{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:548b1301-c543-4541-a272-61628e4ce7c1","version":1,"metadata":{"timestamp":"2026-11-02T03:08:08Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"c930cc32427a745b","type":"file","name":"sigstore/rekor","version":"v1.5.5"}},"components":[{"bom-ref":"pkg:github/homebrew/actions@eb02c69dbabdb66ff183c614f4ce7ab3c077592c?package-id=0b28fd1934aabf8e#setup-homebrew","type":"library","name":"Homebrew/actions/setup-homebrew","version":"eb02c69dbabdb66ff183c614f4ce7ab3c077592c","cpe":"cpe:2.3:a:Homebrew\\/actions\\/setup-homebrew:Homebrew\\/actions\\/setup-homebrew:eb02c69dbabdb66ff183c614f4ce7ab3c077592c:*:*:*:*:*:*:*","purl":"pkg:github/Homebrew/actions@eb02c69dbabdb66ff183c614f4ce7ab3c077592c#setup-homebrew","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:Homebrew\\/actions\\/setup-homebrew:Homebrew\\/actions\\/setup_homebrew:eb02c69dbabdb66ff183c614f4ce7ab3c077592c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Homebrew\\/actions\\/setup_homebrew:Homebrew\\/actions\\/setup-homebrew:eb02c69dbabdb66ff183c614f4ce7ab3c077592c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Homebrew\\/actions\\/setup_homebrew:Homebrew\\/actions\\/setup_homebrew:eb02c69dbabdb66ff183c614f4ce7ab3c077592c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Homebrew\\/actions\\/setup:Homebrew\\/actions\\/setup-homebrew:eb02c69dbabdb66ff183c614f4ce7ab3c077592c:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Homebrew\\/actions\\/setup:Homebrew\\/actions\\/setup_homebrew:eb02c69dbabdb66ff183c614f4ce7ab3c077592c:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=121a511983630ac1","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d3fe9e4ca6cc9f60","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=7b2ef5d6d856a710","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/fuzz.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d124ff29c2f74604","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=89064d6d8ea0c5bf","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-release.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=cc9665986c687ab0","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/verify.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=9a0d522e07a10feb","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=1036e58251b1c99f","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=67dc33fff5b3354e","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/fuzz.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=8abfd0da90bbd34a","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=6e1421d6dfab6253","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/verify.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.2?package-id=4e57c90c7faf7966","type":"library","name":"actions/upload-artifact","version":"v7.0.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:golang/al.essio.dev/pkg/shellescape@v1.5.1?package-id=ae760e14a9d95193","type":"library","name":"al.essio.dev/pkg/shellescape","version":"v1.5.1","cpe":"cpe:2.3:a:pkg:shellescape:v1.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/al.essio.dev/pkg/shellescape@v1.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:86HrALUujYS/h+GtqoB26SBEdkWfmMI6FubjXlsXyho="}]},{"bom-ref":"pkg:golang/cel.dev/expr@v0.25.2?package-id=50296d5ce895996f","type":"library","name":"cel.dev/expr","version":"v0.25.2","purl":"pkg:golang/cel.dev/expr@v0.25.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:K6j46C81hXtZQfuX60cVWQFBJahKSE2gfRbNuvr5bFs="}]},{"bom-ref":"pkg:golang/cloud.google.com/go@v0.123.0?package-id=419b179104eb109e","type":"library","name":"cloud.google.com/go","version":"v0.123.0","purl":"pkg:golang/cloud.google.com/go@v0.123.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth@v0.24.1-0.20261001053825-dbc26066f70a?package-id=2fa9416b4344aba5","type":"library","name":"cloud.google.com/go/auth","version":"v0.24.1-0.20261001053825-dbc26066f70a","cpe":"cpe:2.3:a:go:auth:v0.24.1-0.20261001053825-dbc26066f70a:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth@v0.24.1-0.20261001053825-dbc26066f70a","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jW1ZLFy9oa5ai8LOI40z6s+DL1cO/L1KSm9hVGnibn8="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.3.0?package-id=2a624276f70575e9","type":"library","name":"cloud.google.com/go/auth/oauth2adapt","version":"v0.3.0","cpe":"cpe:2.3:a:go:auth\\/oauth2adapt:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FY8oSZpCYoUNv6QxVODuMjQz4IlSOVeiQtZ08vLPz88="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0?package-id=c1575fca953a051b","type":"library","name":"cloud.google.com/go/compute/metadata","version":"v0.10.0","cpe":"cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pyKMUQSwchgkIBBJGdILqQbs/BNJXqwSA7Ej6LAvvtY="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/iam@v1.14.0?package-id=72fd0648d4eef598","type":"library","name":"cloud.google.com/go/iam","version":"v1.14.0","cpe":"cpe:2.3:a:go:iam:v1.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/iam@v1.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YRIB1/4xxwJ+NfI6RQr1WaOoHHeV0MizJEj940nBXJA="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/kms@v1.33.0?package-id=9b895dc24fb500fe","type":"library","name":"cloud.google.com/go/kms","version":"v1.33.0","cpe":"cpe:2.3:a:go:kms:v1.33.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/kms@v1.33.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pG0X78m212b2pv9N4fdMoUO69LuZGQ9kSvn8sHBOFAo="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/longrunning@v1.2.0?package-id=a301c3b317f0e271","type":"library","name":"cloud.google.com/go/longrunning","version":"v1.2.0","cpe":"cpe:2.3:a:go:longrunning:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/longrunning@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WjYH3YHBGCxGJP9M4dWGHBfXr/cFIjMkNgWcJj7/iMM="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/monitoring@v1.30.0?package-id=170165bad3bf32a9","type":"library","name":"cloud.google.com/go/monitoring","version":"v1.30.0","cpe":"cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/monitoring@v1.30.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:r/d+JUbyKmJ8b07iznuKfzVzrIXTWxHQ3lBRm3x2LlY="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/profiler@v0.7.0?package-id=6a5f0fba89e37c13","type":"library","name":"cloud.google.com/go/profiler","version":"v0.7.0","cpe":"cpe:2.3:a:go:profiler:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/profiler@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sF6lj71YwX0yzYsVS+hLxmD3QwPcrVHBYKWhf3qvvZI="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/pubsub@v1.51.1?package-id=3261d6f440c89afb","type":"library","name":"cloud.google.com/go/pubsub","version":"v1.51.1","cpe":"cpe:2.3:a:go:pubsub:v1.51.1:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/pubsub@v1.51.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:R3G1wCOxBO7jRpL8x2pdZMv1GAJDF6ax/m2zPOtvTNE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/pubsub/v2@v2.7.0?package-id=6b1752e714219955","type":"library","name":"cloud.google.com/go/pubsub/v2","version":"v2.7.0","cpe":"cpe:2.3:a:go:pubsub\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/pubsub/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MFrBTZZa6PDWZzCi4NJRsHKMm2w0a4oAaYNqwjgbQTE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/storage@v1.64.0?package-id=8279b21e2b0b3a26","type":"library","name":"cloud.google.com/go/storage","version":"v1.64.0","cpe":"cpe:2.3:a:go:storage:v1.64.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/storage@v1.64.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KLpxI/oX9LxeRsNqn877d2WyeT3ryiEwnGt8pwcSPZg="}]},{"bom-ref":"pkg:github/codecov/codecov-action@v7.1.1?package-id=0905f164e4763b6c","type":"library","name":"codecov/codecov-action","version":"v7.1.1","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:v7.1.1:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@v7.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:golang/dario.cat/mergo@v1.0.2?package-id=60c991120917da0a","type":"library","name":"dario.cat/mergo","version":"v1.0.2","purl":"pkg:golang/dario.cat/mergo@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8="}]},{"bom-ref":"pkg:github/docker/login-action@v4.6.0?package-id=f0f8be082d23bbb1","type":"library","name":"docker/login-action","version":"v4.6.0","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v4.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:golang/filippo.io/edwards25519@v1.2.0?package-id=06417845d4479ea3","type":"library","name":"filippo.io/edwards25519","version":"v1.2.0","purl":"pkg:golang/filippo.io/edwards25519@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo="}]},{"bom-ref":"pkg:golang/github.com/adamkorcz/go-fuzz-headers-1@v0.0.0-20230329111138-12e09aba5ebd?package-id=ed8d19ac5a346bed","type":"library","name":"github.com/AdamKorcz/go-fuzz-headers-1","version":"v0.0.0-20230329111138-12e09aba5ebd","cpe":"cpe:2.3:a:AdamKorcz:go-fuzz-headers-1:v0.0.0-20230329111138-12e09aba5ebd:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AdamKorcz/go-fuzz-headers-1@v0.0.0-20230329111138-12e09aba5ebd","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:AdamKorcz:go_fuzz_headers_1:v0.0.0-20230329111138-12e09aba5ebd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1tbEqR4NyQLgiod7vLXSswHteGetAVZrMGCqrJxLKRs="}]},{"bom-ref":"pkg:golang/github.com/adamkorcz/go-fuzz-headers-1@v0.0.0-20230919221257-8b5d3ce2d11d?package-id=3179b792cba3aa65","type":"library","name":"github.com/AdamKorcz/go-fuzz-headers-1","version":"v0.0.0-20230919221257-8b5d3ce2d11d","cpe":"cpe:2.3:a:AdamKorcz:go-fuzz-headers-1:v0.0.0-20230919221257-8b5d3ce2d11d:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AdamKorcz/go-fuzz-headers-1@v0.0.0-20230919221257-8b5d3ce2d11d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:AdamKorcz:go_fuzz_headers_1:v0.0.0-20230919221257-8b5d3ce2d11d:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zjqpY4C7H15HjRPEenkS4SAn3Jy2eRRjkjZbGR30TOg="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.23.1?package-id=1229fcce2d1312e8","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","version":"v1.23.1","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.23.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.23.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.23.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zvXfGJCWvywnCA814d8ZiVyt+fm9nnTE8xSb99zRyfo="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.1?package-id=757d24664783b304","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/azidentity","version":"v1.14.1","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.14.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.14.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u93s+zU2JD62im61Bm5CZIc1ZrOJaIAWEg0WOrMVkEo="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=a2a7b3aceddda5dc","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/internal","version":"v1.12.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fhqpLE3UEXi9lPaBRpQ6XuRW0nU7hgg4zlmZZa+a9q4="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=c9efcb7e81a065f3","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys","version":"v1.5.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MaKvxE6D0KkjOg6Wd9M00iqP5PR0kUxCfiezes4JweM="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=657295fde8a1734c","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal","version":"v1.2.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4="}]},{"bom-ref":"pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.8.0?package-id=cdd94c5024f21cac","type":"library","name":"github.com/AzureAD/microsoft-authentication-library-for-go","version":"v1.8.0","cpe":"cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Nljr4q1GRA/5vCrMONS+g4u4LRHNgOXVSh3O43J2CnI="}]},{"bom-ref":"pkg:golang/github.com/data-dog/go-sqlmock@v1.5.2?package-id=9b180f89820d8c8f","type":"library","name":"github.com/DATA-DOG/go-sqlmock","version":"v1.5.2","cpe":"cpe:2.3:a:DATA-DOG:go-sqlmock:v1.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/DATA-DOG/go-sqlmock@v1.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:DATA-DOG:go_sqlmock:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DATA_DOG:go-sqlmock:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DATA_DOG:go_sqlmock:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DATA:go-sqlmock:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DATA:go_sqlmock:v1.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OcvFkGmslmlZibjAjaHm3L//6LiuBgolP7OputlJIzU="}]},{"bom-ref":"pkg:golang/github.com/datadog/zstd@v1.5.5?package-id=eb1a1b8b6efe8eec","type":"library","name":"github.com/DataDog/zstd","version":"v1.5.5","cpe":"cpe:2.3:a:DataDog:zstd:v1.5.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/DataDog/zstd@v1.5.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oWf5W7GtOLgp6bciQYDmhHHjdhYkALu6S/5Ni9ZgSvQ="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.34.0?package-id=3aff905b75cb37ba","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp","version":"v1.34.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.34.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.34.