{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:c3b9903b-7679-44cf-a32a-8edc3d788a5f","version":1,"metadata":{"timestamp":"2026-06-22T15:19:52Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.45.1"}]},"component":{"bom-ref":"8dcbd803f369ec9f","type":"file","name":"/workspace"}},"components":[{"bom-ref":"pkg:github/actions/attest-build-provenance@v2?package-id=49a52e3abd500b92","type":"library","name":"actions/attest-build-provenance","version":"v2","cpe":"cpe:2.3:a:actions\\/attest-build-provenance:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*","purl":"pkg:github/actions/attest-build-provenance@v2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest-build-provenance:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest_build_provenance:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest_build_provenance:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest-build:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest-build:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest_build:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest_build:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest:actions\\/attest-build-provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/attest:actions\\/attest_build_provenance:v2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=fa2e67b8c20f75f3","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=300574b5b02877fd","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ee.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v4?package-id=9eb4338500f07f9e","type":"library","name":"actions/checkout","version":"v4","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/deploy-pages@v5?package-id=fb41269b92f85f14","type":"library","name":"actions/deploy-pages","version":"v5","cpe":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy-pages:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/deploy-pages@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy-pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy-pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v4?package-id=0eccb2671b34b053","type":"library","name":"actions/download-artifact","version":"v4","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5?package-id=5a8420ad01a9d4b7","type":"library","name":"actions/setup-go","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v5?package-id=d95cd9a37d4272b7","type":"library","name":"actions/setup-go","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/setup-python@v5?package-id=ff7e9e704aade580","type":"library","name":"actions/setup-python","version":"v5","cpe":"cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-python@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-python:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_python:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ee.yml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v4?package-id=796c2f5062424580","type":"library","name":"actions/upload-artifact","version":"v4","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v4","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/actions/upload-pages-artifact@v3?package-id=c218ca56073a710b","type":"library","name":"actions/upload-pages-artifact","version":"v3","cpe":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-pages-artifact@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/anchore/sbom-action@v0?package-id=ad90da0d57c78152","type":"library","name":"anchore/sbom-action","version":"v0","cpe":"cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom-action:v0:*:*:*:*:*:*:*","purl":"pkg:github/anchore/sbom-action@v0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom-action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom-action:v0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom_action:v0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/docker/login-action@v3?package-id=ed28f921a9f441c2","type":"library","name":"docker/login-action","version":"v3","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v3:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ee.yml"}]},{"bom-ref":"pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=4b7f4d17e7911c1a","type":"library","name":"github.com/beorn7/perks","version":"v1.0.1","cpe":"cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/beorn7/perks@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/ebitengine/purego@v0.10.0?package-id=ba67a8516df8e9d1","type":"library","name":"github.com/ebitengine/purego","version":"v0.10.0","cpe":"cpe:2.3:a:ebitengine:purego:v0.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ebitengine/purego@v0.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QIw4xfpWT6GWTzaW5XEKy3HXoqrJGx1ijYHzTF0/ISU="}]},{"bom-ref":"pkg:golang/github.com/go-ole/go-ole@v1.2.6?package-id=61af5c12d88ffb43","type":"library","name":"github.com/go-ole/go-ole","version":"v1.2.6","cpe":"cpe:2.3:a:go-ole:go-ole:v1.2.