{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:3484dac4-741e-40e5-8d40-9c9ea6084c6e","version":1,"metadata":{"timestamp":"2026-06-22T15:18:36Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.45.1"}]},"component":{"bom-ref":"8dcbd803f369ec9f","type":"file","name":"/workspace"}},"components":[{"bom-ref":"56a35f16b608cb39","type":"library","name":"./.github/actions/extract-version","version":"UNKNOWN","cpe":"cpe:2.3:a:.\\/.github\\/actions\\/extract-version:.\\/.github\\/actions\\/extract-version:*:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/extract-version:.\\/.github\\/actions\\/extract_version:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/extract_version:.\\/.github\\/actions\\/extract-version:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/extract_version:.\\/.github\\/actions\\/extract_version:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/extract:.\\/.github\\/actions\\/extract-version:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:.\\/.github\\/actions\\/extract:.\\/.github\\/actions\\/extract_version:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/actions/attest-build-provenance@v2?package-id=27f9b39e7fe75174","type":"library","name":"actions/attest-build-provenance","version":"v2","cpe":"cpe:2.3:a:actions\\/attest-build-provenance:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*","purl":"pkg:github/actions/attest-build-provenance@v2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest-build-provenance:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest_build_provenance:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest_build_provenance:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest-build:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest-build:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest_build:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest_build:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=b56fede134a921dd","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=69ae1f6a708e4a35","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/pages.yaml"}]},{"bom-ref":"pkg:github/actions/configure-pages@v5?package-id=56c4ef0a8744334b","type":"library","name":"actions/configure-pages","version":"v5","cpe":"cpe:2.3:a:actions\\/configure-pages:actions\\/configure-pages:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/configure-pages@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure-pages:actions\\/configure_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure_pages:actions\\/configure-pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure_pages:actions\\/configure_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure:actions\\/configure-pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/configure:actions\\/configure_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pages.yaml"}]},{"bom-ref":"pkg:github/actions/deploy-pages@v4?package-id=73a84e0c5cef64da","type":"library","name":"actions/deploy-pages","version":"v4","cpe":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy-pages:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/deploy-pages@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy-pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy-pages:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy_pages:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pages.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v4?package-id=d93bd7face2e9834","type":"library","name":"actions/download-artifact","version":"v4","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5?package-id=c79395c6bd1c81f7","type":"library","name":"actions/setup-go","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4?package-id=337c386b9a8305ed","type":"library","name":"actions/upload-artifact","version":"v4","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/actions/upload-pages-artifact@v3?package-id=1d6353e5e6da2664","type":"library","name":"actions/upload-pages-artifact","version":"v3","cpe":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-pages-artifact@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/pages.yaml"}]},{"bom-ref":"pkg:github/anchore/sbom-action@v0?package-id=2dd81596d8abf255","type":"library","name":"anchore/sbom-action","version":"v0","cpe":"cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom-action:v0:*:*:*:*:*:*:*","purl":"pkg:github/anchore/sbom-action@v0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom-action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom-action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/aquasecurity/trivy-action@master?package-id=060b9f0fae603a0c","type":"library","name":"aquasecurity/trivy-action","version":"master","cpe":"cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy-action:master:*:*:*:*:*:*:*","purl":"pkg:github/aquasecurity/trivy-action@master","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy_action:master:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy-action:master:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy_action:master:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy-action:master:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy_action:master:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:golang/cel.dev/expr@v0.25.1?package-id=4832d9a35e29e640","type":"library","name":"cel.dev/expr","version":"v0.25.1","purl":"pkg:golang/cel.dev/expr@v0.25.