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.34.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yzIYdwuro811Z27D3T80Wkd3rqZzb0K43nner7Eh1yE="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.57.0?package-id=c2284fdaf11798b9","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric","version":"v0.57.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jLdiS1vO+XJFyDSWRHBx56r4s/NNtcl5J6KyCcWUX/w="}]},{"bom-ref":"pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0?package-id=966cccaf87fde20d","type":"library","name":"github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping","version":"v0.57.0","cpe":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RoO5+d7uCmDqovLrHCr2/BuViUXvdcrNxyNM1pN9dDQ="}]},{"bom-ref":"pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=1a8bdcfc9c79ac74","type":"library","name":"github.com/Masterminds/goutils","version":"v1.1.1","cpe":"cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/Masterminds/goutils@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI="}]},{"bom-ref":"pkg:golang/github.com/masterminds/semver/v3@v3.5.0?package-id=00baef462e5c22c4","type":"library","name":"github.com/Masterminds/semver/v3","version":"v3.5.0","cpe":"cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/semver/v3@v3.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kQceYJfbupGfZOKZQg0kou0DgAKhzDg2NZPAwZ/2OOE="}]},{"bom-ref":"pkg:golang/github.com/masterminds/sprig/v3@v3.3.0?package-id=45ed2a8dffdec30b","type":"library","name":"github.com/Masterminds/sprig/v3","version":"v3.3.0","cpe":"cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe3tPhs="}]},{"bom-ref":"pkg:golang/github.com/protonmail/go-crypto@v1.4.1?package-id=6d5b046a5726eafa","type":"library","name":"github.com/ProtonMail/go-crypto","version":"v1.4.1","cpe":"cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9RfcZHqEQUvP8RzecWEUafnZVtEvrBVL9BiF67IQOfM="}]},{"bom-ref":"pkg:golang/github.com/sladkycitron/slogcolor@v1.9.0?package-id=a76778a7ca42b6b0","type":"library","name":"github.com/SladkyCitron/slogcolor","version":"v1.9.0","cpe":"cpe:2.3:a:SladkyCitron:slogcolor:v1.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/SladkyCitron/slogcolor@v1.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fr4LeG+T6pZ1RYNNOP925jaBYrTdpA6BLzGy29yd4vI="}]},{"bom-ref":"pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=cb662d351fd52534","type":"library","name":"github.com/asaskevich/govalidator","version":"v0.0.0-20230301143203-a9d515a09cc2","cpe":"cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.3?package-id=80fcadd29c6d1988","type":"library","name":"github.com/aws/aws-sdk-go-v2","version":"v1.47.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2:v1.47.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2:v1.47.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HRoT/MkNi3bjO5xF4dCzLzvVmkvRGHj3/cLINDnJejk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.11?package-id=eb21b946ce17aa8a","type":"library","name":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","version":"v1.7.11","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h5+3VT69KUBK24grGuuA5saDJTj2IIjLb9au668Fo5I="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.9?package-id=d75beef7bd34610f","type":"library","name":"github.com/aws/aws-sdk-go-v2/config","version":"v1.33.9","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.33.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.33.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Hv6bcQUJVnmuWaKjqD6Ot8sE75NrWsWV20oGT5aWle0="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.9?package-id=c15b638e3b2846ee","type":"library","name":"github.com/aws/aws-sdk-go-v2/credentials","version":"v1.20.9","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.20.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.20.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SNO55PnWhaDafsOcv16lCA0kdoFMl/YlegWoVsU02s0="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.3?package-id=4df49b9a3b802acb","type":"library","name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","version":"v1.20.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.20.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.20.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gr3b87OLB29jymWPzp/CAyXwQRJVE+sC4Wm0qBIKHsk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager@v0.2.3?package-id=40cca29b1df6cb99","type":"library","name":"github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager","version":"v0.2.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/s3\\/transfermanager:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/s3\\/transfermanager:v0.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w5OoDiMN6x53ROmiIImGzmVcxXv2q1GXY+aKV4WAJYM="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.6?package-id=9e94455a9b8c51de","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/configsources","version":"v1.5.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.5.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.5.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CqL8NN3p4I0JTwwV5MEoatIl4Y2amZ2X9dRD+0hbRL0="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.6?package-id=1f07a3748a74303e","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","version":"v2.8.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.8.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.8.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FpBq24TG6WVSObTNhQOv7Q0088rounUUlwn3zlNItkM="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.6?package-id=fac2c64aadcb6e5c","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/v4a","version":"v1.5.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.5.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.5.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Qmn60RWuk9+bd2ddvJJqwf3Cpac3VvGMOdbGemtUhX4="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.21?package-id=cfa70038513a1587","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding","version":"v1.13.21","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.21:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.21","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.21:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:e6YW5uME30TkrElR+4/xcY7NB6CCj2dcv7vtmGXhfhQ="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.18?package-id=3a00745369ef0ab5","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/checksum","version":"v1.9.18","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.9.18:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.18","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.9.18:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W/EyPFl9A5rXrtoilfwHYEvzHER+K4SpBPtMXi24Mos="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.6?package-id=ef3450820ba754a7","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","version":"v1.14.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.14.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.14.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LHHdobjo5le1sjJdolitV7uVvYg3wkaeM1Ju2fDgeZQ="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.25?package-id=40457401e87f6851","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/s3shared","version":"v1.19.25","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.25:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.25","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.25:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2pQEbwf+/6EDbiit/GcBE2K4IUpMZymaA0kOz3xK978="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.61.4?package-id=5668a3974b31e06c","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/kms","version":"v1.61.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/kms:v1.61.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.61.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/kms:v1.61.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vW7497x7W6ucLJAqDt96jIdO4+IWLMB3p98UubwjdqM="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.102.2?package-id=3e12b7fc87eea525","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/s3","version":"v1.102.2","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.102.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.102.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.102.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ie4ElCmUKS26pzrZcIk/lmt4yWjAqLLcawstyQCh298="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.4?package-id=c8db54eff254ac75","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/signin","version":"v1.10.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.10.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.10.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tvpDjuUvgKURf3Yk4hOaGbZ4QdY+070OWcA5d6LUv2A="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.4?package-id=85c3e9406341606a","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/sso","version":"v1.38.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.38.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.38.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ChCtagixSFOxltv0o6E3NT8F7ksvZtZGPwUBynO5Nmk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.4?package-id=b9933723c7b8fdb5","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","version":"v1.43.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.43.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.43.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j6c+HA4AoS0EBEjArPjavFEBrucJEryfrQU0TffmACk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.4?package-id=e081edecd57a26d4","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/sts","version":"v1.51.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.51.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.51.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OKEfbf2tcfsF2pBk/S9QqNpo6alaAtiBs4hysCsBjPw="}]},{"bom-ref":"pkg:golang/github.com/aws/smithy-go@v1.28.5?package-id=3a463e5d4a869e7e","type":"library","name":"github.com/aws/smithy-go","version":"v1.28.5","cpe":"cpe:2.3:a:aws:smithy-go:v1.28.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/smithy-go@v1.28.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:smithy_go:v1.28.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OqbqKtzY9NUnr2yAe9+hiTdFb20tNaK/lI0PMOGXX9k="}]},{"bom-ref":"pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=4b7f4d17e7911c1a","type":"library","name":"github.com/beorn7/perks","version":"v1.0.1","cpe":"cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/beorn7/perks@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="}]},{"bom-ref":"pkg:golang/github.com/cavaliergopher/cpio@v1.0.1?package-id=04589ee5bed05e88","type":"library","name":"github.com/cavaliergopher/cpio","version":"v1.0.1","cpe":"cpe:2.3:a:cavaliergopher:cpio:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cavaliergopher/cpio@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KQFSeKmZhv0cr+kawA3a0xTQCU4QxXF1vhU7P7av2KM="}]},{"bom-ref":"pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=cba7b797553a3b0f","type":"library","name":"github.com/cenkalti/backoff/v4","version":"v4.3.0","cpe":"cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/cloudflare/circl@v1.6.3?package-id=3321c9be70fde1d7","type":"library","name":"github.com/cloudflare/circl","version":"v1.6.3","cpe":"cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/cloudflare/circl@v1.6.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8="}]},{"bom-ref":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2?package-id=8f94fd943c978725","type":"library","name":"github.com/cncf/xds/go","version":"v0.0.0-20260202195803-dba9d589def2","cpe":"cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aBangftG7EVZoUb69Os8IaYg++6uMOdKK83QtkkvJik="}]},{"bom-ref":"pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=d3bc55ddcd7e2737","type":"library","name":"github.com/common-nighthawk/go-figure","version":"v0.0.0-20210622060536-734e95fb86be","cpe":"cpe:2.3:a:common-nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:common-nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common_nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common_nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:J5BL2kskAlV9ckgEsNQXscjIaLiOYiZ75d4e94E6dcQ="}]},{"bom-ref":"pkg:golang/github.com/creack/pty@v1.1.24?package-id=bcdbcd6a0a07f63a","type":"library","name":"github.com/creack/pty","version":"v1.1.24","cpe":"cpe:2.3:a:creack:pty:v1.1.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/creack/pty@v1.1.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s="}]},{"bom-ref":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.2.4?package-id=9d4a27706d05ddf8","type":"library","name":"github.com/cyphar/filepath-securejoin","version":"v0.2.4","cpe":"cpe:2.3:a:cyphar:filepath-securejoin:v0.2.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cyphar/filepath-securejoin@v0.2.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cyphar:filepath_securejoin:v0.2.