{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:77043dc5-4322-464a-b2c1-8e9092a81d02","version":1,"metadata":{"timestamp":"2026-11-02T03:08:19Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"90f4dfd467d8e44b","type":"file","name":"thoughtworks/talisman","version":"v1.37.0"}},"components":[{"bom-ref":"pkg:github/actions/checkout@v4?package-id=e397db0e02fb9fb8","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=2613fac976eb40e7","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/dependency-review.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=8ef0044d1f0cc662","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=d1e6071150073262","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/test-and-coverage.yml"}]},{"bom-ref":"pkg:github/actions/dependency-review-action@v4?package-id=7fe35ffe4d667c4c","type":"library","name":"actions/dependency-review-action","version":"v4","cpe":"cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/dependency-review-action@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency-review:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency_review:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency:actions\\/dependency-review-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/dependency:actions\\/dependency_review_action:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/dependency-review.yml"}]},{"bom-ref":"pkg:github/actions/github-script@v7?package-id=727802cb6644d1cc","type":"library","name":"actions/github-script","version":"v7","cpe":"cpe:2.3:a:actions\\/github-script:actions\\/github-script:v7:*:*:*:*:*:*:*","purl":"pkg:github/actions/github-script@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github-script:actions\\/github_script:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github-script:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github_script:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github-script:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github_script:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5?package-id=d6595dd6995fd5c6","type":"library","name":"actions/setup-go","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5?package-id=da915a58c974bef2","type":"library","name":"actions/setup-go","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-and-coverage.yml"}]},{"bom-ref":"pkg:golang/github.com/alecaivazis/survey/v2@v2.3.7?package-id=8f0943e23972152f","type":"library","name":"github.com/AlecAivazis/survey/v2","version":"v2.3.7","cpe":"cpe:2.3:a:AlecAivazis:survey\\/v2:v2.3.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AlecAivazis/survey/v2@v2.3.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6I/u8FvytdGsgonrYsVn2t8t4QiRnh6QSTqkkhIiSjQ="}]},{"bom-ref":"pkg:golang/github.com/vividcortex/ewma@v1.2.0?package-id=fbf2080ce02e4323","type":"library","name":"github.com/VividCortex/ewma","version":"v1.2.0","cpe":"cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/VividCortex/ewma@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f58SaIzcDXrSy3kWaHNvuJgJ3Nmz59Zji6XoJR/q1ow="}]},{"bom-ref":"pkg:golang/github.com/bmatcuk/doublestar@v1.3.4?package-id=f3561b3cdbd04bb6","type":"library","name":"github.com/bmatcuk/doublestar","version":"v1.3.4","cpe":"cpe:2.3:a:bmatcuk:doublestar:v1.3.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/bmatcuk/doublestar@v1.3.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gPypJ5xD31uhX6Tf54sDPUOBXTqKH4c9aPY66CyQrS0="}]},{"bom-ref":"pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7?package-id=268839c5be4571df","type":"library","name":"github.com/cheggaaa/pb/v3","version":"v3.1.7","cpe":"cpe:2.3:a:cheggaaa:pb\\/v3:v3.1.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cheggaaa/pb/v3@v3.1.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2FsIW307kt7A/rz/ZI2lvPO+v3wKazzE4K/0LtTWsOI="}]},{"bom-ref":"pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20200609044655-c4b36f998cf2?package-id=ad5aa1d786a22414","type":"library","name":"github.com/common-nighthawk/go-figure","version":"v0.0.0-20200609044655-c4b36f998cf2","cpe":"cpe:2.3:a:common-nighthawk:go-figure:v0.0.0-20200609044655-c4b36f998cf2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20200609044655-c4b36f998cf2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:common-nighthawk:go_figure:v0.0.0-20200609044655-c4b36f998cf2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common_nighthawk:go-figure:v0.0.0-20200609044655-c4b36f998cf2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common_nighthawk:go_figure:v0.0.0-20200609044655-c4b36f998cf2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common:go-figure:v0.0.0-20200609044655-c4b36f998cf2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common:go_figure:v0.0.0-20200609044655-c4b36f998cf2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tjT4Jp4gxECvsJcYpAMtW2I3YqzBTPuB67OejxXs86s="}]},{"bom-ref":"pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=4fff1eaa0bc0be66","type":"library","name":"github.com/davecgh/go-spew","version":"v1.1.1","cpe":"cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davecgh/go-spew@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davecgh:go_spew:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c="}]},{"bom-ref":"pkg:golang/github.com/drhodes/golorem@v0.0.0-20160418191928-ecccc744c2d9?package-id=bf32cc641fe45cae","type":"library","name":"github.com/drhodes/golorem","version":"v0.0.0-20160418191928-ecccc744c2d9","cpe":"cpe:2.3:a:drhodes:golorem:v0.0.0-20160418191928-ecccc744c2d9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/drhodes/golorem@v0.0.0-20160418191928-ecccc744c2d9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EQOZw/LCQ0SM4sNez3EhUf9gQalQrLrs4mPtmQa+d58="}]},{"bom-ref":"pkg:golang/github.com/fatih/color@v1.18.0?package-id=42c16c13a5380dfc","type":"library","name":"github.com/fatih/color","version":"v1.18.0","cpe":"cpe:2.3:a:fatih:color:v1.18.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fatih/color@v1.18.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:S8gINlzdQ840/4pfAwic/ZE0djQEH3wM94VfqLTZcOM="}]},{"bom-ref":"pkg:golang/github.com/golang/mock@v1.6.0?package-id=8e7b426adeb73ad7","type":"library","name":"github.com/golang/mock","version":"v1.6.0","cpe":"cpe:2.3:a:golang:mock:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang/mock@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ErTB+efbowRARo13NNdxyJji2egdxLGQhRaY+DUumQc="}]},{"bom-ref":"pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51?package-id=5d36e2266b9dfbc0","type":"library","name":"github.com/kballard/go-shellquote","version":"v0.0.0-20180428030007-95032a82bc51","cpe":"cpe:2.3:a:kballard:go-shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:kballard:go_shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-colorable@v0.1.14?package-id=08b5338f302cc464","type":"library","name":"github.com/mattn/go-colorable","version":"v0.1.14","cpe":"cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-colorable@v0.1.14","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-isatty@v0.0.20?package-id=f4619afab7c4111c","type":"library","name":"github.com/mattn/go-isatty","version":"v0.0.20","cpe":"cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-isatty@v0.0.20","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-runewidth@v0.0.16?package-id=898c0bba93674d22","type":"library","name":"github.com/mattn/go-runewidth","version":"v0.0.16","cpe":"cpe:2.3:a:mattn:go-runewidth:v0.0.16:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-runewidth@v0.0.16","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_runewidth:v0.0.16:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc="}]},{"bom-ref":"pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b?package-id=35e93c97d2248168","type":"library","name":"github.com/mgutz/ansi","version":"v0.0.0-20170206155736-9520e82c474b","cpe":"cpe:2.3:a:mgutz:ansi:v0.0.0-20170206155736-9520e82c474b:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j7+1HpAFS1zy5+Q4qx1fWh90gTKwiN4QCGoY9TWyyO4="}]},{"bom-ref":"pkg:golang/github.com/olekukonko/tablewriter@v0.0.5?package-id=b1ef2014854760aa","type":"library","name":"github.com/olekukonko/tablewriter","version":"v0.0.5","cpe":"cpe:2.3:a:olekukonko:tablewriter:v0.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/olekukonko/tablewriter@v0.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:P2Ga83D34wi1o9J6Wh1mRuqd4mF/x/lgBS7N7AbDhec="}]},{"bom-ref":"pkg:golang/github.com/pmezard/go-difflib@v1.0.0?package-id=2e9153c8c5a4f906","type":"library","name":"github.com/pmezard/go-difflib","version":"v1.0.0","cpe":"cpe:2.3:a:pmezard:go-difflib:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pmezard/go-difflib@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pmezard:go_difflib:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM="}]},{"bom-ref":"pkg:golang/github.com/rivo/uniseg@v0.4.7?package-id=2c0de3c260aa0d91","type":"library","name":"github.com/rivo/uniseg","version":"v0.4.7","cpe":"cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rivo/uniseg@v0.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ="}]},{"bom-ref":"pkg:golang/github.com/sirupsen/logrus@v1.9.3?package-id=0a1f05f2e6d2daa5","type":"library","name":"github.com/sirupsen/logrus","version":"v1.9.3","cpe":"cpe:2.3:a:turbopuffer:logrus:v1.9.3:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/sirupsen/logrus@v1.9.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ="}]},{"bom-ref":"pkg:golang/github.com/spf13/afero@v1.14.0?package-id=99accd9ffc0594ba","type":"library","name":"github.com/spf13/afero","version":"v1.14.0","cpe":"cpe:2.3:a:spf13:afero:v1.14.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/afero@v1.14.