{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-09-23T09:51:43Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "buildah-1.45.1-1.hum1", "documentNamespace": "https://fedoraproject.org/buildah-1.45.1-1.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "buildah", "versionInfo": "1.45.1:1.45.1-1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-1.45.1-1.hum1.src.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah@1.45.1-1.hum1?arch=src&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "9ab05e27640346162b6218e3a17e22df2aef1b0229bc4b7fb4ca2b28ef44afd0"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b'\\xd1:\\x93Px\\x1a\\r\\xeb).\\xc7\\x8b\\xb39\\xdf\\x1f'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sha256header: b52a0d39b02c9d169343d91b14664abb57cb958bfc4d36d1198cdc8e4f5bc2cc"}]}, {"SPDXID": "SPDXRef-aarch64-buildah", "name": "buildah", "versionInfo": "1.45.1:1.45.1-1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-1.45.1-1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah@1.45.1-1.hum1?arch=aarch64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "c63ca5c38669830e0e94aab9ba9f9d5ebad74864e9b78a5279b5637a3981191d"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b'\\xc5G\\xd0\\xa3\\xe3\\x95[\\xac\\xa3\\xcfk\\x99\\x8f\\xf4\\x9f\\x0e'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sha256header: 56d1477c676b4b57828de0e4af84a72aa84cac1400e0afc0ff9c7e1c38fb00d9"}]}, {"SPDXID": "SPDXRef-x86-64-buildah", "name": "buildah", "versionInfo": "1.45.1:1.45.1-1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-1.45.1-1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah@1.45.1-1.hum1?arch=x86_64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "50422e39ab958ec4c1dd58494e1de9782cf1f7f8c3af97fdfd85e12ac07155f6"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b'{@\\xc9\\x19\\xb8Wc\\x8f\\xf5\\xac\\x87\\xaa\\xe6\\x1c\\xa0?'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sha256header: 0547fa76a2ef073c013b220e1132a3ecb760611dacb8809053d5f7b727a096b4"}]}, {"SPDXID": "SPDXRef-aarch64-buildah-debuginfo", "name": "buildah-debuginfo", "versionInfo": "1.45.1:1.45.1-1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debuginfo-1.45.1-1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debuginfo@1.45.1-1.hum1?arch=aarch64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "4c48b10abeff9003eb313b33ac4a2c8d913630e008cd96e7bae005681e5a9bd1"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b'\\xd0c\\xc1\\x8aw3\\x1b\\xbc\\x11\\xdb\\x97RbU\\x98\\x19'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sha256header: 4117e94b12fb61486d413dca19338c8c19e2e4202930758b02e5200e912a8e59"}]}, {"SPDXID": "SPDXRef-x86-64-buildah-debuginfo", "name": "buildah-debuginfo", "versionInfo": "1.45.1:1.45.1-1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debuginfo-1.45.1-1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debuginfo@1.45.1-1.hum1?arch=x86_64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "3b7227a6fd2fe097899df3c216f1d7dc8d907086f75f57836466bf451b53baa9"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b'I\\xcf\\x0c\\xe8G\\xdf\\xff\\xd6\\x8fw\\x11j\\xf9(\\n\\xd1'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sha256header: c54378d49eba5f6c77e1f01744b6a56bd5ed584206574623324df1d1b46fc9e2"}]}, {"SPDXID": "SPDXRef-aarch64-buildah-debugsource", "name": "buildah-debugsource", "versionInfo": "1.45.1:1.45.1-1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debugsource-1.45.1-1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debugsource@1.45.1-1.hum1?arch=aarch64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "21d86d8846739d94ceb44b3e9a35db4207648b06d513aed50ccb374f98555b5e"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b'\\x0e\\x87\\x95Bq\\xdd\"\\xfb4\\x82`\\x18\\xe5\\x92-\\xcf'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sha256header: 3d8a9aa9d33d13453867f16e5b1ceaa55d63dd2da90759d825aca07994e42f1d"}]}, {"SPDXID": "SPDXRef-x86-64-buildah-debugsource", "name": "buildah-debugsource", "versionInfo": "1.45.1:1.45.1-1.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "buildah-debugsource-1.45.1-1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/buildah-debugsource@1.45.1-1.hum1?arch=x86_64&epoch=2"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "a96dab6ce913e07a5bbfd2ab45c89c5ebe0ebbc361a87349aeb04207197e3095"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b'\\xf8/N\\xed\\x05\\xa5n\\x81\\x97\\xa7\\xadm]>\\xcf\\x80'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sha256header: 1c0c676c76b7a17be26e87cd3ecee0fda716071330f7f986a373b0d5f6654384"}]}, {"SPDXID": "SPDXRef-Source0", "name": "v1.45.1", "versionInfo": "unknown", "packageFileName": "v1.45.1.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/buildah/v1.45.1.tar.gz/sha512/e3fe336421e20938fb486a06f0321729c22e3b457ae9c9ec81c6ffeb0bdc85470bfe42caba152e383c1fe9cd2625eea90e9c593726f384c2fbe4bf64de3a8ddd/v1.45.1.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "b48e701c75a2bd30dfe63fda5f886c8a7e0c3dd17b6aa0feb74cc93099254ca4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/v1.45.1?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/buildah/v1.45.1.tar.gz/sha512/e3fe336421e20938fb486a06f0321729c22e3b457ae9c9ec81c6ffeb0bdc85470bfe42caba152e383c1fe9cd2625eea90e9c593726f384c2fbe4bf64de3a8ddd/v1.45.1.tar.gz&checksum=sha512:e3fe336421e20938fb486a06f0321729c22e3b457ae9c9ec81c6ffeb0bdc85470bfe42caba152e383c1fe9cd2625eea90e9c593726f384c2fbe4bf64de3a8ddd"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "v1.45.1", "versionInfo": "unknown", "downloadLocation": "https://github.com/containers/buildah/archive/v1.45.1.tar.gz", "packageFileName": "v1.45.1.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "b48e701c75a2bd30dfe63fda5f886c8a7e0c3dd17b6aa0feb74cc93099254ca4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/v1.45.1?download_url=https://github.com/containers/buildah/archive/v1.45.1.tar.gz&checksum=sha256:b48e701c75a2bd30dfe63fda5f886c8a7e0c3dd17b6aa0feb74cc93099254ca4"}]}, {"SPDXID": "SPDXRef-Buildroot-buildah-aarch64", "name": "buildah-buildroot-aarch64", "versionInfo": "da52d037", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-aarch64", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/add-determinism-0.7.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d9f312587e782399c5594fca818bdf4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-aarch64", "name": "alternatives", "versionInfo": "1.33-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/alternatives-1.33-5.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e4ab56446a14839dd206920bb41d00b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-aarch64", "name": "annobin-docs", "versionInfo": "13.29-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-docs-13.29-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1b0f479d4be43a2cf59fed3ac49e0d90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.29-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64", "name": "annobin-plugin-gcc", "versionInfo": "13.29-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-plugin-gcc-13.29-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: afd0850fc403e6b8b6dfaedd4f60adc9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.29-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-aarch64", "name": "audit-libs", "versionInfo": "4.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/audit-libs-4.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5fcbd6dfeb5c21d3f940c607eff1840b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-libs-aarch64", "name": "authselect-libs", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/authselect-libs-1.7.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 631c890c1a15d0f97f116b429c6a18a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect-libs@1.7.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-aarch64", "name": "authselect", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/authselect-1.7.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e0d009b570669dc61ef3b11b022ce005"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect@1.7.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-aarch64", "name": "bash", "versionInfo": "5.3.15-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bash-5.3.15-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6d0b1dcae662059f95d77fb7a4432e09"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-aarch64", "name": "binutils", "versionInfo": "2.46.1-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/binutils-2.46.1-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9d650b254a6b2aafc48494b30fd47b7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-devel-aarch64", "name": "btrfs-progs-devel", "versionInfo": "7.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/btrfs-progs-devel-7.1-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only and LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 57e3dc7e49b7e5ade0227e02e45fe4c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs-devel@7.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-aarch64", "name": "btrfs-progs", "versionInfo": "7.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/btrfs-progs-7.1-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1cfb06f44d4241cfcda590b0ea6afd63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs@7.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-libs-1.0.8-24.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7fd1c630b28fc944724af0cb3fa6f317"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-aarch64", "name": "bzip2", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-1.0.8-24.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 39a87169215d85cf3a6b40e1b271f4ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-aarch64", "name": "ca-certificates", "versionInfo": "2025.2.80_v9.0.304-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/ca-certificates-2025.2.80_v9.0.304-9.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8280885c60ebda1b9261bdb611c6bf85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.304-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-filesystem-aarch64", "name": "cmake-filesystem", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cmake-filesystem-4.3.0-5.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 41d7770f5468842ebd9ce769ba9fa556"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-filesystem@4.3.0-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cmake-srpm-macros-4.3.0-5.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f4f531a89be4477f0d05fc8fbf71ce81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-aarch64", "name": "coreutils-common", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-common-9.11-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 46d04a1910f4d92b7829170107f51912"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.11-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-aarch64", "name": "coreutils", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-9.11-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8c97de8b42b97b6f82e5eff4ec030e2c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.11-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-aarch64", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpio-2.15-10.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 07b3f2016a23bdb65e5d7569d8eb6579"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-aarch64", "name": "cpp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpp-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9d95edb60a2529884d7bd4ab48daa023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cracklib-aarch64", "name": "cracklib", "versionInfo": "2.10.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cracklib-2.10.3-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5f8d1575f03d30c0a49ec6934c619aa9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cracklib@2.10.3-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64", "name": "crypto-policies-config-default", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-config-default-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 879e05f9fee2fffc9b0863b62ee0784c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-aarch64", "name": "crypto-policies", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 01283c07f63751da93fa1cfe352e124f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-aarch64", "name": "curl", "versionInfo": "8.22.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/curl-8.22.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 84278fbf8f8b99670418954e342ca87a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cyrus-sasl-lib-2.1.28-37.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b2d19a64f1d90955bbb1d05a2be205a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-aarch64", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/debugedit-5.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 40b46b2f221c89c645674502b8647f5c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-devel-aarch64", "name": "device-mapper-devel", "versionInfo": "1.02.216-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/device-mapper-devel-1.02.216-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0e7bd92791df7adf48251a96f0a4e02c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-devel@1.02.216-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-libs-aarch64", "name": "device-mapper-libs", "versionInfo": "1.02.216-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/device-mapper-libs-1.02.216-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a59c26b015684f15bf9af7f2812f8989"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-libs@1.02.216-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-aarch64", "name": "device-mapper", "versionInfo": "1.02.216-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/device-mapper-1.02.216-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c97b89093341de1f73cdd918faf44e6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper@1.02.216-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-aarch64", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/diffutils-3.12-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3e8092a3846ac4f1445fd7f52255b426"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-aarch64", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/dwz-0.17-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 445c73aa30d8146e1f426e64f5354e1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-e2fsprogs-libs-aarch64", "name": "e2fsprogs-libs", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/e2fsprogs-libs-1.47.4-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND LGPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 82203817faf1bd8afe73ecf783991c3c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/e2fsprogs-libs@1.47.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-aarch64", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/ed-1.22.6-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 443b9d1a7a55635cb2f68e241fc9bada"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-debuginfod-client-0.196-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cfc2bdba19927cc543883cc3d57d37f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libelf-0.196-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6de1c98d7c9a7ca307f85ef993d51f32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libs-0.196-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4ad304ad3a6883f5f3f727beb95b9f59"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-aarch64", "name": "elfutils", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-0.196-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9cb367b3921cc31cf241da97ae144d05"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-aarch64", "name": "expat", "versionInfo": "2.8.4-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/expat-2.8.4-0.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9c3b1ada515b8caf365ee16b5e4d18b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.4-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-aarch64", "name": "file-libs", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-libs-5.48-3.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b393354b405cc60d1c6adae387c6a49d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-srpm-macros-3.18-59.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 70275b951d6f88ee50376b509b62df87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-aarch64", "name": "filesystem", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-3.18-59.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 431320663cae44cfc7d899b58f0c3ef7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-aarch64", "name": "file", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-5.48-3.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c815d32949a275c0c3bf2edc0357aec5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-aarch64", "name": "findutils", "versionInfo": "1:4.11.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/findutils-4.11.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 22d3b0f3b1038e87776ed0fee3c0b038"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-aarch64", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gawk-5.4.1-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d586bc40c1d6132f2694072a5718a1f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-plugin-annobin-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 84ae034d7fab2683e5bd043ba6669abc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-aarch64", "name": "gcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6fbe7ebd5f02fae40ca4eb48398b11cb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64", "name": "gdb-minimal", "versionInfo": "17.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdb-minimal-17.2-4.