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ugdm7cg7i6ZK6x3xDF1oEu1nfkyfH53EtKeQYTC3kyg="}]},{"bom-ref":"pkg:golang/github.com/danieljoos/wincred@v1.2.2?package-id=a941fdac07d8ce0a","type":"library","name":"github.com/danieljoos/wincred","version":"v1.2.2","cpe":"cpe:2.3:a:danieljoos:wincred:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/danieljoos/wincred@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:774zMFJrqaeYCK2W57BgAem/MLi6mtSE47MB6BOJ0i0="}]},{"bom-ref":"pkg:golang/github.com/docker/go-units@v0.5.0?package-id=a9271522b4f3233c","type":"library","name":"github.com/docker/go-units","version":"v0.5.0","cpe":"cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/go-units@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4="}]},{"bom-ref":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0?package-id=77d8e9d5a1ad9592","type":"library","name":"github.com/envoyproxy/go-control-plane/envoy","version":"v1.37.0","cpe":"cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u3riX6BoYRfF4Dr7dwSOroNfdSbEPe9Yyl09/B6wBrQ="}]},{"bom-ref":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3?package-id=08b32ee1d7cb95d6","type":"library","name":"github.com/envoyproxy/protoc-gen-validate","version":"v1.3.3","cpe":"cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MVQghNeW+LZcmXe7SY1V36Z+WFMDjpqGAGacLe2T0ds="}]},{"bom-ref":"pkg:golang/github.com/fatih/color@v1.19.0?package-id=ad8d03ac7548f6e0","type":"library","name":"github.com/fatih/color","version":"v1.19.0","cpe":"cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fatih/color@v1.19.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Zp3PiM21/9Ld6FzSKyL5c/BULoe/ONr9KlbYVOfG8+w="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0?package-id=21924c216340421a","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.1.0","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0?package-id=f0a35362b51d33a9","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.1.0","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc="}]},{"bom-ref":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=e175d0c09721a1e3","type":"library","name":"github.com/fsnotify/fsnotify","version":"v1.10.1","cpe":"cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho="}]},{"bom-ref":"pkg:golang/github.com/fsnotify/fsnotify@v1.9.0?package-id=7784241df9ad0fe0","type":"library","name":"github.com/fsnotify/fsnotify","version":"v1.9.0","cpe":"cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fsnotify/fsnotify@v1.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k="}]},{"bom-ref":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1?package-id=7c6d02c806ea0209","type":"library","name":"github.com/fxamacker/cbor/v2","version":"v2.9.1","cpe":"cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2rWm8B193Ll4VdjsJY28jxs70IdDsHRWgQYAI80+rMQ="}]},{"bom-ref":"pkg:golang/github.com/go-chi/chi/v5@v5.5.0?package-id=c028051c05bfa2d4","type":"library","name":"github.com/go-chi/chi/v5","version":"v5.5.0","cpe":"cpe:2.3:a:go-chi:chi\\/v5:v5.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-chi/chi/v5@v5.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_chi:chi\\/v5:v5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:chi\\/v5:v5.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xdKQ1dJmVJsmgahrXSKhUx8NyVPzpwdlyrrQFpMPJgg="}]},{"bom-ref":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.5?package-id=05eb82ff5b803225","type":"library","name":"github.com/go-jose/go-jose/v4","version":"v4.1.5","cpe":"cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RjgjO2LOtWOJKUC5wpwY9LR3B3vwVAz6JS2YHfYU6eA="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.4?package-id=5d64ad5913a6841c","type":"library","name":"github.com/go-logr/logr","version":"v1.4.4","cpe":"cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ed7921825a53d3f4","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/analysis@v1.0.0?package-id=6ebb9e32bd873b0f","type":"library","name":"github.com/go-openapi/analysis","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:analysis:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/analysis@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:analysis:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:analysis:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sNvbAGCJqUTqIAodr9IVqJMmuZas3YS9ms1dGK9yiJ4="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/analysis@v1.0.0?package-id=d028b0eaf7cae593","type":"library","name":"github.com/go-openapi/analysis","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:analysis:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/analysis@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:analysis:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:analysis:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sNvbAGCJqUTqIAodr9IVqJMmuZas3YS9ms1dGK9yiJ4="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/codescan@v0.36.4?package-id=505b805ed2b8a582","type":"library","name":"github.com/go-openapi/codescan","version":"v0.36.4","cpe":"cpe:2.3:a:go-openapi:codescan:v0.36.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/codescan@v0.36.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:codescan:v0.36.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:codescan:v0.36.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ngm19zhpNK2+NibLflXZTGbsJ0MsH9xEspMyWSBgjZU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=b9e66bb69853101c","type":"library","name":"github.com/go-openapi/errors","version":"v0.22.8","cpe":"cpe:2.3:a:go-openapi:errors:v0.22.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/errors@v0.22.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:errors:v0.22.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:errors:v0.22.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oP7sW7TWc3wFFjrzzj0nI83H2qMBkNjNfSd+XRejk/I="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/errors@v0.22.9?package-id=46c32284cdf2eb2e","type":"library","name":"github.com/go-openapi/errors","version":"v0.22.9","cpe":"cpe:2.3:a:go-openapi:errors:v0.22.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/errors@v0.22.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:errors:v0.22.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:errors:v0.22.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HI9+SyVYiRzyeBQGv0CbWbQa+u2S0nny7G7AhY+UMiM="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/inflect@v1.0.0?package-id=4ad94f0e469ec517","type":"library","name":"github.com/go-openapi/inflect","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:inflect:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/inflect@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:inflect:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:inflect:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IzG7K5YBu97odaCXhjODGGt25WaNtEYLJc9NfUcW4AI="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonpointer@v1.0.1?package-id=abc98ffaac50ccdb","type":"library","name":"github.com/go-openapi/jsonpointer","version":"v1.0.1","cpe":"cpe:2.3:a:go-openapi:jsonpointer:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonpointer@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonpointer:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonpointer:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2KxywRmNwJkT/FMBa3iRNHEaAxSJvjqoufQZy3au1Mg="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonpointer@v1.0.1?package-id=77e6ff3542746cc9","type":"library","name":"github.com/go-openapi/jsonpointer","version":"v1.0.1","cpe":"cpe:2.3:a:go-openapi:jsonpointer:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonpointer@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonpointer:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonpointer:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2KxywRmNwJkT/FMBa3iRNHEaAxSJvjqoufQZy3au1Mg="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonreference@v1.0.2?package-id=8254c88fcd436a83","type":"library","name":"github.com/go-openapi/jsonreference","version":"v1.0.2","cpe":"cpe:2.3:a:go-openapi:jsonreference:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonreference@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonreference:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonreference:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oS4et8FOf3p3UQxEo4Xt0esijmBUM+F259Xl72OSZsc="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonreference@v1.0.2?package-id=686f5ac9740a7b4c","type":"library","name":"github.com/go-openapi/jsonreference","version":"v1.0.2","cpe":"cpe:2.3:a:go-openapi:jsonreference:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonreference@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonreference:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonreference:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oS4et8FOf3p3UQxEo4Xt0esijmBUM+F259Xl72OSZsc="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/loads@v0.25.3?package-id=7ee61b65ed0e51ef","type":"library","name":"github.com/go-openapi/loads","version":"v0.25.3","cpe":"cpe:2.3:a:go-openapi:loads:v0.25.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/loads@v0.25.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:loads:v0.25.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:loads:v0.25.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:V+jKy/thXWdLJUuYC8sZX2dICyAa8M3DokF70jj34P0="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/loads@v0.25.3?package-id=d8a02c3c7c177d83","type":"library","name":"github.com/go-openapi/loads","version":"v0.25.3","cpe":"cpe:2.3:a:go-openapi:loads:v0.25.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/loads@v0.25.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:loads:v0.25.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:loads:v0.25.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:V+jKy/thXWdLJUuYC8sZX2dICyAa8M3DokF70jj34P0="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/runtime@v0.33.2?package-id=e4a8528483c81ef7","type":"library","name":"github.com/go-openapi/runtime","version":"v0.33.2","cpe":"cpe:2.3:a:go-openapi:runtime:v0.33.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/runtime@v0.33.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime:v0.33.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime:v0.33.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HSxskMs0WmpCdQvBWVxHt2t2mXMwn8DDav3VtVidwig="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/runtime@v0.33.3?package-id=3857c5830277efbf","type":"library","name":"github.com/go-openapi/runtime","version":"v0.33.3","cpe":"cpe:2.3:a:go-openapi:runtime:v0.33.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/runtime@v0.33.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qVgTDaFH+pzO8UqlwYNVmx2DD+nwVK3rB65V29ednD0="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.2?package-id=f537e3f47987c4f5","type":"library","name":"github.com/go-openapi/runtime/server-middleware","version":"v0.33.2","cpe":"cpe:2.3:a:go-openapi:runtime\\/server-middleware:v0.33.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-openapi:runtime\\/server_middleware:v0.33.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime\\/server-middleware:v0.33.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime\\/server_middleware:v0.33.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime\\/server-middleware:v0.33.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime\\/server_middleware:v0.33.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:BVFjAaW4Jh/kZ4QSsgDrGzLuSuaKzSiyvappUFKxgUk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.3?package-id=b8661e55d8501e5c","type":"library","name":"github.com/go-openapi/runtime/server-middleware","version":"v0.33.3","cpe":"cpe:2.3:a:go-openapi:runtime\\/server-middleware:v0.33.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-openapi:runtime\\/server_middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime\\/server-middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime\\/server_middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime\\/server-middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime\\/server_middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Td5UBla/J/KCjlsD0tmZYWQWxnT4gHpfXbueLQv9Umw="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/spec@v1.0.1?package-id=2e7fffcb8b78f3e7","type":"library","name":"github.com/go-openapi/spec","version":"v1.0.1","cpe":"cpe:2.3:a:go-openapi:spec:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/spec@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:spec:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:spec:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lj2vdGpNDcVgwRc6qXdw6qt/KQpCtSa9tnUH6vpDPDk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/spec@v1.0.1?package-id=5dac2b5d2dcf9b3b","type":"library","name":"github.com/go-openapi/spec","version":"v1.0.1","cpe":"cpe:2.3:a:go-openapi:spec:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/spec@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:spec:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:spec:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lj2vdGpNDcVgwRc6qXdw6qt/KQpCtSa9tnUH6vpDPDk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/strfmt@v0.27.2?package-id=50c10abafb0cd2dd","type":"library","name":"github.com/go-openapi/strfmt","version":"v0.27.2","cpe":"cpe:2.3:a:go-openapi:strfmt:v0.27.