iUz20A+lPVhPHtNUA="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0?package-id=21924c216340421a","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.1.0","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.4?package-id=5d64ad5913a6841c","type":"library","name":"github.com/go-logr/logr","version":"v1.4.4","cpe":"cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ed7921825a53d3f4","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0?package-id=5722741857d8df35","type":"library","name":"github.com/go-task/slim-sprig/v3","version":"v3.0.0","cpe":"cpe:2.3:a:go-task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI="}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=473d0adb4b419c7e","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="}]},{"bom-ref":"pkg:golang/github.com/google/pprof@v0.0.0-20261016150608-1facf8f91b50?package-id=b54c973e5af75704","type":"library","name":"github.com/google/pprof","version":"v0.0.0-20261016150608-1facf8f91b50","cpe":"cpe:2.3:a:google:pprof:v0.0.0-20261016150608-1facf8f91b50:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/pprof@v0.0.0-20261016150608-1facf8f91b50","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PlNWJRxu5APSV0pWqfIsZ0qt9OOGHSWfZQ4zvx+WgWs="}]},{"bom-ref":"pkg:golang/github.com/google/s2a-go@v0.1.11?package-id=6c8ed2b6d5fe3206","type":"library","name":"github.com/google/s2a-go","version":"v0.1.11","cpe":"cpe:2.3:a:google:s2a-go:v0.1.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/s2a-go@v0.1.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:s2a_go:v0.1.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7v1V1TraNGP63WptsAkNqr2w8jgm4vM6A6qx6Lsw9iM="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.23?package-id=074b7bfb05d06aef","type":"library","name":"github.com/googleapis/enterprise-certificate-proxy","version":"v0.3.23","cpe":"cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.23:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.23","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.23:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:J+VGF1wjAM2dU2kKUXZxJdDppRLReWP7KWcclfngQhc="}]},{"bom-ref":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2?package-id=2946d2fad4a39755","type":"library","name":"github.com/googleapis/gax-go/v2","version":"v2.26.2","cpe":"cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ydkmNXxj7bEmmeK5AihkKnWxyOyBR9TDebvp5L5izk8="}]},{"bom-ref":"pkg:golang/github.com/gookit/color@v1.6.3?package-id=60ce66700a21cbd9","type":"library","name":"github.com/gookit/color","version":"v1.6.3","cpe":"cpe:2.3:a:gookit:color:v1.6.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gookit/color@v1.6.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:m6E49x+KftGaspcLtPLMsyci2ARhWIUW0PUV1owMlhs="}]},{"bom-ref":"pkg:golang/github.com/gorilla/websocket@v1.5.3?package-id=d0ddfa4986a26dab","type":"library","name":"github.com/gorilla/websocket","version":"v1.5.3","cpe":"cpe:2.3:a:gorilla:websocket:v1.5.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gorilla/websocket@v1.5.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg="}]},{"bom-ref":"pkg:golang/github.com/invopop/jsonschema@v0.14.0?package-id=03a72b1d075c72d8","type":"library","name":"github.com/invopop/jsonschema","version":"v0.14.0","cpe":"cpe:2.3:a:invopop:jsonschema:v0.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/invopop/jsonschema@v0.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MHQqLhvpNUZfw+hM3AZDYK7jxO8FZoQeQM77g8iyZjg="}]},{"bom-ref":"pkg:golang/github.com/lib/pq@v1.12.3?package-id=6e44ce0064e1f822","type":"library","name":"github.com/lib/pq","version":"v1.12.3","cpe":"cpe:2.3:a:lib:pq:v1.12.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lib/pq@v1.12.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tTWxr2YLKwIvK90ZXEw8GP7UFHtcbTtty8zsI+YjrfQ="}]},{"bom-ref":"pkg:golang/github.com/mozilla/tls-observatory@v0.0.0-20250923143331-eef96233227e?package-id=356fdf4ba1dc75e4","type":"library","name":"github.com/mozilla/tls-observatory","version":"v0.0.0-20250923143331-eef96233227e","cpe":"cpe:2.3:a:mozilla:tls-observatory:v0.0.0-20250923143331-eef96233227e:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mozilla/tls-observatory@v0.0.0-20250923143331-eef96233227e","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozilla:tls_observatory:v0.0.0-20250923143331-eef96233227e:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gOlpekCwR+xjqedQsHo1c7aUSixaQUIe3sAcEeDCMLc="}]},{"bom-ref":"pkg:golang/github.com/onsi/ginkgo/v2@v2.33.1?package-id=39129584d86f7a91","type":"library","name":"github.com/onsi/ginkgo/v2","version":"v2.33.1","cpe":"cpe:2.3:a:onsi:ginkgo\\/v2:v2.33.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/onsi/ginkgo/v2@v2.33.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:62XfWJbEIjPSCSDYrsCPP/SHcmH7O0M8ne8zfqQ2iz4="}]},{"bom-ref":"pkg:golang/github.com/onsi/gomega@v1.44.0?package-id=f7610f61d316b75e","type":"library","name":"github.com/onsi/gomega","version":"v1.44.0","cpe":"cpe:2.3:a:onsi:gomega:v1.