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 63e1f2402de9298e20f42b4719291cf3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64", "name": "gdbm-libs", "versionInfo": "1:1.23-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdbm-libs-1.23-12.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c145b4ceb3531f48937797cb9ea3f3aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.23-12.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-git-core-aarch64", "name": "git-core", "versionInfo": "2.55.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/git-core-2.55.0-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7e01dd42ccb6eac8da3087ed69aa3700"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/git-core@2.55.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-devel-aarch64", "name": "glib2-devel", "versionInfo": "2.89.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glib2-devel-2.89.3-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 862111ef9d98a91969a649f8e8687d73"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2-devel@2.89.3-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-aarch64", "name": "glib2", "versionInfo": "2.89.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glib2-2.89.3-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3715964d870bd10a0d594860c9de66a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2@2.89.3-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-aarch64", "name": "glibc-common", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-common-2.43-8.6.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fc4828da9c8a82365ba1bce82da046b2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-8.6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-aarch64", "name": "glibc-devel", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-devel-2.43-8.6.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6573dd0a93a33037c8dece69e258bbd7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-8.6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64", "name": "glibc-gconv-extra", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-gconv-extra-2.43-8.6.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: df9cd29d77841d65f2d2971c54b45480"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-8.6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-minimal-langpack-2.43-8.6.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cb40aa2f39d33a95278ca4ef0189bd4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-static-aarch64", "name": "glibc-static", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-static-2.43-8.6.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b6f5b0d07f02fe6a75d82f210690367b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-static@2.43-8.6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-aarch64", "name": "glibc", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-2.43-8.6.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3a44ef46e8bfdf3ce6012a20d19cc797"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-8.6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-aarch64", "name": "gmp", "versionInfo": "1:6.3.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gmp-6.3.0-6.hum1.aarch64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f8861e8a15f175644835f0fda3b16f1f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64", "name": "gnulib-l10n", "versionInfo": "20241231-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnulib-l10n-20241231-4.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8299247dcb1565848a3336c23caa59b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-dirmngr-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b5d12c26791ad8e0eab605f328a8be45"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpg-agent-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 49437a74b28a51ffc405de286c72ecd6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpgconf-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 95274be421bbcb8e35926be89a8e13f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-keyboxd-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a7334bd8566c4732f6e1c07e1471345e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-verify-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d7242a18b8b1f59935ad16bc77cdcab3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-aarch64", "name": "gnupg2", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-2.4.9-18.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6410ea1db8191d13c8f5a4cabc8a4673"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-aarch64", "name": "gnutls", "versionInfo": "3.8.13-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnutls-3.8.13-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: adbf454d1690ef7b7cb08f14ee5b104b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-aarch64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-filesystem-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 21c344b50ec791073eecf2f78130e36d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-rpm-macros-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1cca57be53ff370d84ba6f32712ca1e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64", "name": "golang1.27-bin", "versionInfo": "1.27.1-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-bin-1.27.1-0.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f6753ea512ec66277958be2d23ec9b32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.1-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64", "name": "golang1.27-src", "versionInfo": "1.27.1-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-src-1.27.1-0.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5a0b4895780984805154940da35f66f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.1-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-aarch64", "name": "golang1.27", "versionInfo": "1.27.1-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-1.27.1-0.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3261c25e3735438fc9d8cae6c71bd86e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.1-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-aarch64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golist-0.11.0-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b92a6bbb82038b2e3078acfb1c3f4220"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-devel-aarch64", "name": "gpgme-devel", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgme-devel-2.0.1-6.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6be3ad9a179582f7b2ecce68b0f8a622"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme-devel@2.0.1-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-aarch64", "name": "gpgme", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgme-2.0.1-6.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d420b96f9b73077ffb68d922382fe518"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme@2.0.1-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-aarch64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-aarch64", "name": "grep", "versionInfo": "3.12-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/grep-3.12-4.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1ac4ff9c9efdc89891ac8af36379267b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-aarch64", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gzip-1.14-4.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 60b31a6471b6943af38248e51ca60f91"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-gpg-keys-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 293719e921051d2c474acc222cc0955d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64", "name": "hummingbird-release", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-release-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4443e83eba871e4e77290c97065ffa02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64", "name": "hummingbird-repos", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-repos-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c889167c7b3cca62bb596d3cfbd63b6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/i/ima-evm-utils-libs-1.6.2-12.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: af22bce02abb1a5baffcfd830def648f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-aarch64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/i/info-7.2-9.fc44.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ff57ae9e674b526c3d40eebc6a75d7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-aarch64", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/jansson-2.14-5.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: db418e1b673911b66cc09a248ffa0c64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-aarch64", "name": "json-c", "versionInfo": "0.18-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/json-c-0.18-9.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1690c6dc840c00abcb160ef938d496ba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-aarch64", "name": "kernel-headers", "versionInfo": "7.2.0-61.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-headers-7.2.0-61.hum1.aarch64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2d08f0e67b9f8c09d4facbf792b10629"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/keyutils-libs-1.6.3-8.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c88b58dcb9c261fe5f5375d0c370df8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-aarch64", "name": "krb5-libs", "versionInfo": "1.22.2-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/krb5-libs-1.22.2-9.1.hum1.aarch64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c79e09c5771c9ad2d7b7e915bc31dc87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-less-aarch64", "name": "less", "versionInfo": "704-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/less-704-5.hum1.aarch64.rpm", "licenseDeclared": "(GPL-3.0-only OR BSD-2-Clause) AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d1328356a44c719992dc7d19b644bd91"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/less@704-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-aarch64", "name": "libacl", "versionInfo": "2.4.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libacl-2.4.0-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ffae68175fa17ef38ad2262456b87601"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-aarch64", "name": "libarchive", "versionInfo": "3.8.8-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libarchive-3.8.8-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 54f409792da24edf582cb5811aa7abcf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.8-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-aarch64", "name": "libasan", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libasan-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bb016c9de6aab3c51be612e803754d21"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-devel-aarch64", "name": "libassuan-devel", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libassuan-devel-2.5.7-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1dfc3a206c96ccc860abc092583a99cc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan-devel@2.5.7-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-aarch64", "name": "libassuan", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libassuan-2.5.7-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b6f7844b3c2851c5c6602813fe2d91d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-aarch64", "name": "libatomic", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libatomic-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 99f877bc801efaf6974dd05385b85c5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-aarch64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libattr-2.6.0-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d1a9e2272f66b2470ddf103dccdbaa58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-devel-aarch64", "name": "libblkid-devel", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libblkid-devel-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e50092c608b3c8288cc38d1d59911e7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid-devel@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-aarch64", "name": "libblkid", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libblkid-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 437bf12dc887f8a84ebe05316e465407"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-aarch64", "name": "libbrotli", "versionInfo": "1.2.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbrotli-1.2.0-6.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: feace71d1f825f00ceb8e304256cc238"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfsutil-aarch64", "name": "libbtrfsutil", "versionInfo": "7.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbtrfsutil-7.1-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a2802a61ca7793eaf7a76446e0e119df"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfsutil@7.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfs-aarch64", "name": "libbtrfs", "versionInfo": "7.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbtrfs-7.1-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9de87c39c00b67e0ae4e23bd6f97efc1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfs@7.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-aarch64", "name": "libcap-ng", "versionInfo": "0.9.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-ng-0.9.5-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 826e0a88f0eee5a02d307049cb37b230"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.5-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-aarch64", "name": "libcap", "versionInfo": "2.78-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-2.78-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8d8acfbe454de54f75616713b3d68f42"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-aarch64", "name": "libcbor", "versionInfo": "0.14.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcbor-0.14.0-3.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3f1118a94a793d1a74a27b8c87ad07c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-aarch64", "name": "libcom_err", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcom_err-1.47.4-2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 69716f326f708d5cae9228784221bb99"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-aarch64", "name": "libcurl", "versionInfo": "8.22.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcurl-8.22.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3aacae6c39ff4209f7bbf58b030fe8b2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-aarch64", "name": "libeconf", "versionInfo": "0.7.9-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libeconf-0.7.9-4.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b157f37cdf2c8714f7b6b258dff6a939"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libedit-aarch64", "name": "libedit", "versionInfo": "3.1-60.20260512cvs.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libedit-3.1-60.20260512cvs.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6b2fe49fd76923fec91d3e55645a61d9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libedit@3.1-60.20260512cvs.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-aarch64", "name": "libevent", "versionInfo": "2.1.13-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libevent-2.1.13-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: aff34d4fcfe91c9cccec6528a2597c5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-aarch64", "name": "libfdisk", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfdisk-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: dcda083f37923fb8b6be8825ef5aebb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-devel-aarch64", "name": "libffi-devel", "versionInfo": "3.5.2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libffi-devel-3.5.2-3.hum1.aarch64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 238619c774acfe5b67679cacca920a58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi-devel@3.5.2-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-aarch64", "name": "libffi", "versionInfo": "3.5.2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libffi-3.5.2-3.hum1.aarch64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4a825feff82770092ab2a00dfa4465bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.5.2-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-aarch64", "name": "libfido2", "versionInfo": "1.17.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfido2-1.17.0-5.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6e5b0f8fb08cbe79553c82858d3ac012"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-aarch64", "name": "libfsverity", "versionInfo": "1.7-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfsverity-1.7-4.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4baa2a2ffdbb35138f7a8bc51df79783"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-aarch64", "name": "libgcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcc-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8df80933a93d9e89ba8c592eb40f9e00"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-aarch64", "name": "libgcrypt", "versionInfo": "1.12.2-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcrypt-1.12.2-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ffbd5261b4b03103e1b4e81c37989ae4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.2-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-aarch64", "name": "libgomp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgomp-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b045f80388fe16857a82f76bad2f7296"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-devel-aarch64", "name": "libgpg-error-devel", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgpg-error-devel-1.61-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 963c953f2cdc95b94d76ac13f3f68809"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error-devel@1.61-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-aarch64", "name": "libgpg-error", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgpg-error-1.61-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fb9e2748057d9db6b8987d4a629f5171"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-aarch64", "name": "libidn2", "versionInfo": "2.3.8-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libidn2-2.3.8-4.hum1.aarch64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 93bbb44cb7d7f03d2246685a9a3455bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-aarch64", "name": "libksba", "versionInfo": "1.