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/strfmt@v0.27.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:strfmt:v0.27.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:strfmt:v0.27.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SG32SlbwNy92s0KJiVxt2joJeFdqIYHvwrA0OU6HqzQ="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/strfmt@v0.27.3?package-id=a3c58d41c5351cca","type":"library","name":"github.com/go-openapi/strfmt","version":"v0.27.3","cpe":"cpe:2.3:a:go-openapi:strfmt:v0.27.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/strfmt@v0.27.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:strfmt:v0.27.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:strfmt:v0.27.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cyf4J5Wjpd6bFpAs44MF8PsbWF/mWXhn82Ck/hgQZgw="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.29.2?package-id=cd50e9f9b93c0954","type":"library","name":"github.com/go-openapi/swag/cmdutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/cmdutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cXEzX/nWCODon251f+1HgL75/R4XXML5IZxgLCWMoro="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/conv@v0.29.2?package-id=48421dcf0f10a053","type":"library","name":"github.com/go-openapi/swag/conv","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/conv:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/conv@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/conv:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/conv:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8c9shoB8l0QRSR6ymq1llHdBWDqpIgJfjTGHx3Vuhm0="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/conv@v0.29.2?package-id=d42a27b80a02b008","type":"library","name":"github.com/go-openapi/swag/conv","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/conv:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/conv@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/conv:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/conv:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8c9shoB8l0QRSR6ymq1llHdBWDqpIgJfjTGHx3Vuhm0="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.29.2?package-id=f21f6157f28d308a","type":"library","name":"github.com/go-openapi/swag/fileutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mdUL+Vw5ah1fO1AvFCoHeIyv7YZsCz2MN3KNqd/lLVI="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.29.2?package-id=45a838229fa974d8","type":"library","name":"github.com/go-openapi/swag/fileutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mdUL+Vw5ah1fO1AvFCoHeIyv7YZsCz2MN3KNqd/lLVI="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.29.2?package-id=b554c799fad008bb","type":"library","name":"github.com/go-openapi/swag/jsonutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uZNSD2/rJDYAfvsLYkykTzXuyxM3QpDKV9jhRHrMu6k="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.29.2?package-id=d19f18a580d42eda","type":"library","name":"github.com/go-openapi/swag/jsonutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uZNSD2/rJDYAfvsLYkykTzXuyxM3QpDKV9jhRHrMu6k="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/loading@v0.29.1?package-id=e007145a49c5df16","type":"library","name":"github.com/go-openapi/swag/loading","version":"v0.29.1","cpe":"cpe:2.3:a:go-openapi:swag\\/loading:v0.29.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/loading@v0.29.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/loading:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/loading:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FCv5fG8UhTdDJa2R7w+5O9Ekpcbw7tt0nFWvmDKGBjc="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/loading@v0.29.2?package-id=741d0487b4234b44","type":"library","name":"github.com/go-openapi/swag/loading","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/loading:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/loading@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/loading:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/loading:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QU1ry24e6r6Shoxe380Nx0X5iKkpRO+hJffsyJ2dVlY="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/mangling@v0.29.1?package-id=a0a2044258202348","type":"library","name":"github.com/go-openapi/swag/mangling","version":"v0.29.1","cpe":"cpe:2.3:a:go-openapi:swag\\/mangling:v0.29.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/mangling@v0.29.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/mangling:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/mangling:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lHALtvYCdxVnRl4GrHmFPwfBTZYIObqdGNSKyu/8D6I="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/mangling@v0.29.2?package-id=641ecf9932a72c25","type":"library","name":"github.com/go-openapi/swag/mangling","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/mangling:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/mangling@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/mangling:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/mangling:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ltdo3K0tTP4P6zWhVVWDU9D37/YYBuMJRdZxiS2Dtog="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/netutils@v0.27.1?package-id=f7cef17af8a13627","type":"library","name":"github.com/go-openapi/swag/netutils","version":"v0.27.1","cpe":"cpe:2.3:a:go-openapi:swag\\/netutils:v0.27.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/netutils@v0.27.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/netutils:v0.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/netutils:v0.27.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mICMFoS82F5TZ4Zy3cqmcQk+BFeCp3Uyq3Np7GI0/qU="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/netutils@v0.29.2?package-id=5966f43737d63290","type":"library","name":"github.com/go-openapi/swag/netutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/netutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/netutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/netutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/netutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dBli6jyUa93sDS/XYWShJzf4+nnVfFKfvY9SLUaUzB8="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/pools@v0.29.2?package-id=443eb30d6e3aff36","type":"library","name":"github.com/go-openapi/swag/pools","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/pools:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/pools@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/pools:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/pools:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PlGoDRF8WtSyXkedZZkpW3f9wDhFf3u8KtaBcmgmh8c="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/pools@v0.29.2?package-id=843247b060cf1cc4","type":"library","name":"github.com/go-openapi/swag/pools","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/pools:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/pools@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/pools:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/pools:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PlGoDRF8WtSyXkedZZkpW3f9wDhFf3u8KtaBcmgmh8c="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.29.2?package-id=030d50747141e21d","type":"library","name":"github.com/go-openapi/swag/stringutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lcnBxwAaysT3bMUVBfn9V/PkfVqkurpqufKU6rTUMGk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.29.2?package-id=9d41b84164e02198","type":"library","name":"github.com/go-openapi/swag/stringutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lcnBxwAaysT3bMUVBfn9V/PkfVqkurpqufKU6rTUMGk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.29.2?package-id=de722b8902c15cc7","type":"library","name":"github.com/go-openapi/swag/typeutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O7aVvkTs3pXwikgtrPLenigEMdQFgONKRooQA9pgf2I="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.29.2?package-id=4328cb263095ef00","type":"library","name":"github.com/go-openapi/swag/typeutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O7aVvkTs3pXwikgtrPLenigEMdQFgONKRooQA9pgf2I="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.29.1?package-id=6312fc26d31f3232","type":"library","name":"github.com/go-openapi/swag/yamlutils","version":"v0.29.1","cpe":"cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.29.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.29.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/yamlutils:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:69w3tsBajm7MR/fejLy7HD/3J68Ys1SeeZMEzZ3w2sk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.29.2?package-id=4036980386b4251b","type":"library","name":"github.com/go-openapi/swag/yamlutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/yamlutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IFKFFeDnuIwzfsuWRQU+rI8iL3g4XyAYjV/RlnlxPLM="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/validate@v1.0.0?package-id=7465947131a5b540","type":"library","name":"github.com/go-openapi/validate","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:validate:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/validate@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:validate:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:validate:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dFsYCLVUQUL6Vi2lQSexgwmCXDuHe7eWRDhQxkE+xYA="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/validate@v1.0.0?package-id=68c8f0f74fe52698","type":"library","name":"github.com/go-openapi/validate","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:validate:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/validate@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:validate:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:validate:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dFsYCLVUQUL6Vi2lQSexgwmCXDuHe7eWRDhQxkE+xYA="}]},{"bom-ref":"pkg:golang/github.com/go-redis/redismock/v9@v9.2.0?package-id=bf8310f97a8d6a0f","type":"library","name":"github.com/go-redis/redismock/v9","version":"v9.2.0","cpe":"cpe:2.3:a:go-redis:redismock\\/v9:v9.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-redis/redismock/v9@v9.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_redis:redismock\\/v9:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:redismock\\/v9:v9.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZrMYQeKPECZPjOj5u9eyOjg8Nnb0BS9lkVIZ6IpsKLw="}]},{"bom-ref":"pkg:golang/github.com/go-sql-driver/mysql@v1.10.1?package-id=5842a4832b626749","type":"library","name":"github.com/go-sql-driver/mysql","version":"v1.10.1","cpe":"cpe:2.3:a:go-sql-driver:mysql:v1.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-sql-driver/mysql@v1.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_sql_driver:mysql:v1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-sql:mysql:v1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_sql:mysql:v1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:mysql:v1.10.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:arlSnNLq6a5yxGxV7qg9lF4j0C+KwD6NbQyKr9QL6ME="}]},{"bom-ref":"pkg:golang/github.com/go-swagger/go-swagger@v0.36.6?package-id=f330b3e37eda201a","type":"library","name":"github.com/go-swagger/go-swagger","version":"v0.36.6","cpe":"cpe:2.3:a:go-swagger:go-swagger:v0.36.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-swagger/go-swagger@v0.36.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-swagger:go_swagger:v0.36.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_swagger:go-swagger:v0.36.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_swagger:go_swagger:v0.36.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-swagger:v0.36.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_swagger:v0.36.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DRAw5aGWvPYX5kPQuSQeiiOCPBj7HJWGipoPMiKLHX0="}]},{"bom-ref":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=69e67edfc2286e18","type":"library","name":"github.com/go-viper/mapstructure/v2","version":"v2.5.0","cpe":"cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="}]},{"bom-ref":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=51c68c6726705ac8","type":"library","name":"github.com/go-viper/mapstructure/v2","version":"v2.5.0","cpe":"cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="}]},{"bom-ref":"pkg:golang/github.com/godbus/dbus/v5@v5.1.0?package-id=11603409814ebf14","type":"library","name":"github.com/godbus/dbus/v5","version":"v5.1.0","cpe":"cpe:2.3:a:godbus:dbus\\/v5:v5.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/godbus/dbus/v5@v5.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4KLkAxT3aOY8Li4FRJe/KvhoNFFxo0m6fNuFUO8QJUk="}]},{"bom-ref":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=a9123a7cdb8224b1","type":"library","name":"github.com/golang-jwt/jwt/v5","version":"v5.3.1","cpe":"cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY="}]},{"bom-ref":"pkg:golang/github.com/golang/mock@v1.7.0-rc.1?package-id=815093a456aef60b","type":"library","name":"github.com/golang/mock","version":"v1.7.0-rc.1","cpe":"cpe:2.3:a:golang:mock:v1.7.0-rc.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang/mock@v1.7.0-rc.