{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:247f4cba-561b-4c70-8226-6d9f47e09296","version":1,"metadata":{"timestamp":"2026-06-22T15:20:30Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.45.1"}]},"component":{"bom-ref":"8dcbd803f369ec9f","type":"file","name":"/workspace"}},"components":[{"bom-ref":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5?package-id=e1d6707d7364d472","type":"library","name":"actions/checkout","version":"34e114876b0b11c390a56381ad16ebd13914f8d5","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:34e114876b0b11c390a56381ad16ebd13914f8d5:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5?package-id=f2935e0acccc1d6f","type":"library","name":"actions/checkout","version":"34e114876b0b11c390a56381ad16ebd13914f8d5","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:34e114876b0b11c390a56381ad16ebd13914f8d5:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5?package-id=e9250aa62c1cea34","type":"library","name":"actions/checkout","version":"34e114876b0b11c390a56381ad16ebd13914f8d5","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:34e114876b0b11c390a56381ad16ebd13914f8d5:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/test-backends.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5?package-id=edb6e1af08ca7185","type":"library","name":"actions/checkout","version":"34e114876b0b11c390a56381ad16ebd13914f8d5","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:34e114876b0b11c390a56381ad16ebd13914f8d5:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/test-packages.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5?package-id=e17aa0a9ebc99618","type":"library","name":"actions/checkout","version":"34e114876b0b11c390a56381ad16ebd13914f8d5","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:34e114876b0b11c390a56381ad16ebd13914f8d5:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/version-check.yaml"}]},{"bom-ref":"pkg:github/actions/deploy-pages@v5?package-id=a21ef74e2ffc7b97","type":"library","name":"actions/deploy-pages","version":"v5","cpe":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy-pages:v5:*:*:*:*:*:*:*","purl":"pkg:github/actions/deploy-pages@v5","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy-pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy-pages:v5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/deploy:actions\\/deploy_pages:v5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093?package-id=49b46f6e624a4438","type":"library","name":"actions/download-artifact","version":"d3f86a106a0bac45b974a628896c90dbdf5c8093","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093?package-id=db0ab13df8e7a40c","type":"library","name":"actions/download-artifact","version":"d3f86a106a0bac45b974a628896c90dbdf5c8093","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093?package-id=c483aa40edc37f19","type":"library","name":"actions/download-artifact","version":"d3f86a106a0bac45b974a628896c90dbdf5c8093","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-backends.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093?package-id=f4dc27d86fa35120","type":"library","name":"actions/download-artifact","version":"d3f86a106a0bac45b974a628896c90dbdf5c8093","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:d3f86a106a0bac45b974a628896c90dbdf5c8093:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-packages.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02?package-id=3c30a3195181118a","type":"library","name":"actions/upload-artifact","version":"ea165f8d65b6e75b540449e92b4886f43607fa02","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02?package-id=f2f8ad62cbf44feb","type":"library","name":"actions/upload-artifact","version":"ea165f8d65b6e75b540449e92b4886f43607fa02","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02?package-id=34b71c3e4d4b4187","type":"library","name":"actions/upload-artifact","version":"ea165f8d65b6e75b540449e92b4886f43607fa02","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-backends.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02?package-id=d416b24829ec17db","type":"library","name":"actions/upload-artifact","version":"ea165f8d65b6e75b540449e92b4886f43607fa02","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/test-packages.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02?package-id=e9fc419758c5bb63","type":"library","name":"actions/upload-artifact","version":"ea165f8d65b6e75b540449e92b4886f43607fa02","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:ea165f8d65b6e75b540449e92b4886f43607fa02:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/version-check.yaml"}]},{"bom-ref":"pkg:github/actions/upload-pages-artifact@v3?package-id=4275ec10aa5185d5","type":"library","name":"actions/upload-pages-artifact","version":"v3","cpe":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-pages-artifact@v3","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-pages-artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_pages_artifact:v3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd?package-id=de08941e3fc2737f","type":"library","name":"ncipollo/release-action","version":"339a81892b84b4eeb0f6e744e4574d79d0d9b8dd","cpe":"cpe:2.3:a:ncipollo\\/release-action:ncipollo\\/release-action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*","purl":"pkg:github/ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release-action:ncipollo\\/release_action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release_action:ncipollo\\/release-action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release_action:ncipollo\\/release_action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release:ncipollo\\/release-action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ncipollo\\/release:ncipollo\\/release_action:339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac?package-id=a1a8910199fc0fd1","type":"library","name":"sigstore/cosign-installer","version":"398d4b0eeef1380460a10c8013a76f728fb906ac","cpe":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:398d4b0eeef1380460a10c8013a76f728fb906ac:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:398d4b0eeef1380460a10c8013a76f728fb906ac:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:398d4b0eeef1380460a10c8013a76f728fb906ac:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:398d4b0eeef1380460a10c8013a76f728fb906ac:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:398d4b0eeef1380460a10c8013a76f728fb906ac:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:398d4b0eeef1380460a10c8013a76f728fb906ac:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0?package-id=0f738f4be51b33a0#.github/workflows/generator_generic_slsa3.yml","type":"library","name":"slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml","version":"v2.1.0","cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0#.github/workflows/generator_generic_slsa3.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa-framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa_framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/release.yaml"}]},{"bom-ref":"b716bc1981a7ad37","type":"file","name":"/workspace/.github/workflows/ci.yaml","hashes":[{"alg":"SHA-1","content":"a6afdbb0e06280a0b5c43d8a42847048a4f72a86"},{"alg":"SHA-256","content":"b2182de930ede021588bbb38a9d373a18f0b84aa36442177a3881d8c9a8d03fa"}]},{"bom-ref":"3dfd1ac2074a5862","type":"file","name":"/workspace/.github/workflows/release.yaml","hashes":[{"alg":"SHA-1","content":"bf1e2b9bca40525c97e40143cf3c5f6af0742ad5"},{"alg":"SHA-256","content":"b0aca7ed4f354e59c8e8ec09f604325665410c441e5e6fab9dcf04625d90735c"}]},{"bom-ref":"03bb22dff812cd63","type":"file","name":"/workspace/.github/workflows/test-backends.yaml","hashes":[{"alg":"SHA-1","content":"ace14a4632314ab3164ee1e4d89c546fbd4f540f"},{"alg":"SHA-256","content":"402db5db671fb4341bf9d032f58cebfdac9fe6ee6f56cde4805bd72b0bd66538"}]},{"bom-ref":"42050edfff68fd49","type":"file","name":"/workspace/.github/workflows/test-packages.yaml","hashes":[{"alg":"SHA-1","content":"904d4e05364cb6f86cb5ccf78a0559ff0e7b45fe"},{"alg":"SHA-256","content":"d68e331f64f4a136f6582132998f2a3c9f4634d3c355753ab7fee04337854de5"}]},{"bom-ref":"2430a87a124d771a","type":"file","name":"/workspace/.github/workflows/version-check.yaml","hashes":[{"alg":"SHA-1","content":"ca53d300864656740be15fc56f028b55b03f6be7"},{"alg":"SHA-256","content":"48ad510ab8d26a19e99f53d5b1ac19be57092db88056f340101d23828b852be3"}]}]}