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libksba-1.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 84a1c2066a512f1f15fb91bbe6c7c8f2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-aarch64", "name": "liblastlog2", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/liblastlog2-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3f6eb70ce2a421f0e2b877ced40ac699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-devel-aarch64", "name": "libmount-devel", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmount-devel-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f21983ac6429cd74ee88904ba01d0c96"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount-devel@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-aarch64", "name": "libmount", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmount-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fe19cb137949909f87b4b98d8f6257ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-aarch64", "name": "libmpc", "versionInfo": "1.4.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmpc-1.4.1-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7e6fc6a8383754b2471af3a3c1c03e8d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-aarch64", "name": "libnghttp2", "versionInfo": "1.69.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp2-1.69.0-5.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1ab52498fa2230cf583012d783bb9aba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-aarch64", "name": "libnghttp3", "versionInfo": "1.18.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp3-1.18.0-1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9e9cf61d1c3502dfe08c2f443ee87d11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnsl2-aarch64", "name": "libnsl2", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnsl2-2.0.1-6.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 229c57bcea84e22a544bf090b5a761d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnsl2@2.0.1-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-aarch64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/l/libpfm-4.13.0-20.fc44.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f67c59ebdcc2d13a01308d6b1d6e536c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-aarch64", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpkgconf-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c03d262f0b15195429879620b129c65f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-aarch64", "name": "libpsl", "versionInfo": "0.23.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpsl-0.23.1-1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 595167c66d294b5d2ba32e8c1541ec21"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.1-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpwquality-aarch64", "name": "libpwquality", "versionInfo": "1.4.5-18.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpwquality-1.4.5-18.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6b8eb3e2bd355f1766d5b63a625e98f6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpwquality@1.4.5-18.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-devel-aarch64", "name": "libseccomp-devel", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libseccomp-devel-2.6.1-3.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 302294af7ee29cdbcf9cdb44825e147a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-devel@2.6.1-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-static-aarch64", "name": "libseccomp-static", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libseccomp-static-2.6.1-3.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9f62a8f1f05a5dc8721055fb4dc14fe4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-static@2.6.1-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-aarch64", "name": "libseccomp", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libseccomp-2.6.1-3.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2ff7c21c02cfd14fef01bb71d156f205"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp@2.6.1-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-devel-aarch64", "name": "libselinux-devel", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-devel-3.11-5.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 96fd4f1f36de07f11653fba57d8279e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-devel@3.11-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64", "name": "libselinux-utils", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-utils-3.11-5.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8ef39775abf1334162c66be6657feeb5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-aarch64", "name": "libselinux", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-3.11-5.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e920b59d5cf7a5f1d8ba897151836378"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-aarch64", "name": "libsemanage", "versionInfo": "3.11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsemanage-3.11-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9418a34313eb464bd9a0d346b7a22cbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-devel-aarch64", "name": "libsepol-devel", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsepol-devel-3.11-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fcafc4db14efb36540b3320904ae32f2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol-devel@3.11-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-aarch64", "name": "libsepol", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsepol-3.11-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3e127d9be9abeea7b4a4683e08d8e432"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-aarch64", "name": "libsmartcols", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsmartcols-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9e89523004ba3c31f77d0283f76b41ef"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-aarch64", "name": "libssh-config", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-config-0.12.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d450c1e2923e7f1f312fde84f85e7f4c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-aarch64", "name": "libssh", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-0.12.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c4776d701fd6f0d7890799c71cf2bf3d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-aarch64", "name": "libstdc++", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libstdc++-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5612a55cdc752306597c23c4f6e48b0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-aarch64", "name": "libtasn1", "versionInfo": "4.21.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtasn1-4.21.0-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 318ea70646a5715c1cac4cd3e272c205"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtirpc-aarch64", "name": "libtirpc", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtirpc-1.3.7-3.hum1.aarch64.rpm", "licenseDeclared": "SISSL AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a3fbbf63ad6c3084f3c6a2019117e83f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtirpc@1.3.7-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64", "name": "libtool-ltdl", "versionInfo": "2.5.4-11.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtool-ltdl-2.5.4-11.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c14e0ce820472c4ca431cbbbc9bc8dbb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.5.4-11.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-aarch64", "name": "libubsan", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libubsan-16.2.1-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 72db1a9848db2a937773ad34587cb779"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-aarch64", "name": "libunistring", "versionInfo": "1.1-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libunistring-1.1-12.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d3fc87840210e2fc13c5c32dcf872e26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-aarch64", "name": "libusb1", "versionInfo": "1.0.30-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libusb1-1.0.30-2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b97dec5930674dd53f5d7f440d9e25d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-aarch64", "name": "libuuid", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libuuid-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 28e378df3ecea7829f7c5f9fb2df4f47"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-aarch64", "name": "libverto", "versionInfo": "0.3.2-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libverto-0.3.2-13.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d2b3827ad1e8a6a390fda1320738622c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-devel-4.5.2-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ea3d7fd6851852b0cf69b0de8802df7f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-static-aarch64", "name": "libxcrypt-static", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-static-4.5.2-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c5e607664ed595f9705d415ee6b77efc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-static@4.5.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-aarch64", "name": "libxcrypt", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-4.5.2-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f7c2568417ad5c12817e95634370e0f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-aarch64", "name": "libxml2-16", "versionInfo": "2.15.4-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxml2-16-2.15.4-0.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d39abb8f7ee03dba83f6314a32b50183"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-aarch64", "name": "libzstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libzstd-1.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 70eb1fe02f7bbbb3f16fa6aa4e858d37"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-aarch64", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/linkdupes-0.7.3-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4eeced9df5b311d36a14928605167834"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-aarch64", "name": "lua-libs", "versionInfo": "5.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-libs-5.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f34052375d7d5778f5f5d375076f97ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-aarch64", "name": "lz4-libs", "versionInfo": "1.10.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lz4-libs-1.10.0-5.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c37b6794aeb89ecca827d22fedaf12de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lzo-aarch64", "name": "lzo", "versionInfo": "2.10-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lzo-2.10-17.hum1.aarch64.rpm", "licenseDeclared": "gpl-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7f2273a214a81b3a932f4ef76269da17"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lzo@2.10-17.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-aarch64", "name": "make", "versionInfo": "1:4.4.1-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/make-4.4.1-13.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fdd58e253669d022aad03b0638c0c47a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64", "name": "meson-srpm-macros", "versionInfo": "1.12.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/meson-srpm-macros-1.12.0-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d69f9d1fcdd2d0bcab9397a2a317122c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.0-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-aarch64", "name": "mpdecimal", "versionInfo": "4.0.1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpdecimal-4.0.1-4.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4e1fba7bb7b792fc7f8ab063a6ab1c97"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-aarch64", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpfr-4.2.2-4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 500593f33c0592c6ee5f536d01f845b7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-aarch64", "name": "ncurses-base", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-base-6.6-3.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ed0ef2d0c09ab58d4a094bde95e77d32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64", "name": "ncurses-libs", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-libs-6.6-3.hum1.aarch64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f0c25e95a5e901f33caa5d510b81489c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-aarch64", "name": "nettle", "versionInfo": "4.0-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/nettle-4.0-5.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ff1636f7dd2fdd1d48a69a950d77a099"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c43589640fe3686060dcfc60238e26a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-aarch64", "name": "ngtcp2", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-1.22.1-3.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 94be27c9c29b860d6122ff00c4767685"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-aarch64", "name": "npth", "versionInfo": "1.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/npth-1.8-5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2d2d25b96ecbfe74dbb009ebfcd813f4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64", "name": "openblas-srpm-macros", "versionInfo": "2-21.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openblas-srpm-macros-2-21.1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0186a0c89857458e74eb7e3aec24f7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-21.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-aarch64", "name": "openldap", "versionInfo": "2.6.13-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openldap-2.6.13-4.hum1.aarch64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 52343dd108c8df3224cf2b89afdcb7a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.13-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-clients-aarch64", "name": "openssh-clients", "versionInfo": "10.4p1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssh-clients-10.4p1-4.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ad71b214c477568e4a82bcb414c12dbd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh-clients@10.4p1-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-aarch64", "name": "openssh", "versionInfo": "10.4p1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssh-10.4p1-4.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e7945ecc986284f15d63c3e79e891c95"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh@10.4p1-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-fips-provider-upstream-3.5.8-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3f98f1168c0104763cf5eb04d68fc7c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.8-0.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-aarch64", "name": "openssl-libs", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-libs-3.5.8-0.1.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c13f9b73ed50ee338653d8b301ffdc15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.8-0.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-trust-0.26.5-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a37478256d6ddcea1feb61f472fc4615"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-aarch64", "name": "p11-kit", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-0.26.5-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 498603b09a624361bf6a6805c70f7342"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-aarch64", "name": "pam-libs", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pam-libs-1.7.2-4.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 725711fbbb7b9da11bfb501cf7b59ec0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-aarch64", "name": "pam", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pam-1.7.2-4.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4413f27809fae197004ebf872aea4c55"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam@1.7.2-4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-aarch64", "name": "patch", "versionInfo": "2.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/patch-2.8-5.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f0c53b0eb4d3af2230d533156cbad295"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-devel-aarch64", "name": "pcre2-devel", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-devel-10.48-0.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 75cc560904b24db094fb9e83b5242d14"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-devel@10.48-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64", "name": "pcre2-syntax", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-syntax-10.48-0.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 064cc86298c67eb327b2193c916d494f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.48-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf16-aarch64", "name": "pcre2-utf16", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-utf16-10.48-0.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 54493ca829fa4d694ad0b72e193d5fb7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf16@10.48-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf32-aarch64", "name": "pcre2-utf32", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-utf32-10.48-0.