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1KrZg61W6TWSxuNZ37Xy49ps13NUovb66QLprthtwi4="}]},{"bom-ref":"pkg:golang/dario.cat/mergo@v1.0.1?package-id=c918163fc2b8b714","type":"library","name":"dario.cat/mergo","version":"v1.0.1","purl":"pkg:golang/dario.cat/mergo@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ra4+bf83h2ztPIQYNP99R6m+Y7KfnARDfID+a+vLl4s="}]},{"bom-ref":"pkg:github/docker/build-push-action@v6?package-id=685ee36efd718e46","type":"library","name":"docker/build-push-action","version":"v6","cpe":"cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:v6:*:*:*:*:*:*:*","purl":"pkg:github/docker/build-push-action@v6","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build-push-action:v6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/build:docker\\/build_push_action:v6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/docker/login-action@v3?package-id=90fc0cb7417d3d33","type":"library","name":"docker/login-action","version":"v3","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/docker/metadata-action@v5?package-id=830c6fc20cca59b4","type":"library","name":"docker/metadata-action","version":"v5","cpe":"cpe:2.3:a:docker\\/metadata-action:docker\\/metadata-action:v5:*:*:*:*:*:*:*","purl":"pkg:github/docker/metadata-action@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata-action:docker\\/metadata_action:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata_action:docker\\/metadata-action:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata_action:docker\\/metadata_action:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata:docker\\/metadata-action:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/metadata:docker\\/metadata_action:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/docker/setup-buildx-action@v3?package-id=b3dc007ef7cf735c","type":"library","name":"docker/setup-buildx-action","version":"v3","cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-buildx-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/docker/setup-qemu-action@v3?package-id=9f556f6039eb6bbb","type":"library","name":"docker/setup-qemu-action","version":"v3","cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/setup-qemu-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:golang/github.com/makenowjust/heredoc@v1.0.0?package-id=9f66f4cc4bc4d2ef","type":"library","name":"github.com/MakeNowJust/heredoc","version":"v1.0.0","cpe":"cpe:2.3:a:MakeNowJust:heredoc:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/MakeNowJust/heredoc@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ="}]},{"bom-ref":"pkg:golang/github.com/masterminds/goutils@v1.1.1?package-id=4a60e6f3f9cac2b0","type":"library","name":"github.com/Masterminds/goutils","version":"v1.1.1","cpe":"cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/Masterminds/goutils@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI="}]},{"bom-ref":"pkg:golang/github.com/masterminds/semver/v3@v3.4.0?package-id=1b729e4bc7f52e64","type":"library","name":"github.com/Masterminds/semver/v3","version":"v3.4.0","cpe":"cpe:2.3:a:Masterminds:semver\\/v3:v3.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/semver/v3@v3.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1Xbatp0="}]},{"bom-ref":"pkg:golang/github.com/masterminds/sprig/v3@v3.3.0?package-id=17921bc3f2f4444b","type":"library","name":"github.com/Masterminds/sprig/v3","version":"v3.3.0","cpe":"cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Masterminds/sprig/v3@v3.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe3tPhs="}]},{"bom-ref":"pkg:golang/github.com/nytimes/gziphandler@v1.1.1?package-id=3a8615caf504a74f","type":"library","name":"github.com/NYTimes/gziphandler","version":"v1.1.1","cpe":"cpe:2.3:a:NYTimes:gziphandler:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/NYTimes/gziphandler@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZUDjpQae29j0ryrS0u/B8HZfJBtBQHjqw2rQ2cqUQ3I="}]},{"bom-ref":"pkg:golang/github.com/anchore/go-lzo@v0.1.0?package-id=7298cbdb17ec86e4","type":"library","name":"github.com/anchore/go-lzo","version":"v0.1.0","cpe":"cpe:2.3:a:anchore:go-lzo:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/anchore/go-lzo@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore:go_lzo:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NgAacnzqPeGH49Ky19QKLBZEuFRqtTG9cdaucc3Vncs="}]},{"bom-ref":"pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.0?package-id=47cbb7d34aa75469","type":"library","name":"github.com/antlr4-go/antlr/v4","version":"v4.13.0","cpe":"cpe:2.3:a:antlr4-go:antlr\\/v4:v4.13.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:antlr4_go:antlr\\/v4:v4.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:antlr4:antlr\\/v4:v4.