{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:23671371-e49a-46ac-a7ae-f7e1a5e2e4a3","version":1,"metadata":{"timestamp":"2026-11-02T03:08:48Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"ce4833e3036aa6c8","type":"file","name":"wapiti-scanner/wapiti","version":"3.3.2"}},"components":[{"bom-ref":"pkg:github/actions/checkout@v4?package-id=660c6bac699c1b2f","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5?package-id=7edf2bee7c099a30","type":"library","name":"actions/setup-python","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4?package-id=328fd369fa06d713","type":"library","name":"actions/upload-artifact","version":"v4","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/codecov/codecov-action@v4?package-id=754165c53f456d41","type":"library","name":"codecov/codecov-action","version":"v4","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:v4:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v3?package-id=7b6a8f9390e83c73","type":"library","name":"docker/setup-buildx-action","version":"v3","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/main.yml"}]},{"bom-ref":"61fea7a21173e897","type":"file","name":"/.github/workflows/main.yml","hashes":[{"alg":"SHA-1","content":"b5304ada40ad820a602a6e2c8e41298bd603b29b"},{"alg":"SHA-256","content":"0f35b0ec436966c71c5044add02f2af3365587d9230023697f0208d357aff2b0"}]}]}