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: dad224e4055a2c803a0665004ab27617"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf32@10.48-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-aarch64", "name": "pcre2", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-10.48-0.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: dbe5a88df77beb1c1591eeadd5ac0bea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.48-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e91759d9d1c1dffe6d066e7953b347f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-aarch64", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-2.5.1-2.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 465b4584afe124a55cab161a8c54d5b0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-aarch64", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/policycoreutils-3.11-2.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 30052427d5358a1376d5aafcbbcba925"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-aarch64", "name": "popt", "versionInfo": "1.19-11.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/popt-1.19-11.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: edcee4101f6f24e58beefa10daaa74eb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/publicsuffix-list-dafsa-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c616882fad65cf900d2280a38cdcae6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64", "name": "python-pip-wheel", "versionInfo": "26.2-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-pip-wheel-26.2-0.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9dcd29a0499e6ffefbb360de90d31851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-aarch64", "name": "python3-libs", "versionInfo": "3.14.7-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-libs-3.14.7-1.2.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e12a03f13ad1081f450d27d3bda92053"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.7-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-packaging-aarch64", "name": "python3-packaging", "versionInfo": "26.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-packaging-26.2-4.1.hum1.noarch.rpm", "licenseDeclared": "BSD-2-Clause OR Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cc27501b93aed57fe401a0e3e4befdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-packaging@26.2-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-aarch64", "name": "python3", "versionInfo": "3.14.7-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-3.14.7-1.2.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e66f0e241fe2514d32a3d664440b7a88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.7-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-aarch64", "name": "readline", "versionInfo": "8.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/readline-8.3-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8ee6e9a4c20b9fd115c4a99dc0bde5e1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-libs-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0a248baf83b9cde991cceabd3140f58a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-aarch64", "name": "rpm-build", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4f43fa2d1cb33b8610570e859ecdd499"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-aarch64", "name": "rpm-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-libs-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 59983296f994b99a6484cbc6f14da060"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-plugin-selinux-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 852223a461671a059861888fa3d9021b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sequoia-1.10.1.1-1.4.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0e9ce827dbce85a516111c0af513ecc5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sign-libs-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4a565f4b88afeebedb65f97560ebb260"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-aarch64", "name": "rpm", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-6.1.0-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e40258a166d0a27bf2daf24c1c6df6de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-aarch64", "name": "sed", "versionInfo": "4.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sed-4.10-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1b82c2a261faea026af9bb5267bf42f2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64", "name": "selinux-policy-targeted", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-targeted-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7108297ff41d86cc219a9827586570e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-aarch64", "name": "selinux-policy", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ed31d3b586a0e9350f35005b7cef044f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-aarch64", "name": "setup", "versionInfo": "2.15.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/setup-2.15.1-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7a592a3640b848d6c4480ef947a4d907"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-aarch64", "name": "shadow-utils-subid-devel", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-subid-devel-4.20.0-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 559e7671651bb4e54aca21b9612a8233"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid-devel@4.20.0-1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-aarch64", "name": "shadow-utils-subid", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-subid-4.20.0-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fc0c4a4cc19e491687bc6582d7762c29"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid@4.20.0-1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-aarch64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-4.20.0-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 40a51a0d183ff7f1a68daf7791d3b9b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-devel-aarch64", "name": "sqlite-devel", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-devel-3.53.4-1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 41b1c0a334d6598aad46ca1b9778a001"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-devel@3.53.4-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64", "name": "sqlite-libs", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-libs-3.53.4-1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7ead00a021d33f90c57361ecf9d971a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-aarch64", "name": "sqlite", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-3.53.4-1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: faf47567de12e3fd2b2401c48f9f5f0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite@3.53.4-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sysprof-capture-devel-aarch64", "name": "sysprof-capture-devel", "versionInfo": "50~rc-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sysprof-capture-devel-50~rc-2.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Patent", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5b40bdd4d03b4fe5866434d0f2e0c09c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sysprof-capture-devel@50~rc-2.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-devel-aarch64", "name": "systemd-devel", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-devel-261.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e6ad7e53d776aebeee928e730f4265c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-devel@261.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-aarch64", "name": "systemd-libs", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-libs-261.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fa037fc56814a272a7ce0aa8092e1b8e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-rpm-macros-aarch64", "name": "systemd-rpm-macros", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-rpm-macros-261.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 787aadb981481eae0b75b1a0e8897e62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-rpm-macros@261.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-shared-aarch64", "name": "systemd-shared", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-shared-261.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0d63c5d6fa1a3ad79d25d3f8a6768772"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-shared@261.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-standalone-sysusers-261.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9c028da81a867af0620145e2e910b952"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-aarch64", "name": "systemd", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-261.2-1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 518fc8dc10d914cb49522afff17a7b6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd@261.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-aarch64", "name": "tar", "versionInfo": "2:1.35-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tar-1.35-10.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0118db45814e90065d5182d3a4bab0c8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tpm2-tss-4.2.0-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6da488ba394313803f00e4d54ac462e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-aarch64", "name": "tzdata", "versionInfo": "2026c-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tzdata-2026c-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bb9d0cac51e578dbd6858d7a3f69451c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026c-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-aarch64", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/unzip-6.0-71.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c32413909b77ce36fe26d1c6ecab8386"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-aarch64", "name": "util-linux-core", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-core-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fcbf58ffe6d4f655fe32233e3c478843"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-aarch64", "name": "util-linux", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-2.42.2-3.4.hum1.aarch64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f39d87d1da8d648f69714c8810d7211b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.2-3.4.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-aarch64", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/w/which-2.25-2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 747a9cd9e442fc5c1985bc67953c18d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xxhash-libs-0.8.4-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5bb50fec7de81255f7d39a88f2b46d38"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-aarch64", "name": "xz-libs", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-libs-5.8.3-2.hum1.aarch64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f54b1e183c9516335b07f71cfd29eb19"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.3-2.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-aarch64", "name": "xz", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-5.8.3-2.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ede5f1c4fbc42bb8ea05e3a7e76306b7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.3-2.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-aarch64", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zip-3.0-45.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b7f6bc60325f5aab6ac6773968e28bf6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-aarch64", "name": "zlib-ng-compat-devel", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zlib-ng-compat-devel-2.3.3-6.hum1.aarch64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5a076b23c5916933256a49d319d956b4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat-devel@2.3.3-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zlib-ng-compat-2.3.3-6.hum1.aarch64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8d7b0f61abc2a16a0ba4c488e1cb78a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-aarch64", "name": "zstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zstd-1.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 33923dfdd7930adb5d5e953bba4a3452"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-buildah-x86-64", "name": "buildah-buildroot-x86_64", "versionInfo": "77531cad", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-x86-64", "name": "add-determinism", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d599f3c879b1a93f7a50d8c2c2f8aa2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-x86-64", "name": "alternatives", "versionInfo": "1.33-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 49f9259756d5c706df2b6570ff5b5cea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-x86-64", "name": "annobin-docs", "versionInfo": "13.29-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-docs-13.29-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1b0f479d4be43a2cf59fed3ac49e0d90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.29-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64", "name": "annobin-plugin-gcc", "versionInfo": "13.29-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-plugin-gcc-13.29-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5900d0a40f8c383a6c8675a6e8f80e0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.29-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-x86-64", "name": "audit-libs", "versionInfo": "4.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 25236c26c96434cd2c084d5df98e55cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-libs-x86-64", "name": "authselect-libs", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-libs-1.7.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b14a21f672fb8a2b32fa25dee98404bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect-libs@1.7.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-authselect-x86-64", "name": "authselect", "versionInfo": "1.7.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/authselect-1.7.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4c9189f00d4ea34aaac756cff82ccdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/authselect@1.7.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-x86-64", "name": "bash", "versionInfo": "5.3.15-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.15-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 35c598d1f15aba91f61b244abf8d0fbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.15-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-x86-64", "name": "binutils", "versionInfo": "2.46.1-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b412b4b29a227a1db90d9f002da04498"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-devel-x86-64", "name": "btrfs-progs-devel", "versionInfo": "7.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/btrfs-progs-devel-7.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only and LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 418f113ea14a41e94f244b481b4c4bd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs-devel@7.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-btrfs-progs-x86-64", "name": "btrfs-progs", "versionInfo": "7.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/btrfs-progs-7.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0a49463da2b748cf516823e0414f27d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/btrfs-progs@7.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b7d13395d88324c0009658f89c21ec4d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: eed9f8d38229149ee3ba920f26ec2634"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-x86-64", "name": "bzip2", "versionInfo": "1.0.8-24.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ed5ad98a73dbc065c211ed6d9a6be8bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-x86-64", "name": "ca-certificates", "versionInfo": "2025.2.80_v9.0.304-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2025.2.80_v9.0.304-9.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8280885c60ebda1b9261bdb611c6bf85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.304-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-filesystem-x86-64", "name": "cmake-filesystem", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-filesystem-4.3.0-5.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 60d9926960c1ca06e08a568e6e6007e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-filesystem@4.3.0-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f4f531a89be4477f0d05fc8fbf71ce81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-x86-64", "name": "coreutils-common", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.11-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d2aee0d1bb96b62e637baca6ed52bda3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.11-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-x86-64", "name": "coreutils", "versionInfo": "9.11-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.11-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: de0c31a752b4c84fe8355fc07d7c7e73"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.11-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-x86-64", "name": "cpio", "versionInfo": "2.15-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c073bae358997220d77e1ef8887532d0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-x86-64", "name": "cpp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpp-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 33cab8b219feb932f853b17bc813df51"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cracklib-x86-64", "name": "cracklib", "versionInfo": "2.10.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cracklib-2.10.3-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3f9ad52e2eccdefe42c677227d92f9f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cracklib@2.10.3-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64", "name": "crypto-policies-config-default", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 879e05f9fee2fffc9b0863b62ee0784c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-x86-64", "name": "crypto-policies", "versionInfo": "20260731-1.git6488aef.