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YojYx61/OLFsiv6Rw1Z96LpldJIy31o+UHmwAUMJ6/U="}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=473d0adb4b419c7e","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="}]},{"bom-ref":"pkg:golang/github.com/google/go-containerregistry@v0.22.1?package-id=a0b833e866fd1de5","type":"library","name":"github.com/google/go-containerregistry","version":"v0.22.1","cpe":"cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-containerregistry@v0.22.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RZuuSYhTvlDvtsK+NkutoCZ//C0X2ebLK8X8l3ULs84="}]},{"bom-ref":"pkg:golang/github.com/google/pprof@v0.0.0-20260604005048-7023385849c0?package-id=85f5dd3b05d60c34","type":"library","name":"github.com/google/pprof","version":"v0.0.0-20260604005048-7023385849c0","cpe":"cpe:2.3:a:google:pprof:v0.0.0-20260604005048-7023385849c0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/pprof@v0.0.0-20260604005048-7023385849c0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h1QTMDl6q9wDvDCJVpKQSjgleGFYnd2fOxmg2K+6BGE="}]},{"bom-ref":"pkg:golang/github.com/google/rpmpack@v0.7.1?package-id=37046352a857ca50","type":"library","name":"github.com/google/rpmpack","version":"v0.7.1","cpe":"cpe:2.3:a:google:rpmpack:v0.7.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/rpmpack@v0.7.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YdWh1IpzOjBz60Wvdw0TU0A5NWP+JTVHA5poDqwMO2o="}]},{"bom-ref":"pkg:golang/github.com/google/s2a-go@v0.1.11?package-id=6c8ed2b6d5fe3206","type":"library","name":"github.com/google/s2a-go","version":"v0.1.11","cpe":"cpe:2.3:a:google:s2a-go:v0.1.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/s2a-go@v0.1.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:s2a_go:v0.1.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7v1V1TraNGP63WptsAkNqr2w8jgm4vM6A6qx6Lsw9iM="}]},{"bom-ref":"pkg:golang/github.com/google/trillian@v1.8.0?package-id=be63deded8b3d5c2","type":"library","name":"github.com/google/trillian","version":"v1.8.0","cpe":"cpe:2.3:a:google:trillian:v1.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/trillian@v1.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AnbjOFFMQyvqpPAARj97CKEXmoSpCy2hZw0T7Y1Y0BA="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=76d42b5ecef4626f","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/google/wire@v0.7.0?package-id=f8e6d4af0490d34d","type":"library","name":"github.com/google/wire","version":"v0.7.0","cpe":"cpe:2.3:a:google:wire:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/wire@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JxUKI6+CVBgCO2WToKy/nQk0sS+amI9z9EjVmdaocj4="}]},{"bom-ref":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22?package-id=ad57399cb3c994ee","type":"library","name":"github.com/googleapis/enterprise-certificate-proxy","version":"v0.3.22","cpe":"cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NU4XpII6jD+Dxcot94fqjE+AfJoE/lQP9q3faYGzC/c="}]},{"bom-ref":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2?package-id=2946d2fad4a39755","type":"library","name":"github.com/googleapis/gax-go/v2","version":"v2.26.2","cpe":"cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ydkmNXxj7bEmmeK5AihkKnWxyOyBR9TDebvp5L5izk8="}]},{"bom-ref":"pkg:golang/github.com/gorilla/handlers@v1.5.2?package-id=97fccd151fde3908","type":"library","name":"github.com/gorilla/handlers","version":"v1.5.2","cpe":"cpe:2.3:a:gorilla:handlers:v1.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gorilla/handlers@v1.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cLTUSsNkgcwhgRqvCNmdbRWG0A3N4F+M2nWKdScwyEE="}]},{"bom-ref":"pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware/v2@v2.3.4?package-id=f4fbb3802a84b6ef","type":"library","name":"github.com/grpc-ecosystem/go-grpc-middleware/v2","version":"v2.3.4","cpe":"cpe:2.3:a:grpc-ecosystem:go-grpc-middleware\\/v2:v2.3.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware/v2@v2.3.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc-ecosystem:go_grpc_middleware\\/v2:v2.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:go-grpc-middleware\\/v2:v2.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:go_grpc_middleware\\/v2:v2.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:go-grpc-middleware\\/v2:v2.3.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:go_grpc_middleware\\/v2:v2.3.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9ZJYjPEJpcleIKcqysXOo14NLQYwu23fzmKRFpIjPjc="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=56b7e6360dd390d7","type":"library","name":"github.com/hashicorp/errwrap","version":"v1.1.0","cpe":"cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=912d0981a4a0e36c","type":"library","name":"github.com/hashicorp/go-cleanhttp","version":"v0.5.2","cpe":"cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=b3d879cd60d2aaba","type":"library","name":"github.com/hashicorp/go-multierror","version":"v1.1.1","cpe":"cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=82e2538e01314882","type":"library","name":"github.com/hashicorp/go-retryablehttp","version":"v0.7.8","cpe":"cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=88a41202da0f0489","type":"library","name":"github.com/hashicorp/go-rootcerts","version":"v1.0.2","cpe":"cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=507b1688501fc20a","type":"library","name":"github.com/hashicorp/go-secure-stdlib/parseutil","version":"v0.2.0","cpe":"cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:U+kC2dOhMFQctRfhK0gRctKAPTloZdMU5ZJxaesJ/VM="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=50e0a12f2906f0e0","type":"library","name":"github.com/hashicorp/go-secure-stdlib/strutil","version":"v0.1.2","cpe":"cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=3767ecd5401149b7","type":"library","name":"github.com/hashicorp/go-sockaddr","version":"v1.0.7","cpe":"cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G+pTkSO01HpR5qCxg7lxfsFEZaG+C0VssTy/9dbT+Fw="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=999bbc4d5a4e5672","type":"library","name":"github.com/hashicorp/hcl","version":"v1.0.1-vault-7","cpe":"cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ag5OxFVy3QYTFTJODRzTKVZ6xvdfLLCA1cy/Y6xGI0I="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/vault/api@v1.23.0?package-id=e09327c6f11a3292","type":"library","name":"github.com/hashicorp/vault/api","version":"v1.23.0","cpe":"cpe:2.3:a:hashicorp:vault\\/api:v1.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/vault/api@v1.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gXgluBsSECfRWTSW9niY2jwg2e9mMJc4WoHNv4g3h6A="}]},{"bom-ref":"pkg:golang/github.com/howeyc/gopass@v0.0.0-20210920133722-c8aef6fb66ef?package-id=b948ff846cfeae23","type":"library","name":"github.com/howeyc/gopass","version":"v0.0.0-20210920133722-c8aef6fb66ef","cpe":"cpe:2.3:a:howeyc:gopass:v0.0.0-20210920133722-c8aef6fb66ef:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/howeyc/gopass@v0.0.0-20210920133722-c8aef6fb66ef","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A9HsByNhogrvm9cWb28sjiS3i7tcKCkflWFEkHfuAgM="}]},{"bom-ref":"pkg:golang/github.com/huandu/xstrings@v1.5.0?package-id=7ab80da7f6d20f8e","type":"library","name":"github.com/huandu/xstrings","version":"v1.5.0","cpe":"cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/huandu/xstrings@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI="}]},{"bom-ref":"pkg:golang/github.com/in-toto/attestation@v1.1.2?package-id=31a33f337141d1a6","type":"library","name":"github.com/in-toto/attestation","version":"v1.1.2","cpe":"cpe:2.3:a:in-toto:attestation:v1.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/in-toto/attestation@v1.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:attestation:v1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:attestation:v1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MBFn6lsMq6dptQZJBhalXTcWMb/aJy3V+GX3VYj/V1E="}]},{"bom-ref":"pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=b9d1745114e525fe","type":"library","name":"github.com/in-toto/in-toto-golang","version":"v0.11.0","cpe":"cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nfidMYBFx+E0lnmX5KUnN2Pdm8zdNKal1ayjJuzzRoA="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20211028175153-1c139d1cc84b?package-id=50ccfdeb3e7e2852","type":"library","name":"github.com/jedisct1/go-minisign","version":"v0.0.0-20211028175153-1c139d1cc84b","cpe":"cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20211028175153-1c139d1cc84b:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20211028175153-1c139d1cc84b","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20211028175153-1c139d1cc84b:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZGiXF8sz7PDk6RgkP+A/SFfUD0ZR/AgG6SpRNEDKZy8="}]},{"bom-ref":"pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.1?package-id=f2ba3c649362c6cc","type":"library","name":"github.com/jellydator/ttlcache/v3","version":"v3.4.1","cpe":"cpe:2.3:a:jellydator:ttlcache\\/v3:v3.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bOdXmXiycyK6E6Qjyuj5vl+/vU3SCOoDs8a86NbHjAQ="}]},{"bom-ref":"pkg:golang/github.com/jessevdk/go-flags@v1.6.1?package-id=d8b6867228e3fbae","type":"library","name":"github.com/jessevdk/go-flags","version":"v1.6.1","cpe":"cpe:2.3:a:jessevdk:go-flags:v1.6.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jessevdk/go-flags@v1.6.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jessevdk:go_flags:v1.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Cvu5U8UGrLay1rZfv/zP7iLpSHGUZ/Ou68T0iX1bBK4="}]},{"bom-ref":"pkg:golang/github.com/jmoiron/sqlx@v1.4.0?package-id=523a75deab7613ad","type":"library","name":"github.com/jmoiron/sqlx","version":"v1.4.0","cpe":"cpe:2.3:a:jmoiron:sqlx:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jmoiron/sqlx@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1PLqN7S1UYp5t4SrVVnt4nUVNemrDAtxlulVe+Qgm3o="}]},{"bom-ref":"pkg:golang/github.com/klauspost/compress@v1.19.2?package-id=be20faa6079a31ca","type":"library","name":"github.com/klauspost/compress","version":"v1.19.2","cpe":"cpe:2.3:a:klauspost:compress:v1.19.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/compress@v1.19.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8="}]},{"bom-ref":"pkg:golang/github.com/klauspost/pgzip@v1.2.6?package-id=ba8d2ab961878e02","type":"library","name":"github.com/klauspost/pgzip","version":"v1.2.6","cpe":"cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/pgzip@v1.2.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8RXeL5crjEUFnR2/Sn6GJNWtSQ3Dk8pq4CL3jvdDyjU="}]},{"bom-ref":"pkg:golang/github.com/kr/pretty@v0.3.1?package-id=4da62d394267ccea","type":"library","name":"github.com/kr/pretty","version":"v0.3.1","cpe":"cpe:2.3:a:kr:pretty:v0.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kr/pretty@v0.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE="}]},{"bom-ref":"pkg:golang/github.com/kr/text@v0.2.0?package-id=4bfb756905f92cfb","type":"library","name":"github.com/kr/text","version":"v0.2.0","cpe":"cpe:2.3:a:kr:text:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kr/text@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY="}]},{"bom-ref":"pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=054bf546a3d78ff8","type":"library","name":"github.com/kylelemons/godebug","version":"v1.1.0","cpe":"cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kylelemons/godebug@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-colorable@v0.1.15?package-id=5ba7534c03389194","type":"library","name":"github.com/mattn/go-colorable","version":"v0.1.15","cpe":"cpe:2.3:a:mattn:go-colorable:v0.1.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-colorable@v0.1.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_colorable:v0.1.15:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+u9SLTRGnXv73cEsnsmoZBom+dMU88B2M0aDcWy0/jY="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.24?package-id=a9448d2b03d7fb91","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.24","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tGZZoVgT/KiqK1c8ocVLeDS8BSWMRd47J3Lbz7vsReI="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-sqlite3@v1.14.24?package-id=35990d4eca76b275","type":"library","name":"github.com/mattn/go-sqlite3","version":"v1.14.24","cpe":"cpe:2.3:a:mattn:go-sqlite3:v1.14.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-sqlite3@v1.14.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_sqlite3:v1.14.