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/onsi/gomega@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eAiGl3Pw5jz5GQdDff0BcxYpAX1JxW8xD7mFUuwNfZQ="}]},{"bom-ref":"pkg:golang/github.com/openai/openai-go/v3@v3.82.0?package-id=8d02517cc1e0ed05","type":"library","name":"github.com/openai/openai-go/v3","version":"v3.82.0","cpe":"cpe:2.3:a:openai:openai-go\\/v3:v3.82.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/openai/openai-go/v3@v3.82.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:openai:openai_go\\/v3:v3.82.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MIBQQt9kEfdRtiOwQy3LV4vZ+82401prZD+IoUraEw4="}]},{"bom-ref":"pkg:golang/github.com/pb33f/go-yaml@v0.1.1?package-id=2b749553c90b189c","type":"library","name":"github.com/pb33f/go-yaml","version":"v0.1.1","cpe":"cpe:2.3:a:pb33f:go-yaml:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pb33f/go-yaml@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pb33f:go_yaml:v0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yWGmhVdwzionRnSc/hEJwcfq6PaZL2QdYzyReXBbX7Q="}]},{"bom-ref":"pkg:golang/github.com/pb33f/ordered-map/v2@v2.3.2?package-id=a3c79c790d4d9c39","type":"library","name":"github.com/pb33f/ordered-map/v2","version":"v2.3.2","cpe":"cpe:2.3:a:pb33f:ordered-map\\/v2:v2.3.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pb33f/ordered-map/v2@v2.3.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pb33f:ordered_map\\/v2:v2.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wDyaZ2Pv9QLh64X4utCeD5Zoi9nIv2aW3lwv172O5PQ="}]},{"bom-ref":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3?package-id=c20b008a43f442ea","type":"library","name":"github.com/santhosh-tekuri/jsonschema/v6","version":"v6.0.3","cpe":"cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1EYB5IzjZawrrnELUi78f9fPu57HuXjmddZPjrls/28="}]},{"bom-ref":"pkg:golang/github.com/standard-webhooks/standard-webhooks/libraries@v0.0.1?package-id=c664e6ec162e1aa5","type":"library","name":"github.com/standard-webhooks/standard-webhooks/libraries","version":"v0.0.1","cpe":"cpe:2.3:a:standard-webhooks:standard-webhooks\\/libraries:v0.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/standard-webhooks/standard-webhooks/libraries@v0.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:standard-webhooks:standard_webhooks\\/libraries:v0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:standard_webhooks:standard-webhooks\\/libraries:v0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:standard_webhooks:standard_webhooks\\/libraries:v0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:standard:standard-webhooks\\/libraries:v0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:standard:standard_webhooks\\/libraries:v0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uOfcYT+3QungH6tIGSVCR/Y3KJmgJiHcojJbMTPDZAI="}]},{"bom-ref":"pkg:golang/github.com/stretchr/objx@v0.8.0?package-id=88422cd07f951f4a","type":"library","name":"github.com/stretchr/objx","version":"v0.8.0","cpe":"cpe:2.3:a:stretchr:objx:v0.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/objx@v0.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rm9oMkeprG/wHifkZP4EuDww9S0mvEaQ/p9cXTNT4cw="}]},{"bom-ref":"pkg:golang/github.com/stretchr/testify@v1.12.1?package-id=d64a25dace8d069c","type":"library","name":"github.com/stretchr/testify","version":"v1.12.1","cpe":"cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/testify@v1.12.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWDWE="}]},{"bom-ref":"pkg:golang/github.com/tidwall/gjson@v1.20.0?package-id=47537a680b4ba0a6","type":"library","name":"github.com/tidwall/gjson","version":"v1.20.0","cpe":"cpe:2.3:a:tidwall:gjson:v1.20.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/gjson@v1.20.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+agJ3rEzKcCXKDKo0ml26UROcpcAlnZyjq+TjbY5Fto="}]},{"bom-ref":"pkg:golang/github.com/tidwall/match@v1.2.0?package-id=c49f85af4acbcaf6","type":"library","name":"github.com/tidwall/match","version":"v1.2.0","cpe":"cpe:2.3:a:tidwall:match:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/match@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0pt8FlkOwjN2fPt4bIl4BoNxb98gGHN2ObFEDkrfZnM="}]},{"bom-ref":"pkg:golang/github.com/tidwall/pretty@v1.2.2?package-id=1659c1eefb687ee8","type":"library","name":"github.com/tidwall/pretty","version":"v1.2.2","cpe":"cpe:2.3:a:tidwall:pretty:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/pretty@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dz1jrRuE7or/74V490B4/GP1pZm5WKlt2bgCP5A83w8="}]},{"bom-ref":"pkg:golang/github.com/tidwall/sjson@v1.2.5?package-id=49ec4e4ca8468b25","type":"library","name":"github.com/tidwall/sjson","version":"v1.2.5","cpe":"cpe:2.3:a:tidwall:sjson:v1.2.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tidwall/sjson@v1.2.