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-ole/go-ole@v1.2.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-ole:go_ole:v1.2.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_ole:go-ole:v1.2.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_ole:go_ole:v1.2.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-ole:v1.2.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_ole:v1.2.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY="}]},{"bom-ref":"pkg:golang/github.com/google/jsonschema-go@v0.4.2?package-id=5d837ccd904d8ce3","type":"library","name":"github.com/google/jsonschema-go","version":"v0.4.2","cpe":"cpe:2.3:a:google:jsonschema-go:v0.4.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/jsonschema-go@v0.4.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:jsonschema_go:v0.4.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tmrUohrwoLZZS/P3x7ex0WAVknEkBZM46iALbcqoRA8="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/jackc/pgpassfile@v1.0.0?package-id=43a7b27bf2729128","type":"library","name":"github.com/jackc/pgpassfile","version":"v1.0.0","cpe":"cpe:2.3:a:jackc:pgpassfile:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jackc/pgpassfile@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM="}]},{"bom-ref":"pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761?package-id=68c2db3c3399478c","type":"library","name":"github.com/jackc/pgservicefile","version":"v0.0.0-20240606120523-5a60cdf6a761","cpe":"cpe:2.3:a:jackc:pgservicefile:v0.0.0-20240606120523-5a60cdf6a761:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo="}]},{"bom-ref":"pkg:golang/github.com/jackc/pgx/v5@v5.9.2?package-id=cae5d771fa5fb87f","type":"library","name":"github.com/jackc/pgx/v5","version":"v5.9.2","cpe":"cpe:2.3:a:jackc:pgx\\/v5:v5.9.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jackc/pgx/v5@v5.9.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3ZhOzMWnR4yJ+RW1XImIPsD1aNSz4T4fyP7zlQb56hw="}]},{"bom-ref":"pkg:golang/github.com/jackc/puddle/v2@v2.2.2?package-id=a64feda35d1566ce","type":"library","name":"github.com/jackc/puddle/v2","version":"v2.2.2","cpe":"cpe:2.3:a:jackc:puddle\\/v2:v2.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jackc/puddle/v2@v2.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo="}]},{"bom-ref":"pkg:golang/github.com/lufia/plan9stats@v0.0.0-20211012122336-39d0f177ccd0?package-id=27fe0b7301e0249e","type":"library","name":"github.com/lufia/plan9stats","version":"v0.0.0-20211012122336-39d0f177ccd0","cpe":"cpe:2.3:a:lufia:plan9stats:v0.0.0-20211012122336-39d0f177ccd0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lufia/plan9stats@v0.0.0-20211012122336-39d0f177ccd0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6E+4a0GO5zZEnZ81pIr0yLvtUWk2if982qA3F3QD6H4="}]},{"bom-ref":"pkg:golang/github.com/mark3labs/mcp-go@v0.54.0?package-id=9bf5e7e43e1dbe4c","type":"library","name":"github.com/mark3labs/mcp-go","version":"v0.54.0","cpe":"cpe:2.3:a:mark3labs:mcp-go:v0.54.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mark3labs/mcp-go@v0.54.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mark3labs:mcp_go:v0.54.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PZhQvd+5xrT43cUoiaKn/hDcvLUhcLc1twSEKYPTcTA="}]},{"bom-ref":"pkg:golang/github.com/mattn/go-sqlite3@v1.14.44?package-id=cf668304ed3bfd9d","type":"library","name":"github.com/mattn/go-sqlite3","version":"v1.14.44","cpe":"cpe:2.3:a:mattn:go-sqlite3:v1.14.44:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mattn/go-sqlite3@v1.14.44","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mattn:go_sqlite3:v1.14.44:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3VSe+xafpbzsLbdr2AWlAZk9yRHiBhTBakioXaCKTF8="}]},{"bom-ref":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=2d33de0c2e03c980","type":"library","name":"github.com/munnerz/goautoneg","version":"v0.0.0-20191010083416-a7dc8b61c822","cpe":"cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="}]},{"bom-ref":"pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55?package-id=beb7f44974623b99","type":"library","name":"github.com/power-devops/perfstat","version":"v0.0.0-20240221224432-82ca36839d55","cpe":"cpe:2.3:a:power-devops:perfstat:v0.0.0-20240221224432-82ca36839d55:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:power_devops:perfstat:v0.0.0-20240221224432-82ca36839d55:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:power:perfstat:v0.0.0-20240221224432-82ca36839d55:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:o4JXh1EVt9k/+g42oCprj/FisM4qX9L3sZB3upGN2ZU="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_golang@v1.23.2?package-id=12e76b8784ec4a20","type":"library","name":"github.com/prometheus/client_golang","version":"v1.23.2","cpe":"cpe:2.3:a:prometheus:client-golang:v1.23.