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lxCg3LAv+EUK6t1i0y1V6/SLeUi0eKEKdhQAlS8TVTI="}]},{"bom-ref":"pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=4b7f4d17e7911c1a","type":"library","name":"github.com/beorn7/perks","version":"v1.0.1","cpe":"cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/beorn7/perks@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="}]},{"bom-ref":"pkg:golang/github.com/blang/semver/v4@v4.0.0?package-id=1a04b1646ddf95dd","type":"library","name":"github.com/blang/semver/v4","version":"v4.0.0","cpe":"cpe:2.3:a:blang:semver\\/v4:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/blang/semver/v4@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1PFHFE6yCCTv8C1TeyNNarDzntLi7wMI5i/pzqYIsAM="}]},{"bom-ref":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=5e9265ff67aa38c8","type":"library","name":"github.com/cenkalti/backoff/v5","version":"v5.0.3","cpe":"cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=e1e0f1232be39ea0","type":"library","name":"github.com/davecgh/go-spew","version":"v1.1.2-0.20180830191138-d8f796af33cc","cpe":"cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="}]},{"bom-ref":"pkg:golang/github.com/diskfs/go-diskfs@v1.9.1?package-id=2e7cab81e7cc836f","type":"library","name":"github.com/diskfs/go-diskfs","version":"v1.9.1","cpe":"cpe:2.3:a:diskfs:go-diskfs:v1.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/diskfs/go-diskfs@v1.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:diskfs:go_diskfs:v1.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:g/UCTC5jZFomhtH4DyF9fG1eRHGgDIjSd1hSjEErXn0="}]},{"bom-ref":"pkg:golang/github.com/djherbis/times@v1.6.0?package-id=5151ccce279e791c","type":"library","name":"github.com/djherbis/times","version":"v1.6.0","cpe":"cpe:2.3:a:djherbis:times:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/djherbis/times@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w2ctJ92J8fBvWPxugmXIv7Nz7Q3iDMKNx9v5ocVH20c="}]},{"bom-ref":"pkg:golang/github.com/elliotwutingfeng/asciiset@v0.0.0-20230602022725-51bbb787efab?package-id=9faa9ee61fd586c5","type":"library","name":"github.com/elliotwutingfeng/asciiset","version":"v0.0.0-20230602022725-51bbb787efab","cpe":"cpe:2.3:a:elliotwutingfeng:asciiset:v0.0.0-20230602022725-51bbb787efab:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/elliotwutingfeng/asciiset@v0.0.0-20230602022725-51bbb787efab","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h1UgjJdAAhj+uPL68n7XASS6bU+07ZX1WJvVS2eyoeY="}]},{"bom-ref":"pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=fbbc9aa76747c037","type":"library","name":"github.com/emicklei/go-restful/v3","version":"v3.13.0","cpe":"cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes="}]},{"bom-ref":"pkg:golang/github.com/evanphx/json-patch@v5.7.0%2Bincompatible?package-id=519edf0203914804","type":"library","name":"github.com/evanphx/json-patch","version":"v5.7.0+incompatible","cpe":"cpe:2.3:a:evanphx:json-patch:v5.7.0\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/evanphx/json-patch@v5.7.0%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:evanphx:json_patch:v5.7.0\\+incompatible:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vgGkfT/9f8zE6tvSCe74nfpAVDQ2tG6yudJd8LBksgI="}]},{"bom-ref":"pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11?package-id=8becd335c11df7e2","type":"library","name":"github.com/evanphx/json-patch/v5","version":"v5.9.11","cpe":"cpe:2.3:a:evanphx:json-patch\\/v5:v5.9.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:evanphx:json_patch\\/v5:v5.9.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/8HVnzMq13/3x9TPvjG08wUGqBTmZBsCWzjTM0wiaDU="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=208481c695126b4d","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.0.4","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg="}]},{"bom-ref":"pkg:golang/github.com/fsnotify/fsnotify@v1.9.0?package-id=7784241df9ad0fe0","type":"library","name":"github.com/fsnotify/fsnotify","version":"v1.9.0","cpe":"cpe:2.3:a:fsnotify:fsnotify:v1.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fsnotify/fsnotify@v1.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k="}]},{"bom-ref":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=69d156e101aa4070","type":"library","name":"github.com/fxamacker/cbor/v2","version":"v2.9.0","cpe":"cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=1ecd2131fa62597f","type":"library","name":"github.com/go-logr/logr","version":"v1.4.3","cpe":"cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ed7921825a53d3f4","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/go-logr/zapr@v1.3.0?package-id=5f2b38479f0d8989","type":"library","name":"github.com/go-logr/zapr","version":"v1.3.0","cpe":"cpe:2.3:a:go-logr:zapr:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/zapr@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:zapr:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:zapr:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XGdV8XW8zdwFiwOA2Dryh1gj2KRQyOOoNmBy4EplIcQ="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonpointer@v0.21.0?package-id=ceea0256829c4562","type":"library","name":"github.com/go-openapi/jsonpointer","version":"v0.21.0","cpe":"cpe:2.3:a:go-openapi:jsonpointer:v0.21.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonpointer@v0.21.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonpointer:v0.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonpointer:v0.21.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YgdVicSA9vH5RiHs9TZW5oyafXZFc6+2Vc1rr/O9oNQ="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonreference@v0.20.2?package-id=2417cf64272af317","type":"library","name":"github.com/go-openapi/jsonreference","version":"v0.20.2","cpe":"cpe:2.3:a:go-openapi:jsonreference:v0.20.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonreference@v0.20.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonreference:v0.20.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonreference:v0.20.