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260731-1.git6488aef.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 01283c07f63751da93fa1cfe352e124f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260731-1.git6488aef.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-x86-64", "name": "curl", "versionInfo": "8.22.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.22.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 78c957a3eee0fecb9dacd620650b92ac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 266c623e6d845c8594aa574261208db1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-x86-64", "name": "debugedit", "versionInfo": "5.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4510f40574dd3d6c447121aad1bfb3a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-devel-x86-64", "name": "device-mapper-devel", "versionInfo": "1.02.216-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/device-mapper-devel-1.02.216-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d9037e3b025e7064cb218d1ba854cbae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-devel@1.02.216-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-libs-x86-64", "name": "device-mapper-libs", "versionInfo": "1.02.216-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/device-mapper-libs-1.02.216-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e7af52bc29d28034ccb6def4ad7c6320"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper-libs@1.02.216-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-device-mapper-x86-64", "name": "device-mapper", "versionInfo": "1.02.216-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/device-mapper-1.02.216-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d3046528c573914704c08e2a21ef0d11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/device-mapper@1.02.216-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-x86-64", "name": "diffutils", "versionInfo": "3.12-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0f1fdf69f5ed7422a5669c80a7fdf1d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-x86-64", "name": "dwz", "versionInfo": "0.17-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 857b4cf1ffa022a0d3fd4237703ed33a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-e2fsprogs-libs-x86-64", "name": "e2fsprogs-libs", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/e2fsprogs-libs-1.47.4-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND LGPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2ca263780889290c42727d4a12323824"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/e2fsprogs-libs@1.47.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-x86-64", "name": "ed", "versionInfo": "1.22.6-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 67e9e412f7f6eb77770feadf190fff63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c9b05c1c56e6b6e2e662124e9113f35c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 06a9e7b4e1ae267637c31a55908c58ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d6b7fc024c1650a5d07a866a0bee6173"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-x86-64", "name": "elfutils", "versionInfo": "0.196-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.196-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e4968bf39e3fae91e3c199b8ae734a26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-x86-64", "name": "expat", "versionInfo": "2.8.4-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.4-0.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 95cbb0adcdcc44e0c5a7e8663c32b754"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.4-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-x86-64", "name": "file-libs", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3011bd0b02ede9edac71a65e99147e3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 70275b951d6f88ee50376b509b62df87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-x86-64", "name": "filesystem", "versionInfo": "3.18-59.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a6149e4767a7cf4d382b9c7363233909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-x86-64", "name": "file", "versionInfo": "5.48-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e149bc26d884bf5a5ee6102ad3247a1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-x86-64", "name": "findutils", "versionInfo": "1:4.11.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fe5a4416f64ae8bf85a0f6da30837f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-x86-64", "name": "gawk", "versionInfo": "5.4.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: aa0b0ed2ab703a0a1380be08760ac1c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-plugin-annobin-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9caf82b25d48d0ca94e96e34a034c703"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-x86-64", "name": "gcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9562d9766118e39be2e9e0f2f92bf455"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64", "name": "gdb-minimal", "versionInfo": "17.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bc6234f1f13c2975b1d28e47af9678a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64", "name": "gdbm-libs", "versionInfo": "1:1.23-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.23-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 16d5cf0e1a204da7d8dfec016f321ee0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.23-12.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-git-core-x86-64", "name": "git-core", "versionInfo": "2.55.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/git-core-2.55.0-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ea5d7c3bc1937b72ac5de59cc0a40480"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/git-core@2.55.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-devel-x86-64", "name": "glib2-devel", "versionInfo": "2.89.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glib2-devel-2.89.3-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 23bfec7f34dcc6d9023e3541bb4033aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2-devel@2.89.3-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glib2-x86-64", "name": "glib2", "versionInfo": "2.89.3-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glib2-2.89.3-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2a886b10e49b65a57874d357c3598600"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glib2@2.89.3-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-x86-64", "name": "glibc-common", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-8.6.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8886b26c7917df442255c367913b8c04"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-8.6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-x86-64", "name": "glibc-devel", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-devel-2.43-8.6.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 49165f3f960b7e359e19726b943c3eb5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-8.6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64", "name": "glibc-gconv-extra", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-8.6.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 477214c1ea9e410b33d4f989544e1d04"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-8.6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-8.6.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0f27cb39c10125a2502a28162578d481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-static-x86-64", "name": "glibc-static", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-static-2.43-8.6.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: af132103e5feddd5e1a375314a15d5ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-static@2.43-8.6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-x86-64", "name": "glibc", "versionInfo": "2.43-8.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-8.6.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c8a662d345670f8f3e57909ab08b7db1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-8.6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-x86-64", "name": "gmp", "versionInfo": "1:6.3.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8333c5d90507e9736f0e303c1d522bc7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64", "name": "gnulib-l10n", "versionInfo": "20241231-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8299247dcb1565848a3336c23caa59b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9f2721ea3da813f95e0ad372005b7529"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cacaf2b33174d8b69711aa44ccc468fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f03517c24814af85fc2cf0c88c52cc3f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1558980b4762e26e31e9250935327328"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 29926505c40dfc97edbcac3739fa6fad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-x86-64", "name": "gnupg2", "versionInfo": "2.4.9-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8d857842147cc33655aa852ce16a6d0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-x86-64", "name": "gnutls", "versionInfo": "3.8.13-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4465107c8a805de52d68f9358bfc23f6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-x86-64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-filesystem-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b7ba053e6fc52967827728a4a06c6592"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-rpm-macros-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9ee7b1a24cd488ecf4304dfe6dbedc8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64", "name": "golang1.27-bin", "versionInfo": "1.27.1-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-bin-1.27.1-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2e6ee8cc4f4ede90662c65f4a288968d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.1-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64", "name": "golang1.27-src", "versionInfo": "1.27.1-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-src-1.27.1-0.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5a0b4895780984805154940da35f66f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.1-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-x86-64", "name": "golang1.27", "versionInfo": "1.27.1-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-1.27.1-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: af23573414f056189befd1cee7dfdb07"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.1-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-x86-64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golist-0.11.0-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c94866cb8a1c5c8a4f2192fce2ae701f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-devel-x86-64", "name": "gpgme-devel", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgme-devel-2.0.1-6.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 280a26680b752d16e8e114a56baf18d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme-devel@2.0.1-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgme-x86-64", "name": "gpgme", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgme-2.0.1-6.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 68c41fe6124ac68a253f271dbcd3c971"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgme@2.0.1-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-x86-64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-x86-64", "name": "grep", "versionInfo": "3.12-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e9b48d78eb8bf0c4148539f2d7590630"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-x86-64", "name": "gzip", "versionInfo": "1.14-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.14-4.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 23b0f59e33577a569a570da5c778a94b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.14-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 293719e921051d2c474acc222cc0955d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64", "name": "hummingbird-release", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4443e83eba871e4e77290c97065ffa02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64", "name": "hummingbird-repos", "versionInfo": "20251124-1.16.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.16.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c889167c7b3cca62bb596d3cfbd63b6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.16.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 13293a1d14d37f008481dc8932e105a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-x86-64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-x86-64", "name": "jansson", "versionInfo": "2.14-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e8197a7cf76ae8dbc808b4e96fefb59f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-x86-64", "name": "json-c", "versionInfo": "0.18-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e77db91a34f0bbe04e9c920b4509229b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-x86-64", "name": "kernel-headers", "versionInfo": "7.2.0-61.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-headers-7.2.0-61.hum1.x86_64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f84364e16e93caeed82e1c2d9fdcb008"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f3314a91e4eea1720410bcd3b770ab81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-x86-64", "name": "krb5-libs", "versionInfo": "1.22.2-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-9.1.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fcd0b9f63f73692d52c332ab30217e6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-less-x86-64", "name": "less", "versionInfo": "704-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/less-704-5.hum1.x86_64.rpm", "licenseDeclared": "(GPL-3.0-only OR BSD-2-Clause) AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 61d168c150d5defcbb59f8cba2b1cb49"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/less@704-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-x86-64", "name": "libacl", "versionInfo": "2.4.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 778d6a835f1bfcb1eba15772105b50dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-x86-64", "name": "libarchive", "versionInfo": "3.8.8-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.8-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0758bf73997040af83f49b583928ab2f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.8-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-devel-x86-64", "name": "libassuan-devel", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-devel-2.5.7-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9638dbf503cfcbe25d5fd3cc7ca69f49"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan-devel@2.5.7-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-x86-64", "name": "libassuan", "versionInfo": "2.5.7-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3d2e4518c599f045df67f8766d514be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-x86-64", "name": "libatomic", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libatomic-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 37e244274b83335bb43dd46319e49f8d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-x86-64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-devel-x86-64", "name": "libblkid-devel", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-devel-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a6b40435d613d666e6d119b467402736"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid-devel@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-x86-64", "name": "libblkid", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 640898d2ab2f2438f25b5d21b49c128b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-x86-64", "name": "libbrotli", "versionInfo": "1.2.0-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 04bf9b2dab99d0b0957ddc802b552a3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfsutil-x86-64", "name": "libbtrfsutil", "versionInfo": "7.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbtrfsutil-7.1-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6c9628db76e9002599addb2e2821dd9d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfsutil@7.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbtrfs-x86-64", "name": "libbtrfs", "versionInfo": "7.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbtrfs-7.1-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8a279ff8fc65673cb3ca30f38b766f37"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbtrfs@7.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-x86-64", "name": "libcap-ng", "versionInfo": "0.9.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.5-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bee771867abba9896a92e8061074cbfd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-x86-64", "name": "libcap", "versionInfo": "2.78-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 99e45918735b0a73e5d7fa59ca39d79c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-x86-64", "name": "libcbor", "versionInfo": "0.14.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f3c1be1d36e9f029f995536b6e55a86c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-x86-64", "name": "libcom_err", "versionInfo": "1.47.4-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: efa036217a574dc291905e1d6787e5fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-x86-64", "name": "libcurl", "versionInfo": "8.22.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.22.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 43fd88b4ba65b9a7c53699d46553b5f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-x86-64", "name": "libeconf", "versionInfo": "0.7.9-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f286b987da4aba89effee118c74d63c1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libedit-x86-64", "name": "libedit", "versionInfo": "3.1-60.20260512cvs.