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_golang@v1.23.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_golang:v1.23.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_model@v0.6.2?package-id=a37501789b93a9d0","type":"library","name":"github.com/prometheus/client_model","version":"v0.6.2","cpe":"cpe:2.3:a:prometheus:client-model:v0.6.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_model@v0.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_model:v0.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk="}]},{"bom-ref":"pkg:golang/github.com/prometheus/common@v0.66.1?package-id=64b699c125849c8f","type":"library","name":"github.com/prometheus/common","version":"v0.66.1","cpe":"cpe:2.3:a:prometheus:common:v0.66.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/common@v0.66.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h5E0h5/Y8niHc5DlaLlWLArTQI7tMrsfQjHV+d9ZoGs="}]},{"bom-ref":"pkg:golang/github.com/prometheus/procfs@v0.16.1?package-id=6413ebab09fe4977","type":"library","name":"github.com/prometheus/procfs","version":"v0.16.1","cpe":"cpe:2.3:a:prometheus:procfs:v0.16.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/procfs@v0.16.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hZ15bTNuirocR6u0JZ6BAHHmwS1p8B4P6MRqxtzMyRg="}]},{"bom-ref":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2?package-id=71c58913568eda11","type":"library","name":"github.com/santhosh-tekuri/jsonschema/v6","version":"v6.0.2","cpe":"cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ="}]},{"bom-ref":"pkg:golang/github.com/shirou/gopsutil/v4@v4.26.4?package-id=e81cddf47579b64f","type":"library","name":"github.com/shirou/gopsutil/v4","version":"v4.26.4","cpe":"cpe:2.3:a:shirou:gopsutil\\/v4:v4.26.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shirou/gopsutil/v4@v4.26.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:B4SXVbcwTyrocPHEmWBC4uCYr4Xcu3MK1TXqbprAOWY="}]},{"bom-ref":"pkg:golang/github.com/spf13/cast@v1.7.1?package-id=1d03af1e01592063","type":"library","name":"github.com/spf13/cast","version":"v1.7.1","cpe":"cpe:2.3:a:spf13:cast:v1.7.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cast@v1.7.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cuNEagBQEHWN1FnbGEjCXL2szYEXqfJPbP2HNUaca9Y="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=aaf4307e8bf5eb4c","type":"library","name":"github.com/spf13/cobra","version":"v1.10.2","cpe":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.9?package-id=e5467bd9f58d3619","type":"library","name":"github.com/spf13/pflag","version":"v1.0.9","cpe":"cpe:2.3:a:spf13:pflag:v1.0.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9exaQaMOCwffKiiiYk6/BndUBv+iRViNW+4lEMi0PvY="}]},{"bom-ref":"pkg:golang/github.com/tklauser/go-sysconf@v0.3.16?package-id=3b8c7c8facbf6d0f","type":"library","name":"github.com/tklauser/go-sysconf","version":"v0.3.16","cpe":"cpe:2.3:a:tklauser:go-sysconf:v0.3.16:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tklauser/go-sysconf@v0.3.16","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tklauser:go_sysconf:v0.3.16:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:frioLaCQSsF5Cy1jgRBrzr6t502KIIwQ0MArYICU0nA="}]},{"bom-ref":"pkg:golang/github.com/tklauser/numcpus@v0.11.0?package-id=1d7cd77b1fed047c","type":"library","name":"github.com/tklauser/numcpus","version":"v0.11.0","cpe":"cpe:2.3:a:tklauser:numcpus:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tklauser/numcpus@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nSTwhKH5e1dMNsCdVBukSZrURJRoHbSEQjdEbY+9RXw="}]},{"bom-ref":"pkg:golang/github.com/yosida95/uritemplate/v3@v3.0.2?package-id=ba0d2aab72f03917","type":"library","name":"github.com/yosida95/uritemplate/v3","version":"v3.0.2","cpe":"cpe:2.3:a:yosida95:uritemplate\\/v3:v3.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yosida95/uritemplate/v3@v3.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ed3Oyj9yrmi9087+NczuL5BwkIc4wvTb5zIM+UJPGz4="}]},{"bom-ref":"pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4?package-id=fcec6f9de843b76d","type":"library","name":"github.com/yusufpapurcu/wmi","version":"v1.2.4","cpe":"cpe:2.3:a:yusufpapurcu:wmi:v1.2.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v2@v2.4.2?package-id=0cff93035da59862","type":"library","name":"go.yaml.in/yaml/v2","version":"v2.4.2","cpe":"cpe:2.3:a:yaml:v2:v2.4.2:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v2@v2.4.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.48.0?package-id=eadc21bb8485cdef","type":"library","name":"golang.org/x/crypto","version":"v0.48.0","cpe":"cpe:2.3:a:go:ssh:v0.48.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.48.