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3sVjiK66+uXK/6oQ8xgcRKcFgQ5KXa2KvnJRumpMGbE="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag@v0.23.0?package-id=0622efaf44074917","type":"library","name":"github.com/go-openapi/swag","version":"v0.23.0","cpe":"cpe:2.3:a:go-openapi:swag:v0.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag@v0.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag:v0.23.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag:v0.23.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vsEVJDUo2hPJ2tu0/Xc+4noaxyEffXNIs3cOULZ+GrE="}]},{"bom-ref":"pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0?package-id=5722741857d8df35","type":"library","name":"github.com/go-task/slim-sprig/v3","version":"v3.0.0","cpe":"cpe:2.3:a:go-task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-task/slim-sprig/v3@v3.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_task:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_task:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:slim-sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:slim_sprig\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI="}]},{"bom-ref":"pkg:golang/github.com/gobuffalo/flect@v1.0.3?package-id=011244b514e68962","type":"library","name":"github.com/gobuffalo/flect","version":"v1.0.3","cpe":"cpe:2.3:a:gobuffalo:flect:v1.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gobuffalo/flect@v1.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xeWBM2nui+qnVvNM4S3foBhCAL2XgPU+a7FdpelbTq4="}]},{"bom-ref":"pkg:golang/github.com/google/btree@v1.1.3?package-id=bc759b3b23d38a4c","type":"library","name":"github.com/google/btree","version":"v1.1.3","cpe":"cpe:2.3:a:google:btree:v1.1.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/btree@v1.1.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg="}]},{"bom-ref":"pkg:golang/github.com/google/cel-go@v0.26.0?package-id=3d93b9bcf449115d","type":"library","name":"github.com/google/cel-go","version":"v0.26.0","cpe":"cpe:2.3:a:google:cel-go:v0.26.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/cel-go@v0.26.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:cel_go:v0.26.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DPGjXackMpJWH680oGY4lZhYjIameYmR+/6RBdDGmaI="}]},{"bom-ref":"pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=879c470a8b8bf38a","type":"library","name":"github.com/google/gnostic-models","version":"v0.7.0","cpe":"cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/gnostic-models@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=473d0adb4b419c7e","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="}]},{"bom-ref":"pkg:golang/github.com/google/gofuzz@v1.2.0?package-id=49f57a8e9898e1b4","type":"library","name":"github.com/google/gofuzz","version":"v1.2.0","cpe":"cpe:2.3:a:google:gofuzz:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/gofuzz@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0="}]},{"bom-ref":"pkg:golang/github.com/google/pprof@v0.0.0-20250820193118-f64d9cf942d6?package-id=94f11c5682e08543","type":"library","name":"github.com/google/pprof","version":"v0.0.0-20250820193118-f64d9cf942d6","cpe":"cpe:2.3:a:google:pprof:v0.0.0-20250820193118-f64d9cf942d6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/pprof@v0.0.0-20250820193118-f64d9cf942d6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EEHtgt9IwisQ2AZ4pIsMjahcegHh6rmhqxzIRQIyepY="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.27.7?package-id=2d09513aa96f7da0","type":"library","name":"github.com/grpc-ecosystem/grpc-gateway/v2","version":"v2.27.7","cpe":"cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.27.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.27.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.27.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.27.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.27.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.27.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.27.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:X+2YciYSxvMQK0UZ7sg45ZVabVZBeBuvMkmuI2V3Fak="}]},{"bom-ref":"pkg:golang/github.com/huandu/xstrings@v1.5.0?package-id=0634db5052d02338","type":"library","name":"github.com/huandu/xstrings","version":"v1.5.0","cpe":"cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/huandu/xstrings@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/josharian/intern@v1.0.0?package-id=ea55b90fb3872fa3","type":"library","name":"github.com/josharian/intern","version":"v1.0.0","cpe":"cpe:2.3:a:josharian:intern:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/josharian/intern@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY="}]},{"bom-ref":"pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=b71b97451ba45321","type":"library","name":"github.com/json-iterator/go","version":"v1.1.12","cpe":"cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/json-iterator/go@v1.1.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="}]},{"bom-ref":"pkg:golang/github.com/klauspost/compress@v1.18.0?package-id=6813a3f2b23f48bb","type":"library","name":"github.com/klauspost/compress","version":"v1.18.0","cpe":"cpe:2.3:a:klauspost:compress:v1.18.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/compress@v1.18.