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libedit-3.1-60.20260512cvs.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 994022249ef1cce4cbb2d8937bbba3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libedit@3.1-60.20260512cvs.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-x86-64", "name": "libevent", "versionInfo": "2.1.13-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.13-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 492661d301f2c45b3f100094dc30ac71"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-x86-64", "name": "libfdisk", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4372d99deede31c20dc450a2b34bab60"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-devel-x86-64", "name": "libffi-devel", "versionInfo": "3.5.2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-devel-3.5.2-3.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3ac72755675509f8d83959476cd9029b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi-devel@3.5.2-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-x86-64", "name": "libffi", "versionInfo": "3.5.2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.5.2-3.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b379c80d092e884edca21229b22b9f0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.5.2-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-x86-64", "name": "libfido2", "versionInfo": "1.17.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-5.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 09d88d35bf7b1fdbe3596964d5a5b4d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-x86-64", "name": "libfsverity", "versionInfo": "1.7-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 714d39cacbaa2869cb8986837cc7c051"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-x86-64", "name": "libgcc", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7f44b3ed25c62af7fca7534bcb5503d9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-x86-64", "name": "libgcrypt", "versionInfo": "1.12.2-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.2-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7e76c4be2288d8b74daf91e4bc1cceab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.2-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-x86-64", "name": "libgomp", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 656b1ba106369f9105acf64ed30e33fa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-devel-x86-64", "name": "libgpg-error-devel", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-devel-1.61-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 98717edd433f231d70b3611fe7c51636"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error-devel@1.61-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-x86-64", "name": "libgpg-error", "versionInfo": "1.61-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3c865a471949c8a9c6cb39d47d8f1352"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-x86-64", "name": "libidn2", "versionInfo": "2.3.8-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a39f7e39430a77e5e372eabb91b997cf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-x86-64", "name": "libksba", "versionInfo": "1.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 97c2ec2ec2c7c15552b2f9bfe8aaf020"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-x86-64", "name": "liblastlog2", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0911552f951130c8ba1509649b98497d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-devel-x86-64", "name": "libmount-devel", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-devel-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6f0fafaf1af5595f7b02e8cc2fb6daa7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount-devel@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-x86-64", "name": "libmount", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fead67f5f1cf6664db260063f7fe890f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-x86-64", "name": "libmpc", "versionInfo": "1.4.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmpc-1.4.1-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a494fa5948db54e21ceab510f4811ce7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-x86-64", "name": "libnghttp2", "versionInfo": "1.69.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-5.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c6ae8f8b998ef4b924f4a7c483950da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-x86-64", "name": "libnghttp3", "versionInfo": "1.18.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5598615cbe06f72c2a2879a3aaf13699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnsl2-x86-64", "name": "libnsl2", "versionInfo": "2.0.1-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnsl2-2.0.1-6.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 738ea6cbd6499c2495aa28d665c043b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnsl2@2.0.1-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-x86-64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/l/libpfm-4.13.0-20.fc44.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8d3340a34243fe94badf7ab91f89d20c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-x86-64", "name": "libpkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 48c108eef9d6ae92f86afa0832cd5bb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-x86-64", "name": "libpsl", "versionInfo": "0.23.1-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.1-1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5a6a0c1c67a57c39de62b7e2a8e21504"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.1-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpwquality-x86-64", "name": "libpwquality", "versionInfo": "1.4.5-18.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpwquality-1.4.5-18.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 83fb1254a477bafd652ea86057ef79bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpwquality@1.4.5-18.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-devel-x86-64", "name": "libseccomp-devel", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-devel-2.6.1-3.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 84ed4deda247ba4969ed1c2afeb82d5e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-devel@2.6.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-static-x86-64", "name": "libseccomp-static", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-static-2.6.1-3.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 417fa8e1c5659a1a84936cb1c3588b90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp-static@2.6.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libseccomp-x86-64", "name": "libseccomp", "versionInfo": "2.6.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libseccomp-2.6.1-3.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e2bd5d7f7cc8c493f79e31a71757cf2a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libseccomp@2.6.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-devel-x86-64", "name": "libselinux-devel", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-devel-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 74969c1b4518e03ff08e2e821f16be32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-devel@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64", "name": "libselinux-utils", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5bebcc7720fa8a5cc86351ed7298f152"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-x86-64", "name": "libselinux", "versionInfo": "3.11-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-5.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: acadf2edec720f9104493928ec56f3cc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-x86-64", "name": "libsemanage", "versionInfo": "3.11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: efeb1527bdc98b7da6525ff307c93da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-devel-x86-64", "name": "libsepol-devel", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-devel-3.11-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1c7d182ea9d4a196fd1b9111badbcd37"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol-devel@3.11-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-x86-64", "name": "libsepol", "versionInfo": "3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 39bac19c684ef55d632a47c43bb878c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-x86-64", "name": "libsmartcols", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f8deb70cca766046d78bd7b71a3accb9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-x86-64", "name": "libssh-config", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d450c1e2923e7f1f312fde84f85e7f4c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-x86-64", "name": "libssh", "versionInfo": "0.12.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 149536546e1810f679ce19b1be42e58e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-x86-64", "name": "libstdc++", "versionInfo": "16.2.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 786c9eb6cf16e70afac24b687a58a734"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-x86-64", "name": "libtasn1", "versionInfo": "4.21.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e377a290a5c1a3fe6380be2a69a90fa8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtirpc-x86-64", "name": "libtirpc", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtirpc-1.3.7-3.hum1.x86_64.rpm", "licenseDeclared": "SISSL AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d270169aad39bef874590837735f6a1d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtirpc@1.3.7-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64", "name": "libtool-ltdl", "versionInfo": "2.5.4-11.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.5.4-11.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 70ba9283722c13dd220b62e0337e67b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.5.4-11.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-x86-64", "name": "libunistring", "versionInfo": "1.1-12.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1cc5ed6dc9abd644761b1394fa848349"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-x86-64", "name": "libusb1", "versionInfo": "1.0.30-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7e5e59833d66366a60c5c01481be2c39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-x86-64", "name": "libuuid", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e3e9afb82e210b9217e4ad7d086cbafd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-x86-64", "name": "libverto", "versionInfo": "0.3.2-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1e2d449e326eb9c384e7665561d3bf59"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-devel-4.5.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 261f1e66c301bcc529593d9044eddcec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-static-x86-64", "name": "libxcrypt-static", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-static-4.5.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1588fa233685462e06513f77d8ae6bd6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-static@4.5.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-x86-64", "name": "libxcrypt", "versionInfo": "4.5.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 186f5d91cd0fb2f9753f3859f2eaca00"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-x86-64", "name": "libxml2-16", "versionInfo": "2.15.4-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.4-0.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 20dc73195f09f0687470eac50c6995ff"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-x86-64", "name": "libzstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d3302b977dc6fd5cb29412a7d358541d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-x86-64", "name": "linkdupes", "versionInfo": "0.7.3-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e839cebae2f671496325846256147325"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-x86-64", "name": "lua-libs", "versionInfo": "5.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 202aef337d9998f9b16c9b81b42d4744"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-x86-64", "name": "lz4-libs", "versionInfo": "1.10.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9d26849f5c070c53a3c0eb03d2a7b3da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lzo-x86-64", "name": "lzo", "versionInfo": "2.10-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lzo-2.10-17.hum1.x86_64.rpm", "licenseDeclared": "gpl-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 492753c176d27065b00395e9d50c22d9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lzo@2.10-17.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-x86-64", "name": "make", "versionInfo": "1:4.4.1-13.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/make-4.4.1-13.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 92552a7aafadab8f8658b13554c85a7b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64", "name": "meson-srpm-macros", "versionInfo": "1.12.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/meson-srpm-macros-1.12.0-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: d69f9d1fcdd2d0bcab9397a2a317122c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.0-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-x86-64", "name": "mpdecimal", "versionInfo": "4.0.1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2510cb8c8936230f7136343d313013d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-x86-64", "name": "mpfr", "versionInfo": "4.2.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9b7d4b17e85c5c2a31eb4ff1071f1f11"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-x86-64", "name": "ncurses-base", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ed0ef2d0c09ab58d4a094bde95e77d32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64", "name": "ncurses-libs", "versionInfo": "6.6-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1f7dd08e1f7f3a21dea4d74150ca7e90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-x86-64", "name": "nettle", "versionInfo": "4.0-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: dec047659ca3ed7f2ade5edb5417768e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ce32706efbf4cd25374b30a8c35c8b33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-x86-64", "name": "ngtcp2", "versionInfo": "1.22.1-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 53eeed67908e3a4eb1daa0c352dd6c6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-x86-64", "name": "npth", "versionInfo": "1.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 79832c509c9ece7d8af6a7967f6c6d36"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64", "name": "openblas-srpm-macros", "versionInfo": "2-21.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-21.1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0186a0c89857458e74eb7e3aec24f7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-21.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-x86-64", "name": "openldap", "versionInfo": "2.6.13-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.13-4.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a2d4cf9dfcc75dc0b1203812c66474a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.13-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-clients-x86-64", "name": "openssh-clients", "versionInfo": "10.4p1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssh-clients-10.4p1-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3586f8d0d410a1389932d3990821397f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh-clients@10.4p1-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssh-x86-64", "name": "openssh", "versionInfo": "10.4p1-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssh-10.4p1-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND snprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bdd63f28a20445b3e7251bd86fd01f43"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssh@10.4p1-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8369e6248ade4d151e67b35b4687a584"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.8-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-x86-64", "name": "openssl-libs", "versionInfo": "1:3.5.8-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.8-0.1.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 07b4fddbc7a905355706d23cb7793b8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.8-0.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 68257f4d7431d3b1885712f25b4f5058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-x86-64", "name": "p11-kit", "versionInfo": "0.26.5-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 75311ea12371b64af16c0e5594ded602"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-x86-64", "name": "pam-libs", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: fca8dc3ed64b8bdc9ea406b714989970"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-x86-64", "name": "pam", "versionInfo": "1.7.2-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-1.7.2-4.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 45e8bb3359f7a1bcea2cba7230567828"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam@1.7.2-4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-x86-64", "name": "patch", "versionInfo": "2.8-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-5.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0ae052d45ed91aae4aa901512b427f23"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-devel-x86-64", "name": "pcre2-devel", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-devel-10.48-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: adecfa2935634b87a1d72655d67aee61"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-devel@10.48-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64", "name": "pcre2-syntax", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.48-0.1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 064cc86298c67eb327b2193c916d494f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.48-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf16-x86-64", "name": "pcre2-utf16", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-utf16-10.48-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 088e74e5ac55321d69973bccbad79f73"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf16@10.48-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-utf32-x86-64", "name": "pcre2-utf32", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-utf32-10.48-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 28930f20ebe60cb96210d41ac714a23a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-utf32@10.48-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-x86-64", "name": "pcre2", "versionInfo": "10.48-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.48-0.