{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:1d4d81a4-46cf-418f-80fc-77ce05f6f94e","version":1,"metadata":{"timestamp":"2026-06-22T15:18:01Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.45.1"}]},"component":{"bom-ref":"8dcbd803f369ec9f","type":"file","name":"/workspace"}},"components":[{"bom-ref":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5?package-id=e1d6707d7364d472","type":"library","name":"actions/checkout","version":"34e114876b0b11c390a56381ad16ebd13914f8d5","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:34e114876b0b11c390a56381ad16ebd13914f8d5:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5?package-id=f2935e0acccc1d6f","type":"library","name":"actions/checkout","version":"34e114876b0b11c390a56381ad16ebd13914f8d5","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:34e114876b0b11c390a56381ad16ebd13914f8d5:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=17e6c7805ef21d47","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/book.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=b049ebe7890a45db","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/book.yml"}]},{"bom-ref":"pkg:github/actions/deploy-pages@v4?package-id=d388ec2d1017127e","type":"library","name":"actions/deploy-pages","version":"v4","cpe":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy-pages:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/deploy-pages@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy-pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy-pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/book.yaml"}]},{"bom-ref":"pkg:github/actions/deploy-pages@v4?package-id=96bf33a94d174aea","type":"library","name":"actions/deploy-pages","version":"v4","cpe":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy-pages:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/deploy-pages@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy-pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy-pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/book.yml"}]},{"bom-ref":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093?package-id=db0ab13df8e7a40c","type":"library","name":"actions/download-artifact","version":"d3f86a106a0bac45b974a628896c90dbdf5c8093","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02?package-id=f2f8ad62cbf44feb","type":"library","name":"actions/upload-artifact","version":"ea165f8d65b6e75b540449e92b4886f43607fa02","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/upload-pages-artifact@v3?package-id=b30dcb3e191a900e","type":"library","name":"actions/upload-pages-artifact","version":"v3","cpe":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-pages-artifact@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/book.yaml"}]},{"bom-ref":"pkg:github/actions/upload-pages-artifact@v3?package-id=712302c61f40eb07","type":"library","name":"actions/upload-pages-artifact","version":"v3","cpe":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-pages-artifact@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/book.yml"}]},{"bom-ref":"pkg:github/ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd?package-id=de08941e3fc2737f","type":"library","name":"ncipollo/release-action","version":"339a81892b84b4eeb0f6e744e4574d79d0d9b8dd","cpe":"cpe:2.3:a:ncipollo\\/release-action:ncipollo\\/release-action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*","purl":"pkg:github/ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release-action:ncipollo\\/release_action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release_action:ncipollo\\/release-action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release_action:ncipollo\\/release_action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release:ncipollo\\/release-action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release:ncipollo\\/release_action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"8ed3404613b52a14","type":"file","name":"/workspace/.github/workflows/book.yaml","hashes":[{"alg":"SHA-1","content":"d0dabccc8bf9fb446ca3ff61d81541946ca6d95a"},{"alg":"SHA-256","content":"ec16f856b44c553364aa1a0a082a23e03d36b154e9af4a0bae9c060ff68309c2"}]},{"bom-ref":"4f27b3addfd4cd68","type":"file","name":"/workspace/.github/workflows/book.yml","hashes":[{"alg":"SHA-1","content":"1c4279d47236caafed4a2a5c416fdafb9b241877"},{"alg":"SHA-256","content":"9c44c45665a836bcd595f8f21c1a33b7a052e2c90d2dfbf9054def7ca1ff5db1"}]},{"bom-ref":"b716bc1981a7ad37","type":"file","name":"/workspace/.github/workflows/ci.yaml","hashes":[{"alg":"SHA-1","content":"3c8207282594b84cc5bb755001ca7f5e0c08b1c7"},{"alg":"SHA-256","content":"a3f9c21cfbedd2c1a72e8993e2d1a6e7b298e168190e3d7e39a5812a6f0d0cef"}]},{"bom-ref":"3dfd1ac2074a5862","type":"file","name":"/workspace/.github/workflows/release.yaml","hashes":[{"alg":"SHA-1","content":"42a8423c32c9f4ea42c960bd31fad3458fd1252d"},{"alg":"SHA-256","content":"af0154c3cff69a61f2e36d1ef253d9624a52a3b2579b79999eed7b1c28f72b20"}]}]}