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9tH6MapGnn/j0eb0yIXiLjERO8RB6xIVZRDCX7PtqWA="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.6?package-id=614dd7b514b55164","type":"library","name":"github.com/spf13/pflag","version":"v1.0.6","cpe":"cpe:2.3:a:spf13:pflag:v1.0.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jFzHGLGAlb3ruxLB8MhbI6A8+AQX/2eW4qeyNZXNp2o="}]},{"bom-ref":"pkg:golang/github.com/stretchr/testify@v1.10.0?package-id=d4d0576c4c3746f0","type":"library","name":"github.com/stretchr/testify","version":"v1.10.0","cpe":"cpe:2.3:a:stretchr:testify:v1.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/testify@v1.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA="}]},{"bom-ref":"pkg:github/github/codeql-action@v3?package-id=d66151b72dc7417a#analyze","type":"library","name":"github/codeql-action/analyze","version":"v3","cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v3#analyze","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v3?package-id=ba16a3fff16a565d#autobuild","type":"library","name":"github/codeql-action/autobuild","version":"v3","cpe":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v3#autobuild","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v3?package-id=9f72c101538bfe3f#init","type":"library","name":"github/codeql-action/init","version":"v3","cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v3#init","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql.yml"}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.30.0?package-id=c93c59f02a64581b","type":"library","name":"golang.org/x/sys","version":"v0.30.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.30.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.30.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc="}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.29.0?package-id=195b60a0989b2fe0","type":"library","name":"golang.org/x/term","version":"v0.29.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.29.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.29.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:L6pJp37ocefwRRtYPKSWOWzOtWSxVajvz2ldH/xi3iU="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.23.0?package-id=51a8f1ff021f26a0","type":"library","name":"golang.org/x/text","version":"v0.23.0","cpe":"cpe:2.3:a:golang:text:v0.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:D71I7dUrlY+VX0gQShAThNGHFxZ13dGLBHQLVl1mJlY="}]},{"bom-ref":"pkg:golang/gopkg.in/check.v1@v1.0.0-20201130134442-10cb98267c6c?package-id=f3606cbd54002165","type":"library","name":"gopkg.in/check.v1","version":"v1.0.0-20201130134442-10cb98267c6c","purl":"pkg:golang/gopkg.in/check.v1@v1.0.0-20201130134442-10cb98267c6c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v2@v2.4.0?package-id=15848299ac4cecd4","type":"library","name":"gopkg.in/yaml.v2","version":"v2.4.0","purl":"pkg:golang/gopkg.in/yaml.v2@v2.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=716c668b92999095","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:github/goreleaser/goreleaser-action@v6?package-id=c73b80aae05ee5cd","type":"library","name":"goreleaser/goreleaser-action","version":"v6","cpe":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser-action:v6:*:*:*:*:*:*:*","purl":"pkg:github/goreleaser/goreleaser-action@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser-action:goreleaser\\/goreleaser_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser_action:goreleaser\\/goreleaser_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:goreleaser\\/goreleaser:goreleaser\\/goreleaser_action:v6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"f4fe0eee66e1ba99","type":"file","name":"/.github/workflows/codeql.yml","hashes":[{"alg":"SHA-1","content":"8565b83e7a4aa702c0eff08222746b3d86d6114e"},{"alg":"SHA-256","content":"9556993f5d0e9604608ff8d2d53f375483cd449a8dda41bb80b1fedc16135e5d"}]},{"bom-ref":"11769e63aa84e323","type":"file","name":"/.github/workflows/dependency-review.yml","hashes":[{"alg":"SHA-1","content":"70eac2dc625be97711a1fb23531b25ad2f1754f1"},{"alg":"SHA-256","content":"3722066cc5ca51df20bb8ecfa2ab448b786bade7a5b6d5f9892102236a5695ba"}]},{"bom-ref":"3dfd1ac2074a5862","type":"file","name":"/.github/workflows/release.yaml","hashes":[{"alg":"SHA-1","content":"a9538ba91419b82ee885408272ef44c17b945fb1"},{"alg":"SHA-256","content":"06bce4bc2f93d22a36a05db17a942faabfca31c9082d4eef203279f0d083ca41"}]},{"bom-ref":"6e6b5010eefcc549","type":"file","name":"/.github/workflows/test-and-coverage.yml","hashes":[{"alg":"SHA-1","content":"ff71ccafe30d5ff8028ffd6a1d34142468a53b5e"},{"alg":"SHA-256","content":"16c7c476c5bb021336ae0d593b6b17e9aed2956bd0e5eee1c3fb402eae82031e"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"b64d83b1ff6ae19a0d80fa13fe5af377b31c2602"},{"alg":"SHA-256","content":"280040d883ff180eeb1aa4fe60a32ac4f6d84428399ee0660229108ffe0784e7"}]}]}