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tpSp2G2KyMnnQu99ngJ47EIkWVmliIizyZBfPrBWDRM="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0?package-id=adbf793d7a2fa7d3","type":"library","name":"github.com/mitchellh/copystructure","version":"v1.2.0","cpe":"cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=0eaeac14455768a2","type":"library","name":"github.com/mitchellh/go-homedir","version":"v1.1.0","cpe":"cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/go-homedir@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=d7dc97acead2de58","type":"library","name":"github.com/mitchellh/mapstructure","version":"v1.5.0","cpe":"cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/mapstructure@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2?package-id=2c9c866f15713a44","type":"library","name":"github.com/mitchellh/reflectwalk","version":"v1.0.2","cpe":"cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ="}]},{"bom-ref":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=2d33de0c2e03c980","type":"library","name":"github.com/munnerz/goautoneg","version":"v0.0.0-20191010083416-a7dc8b61c822","cpe":"cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="}]},{"bom-ref":"pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=0a06cdc31fda58d0","type":"library","name":"github.com/natefinch/atomic","version":"v1.0.1","cpe":"cpe:2.3:a:natefinch:atomic:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/natefinch/atomic@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZPYKxkqQOx3KZ+RsbnP/YsgvxWQPGxjC0oBt2AhwV0A="}]},{"bom-ref":"pkg:golang/github.com/oklog/ulid/v2@v2.1.2?package-id=9acf0295fa47ad44","type":"library","name":"github.com/oklog/ulid/v2","version":"v2.1.2","cpe":"cpe:2.3:a:oklog:ulid\\/v2:v2.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/oklog/ulid/v2@v2.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IEclFb9JNvzYA6MW2SCxbLzcHTVsfqm3PrqGQJH5zec="}]},{"bom-ref":"pkg:golang/github.com/oklog/ulid/v2@v2.1.2?package-id=51f099a62a83f5e9","type":"library","name":"github.com/oklog/ulid/v2","version":"v2.1.2","cpe":"cpe:2.3:a:oklog:ulid\\/v2:v2.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/oklog/ulid/v2@v2.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IEclFb9JNvzYA6MW2SCxbLzcHTVsfqm3PrqGQJH5zec="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=19989b5d142f3073","type":"library","name":"github.com/opencontainers/go-digest","version":"v1.0.0","cpe":"cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="}]},{"bom-ref":"pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3?package-id=d91b6d6201c35c75","type":"library","name":"github.com/pelletier/go-toml/v2","version":"v2.4.3","cpe":"cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GTRvJQutkOSftxIFD5xw9aepkYNuPWmVJpffdDPYVpY="}]},{"bom-ref":"pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3?package-id=86f9b567c6d23fb4","type":"library","name":"github.com/pelletier/go-toml/v2","version":"v2.4.3","cpe":"cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GTRvJQutkOSftxIFD5xw9aepkYNuPWmVJpffdDPYVpY="}]},{"bom-ref":"pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=08a7556fc6c49a9b","type":"library","name":"github.com/pkg/browser","version":"v0.0.0-20240102092130-5ac0b6a4141c","cpe":"cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ="}]},{"bom-ref":"pkg:golang/github.com/pkg/errors@v0.9.1?package-id=2f2b4a7ce7872628","type":"library","name":"github.com/pkg/errors","version":"v0.9.1","cpe":"cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/errors@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="}]},{"bom-ref":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10?package-id=63efd6ebb5d1e9e9","type":"library","name":"github.com/planetscale/vtprotobuf","version":"v0.6.1-0.20240319094008-0393e58bdf10","cpe":"cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_golang@v1.24.1?package-id=a514cc48df50cef4","type":"library","name":"github.com/prometheus/client_golang","version":"v1.24.1","cpe":"cpe:2.3:a:prometheus:client-golang:v1.24.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_golang@v1.24.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_golang:v1.24.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JnJkREXzWxUdCuPFpIWZiPispT9xVV59uiuyR2bPlnU="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_model@v0.6.3?package-id=238472447a143bfc","type":"library","name":"github.com/prometheus/client_model","version":"v0.6.3","cpe":"cpe:2.3:a:prometheus:client-model:v0.6.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_model@v0.6.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_model:v0.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O0jaTVAYNxTHYInEPFJt5I3+sN8zqBtVMPTB1qyxiEo="}]},{"bom-ref":"pkg:golang/github.com/prometheus/common@v0.70.1?package-id=0f58d85c7e917ff8","type":"library","name":"github.com/prometheus/common","version":"v0.70.1","cpe":"cpe:2.3:a:prometheus:common:v0.70.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/common@v0.70.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1HvjP4D5oL3t8RsPlwxA9onvvStjtIHYE5XuuwOi/PY="}]},{"bom-ref":"pkg:golang/github.com/prometheus/procfs@v0.21.1?package-id=878089afee5fa76e","type":"library","name":"github.com/prometheus/procfs","version":"v0.21.1","cpe":"cpe:2.3:a:prometheus:procfs:v0.21.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/procfs@v0.21.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GljZCt+zSTS+NZq88cyQ1LjZ+RCHp3uVuabBWA5+OJI="}]},{"bom-ref":"pkg:golang/github.com/redis/go-redis/v9@v9.22.0?package-id=366c5cf8a847aa61","type":"library","name":"github.com/redis/go-redis/v9","version":"v9.22.0","cpe":"cpe:2.3:a:redis:go-redis\\/v9:v9.22.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/redis/go-redis/v9@v9.22.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:redis:go_redis\\/v9:v9.22.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:laDvpYXTJtZLloinw1fA5Kqd6HAEH2XKxOkG/PDq2F0="}]},{"bom-ref":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0?package-id=b52bf52c0ffa14bd","type":"library","name":"github.com/rogpeppe/go-internal","version":"v1.16.0","cpe":"cpe:2.3:a:rogpeppe:go-internal:v1.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogpeppe:go_internal:v1.16.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O9DK+vNMDVGLr2BeZqmpLeMjiMNkuXfcqntWbZV6S5g="}]},{"bom-ref":"pkg:golang/github.com/rs/cors@v1.11.1?package-id=8f54bde5413c96ec","type":"library","name":"github.com/rs/cors","version":"v1.11.1","cpe":"cpe:2.3:a:rs:cors:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rs/cors@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eU3gRzXLRK57F5rKMGMZURNdIG4EoAmX8k94r9wXWHA="}]},{"bom-ref":"pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=123848f88ea99b58","type":"library","name":"github.com/ryanuber/go-glob","version":"v1.0.0","cpe":"cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ryanuber/go-glob@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk="}]},{"bom-ref":"pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=ddd1e2da24a21af5","type":"library","name":"github.com/sagikazarmark/locafero","version":"v0.11.0","cpe":"cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sagikazarmark/locafero@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc="}]},{"bom-ref":"pkg:golang/github.com/sagikazarmark/locafero@v0.12.0?package-id=b2b7dd395f141820","type":"library","name":"github.com/sagikazarmark/locafero","version":"v0.12.0","cpe":"cpe:2.3:a:sagikazarmark:locafero:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sagikazarmark/locafero@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/NQhBAkUb4+fH1jivKHWusDYFjMOOKU88eegjfxfHb4="}]},{"bom-ref":"pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0?package-id=cc1a1dbe4057c7de","type":"library","name":"github.com/sassoftware/go-rpmutils","version":"v0.4.0","cpe":"cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ojND82NYBxgwrV+mX1CWsd5QJvvEZTKddtCdFLPWhpg="}]},{"bom-ref":"pkg:golang/github.com/sassoftware/relic/v8@v8.2.0?package-id=5f7da629d2005f63","type":"library","name":"github.com/sassoftware/relic/v8","version":"v8.2.0","cpe":"cpe:2.3:a:sassoftware:relic\\/v8:v8.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sassoftware/relic/v8@v8.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9/L4S4I6an/JsPNhmcTpqfiOIsLb/iJaePZD1xR+ulE="}]},{"bom-ref":"pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.1?package-id=602059233fa52236","type":"library","name":"github.com/secure-systems-lab/go-securesystemslib","version":"v0.11.1","cpe":"cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ayahDPjfSIqKegyt5YVGEvQ7SAi72GHXTy+b2YjUd5w="}]},{"bom-ref":"pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=632320b15aa9879e","type":"library","name":"github.com/shibumi/go-pathspec","version":"v1.3.0","cpe":"cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shibumi/go-pathspec@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI="}]},{"bom-ref":"pkg:golang/github.com/shopspring/decimal@v1.4.0?package-id=fc2a9502dc9c7cc7","type":"library","name":"github.com/shopspring/decimal","version":"v1.4.0","cpe":"cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shopspring/decimal@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k="}]},{"bom-ref":"pkg:golang/github.com/sigstore/protobuf-specs@v0.5.2?package-id=cb527d8a14851126","type":"library","name":"github.com/sigstore/protobuf-specs","version":"v0.5.2","cpe":"cpe:2.3:a:sigstore:protobuf-specs:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/protobuf-specs@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:protobuf_specs:v0.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RSWWUY8QrVTxbYH00jY/jg2e7YnjzrpwP+PeHTMll0E="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore@v1.11.1?package-id=ae73bd47fb3322ac","type":"library","name":"github.com/sigstore/sigstore","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kPqGeoOk3IGCJH76ssgX5PKMm8mbHNnM9fhKLDc6M8E="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.11.1?package-id=0c0aba3d6d26be3c","type":"library","name":"github.com/sigstore/sigstore/pkg/signature/kms/aws","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/aws:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Xw+W6YvW/bQ3zSAYK6hsOQplGz/X9yOvCGeQLfkNy4c="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.11.1?package-id=60fd3938fceeb928","type":"library","name":"github.com/sigstore/sigstore/pkg/signature/kms/azure","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/azure:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UfIJOml1Y9uJwTy8cDbP7a6x/0By+fXIV7dyUHvEZlA="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.11.1?package-id=2db7ca8bd5061a42","type":"library","name":"github.com/sigstore/sigstore/pkg/signature/kms/gcp","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/gcp:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ab4K/QqBmlmOu5X05qLTeQnPblVqqzrC//F7J/imzoI="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.11.1?package-id=bf2df0d54b68c44f","type":"library","name":"github.com/sigstore/sigstore/pkg/signature/kms/hashivault","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/hashivault:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WIgn5z+Wx9ZM8MPTZlMIJ5YXZq36VrcYXFfCCokMqGc="}]},{"bom-ref":"pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=cfbd747de78458fc","type":"library","name":"github.com/sourcegraph/conc","version":"v0.3.1-0.20240121214520-5f936abd7ae8","cpe":"cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw="}]},{"bom-ref":"pkg:golang/github.com/spf13/afero@v1.15.0?package-id=577ab40ea4ceaedf","type":"library","name":"github.com/spf13/afero","version":"v1.15.0","cpe":"cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/afero@v1.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="}]},{"bom-ref":"pkg:golang/github.com/spf13/afero@v1.15.0?package-id=2728f4896a30aa5e","type":"library","name":"github.com/spf13/afero","version":"v1.15.0","cpe":"cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/afero@v1.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="}]},{"bom-ref":"pkg:golang/github.com/spf13/cast@v1.10.0?package-id=b759ce340b0f2e0e","type":"library","name":"github.com/spf13/cast","version":"v1.10.0","cpe":"cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cast@v1.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="}]},{"bom-ref":"pkg:golang/github.com/spf13/cast@v1.10.0?package-id=ec8a02b6428f73bc","type":"library","name":"github.com/spf13/cast","version":"v1.10.0","cpe":"cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cast@v1.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=aaf4307e8bf5eb4c","type":"library","name":"github.com/spf13/cobra","version":"v1.10.2","cpe":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=ec9ed93888749dc0","type":"library","name":"github.com/spf13/pflag","version":"v1.0.10","cpe":"cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=ea104960f0286e07","type":"library","name":"github.com/spf13/pflag","version":"v1.0.10","cpe":"cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="}]},{"bom-ref":"pkg:golang/github.com/spf13/viper@v1.21.0?package-id=53bb8bba12e970aa","type":"library","name":"github.com/spf13/viper","version":"v1.21.0","cpe":"cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/viper@v1.21.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="}]},{"bom-ref":"pkg:golang/github.com/spf13/viper@v1.21.0?package-id=e9eef2b612aa0a55","type":"library","name":"github.com/spf13/viper","version":"v1.21.0","cpe":"cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/viper@v1.21.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="}]},{"bom-ref":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.8.1?package-id=da63f3fadf48e916","type":"library","name":"github.com/spiffe/go-spiffe/v2","version":"v2.8.1","cpe":"cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.8.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.8.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.8.