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 21d54a0ebfc4eb214e9e42ec21a6d641"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.48-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e013238a36bb9fbc1d2ca514dddd4ca8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a635242970269a96004c1698d505cbee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-x86-64", "name": "pkgconf", "versionInfo": "2.5.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5e1ba23c3274edeebb8a40e9f93deded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-x86-64", "name": "policycoreutils", "versionInfo": "3.11-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bf26428f065424fee3e871b1ca1dfb69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-x86-64", "name": "popt", "versionInfo": "1.19-11.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 3770c5ab4a851a9ca25915a7894f54c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c616882fad65cf900d2280a38cdcae6d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64", "name": "python-pip-wheel", "versionInfo": "26.2-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9dcd29a0499e6ffefbb360de90d31851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-x86-64", "name": "python3-libs", "versionInfo": "3.14.7-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.7-1.2.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cdeb1b6dea9c717030e20bc62bc88dbc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.7-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-packaging-x86-64", "name": "python3-packaging", "versionInfo": "26.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-packaging-26.2-4.1.hum1.noarch.rpm", "licenseDeclared": "BSD-2-Clause OR Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cc27501b93aed57fe401a0e3e4befdf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-packaging@26.2-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-x86-64", "name": "python3", "versionInfo": "3.14.7-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.7-1.2.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ef29fbdefb5780e5b1de6c1be93fd2b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.7-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 38abd8c7f1184339bff7ddf1044f1b7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 8684a2b8276c41d1e69ef971a6b044b3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-x86-64", "name": "readline", "versionInfo": "8.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: dad256ab45b2ff28db082647e11ab463"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7c49dce4691dd72dc1cfc25a2d162c4b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-x86-64", "name": "rpm-build", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 37689ff70249d086b92fdc76d680334c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-x86-64", "name": "rpm-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b99370ea9d0875a4e49a619086b62b2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 60519cfd555eb2f40efb25afcc4dad79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.4.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f8aaccff474ac2e0fb7c916a2869ae15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c7533ff6f9f07193fe4bf53331d520f6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-x86-64", "name": "rpm", "versionInfo": "6.1.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.1.0-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b5ba04aec50fdc3f2ba70d4e8513d626"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-x86-64", "name": "sed", "versionInfo": "4.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: a4c743d0bd5c5abe0e89da9d7acb245d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64", "name": "selinux-policy-targeted", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7108297ff41d86cc219a9827586570e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-x86-64", "name": "selinux-policy", "versionInfo": "45.11-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.11-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: ed31d3b586a0e9350f35005b7cef044f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.11-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-x86-64", "name": "setup", "versionInfo": "2.15.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 7a592a3640b848d6c4480ef947a4d907"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-x86-64", "name": "shadow-utils-subid-devel", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-subid-devel-4.20.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 079599eb51d11348179cd10d3c598a5b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid-devel@4.20.0-1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-subid-x86-64", "name": "shadow-utils-subid", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-subid-4.20.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: e4682af2ed19dc328f714f6c55aa4fb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils-subid@4.20.0-1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-x86-64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 052953675603b8650e5d97c0f5faa6e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-devel-x86-64", "name": "sqlite-devel", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-devel-3.53.4-1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 600e101a579616ce9763aad2c3f97584"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-devel@3.53.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64", "name": "sqlite-libs", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.53.4-1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: b61e6927000756f1a7453e0ef6f79487"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.53.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-x86-64", "name": "sqlite", "versionInfo": "3.53.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-3.53.4-1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9531643bfa35c675c1c4575cdc32901f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite@3.53.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sysprof-capture-devel-x86-64", "name": "sysprof-capture-devel", "versionInfo": "50~rc-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sysprof-capture-devel-50~rc-2.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Patent", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: cb422574303b44193ba24d378e999e90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sysprof-capture-devel@50~rc-2.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-devel-x86-64", "name": "systemd-devel", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-devel-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: dbd82d5a02e15578c127696e85c3fd35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-devel@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-x86-64", "name": "systemd-libs", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c329708277b41fa5c79182b97dcd05ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-rpm-macros-x86-64", "name": "systemd-rpm-macros", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-rpm-macros-261.2-1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 787aadb981481eae0b75b1a0e8897e62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-rpm-macros@261.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-shared-x86-64", "name": "systemd-shared", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-shared-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5db9ca8fa6c1f8d290eef7d9a109416d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-shared@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1c7264a08531500bedc072ac1026a49f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-x86-64", "name": "systemd", "versionInfo": "261.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-261.2-1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 23fc880762b65a2cee0ec95528533e88"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd@261.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-x86-64", "name": "tar", "versionInfo": "2:1.35-10.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-10.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 2d9125f5ec73e194627aa82d115edf46"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 6e3945fdad8b17446f10429d0f919de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-x86-64", "name": "tzdata", "versionInfo": "2026c-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026c-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bb9d0cac51e578dbd6858d7a3f69451c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026c-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-x86-64", "name": "unzip", "versionInfo": "6.0-71.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: bfc5ab20d40fbc285e5344ad03457851"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-x86-64", "name": "util-linux-core", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 84e33f372554bfe9eeecc0f0d179d6a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-x86-64", "name": "util-linux", "versionInfo": "2.42.2-3.4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.2-3.4.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 9070d680ed21fd42e3b0e988c47e0cb4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.2-3.4.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-x86-64", "name": "which", "versionInfo": "2.25-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 593fc46299e5b9f11865ad0a81def554"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.4-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 59dce6a6a1bf72d48f4891b434cae74e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-x86-64", "name": "xz-libs", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 40b31750471c626a59b9c50cf29d582a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.3-2.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-x86-64", "name": "xz", "versionInfo": "1:5.8.3-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.3-2.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0de88d5dbb3bbc77301612e918495548"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.3-2.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-x86-64", "name": "zip", "versionInfo": "3.0-45.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-45.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: c96ff9d3553ddb968b19aad8fff223e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-45.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-x86-64", "name": "zlib-ng-compat-devel", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-devel-2.3.3-6.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 5fa5b608a01c30f37e114ac5aa63ba62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat-devel@2.3.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 1afc93af70228a741ab127580f779159"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-x86-64", "name": "zstd", "versionInfo": "1.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-09-23T09:51:43Z", "comment": "sigmd5: 593ee2b10e36abc9883e112101c9b0aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.1.hum1?arch=x86_64"}]}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-0f520313210379e8", "versionInfo": "1.45.1-1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.hum1?distro=hummingbird-1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-3447db9f80ac54b8", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-1966e31bf3f30b7a", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-3b38bfe0a0c545d0", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/VividCortex/ewma", "SPDXID": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-37d50429c2b45782", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/VividCortex/ewma@v1.2.0"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-6737de6b11aff650", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/aead/serpent", "SPDXID": "SPDXRef-Package-go-module-github.com-aead-serpent-3f2cdf8bcd5b1e7a", "versionInfo": "v0.0.0-20160714141033-fba169763ea6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-ad2d53540b601a8a", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/chzyer/readline", "SPDXID": "SPDXRef-Package-go-module-github.com-chzyer-readline-9e01bb80b7422514", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chzyer:readline:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/chzyer/readline@v1.5.1"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-25d9f0f5bebad7db", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e2525654d67af6f4", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-04bf7f44f9ba8068", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-7558cbbf0035441f", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-3ced1cbf76892c3a", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-c126525c4dc0c023", "versionInfo": "v1.0.0-rc.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4"}]}, {"name": "github.com/containerd/stargz-snapshotter/estargz", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-6417ba8ca93891bc", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/stargz-snapshotter@v0.18.2#estargz"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-fb0acd3fa7404114", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/containers/libtrust", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-libtrust-657bd1d518a2092d", "versionInfo": "v0.0.0-20230121012942-c1716e8a8d01", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:libtrust:v0.0.0-20230121012942-c1716e8a8d01:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/libtrust@v0.0.0-20230121012942-c1716e8a8d01"}]}, {"name": "github.com/containers/luksy", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-luksy-78aac71fbe2c005d", "versionInfo": "v0.0.0-20251208191447-ca096313c38f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:luksy:v0.0.0-20251208191447-ca096313c38f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/luksy@v0.0.0-20251208191447-ca096313c38f"}]}, {"name": "github.com/containers/ocicrypt", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-8a4913288aa8f329", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:ocicrypt:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/ocicrypt@v1.3.2"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-ce02a5445f19e927", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/cyberphone/json-canonicalization", "SPDXID": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-8bc6cc5b6d55aa49", "versionInfo": "v0.0.0-20241213102144-19d51d7fe467", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-1f98d46e35a1e925", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/davecgh/go-spew", "SPDXID": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-be45fc04c00ce120", "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"}]}, {"name": "github.com/disiqueira/gotree/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-0e5a23f407d5e115", "versionInfo": "v3.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:disiqueira:gotree\\/v3:v3.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/disiqueira/gotree@v3.0.2#v3"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-9879e72e06478787", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/distribution", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-distribution-f90950a4705ef57b", "versionInfo": "v2.8.3+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-a01375742c05bc1e", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-12f5eab5bedb7d98", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-4e1b564b9bc9a8ea", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-5006b69854fd03c4", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f9f3487a11403b93", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsouza/go-dockerclient", "SPDXID": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-e16530d9a6bc75d8", "versionInfo": "v1.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go-dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go_dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsouza/go-dockerclient@v1.13.2"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-c6322125d200d511", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-3e056be15145eb43", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed4dce3e4b59adfd", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/godbus/dbus/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-da2feed437d6ef78", "versionInfo": "v5.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:godbus:dbus\\/v5:v5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/godbus/dbus@v5.2.2#v5"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-b8e3ef78b8b91cbc", "versionInfo": "v0.21.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.21.6"}]}, {"name": "github.com/google/go-intervals", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-intervals-b6d4323e929ffb28", "versionInfo": "v0.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-intervals@v0.0.2"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-99cd01c2e3eef726", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-68e3ec0ba66c6212", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4161c9f3dc5aa5bb", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-923f88a8ad9a5c4a", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-8b41e110c9e16334", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-b95bc8326475d2f9", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-81cb40e416811090", "versionInfo": "v1.19.