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kLy8mja+1c9jlljvWTlSazM7cKDRfJuR/bOJhcY5NcY="}]},{"bom-ref":"pkg:golang/github.com/xo/terminfo@v1.2.0?package-id=1eb27aaa34454b6a","type":"library","name":"github.com/xo/terminfo","version":"v1.2.0","cpe":"cpe:2.3:a:xo:terminfo:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xo/terminfo@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:d0ZTOCpuGE0lwSAOs0zcJjwz3jWQyqcRt9XbGJpCOl4="}]},{"bom-ref":"pkg:github/github/codeql-action@v4?package-id=8dab8cf74a94a74c#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v4","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/action-integration.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4?package-id=0a11ddba7ce58aa3#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v4","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4?package-id=7f8e49c06fd8b473#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v4","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scan.yml"}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a00544d9cf935bfa","type":"library","name":"go.opentelemetry.io/auto/sdk","version":"v1.2.1","cpe":"cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.72.0?package-id=17f0c283a5017b16","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","version":"v0.72.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.72.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.72.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LxwW/9ctSCv+QkE/cLR7M91ZIkXNMqJtEMi1vCw9U8s="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel@v1.47.0?package-id=d75d0dfd5bcb3e5e","type":"library","name":"go.opentelemetry.io/otel","version":"v1.47.0","cpe":"cpe:2.3:a:opentelemetry:opentelemetry:v1.47.0:*:*:*:*:go:*:*","purl":"pkg:golang/go.opentelemetry.io/otel@v1.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j7ALJ/zgkS7Z6aeJW09p8VC9804bC+PpeTfCD4XPnOM="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/log@v1.47.0?package-id=a18e450a6f544014","type":"library","name":"go.opentelemetry.io/otel/log","version":"v1.47.0","cpe":"cpe:2.3:a:otel:log:v1.47.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/log@v1.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cOTS1CcLbSQeZKanGJ+0JpF/+t4PELi3O3bbl2lqCcI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/metric@v1.47.0?package-id=24e1bafb39548ff7","type":"library","name":"go.opentelemetry.io/otel/metric","version":"v1.47.0","cpe":"cpe:2.3:a:otel:metric:v1.47.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/metric@v1.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4PptaldXx3Eat1XjMZ68pPJEs5wrhlemctZE9a3UdWY="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/trace@v1.47.0?package-id=426da35979db4171","type":"library","name":"go.opentelemetry.io/otel/trace","version":"v1.47.0","cpe":"cpe:2.3:a:otel:trace:v1.47.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/trace@v1.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JOjX/Oci8K94QHddo+bbfya/Ai/nf6/dt9ZfrFNWSrM="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5?package-id=4fc93c87aeebc64b","type":"library","name":"go.yaml.in/yaml/v3","version":"v3.0.5","cpe":"cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.58.0?package-id=15c1d9acb12062ba","type":"library","name":"golang.org/x/crypto","version":"v0.58.0","cpe":"cpe:2.3:a:golang:crypto:v0.58.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.58.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.58.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.42.0?package-id=2679d6a5bc401bae","type":"library","name":"golang.org/x/mod","version":"v0.42.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.42.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.42.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ICeL3t2L30ljSPHHxDnR4fqVcBt/zR2zJAb9juavmQg="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.61.0?package-id=6128ad9f9e329ffe","type":"library","name":"golang.org/x/net","version":"v0.61.0","cpe":"cpe:2.3:a:golang:networking:v0.61.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.61.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.61.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.24.0?package-id=295e96fc2f845b35","type":"library","name":"golang.org/x/sync","version":"v0.24.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.24.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.49.0?package-id=aec8e4adcf0dcac2","type":"library","name":"golang.org/x/sys","version":"v0.49.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.49.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.49.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.43.0?package-id=70a65622f5a0d35d","type":"library","name":"golang.org/x/text","version":"v0.43.0","cpe":"cpe:2.3:a:golang:text:v0.43.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.43.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc="}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.52.0?package-id=b2c2b699e88e6408","type":"library","name":"golang.org/x/tools","version":"v0.52.0","cpe":"cpe:2.3:a:golang:x\\/tools:v0.52.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.52.