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo="}]},{"bom-ref":"pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=054bf546a3d78ff8","type":"library","name":"github.com/kylelemons/godebug","version":"v1.1.0","cpe":"cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kylelemons/godebug@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="}]},{"bom-ref":"pkg:golang/github.com/mailru/easyjson@v0.7.7?package-id=560848dc89170ccd","type":"library","name":"github.com/mailru/easyjson","version":"v0.7.7","cpe":"cpe:2.3:a:mailru:easyjson:v0.7.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mailru/easyjson@v0.7.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0?package-id=a08603254284a9b5","type":"library","name":"github.com/mitchellh/copystructure","version":"v1.2.0","cpe":"cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/copystructure@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2?package-id=683fad220f58d434","type":"library","name":"github.com/mitchellh/reflectwalk","version":"v1.0.2","cpe":"cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ="}]},{"bom-ref":"pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=a36fc4a176d0ee4a","type":"library","name":"github.com/modern-go/concurrent","version":"v0.0.0-20180306012644-bacd9c7ef1dd","cpe":"cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="}]},{"bom-ref":"pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=b199fcf302d10783","type":"library","name":"github.com/modern-go/reflect2","version":"v1.0.3-0.20250322232337-35a7c28c31ee","cpe":"cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="}]},{"bom-ref":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=2d33de0c2e03c980","type":"library","name":"github.com/munnerz/goautoneg","version":"v0.0.0-20191010083416-a7dc8b61c822","cpe":"cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="}]},{"bom-ref":"pkg:golang/github.com/onsi/ginkgo/v2@v2.27.2?package-id=71fbbee49af22297","type":"library","name":"github.com/onsi/ginkgo/v2","version":"v2.27.2","cpe":"cpe:2.3:a:onsi:ginkgo\\/v2:v2.27.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/onsi/ginkgo/v2@v2.27.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LzwLj0b89qtIy6SSASkzlNvX6WktqurSHwkk2ipF/Ns="}]},{"bom-ref":"pkg:golang/github.com/onsi/gomega@v1.38.2?package-id=0a1d69dbe0e7ea15","type":"library","name":"github.com/onsi/gomega","version":"v1.38.2","cpe":"cpe:2.3:a:onsi:gomega:v1.38.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/onsi/gomega@v1.38.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A="}]},{"bom-ref":"pkg:golang/github.com/pierrec/lz4/v4@v4.1.17?package-id=fbaebc0bd112af3c","type":"library","name":"github.com/pierrec/lz4/v4","version":"v4.1.17","cpe":"cpe:2.3:a:pierrec:lz4\\/v4:v4.1.17:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pierrec/lz4/v4@v4.1.17","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kV4Ip+/hUBC+8T6+2EgburRtkE9ef4nbY3f4dFhGjMc="}]},{"bom-ref":"pkg:golang/github.com/pkg/errors@v0.9.1?package-id=2f2b4a7ce7872628","type":"library","name":"github.com/pkg/errors","version":"v0.9.1","cpe":"cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/errors@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="}]},{"bom-ref":"pkg:golang/github.com/pkg/xattr@v0.4.12?package-id=6223a1a56b452ce1","type":"library","name":"github.com/pkg/xattr","version":"v0.4.12","cpe":"cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/xattr@v0.4.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rRTkSyFNTRElv6pkA3zpjHpQ90p/OdHQC1GmGh1aTjM="}]},{"bom-ref":"pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2?package-id=687547b3b9e2c718","type":"library","name":"github.com/pmezard/go-difflib","version":"v1.0.1-0.20181226105442-5d4384ee4fb2","cpe":"cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_golang@v1.23.2?package-id=12e76b8784ec4a20","type":"library","name":"github.com/prometheus/client_golang","version":"v1.23.2","cpe":"cpe:2.3:a:prometheus:client-golang:v1.23.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_golang@v1.23.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_golang:v1.23.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_model@v0.6.2?package-id=a37501789b93a9d0","type":"library","name":"github.com/prometheus/client_model","version":"v0.6.2","cpe":"cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_model@v0.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk="}]},{"bom-ref":"pkg:golang/github.com/prometheus/common@v0.66.1?package-id=64b699c125849c8f","type":"library","name":"github.com/prometheus/common","version":"v0.66.1","cpe":"cpe:2.3:a:prometheus:common:v0.66.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/common@v0.66.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h5E0h5/Y8niHc5DlaLlWLArTQI7tMrsfQjHV+d9ZoGs="}]},{"bom-ref":"pkg:golang/github.com/prometheus/procfs@v0.16.1?package-id=6413ebab09fe4977","type":"library","name":"github.com/prometheus/procfs","version":"v0.16.1","cpe":"cpe:2.3:a:prometheus:procfs:v0.16.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/procfs@v0.16.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hZ15bTNuirocR6u0JZ6BAHHmwS1p8B4P6MRqxtzMyRg="}]},{"bom-ref":"pkg:golang/github.com/shopspring/decimal@v1.4.0?package-id=19af8ea56a342c55","type":"library","name":"github.com/shopspring/decimal","version":"v1.4.0","cpe":"cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shopspring/decimal@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-modul