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eXZMLsu+3MLEPJyGJkolqtVrteZfQdUpOWj6LTiDl/E="}]},{"bom-ref":"pkg:golang/github.com/stretchr/testify@v1.12.1?package-id=d64a25dace8d069c","type":"library","name":"github.com/stretchr/testify","version":"v1.12.1","cpe":"cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/testify@v1.12.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWDWE="}]},{"bom-ref":"pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=2db166198c302bc1","type":"library","name":"github.com/subosito/gotenv","version":"v1.6.0","cpe":"cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/subosito/gotenv@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="}]},{"bom-ref":"pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=d7a54fe1daafa4e5","type":"library","name":"github.com/subosito/gotenv","version":"v1.6.0","cpe":"cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/subosito/gotenv@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="}]},{"bom-ref":"pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=bc03feb72e7fbbd6","type":"library","name":"github.com/theupdateframework/go-tuf","version":"v0.7.0","cpe":"cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go-awskms/v3@v3.0.0?package-id=ca33a5e80268a077","type":"library","name":"github.com/tink-crypto/tink-go-awskms/v3","version":"v3.0.0","cpe":"cpe:2.3:a:tink-crypto:tink-go-awskms\\/v3:v3.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go-awskms/v3@v3.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go_awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go-awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go_awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go-awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go_awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XSohRhCkXAVI0iaCnWB/GS05TEmpnKurQmzaY1jzt3Y="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go-gcpkms/v2@v2.4.0?package-id=52951e90f07d765d","type":"library","name":"github.com/tink-crypto/tink-go-gcpkms/v2","version":"v2.4.0","cpe":"cpe:2.3:a:tink-crypto:tink-go-gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go-gcpkms/v2@v2.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go_gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go-gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go_gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go-gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go_gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xpI5pnEQ0erFCS3JmcEl7Blluo8ZieEPNOURqy9uD70="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go/v2@v2.9.0?package-id=5f6d9404568c1325","type":"library","name":"github.com/tink-crypto/tink-go/v2","version":"v2.9.0","cpe":"cpe:2.3:a:tink-crypto:tink-go\\/v2:v2.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go/v2@v2.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go\\/v2:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go\\/v2:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go\\/v2:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go\\/v2:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go\\/v2:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uvjgS1IYDB4zhDK0Zow8ZFB73IjzMAoSqW0JkFnvkrc="}]},{"bom-ref":"pkg:golang/github.com/toqueteos/webbrowser@v1.2.1?package-id=656ce0a4febd86b7","type":"library","name":"github.com/toqueteos/webbrowser","version":"v1.2.1","cpe":"cpe:2.3:a:toqueteos:webbrowser:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/toqueteos/webbrowser@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O7IsnnU7XQyJ1nHMRfAktUUJOAZD3aQyUVnxzhWphCg="}]},{"bom-ref":"pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=fa81f2ff3b1f0344","type":"library","name":"github.com/transparency-dev/merkle","version":"v0.0.2","cpe":"cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/transparency-dev/merkle@v0.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4="}]},{"bom-ref":"pkg:golang/github.com/ulikunitz/xz@v0.5.15?package-id=72178d1409ff5a60","type":"library","name":"github.com/ulikunitz/xz","version":"v0.5.15","cpe":"cpe:2.3:a:ulikunitz:xz:v0.5.15:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ulikunitz/xz@v0.5.15","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9DNdB5s+SgV3bQ2ApL10xRc35ck0DuIX/isZvIk+ubY="}]},{"bom-ref":"pkg:golang/github.com/veraison/go-cose@v1.3.0?package-id=8c92a26ef0232e1b","type":"library","name":"github.com/veraison/go-cose","version":"v1.3.0","cpe":"cpe:2.3:a:veraison:go-cose:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/veraison/go-cose@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:veraison:go_cose:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2/H5w8kdSpQJyVtIhx8gmwPJ2uSz1PkyWFx0idbd7rk="}]},{"bom-ref":"pkg:golang/github.com/x448/float16@v0.8.4?package-id=413366d78e6a286c","type":"library","name":"github.com/x448/float16","version":"v0.8.4","cpe":"cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/x448/float16@v0.8.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="}]},{"bom-ref":"pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8?package-id=5aff0dfb6bddc19f","type":"library","name":"github.com/xi2/xz","version":"v0.0.0-20171230120015-48954b6210f8","cpe":"cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nIPpBwaJSVYIxUFsDv3M8ofmx9yWTog9BfvIu0q41lo="}]},{"bom-ref":"pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=d4ff633eaec278e7","type":"library","name":"github.com/youmark/pkcs8","version":"v0.0.0-20240726163527-a2c0da244d78","cpe":"cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ilQV1hzziu+LLM3zUTJ0trRztfwgjqKnBWNtSRkbmwM="}]},{"bom-ref":"pkg:golang/github.com/zalando/go-keyring@v0.2.6?package-id=816850169f71c486","type":"library","name":"github.com/zalando/go-keyring","version":"v0.2.6","cpe":"cpe:2.3:a:zalando:go-keyring:v0.2.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/zalando/go-keyring@v0.2.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:zalando:go_keyring:v0.2.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:r7Yc3+H+Ux0+M72zacZoItR3UDxeWfKTcabvkI8ua9s="}]},{"bom-ref":"pkg:github/github/codeql-action@v4.39.0?package-id=23f7e66fb9d5611c#analyze","type":"library","name":"github/codeql-action/analyze","version":"v4.39.0","cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v4.39.0:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.39.0#analyze","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.39.0?package-id=120513cff37fe152#autobuild","type":"library","name":"github/codeql-action/autobuild","version":"v4.39.0","cpe":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v4.39.0:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.39.0#autobuild","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v4.39.0?package-id=71a85b4e4280350d#init","type":"library","name":"github/codeql-action/init","version":"v4.39.0","cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v4.39.0:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v4.39.0#init","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v4.39.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:golang/go.opencensus.io@v0.24.0?package-id=1b1445bd5d28512a","type":"library","name":"go.opencensus.io","version":"v0.24.0","purl":"pkg:golang/go.opencensus.io@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a00544d9cf935bfa","type":"library","name":"go.opentelemetry.io/auto/sdk","version":"v1.2.1","cpe":"cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0?package-id=3dbe8fb028253bc2","type":"library","name":"go.opentelemetry.io/contrib/detectors/gcp","version":"v1.44.0","cpe":"cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NmLfL734pJhM0JKaYd2Y28+nY9dPRWYAAbxhRCrKXPw="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=e62b43fb06a0ac34","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc","version":"v0.68.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0Qx7VGBacMm9ZENQ7TnNObTYI4ShC+lHI16seduaxZo="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0?package-id=afa40991728a2ca2","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","version":"v0.69.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8tvICD4vSTOOsNrsI4Ljf6C+6UKvpTEH5XY3JMoyPoo="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel@v1.46.0?package-id=142d52ab49e2757e","type":"library","name":"go.opentelemetry.io/otel","version":"v1.46.0","cpe":"cpe:2.3:a:opentelemetry:opentelemetry:v1.46.0:*:*:*:*:go:*:*","purl":"pkg:golang/go.opentelemetry.io/otel@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FHt5/CDyVxi/8IM1CH7VE/rRgq3kLHa2mSTVMO8AWyc="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0?package-id=6ad8192bde1540ac","type":"library","name":"go.opentelemetry.io/otel/metric","version":"v1.46.0","cpe":"cpe:2.3:a:otel:metric:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yBnkXvgV7AXFILZc5K6IZe/CBFF3OS7BJ8ov6/lj0K8="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0?package-id=0d828e6d6cb4bd97","type":"library","name":"go.opentelemetry.io/otel/sdk","version":"v1.46.0","cpe":"cpe:2.3:a:otel:sdk:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h5CNQQjEbuQXY/JfZtgt3i7HVFV3aHPO2OAwO2eTYPI="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0?package-id=349f5205ae75feb6","type":"library","name":"go.opentelemetry.io/otel/sdk/metric","version":"v1.46.0","cpe":"cpe:2.3:a:otel:sdk\\/metric:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0piZ26EG4RBfebb2jhDH6ERCYHoVWduc3kLgPCwSnSE="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0?package-id=63c323eece5da87c","type":"library","name":"go.opentelemetry.io/otel/trace","version":"v1.46.0","cpe":"cpe:2.3:a:otel:trace:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OULy7ccdJnZtJ0UDYFOIGaCmiWzJ8Vi2G/Rsu60qs1c="}]},{"bom-ref":"pkg:golang/go.step.sm/crypto@v0.91.0?package-id=c3ac0f1634dffc3c","type":"library","name":"go.step.sm/crypto","version":"v0.91.0","purl":"pkg:golang/go.step.sm/crypto@v0.91.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0mN0DwVOvUuh7VbyTnxABZuAkxwak/Grp8Y/b4YaZDU="}]},{"bom-ref":"pkg:golang/go.uber.org/atomic@v1.11.0?package-id=8997eafd4641c55f","type":"library","name":"go.uber.org/atomic","version":"v1.11.0","purl":"pkg:golang/go.uber.org/atomic@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZvwS0R+56ePWxUNi+Atn9dWONBPp/AUETXlHW0DxSjE="}]},{"bom-ref":"pkg:golang/go.uber.org/goleak@v1.3.0?package-id=3262c5c4c31aa2ed","type":"library","name":"go.uber.org/goleak","version":"v1.3.0","purl":"pkg:golang/go.uber.org/goleak@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto="}]},{"bom-ref":"pkg:golang/go.uber.org/multierr@v1.11.0?package-id=ef196337207eb800","type":"library","name":"go.uber.org/multierr","version":"v1.11.0","purl":"pkg:golang/go.uber.org/multierr@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="}]},{"bom-ref":"pkg:golang/go.uber.org/zap@v1.28.0?package-id=25dd85e1ded5b566","type":"library","name":"go.uber.org/zap","version":"v1.28.0","purl":"pkg:golang/go.uber.org/zap@v1.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=1794e7f09a134d32","type":"library","name":"go.yaml.in/yaml/v2","version":"v2.4.4","cpe":"cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5?package-id=4fc93c87aeebc64b","type":"library","name":"go.yaml.in/yaml/v3","version":"v3.0.5","cpe":"cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5?package-id=cf7265bf06708488","type":"library","name":"go.yaml.in/yaml/v3","version":"v3.0.5","cpe":"cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw="}]},{"bom-ref":"pkg:golang/gocloud.dev@v0.46.0?package-id=d65e0d883128b536","type":"library","name":"gocloud.dev","version":"v0.46.0","purl":"pkg:golang/gocloud.dev@v0.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:niIuZwSjMtBx8K+ITB2s5kZullB13PGOS2ZoQPZxQ4Q="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.57.0?package-id=dd7ef359e011f366","type":"library","name":"golang.org/x/crypto","version":"v0.57.0","cpe":"cpe:2.3:a:golang:crypto:v0.57.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.57.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.58.0?package-id=15c1d9acb12062ba","type":"library","name":"golang.org/x/crypto","version":"v0.58.0","cpe":"cpe:2.3:a:golang:crypto:v0.58.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.58.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.58.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.41.0?package-id=56d232e7120c3a8b","type":"library","name":"golang.org/x/mod","version":"v0.41.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.41.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.41.0?package-id=53b9dc7a08a1b268","type":"library","name":"golang.org/x/mod","version":"v0.41.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.41.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.59.0?package-id=db49cb1116ed5269","type":"library","name":"golang.org/x/net","version":"v0.59.0","cpe":"cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.59.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.59.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.61.0?package-id=6128ad9f9e329ffe","type":"library","name":"golang.org/x/net","version":"v0.61.0","cpe":"cpe:2.3:a:golang:networking:v0.61.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.61.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.61.