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.51.0?package-id=ccbf5e4e94721aee","type":"library","name":"golang.org/x/net","version":"v0.51.0","cpe":"cpe:2.3:a:golang:networking:v0.51.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.51.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.20.0?package-id=8b57e2b2325ba1d6","type":"library","name":"golang.org/x/sync","version":"v0.20.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.20.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.20.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.42.0?package-id=2e73d546efc74130","type":"library","name":"golang.org/x/sys","version":"v0.42.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.42.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.42.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.34.0?package-id=521b72d74cf73959","type":"library","name":"golang.org/x/text","version":"v0.34.0","cpe":"cpe:2.3:a:golang:text:v0.34.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.34.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk="}]},{"bom-ref":"pkg:github/golangci/golangci-lint-action@v7?package-id=ffa3a5fd909fe6e7","type":"library","name":"golangci/golangci-lint-action","version":"v7","cpe":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci-lint-action:v7:*:*:*:*:*:*:*","purl":"pkg:github/golangci/golangci-lint-action@v7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci_lint_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci-lint-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci_lint_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci-lint-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci_lint_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci-lint-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci_lint_action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci-lint-action:v7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci_lint_action:v7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yml"}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260226221140-a57be14db171?package-id=db023323cfa65b85","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20260226221140-a57be14db171","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260226221140-a57be14db171:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260226221140-a57be14db171","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ggcbiqK8WWh6l1dnltU4BgWGIGo+EVYxCaAPih/zQXQ="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.81.0?package-id=62615b2b713e5306","type":"library","name":"google.golang.org/grpc","version":"v1.81.0","cpe":"cpe:2.3:a:google:grpc:v1.81.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.81.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W3G9N3KQf3BU+YuCtGKJk0CmxQNbAISICD/9AORxLIw="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.11?package-id=a5d1f93f82f24684","type":"library","name":"google.golang.org/protobuf","version":"v1.36.11","cpe":"cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=716c668b92999095","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:github/sigstore/cosign-installer@v3?package-id=1d10efdc9c96f5c6","type":"library","name":"sigstore/cosign-installer","version":"v3","cpe":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v3:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/cosign-installer@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0?package-id=580b90d9734e407b#.github/workflows/generator_generic_slsa3.yml","type":"library","name":"slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml","version":"v2.1.0","cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0#.github/workflows/generator_generic_slsa3.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yml"}]},{"bom-ref":"7561d461b00ff11d","type":"file","name":"/workspace/.github/workflows/ci.yml","hashes":[{"alg":"SHA-1","content":"819b21084549441e1ae700f919650610e379b283"},{"alg":"SHA-256","content":"cd54e3b59bf2d393b24ebaa09733231e1d922d667a7c5ccdb2c5d662347acf28"}]},{"bom-ref":"364965c5ef0eaba7","type":"file","name":"/workspace/.github/workflows/ee.yml","hashes":[{"alg":"SHA-1","content":"954644191eadabc3c81e6532760c6a4877b4c9f7"},{"alg":"SHA-256","content":"15e0819de7672eba8fd949bd7a939cf222152478cc2780a4d5b82f7a6f785f55"}]},{"bom-ref":"cc210d8a1a5f5704","type":"file","name":"/workspace/.github/workflows/release.yml","hashes":[{"alg":"SHA-1","content":"009d1aa43166158db33addb57bb0eae12266fff6"},{"alg":"SHA-256","content":"9cc0e63e4b5b16bb847cb59ce1b153f114c4b74ccffc2af683f2cc7c673749b0"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/workspace/go.mod","hashes":[{"alg":"SHA-1","content":"ebbaa4441e8b363264e689b7a8f493587e8e12d7"},{"alg":"SHA-256","content":"c50a8d20996b12f34f569d60834d483397dd8daf8ca4d9c2d01dae7393008be5"}]}]}