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ryxg4U63oaUYk7uOLTF37n43f4qgtGvqV4Ioit1BaEs="}]},{"bom-ref":"pkg:github/golangci/golangci-lint-action@v9?package-id=d97c564eea35f9ce","type":"library","name":"golangci/golangci-lint-action","version":"v9","cpe":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci-lint-action:v9:*:*:*:*:*:*:*","purl":"pkg:github/golangci/golangci-lint-action@v9","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci_lint_action:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci-lint-action:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci_lint_action:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci-lint-action:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci_lint_action:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci-lint-action:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci_lint_action:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci-lint-action:v9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci_lint_action:v9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:golang/google.golang.org/api@v0.304.0?package-id=2af0e8ff6943b2d5","type":"library","name":"google.golang.org/api","version":"v0.304.0","cpe":"cpe:2.3:a:google:api:v0.304.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/api@v0.304.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2R1dYSiIVQRGcKN901u9yPFEdJu5h90oGY5X4TcgbmA="}]},{"bom-ref":"pkg:golang/google.golang.org/genai@v1.75.0?package-id=04ede4371e2622d9","type":"library","name":"google.golang.org/genai","version":"v1.75.0","cpe":"cpe:2.3:a:google:genai:v1.75.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genai@v1.75.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:K0hzYSuREgwxstn5jq3hQvjgEi10Adp9RKKEdc+CYNo="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20261012220534-4341edf3f941?package-id=3fef658978395078","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20261012220534-4341edf3f941","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20261012220534-4341edf3f941:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20261012220534-4341edf3f941","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QG6hS4zFplRZvOQedzei4t2pT/zkQc3VR1u+S9/rcAw="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.84.0?package-id=54bcc746f2ab7987","type":"library","name":"google.golang.org/grpc","version":"v1.84.0","cpe":"cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.84.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:soMyaPJ8pAak5PIQ0DGBUir0XRo2fRoMqhNWMLlLxO0="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=0055873c0ce1a39b","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12","cpe":"cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc="}]},{"bom-ref":"pkg:github/goreleaser/goreleaser-action@v7?package-id=0f2ce8eaf71493ef","type":"library","name":"goreleaser/goreleaser-action","version":"v7","cpe":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser-action:v7:*:*:*:*:*:*:*","purl":"pkg:github/goreleaser/goreleaser-action@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser_action:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/securego/gosec@master?package-id=d11436599de9b754","type":"library","name":"securego/gosec","version":"master","cpe":"cpe:2.3:a:securego\\/gosec:securego\\/gosec:master:*:*:*:*:*:*:*","purl":"pkg:github/securego/gosec@master","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/securego/gosec@v2.29.0?package-id=6051fbb8fd463fbd","type":"library","name":"securego/gosec","version":"v2.29.0","cpe":"cpe:2.3:a:securego\\/gosec:securego\\/gosec:v2.29.0:*:*:*:*:*:*:*","purl":"pkg:github/securego/gosec@v2.29.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/scan.yml"}]},{"bom-ref":"pkg:github/sigstore/cosign-installer@v4.1.2?package-id=ecc0798a3c09c943","type":"library","name":"sigstore/cosign-installer","version":"v4.1.2","cpe":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/cosign-installer@v4.1.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"e61646c429a0cc2b","type":"file","name":"/.github/workflows/action-integration.yml","hashes":[{"alg":"SHA-1","content":"83ebd4432e1109fdfba0bb002e91160a7dd78f96"},{"alg":"SHA-256","content":"ade792a06b7ea83e7fc2e452b5485aefca9bd8e713ff021d5aaa1a9ada32de23"}]},{"bom-ref":"7561d461b00ff11d","type":"file","name":"/.github/workflows/ci.yml","hashes":[{"alg":"SHA-1","content":"644d5e785f42f32040738f19f37ae26d610e542e"},{"alg":"SHA-256","content":"e3a51ac44df0be3f91e3467053c69ac07c93e1b33ae495b662965b5a7011132a"}]},{"bom-ref":"cc210d8a1a5f5704","type":"file","name":"/.github/workflows/release.yml","hashes":[{"alg":"SHA-1","content":"410b0134fb598cefd18798908447b7b557ffd8ba"},{"alg":"SHA-256","content":"27aae18fb8e37e4048ecf32bc951a2c670f2702227a1b6034fb28d38bfba8289"}]},{"bom-ref":"9d394c2e4e28244d","type":"file","name":"/.github/workflows/scan.yml","hashes":[{"alg":"SHA-1","content":"225531a7fa5a9013f80b4e8b50a3ee3adced1be5"},{"alg":"SHA-256","content":"9fd39ed17b0f3294b1756806a5f3e767e04e1f3fd8cc7df2b03d0fc51379b199"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"758c0acd30cce0c401001ab5ddd92caa4c03af71"},{"alg":"SHA-256","content":"a0593611e26be15a6863e803dd174a9d5aefe1d5ce4783c13d99e09180c47ddc"}]}]}