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw="}]},{"bom-ref":"pkg:golang/golang.org/x/oauth2@v0.37.0?package-id=2e730bac8336b8f7","type":"library","name":"golang.org/x/oauth2","version":"v0.37.0","cpe":"cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/oauth2@v0.37.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JUlcxA8oAtauLfiH8FX2/FkAWHAdi0QtGCGc+hofE98="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.23.0?package-id=c29fae52f564b5d6","type":"library","name":"golang.org/x/sync","version":"v0.23.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.24.0?package-id=295e96fc2f845b35","type":"library","name":"golang.org/x/sync","version":"v0.24.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.24.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.48.0?package-id=db2f328a88399fb4","type":"library","name":"golang.org/x/sys","version":"v0.48.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.48.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.49.0?package-id=aec8e4adcf0dcac2","type":"library","name":"golang.org/x/sys","version":"v0.49.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.49.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.49.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA="}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.47.0?package-id=8db19b9b9f8e30c1","type":"library","name":"golang.org/x/term","version":"v0.47.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.47.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cpyOwQkr2Nzxe2p6KnrTG7Ei2wtzjsuSjhpXXepZ/BM="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.42.0?package-id=6b1cd53637b5fc51","type":"library","name":"golang.org/x/text","version":"v0.42.0","cpe":"cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.42.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.43.0?package-id=70a65622f5a0d35d","type":"library","name":"golang.org/x/text","version":"v0.43.0","cpe":"cpe:2.3:a:golang:text:v0.43.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.43.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc="}]},{"bom-ref":"pkg:golang/golang.org/x/time@v0.16.0?package-id=90e57fc7c651498e","type":"library","name":"golang.org/x/time","version":"v0.16.0","cpe":"cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/time@v0.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vMb6ptszcQMkcwiRTAuNNU50gom6++Q/6gY2hDM6VDE="}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.50.0?package-id=921daa0fbb4547ae","type":"library","name":"golang.org/x/tools","version":"v0.50.0","cpe":"cpe:2.3:a:golang:x\\/tools:v0.50.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.50.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:c2ifzfcuY7L90lZ2aKd8S4K2NpASF08SZx9ZuJkHmSU="}]},{"bom-ref":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da?package-id=056fc8b658138e7a","type":"library","name":"golang.org/x/xerrors","version":"v0.0.0-20240903120638-7835f813f4da","cpe":"cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20240903120638-7835f813f4da:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:noIWHXmPHxILtqtCOPIhSt0ABwskkZKjD3bXGnZGpNY="}]},{"bom-ref":"pkg:github/golangci/golangci-lint-action@v9.3.0?package-id=2af400f30d28e963","type":"library","name":"golangci/golangci-lint-action","version":"v9.3.0","cpe":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*","purl":"pkg:github/golangci/golangci-lint-action@v9.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/verify.yml"}]},{"bom-ref":"pkg:golang/google.golang.org/api@v0.301.0?package-id=802bda7413bdaf94","type":"library","name":"google.golang.org/api","version":"v0.301.0","cpe":"cpe:2.3:a:google:api:v0.301.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/api@v0.301.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rTvI8szs17R7b09ggb34Bv4XrmFaFl9uCBncgxskqtw="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d?package-id=64224fe56b48ea1d","type":"library","name":"google.golang.org/genproto","version":"v0.0.0-20260715232425-e75dac1f907d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C9v1o0/4quuhOAfmRXA2j+we0PqZIp8traLdeogF3Ms="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d?package-id=f849625c0ca194d1","type":"library","name":"google.golang.org/genproto/googleapis/api","version":"v0.0.0-20260803160001-6ac0973c030d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260803160001-6ac0973c030d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FarXi840EJWSHYTN3ERkADbPWjl307+FGrA22KAVjjc="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260928230214-8a89bd6388cc?package-id=93fa231d9e0f71fa","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20260928230214-8a89bd6388cc","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260928230214-8a89bd6388cc:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260928230214-8a89bd6388cc","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4bNTbnb44EqGVy9HaQxSY2jnafSUdgV3qHtedvNpDKg="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.84.0?package-id=54bcc746f2ab7987","type":"library","name":"google.golang.org/grpc","version":"v1.84.0","cpe":"cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.84.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:soMyaPJ8pAak5PIQ0DGBUir0XRo2fRoMqhNWMLlLxO0="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=0055873c0ce1a39b","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12","cpe":"cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc="}]},{"bom-ref":"pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=8f99b4759d521906","type":"library","name":"gopkg.in/ini.v1","version":"v1.67.3","purl":"pkg:golang/gopkg.in/ini.v1@v1.67.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v2@v2.4.0?package-id=550322d501c07618","type":"library","name":"gopkg.in/yaml.v2","version":"v2.4.0","purl":"pkg:golang/gopkg.in/yaml.v2@v2.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/hack/tools/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=716c668b92999095","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=1239873eaf62af00","type":"library","name":"k8s.io/klog/v2","version":"v2.140.0","cpe":"cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*","purl":"pkg:golang/k8s.io/klog/v2@v2.140.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc="}]},{"bom-ref":"pkg:github/ko-build/setup-ko@v0.10?package-id=d8eec54358fbe8a6","type":"library","name":"ko-build/setup-ko","version":"v0.10","cpe":"cpe:2.3:a:ko-build\\/setup-ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*","purl":"pkg:github/ko-build/setup-ko@v0.10","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup-ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:github/ko-build/setup-ko@v0.10?package-id=11be82a9575e378e","type":"library","name":"ko-build/setup-ko","version":"v0.10","cpe":"cpe:2.3:a:ko-build\\/setup-ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*","purl":"pkg:github/ko-build/setup-ko@v0.10","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup-ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:golang/sigs.k8s.io/release-utils@v0.12.5?package-id=f2ade2b3ff45edd6","type":"library","name":"sigs.k8s.io/release-utils","version":"v0.12.5","purl":"pkg:golang/sigs.k8s.io/release-utils@v0.12.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/Ybntn/M7sK+6XjaH88y3pfx3tpJod3WKiItxoS4igg="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=95ee3a98ac8d2d6e","type":"library","name":"sigs.k8s.io/yaml","version":"v1.6.0","purl":"pkg:golang/sigs.k8s.io/yaml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="}]},{"bom-ref":"pkg:github/sigstore/community@9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc?package-id=925a07a1bea48138#.github/workflows/reusable-dependency-review.yml","type":"library","name":"sigstore/community/.github/workflows/reusable-dependency-review.yml","version":"9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc","cpe":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/community@9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc#.github/workflows/reusable-dependency-review.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:9b1b5aca605f92ec5b1bf3681b1e61b3dbc420cc:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/depsreview.yml"}]},{"bom-ref":"pkg:github/sigstore/community@main?package-id=fc356c64fbabfbe9#.github/workflows/reusable-release.yml","type":"library","name":"sigstore/community/.github/workflows/reusable-release.yml","version":"main","cpe":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:main:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/community@main#.github/workflows/reusable-release.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cut-release.yml"}]},{"bom-ref":"pkg:github/sigstore/community@main?package-id=b92c5c567d84c3af#.github/workflows/reusable-scorecard.yml","type":"library","name":"sigstore/community/.github/workflows/reusable-scorecard.yml","version":"main","cpe":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-scorecard.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-scorecard.yml:main:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/community@main#.github/workflows/reusable-scorecard.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-scorecard.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_scorecard.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_scorecard.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-scorecard.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_scorecard.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_scorecard.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable-scorecard.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable_scorecard.yml:main:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard_action.yml"}]},{"bom-ref":"pkg:github/sigstore/cosign-installer@v4.1.2?package-id=e0a80925e1372020","type":"library","name":"sigstore/cosign-installer","version":"v4.1.2","cpe":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/cosign-installer@v4.1.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yml"}]},{"bom-ref":"pkg:golang/software.sslmate.com/src/go-pkcs12@v0.5.0?package-id=aeae1c7557309f05","type":"library","name":"software.sslmate.com/src/go-pkcs12","version":"v0.5.0","cpe":"cpe:2.3:a:src:go-pkcs12:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/software.sslmate.com/src/go-pkcs12@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:src:go_pkcs12:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EC6R394xgENTpZ4RltKydeDUjtlM5drOYIG9c6TVj2M="}]},{"bom-ref":"ebff2c81fbaf921b","type":"file","name":"/.github/workflows/build.yml","hashes":[{"alg":"SHA-1","content":"ab5e54fd05c31aeeb46cb41c1bf2dd5fe94ad972"},{"alg":"SHA-256","content":"4ca0ed5926fdc26b4df0f28c55820c8bbd926060949a8c48b92e9a77682fd64f"}]},{"bom-ref":"5e19ea2e1f9dfee4","type":"file","name":"/.github/workflows/codeql-analysis.yml","hashes":[{"alg":"SHA-1","content":"4e3efc8ba40e86494abf44bb2970a74a556b1aab"},{"alg":"SHA-256","content":"3f4e7ae1a72bc73532a4c321be27f6940e5b36392c9b333156011da71d920f75"}]},{"bom-ref":"1f65244708e42815","type":"file","name":"/.github/workflows/cut-release.yml","hashes":[{"alg":"SHA-1","content":"c3c6e7bb8474f6a88799d828edb197727e7d6ca9"},{"alg":"SHA-256","content":"a1c0ae6d8e2a509a1cd9d11f1318a970ad699429b39d19b92d2fbfdfa8d27e0a"}]},{"bom-ref":"1aaf5f65e4a438ab","type":"file","name":"/.github/workflows/depsreview.yml","hashes":[{"alg":"SHA-1","content":"1d12abf2204337e92ca7b312af577d520ad6da13"},{"alg":"SHA-256","content":"af6e9ca1dcc6b124496e6398812cebba3cb7afc401fcdffc255de14f1248c4f8"}]},{"bom-ref":"4699f1dcff729c93","type":"file","name":"/.github/workflows/fuzz.yml","hashes":[{"alg":"SHA-1","content":"91afd8479a6cdefc561ad382d1416a5ee7251cfc"},{"alg":"SHA-256","content":"3a02747447b4a6608e5f57c73ea569afd8fa135e73f4f04f574bdc700c99ee64"}]},{"bom-ref":"61fea7a21173e897","type":"file","name":"/.github/workflows/main.yml","hashes":[{"alg":"SHA-1","content":"4c69726e0a7e4663aac2f08f5b666ae73fa2fc1d"},{"alg":"SHA-256","content":"c327c4a98c707d7b4a02505c831d55db87d46ed055e7099c7fc016954438a900"}]},{"bom-ref":"48f90a37a4ffa8da","type":"file","name":"/.github/workflows/scorecard_action.yml","hashes":[{"alg":"SHA-1","content":"72a76792b29691c0d0fed680261375e18854b068"},{"alg":"SHA-256","content":"8438ba2e092520ee789df8c35ef70671814e8008a101cea3249ab1a4c2a78164"}]},{"bom-ref":"4908b26fc252bf5c","type":"file","name":"/.github/workflows/validate-release.yml","hashes":[{"alg":"SHA-1","content":"fa727ecd01b8580f7a9f633f46ea522114e28f4c"},{"alg":"SHA-256","content":"c3da105be8fb9eb50c94710222d47819f93c7fc5ef6b26849b0665de3e2b1a59"}]},{"bom-ref":"94fe7cd03b103f3d","type":"file","name":"/.github/workflows/verify.yml","hashes":[{"alg":"SHA-1","content":"514478716b24730bde0c3ea665c8dcb10fec1141"},{"alg":"SHA-256","content":"cb1a6acf2d5eb695ff92bbf6c2d6984f6bccf467a1d3d150879dcb9fa617084f"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"5f199278f97797cde42d11ab7ff61d84b1a4f470"},{"alg":"SHA-256","content":"4a89e28d46dec6f0aab72921020f1a5f73722b89bab4a65c9011ae82bef97e51"}]},{"bom-ref":"9e979291f953b1a8","type":"file","name":"/hack/tools/go.mod","hashes":[{"alg":"SHA-1","content":"7f58640e6a7a31699613d392a1d700f2398fcb51"},{"alg":"SHA-256","content":"fadc66552beea3223f4808f5e52ec58c868bc64e780525722cd0b7932c47876a"}]}]}