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.19.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.19.1"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-8cd33f54242fa772", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/kr/fs", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-fs-654264cc8419162f", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:fs:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/fs@v0.1.0"}]}, {"name": "github.com/manifoldco/promptui", "SPDXID": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-6c861c235e4b5969", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:manifoldco:promptui:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/manifoldco/promptui@v0.9.0"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-03a6e2ff57125770", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mattn/go-shellwords", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-fd67b9900a9220af", "versionInfo": "v1.0.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.14"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-81d30ea18cac02af", "versionInfo": "v1.14.48", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.48"}]}, {"name": "github.com/miekg/pkcs11", "SPDXID": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-4489290dd7839895", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:miekg:pkcs11:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/miekg/pkcs11@v1.1.2"}]}, {"name": "github.com/mistifyio/go-zfs/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-689125eba8c42d96", "versionInfo": "v4.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go-zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go_zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mistifyio/go-zfs@v4.0.0#v4"}]}, {"name": "github.com/moby/buildkit", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-342179f98048cef6", "versionInfo": "v0.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-cbdb2e0b1d975660", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/go-archive", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-34748cadfdda19c3", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-5725028a312ac153", "versionInfo": "v1.55.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.55.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-f8741d38a8f8bced", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.5.1#client"}]}, {"name": "github.com/moby/patternmatcher", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-7bcb23b0a548cb52", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"}]}, {"name": "github.com/moby/sys/capability", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-7dbad719d0bb6e9a", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#capability"}]}, {"name": "github.com/moby/sys/devices", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-devices-d79f7b35414a39bf", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/devices:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#devices"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-f9417cac213e88c1", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-c4c180e9dc17900c", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.0#sequential"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-3098cefad10c2669", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-465c24b3f24b21ee", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/moby/term", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-af5b9c506d9a1898", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-adaf17b90ec898b3", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-f0e82b31a74021c8", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/opencontainers/cgroups", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c7aa569cde1d6736", "versionInfo": "v0.0.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:cgroups:v0.0.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/cgroups@v0.0.8"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-8b530cf1c9d7677b", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-85a87ece340edbb0", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runc", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runc-ce5ad31eb344ff05", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runc:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runc@v1.5.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f9ae71eddc1470bf", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/opencontainers/runtime-tools", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-c8ea02d0a0a84311", "versionInfo": "v0.9.1-0.20260316125833-8a4db579f5c8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-tools@v0.9.1-0.20260316125833-8a4db579f5c8"}]}, {"name": "github.com/opencontainers/selinux", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-5a26aade61b2ef58", "versionInfo": "v1.15.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:selinux:v1.15.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/selinux@v1.15.1"}]}, {"name": "github.com/openshift/imagebuilder", "SPDXID": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-dc2d4300fd9ff36d", "versionInfo": "v1.2.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openshift:imagebuilder:v1.2.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openshift/imagebuilder@v1.2.21"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-3b65ba67049ddf51", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/sftp", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-sftp-e70b2fbd53a2ed8f", "versionInfo": "v1.13.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:sftp:v1.13.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/sftp@v1.13.11"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-a014df5be22acadc", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/pmezard/go-difflib", "SPDXID": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-c8d7c157aa1f567a", "versionInfo": "v1.0.1-0.20181226105442-5d4384ee4fb2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2"}]}, {"name": "github.com/proglottis/gpgme", "SPDXID": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ec09e6e39ab43303", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpgme_project:gpgme:v0.1.6:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/proglottis/gpgme@v0.1.6"}]}, {"name": "github.com/seccomp/libseccomp-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-d243c769433a1690", "versionInfo": "v0.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp-golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp_golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/seccomp/libseccomp-golang@v0.11.1"}]}, {"name": "github.com/secure-systems-lab/go-securesystemslib", "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-e9edc67532925589", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0"}]}, {"name": "github.com/sigstore/fulcio", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-06d849b766db6a94", "versionInfo": "v1.8.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:fulcio:v1.8.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/fulcio@v1.8.7"}]}, {"name": "github.com/sigstore/protobuf-specs", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-b47f15d5d6ee8ad7", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1"}]}, {"name": "github.com/sigstore/sigstore", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-b103c3b310790398", "versionInfo": "v1.10.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-55e484050244bc4a", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/smallstep/pkcs7", "SPDXID": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-2d9885d55ed509be", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallstep:pkcs7:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallstep/pkcs7@v0.2.1"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-bd15838927babedd", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-4d2444712f4d8a77", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/stefanberger/go-pkcs11uri", "SPDXID": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-008988f0dc1d4c98", "versionInfo": "v0.0.0-20230803200340-78284954bff6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go-pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go_pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stefanberger/go-pkcs11uri@v0.0.0-20230803200340-78284954bff6"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-26b418bde19402f0", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/tchap/go-patricia/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-f98c64131bff61dd", "versionInfo": "v2.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tchap/go-patricia@v2.3.3#v2"}]}, {"name": "github.com/tonistiigi/dchapes-mode", "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-ceb5009b8623cb05", "versionInfo": "v0.0.0-20250318174251-73d941a28323", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-058069530e5a17bf", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/tar-split", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-e58a6b58787218cc", "versionInfo": "v0.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar-split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar_split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/tar-split@v0.12.3"}]}, {"name": "github.com/vbauerster/cupwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-0f8a8c956b06be13", "versionInfo": "v0.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:cupwriter:v0.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/cupwriter@v0.0.4"}]}, {"name": "github.com/vbauerster/mpb/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-9bcf3cbbfbf1d6da", "versionInfo": "v8.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:mpb\\/v8:v8.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/mpb@v8.14.0#v8"}]}, {"name": "github.com/vishvananda/netlink", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-5fe8b164a137c0a0", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netlink:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netlink@v1.3.1"}]}, {"name": "github.com/vishvananda/netns", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netns-9668e80c35fcfdb2", "versionInfo": "v0.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netns:v0.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netns@v0.0.5"}]}, {"name": "github.com/youmark/pkcs8", "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-50219b4d57b40b0e", "versionInfo": "v0.0.0-20240726163527-a2c0da244d78", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-2b3495ae9384fd6e", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.5.0"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-644a9f38bf175343", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-c8aaf28d6b7ead25", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-40dbda3cbdac5527", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5cf902b4d7f643a5", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-c07296d5518e1b72", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.podman.io/buildah", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "versionInfo": "v0.0.0-20260923000000-4fb41d08cdb1+dirty", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/buildah@v0.0.0-20260923000000-4fb41d08cdb1%2Bdirty"}]}, {"name": "go.podman.io/common", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-common-effffbc07b4da01a", "versionInfo": "v0.69.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/common@v0.69.2"}]}, {"name": "go.podman.io/image/v5", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-image-v5-db0ee5820aa45cc0", "versionInfo": "v5.41.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:image:v5:v5.41.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/image/v5@v5.41.2"}]}, {"name": "go.podman.io/storage", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-storage-7f48f189a90efc95", "versionInfo": "v1.64.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/storage@v1.64.1"}]}, {"name": "go.yaml.in/yaml/v2", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-b11ff046a5d98cf5", "versionInfo": "v2.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-88f52eab21bd0b05", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-2bf904a081541680", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-ab75924e46a93592", "versionInfo": "v0.38.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.38.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.38.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-9b21bc144746bf54", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.57.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-9eb3f867f1c6068b", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-cb5d1f5fce9a15ca", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-88d1129f06039a7c", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-43dc44040642cad5", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-49fe1be2b74946ad", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-42f4ccd8031f38d9", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-f3947ec54f72cd01", "versionInfo": "v1.82.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.82.1"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-fd9d4e70117b8c33", "versionInfo": "v1.36.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-437cd1f6145ff21b", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "sigs.k8s.io/yaml", "SPDXID": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-7685871814ed86c0", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-18bf1c9a5f65bcf3", "versionInfo": "go1.27.1-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.1-X%3Anodwarf5"}]}, {"name": "tags.cncf.io/container-device-interface", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-5e7676468b27e0c7", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0"}]}, {"name": "tags.cncf.io/container-device-interface/specs-go", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-0bcce4228c38676e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface/specs-go@v1.1.0"}]}, {"name": "rpm-extracted/buildah-1.45.1-1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "./.github/workflows/lima.yml", "SPDXID": "SPDXRef-Package-github-action-workflow-.-.github-workflows-lima.yml-15a82663c9dba3c9", "versionInfo": "UNKNOWN", "supplier": "Organization: .", "originator": "Organization: .", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:.\\/.github\\/workflows\\/lima.yml:.\\/.github\\/workflows\\/lima.yml:*:*:*:*:*:*:*:*"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-ce9d12084d1daaed", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/checkout", "SPDXID": "SPDXRef-Package-github-action-actions-checkout-13b3c98fc1379020", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/lima.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/checkout@v7.0.1"}]}, {"name": "actions/setup-go", "SPDXID": "SPDXRef-Package-github-action-actions-setup-go-b3faae15ddb8a4c7", "versionInfo": "v7.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/setup-go@v7.0.0"}]}, {"name": "actions/stale", "SPDXID": "SPDXRef-Package-github-action-actions-stale-04f27f671e49a252", "versionInfo": "v11.0.0", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/stale.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/stale:actions\\/stale:v11.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/stale@v11.0.0"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-1c57fd226530a50d", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v7.0.1"}]}, {"name": "actions/upload-artifact", "SPDXID": "SPDXRef-Package-github-action-actions-upload-artifact-0dff52be73641f10", "versionInfo": "v7.0.1", "supplier": "Organization: GitHub", "originator": "Organization: GitHub", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/lima.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/actions/upload-artifact@v7.0.1"}]}, {"name": "codespell", "SPDXID": "SPDXRef-Package-python-codespell-90cdfc7d885a6555", "versionInfo": "2.4.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from installed python package manifest file: /buildah-1.45.1/vendor/go.opentelemetry.io/otel/requirements.txt", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python-codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python_codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python-codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:python_codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:codespell:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:python:codespell:2.4.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:pypi/codespell@2.4.2"}]}, {"name": "cyphar.com/go-pathrs", "SPDXID": "SPDXRef-Package-go-module-cyphar.com-go-pathrs-2d8e4ec86d2e5382", "versionInfo": "v0.2.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cyphar.com/go-pathrs@v0.2.5"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-bb7ea264dc855694", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "dorny/paths-filter", "SPDXID": "SPDXRef-Package-github-action-dorny-paths-filter-611f48a2055c57a6", "versionInfo": "v4.0.2", "supplier": "Organization: dorny", "originator": "Organization: dorny", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/ci.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths-filter:dorny\\/paths-filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths-filter:dorny\\/paths_filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths_filter:dorny\\/paths-filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths_filter:dorny\\/paths_filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths:dorny\\/paths-filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dorny\\/paths:dorny\\/paths_filter:v4.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/dorny/paths-filter@v4.0.2"}]}, {"name": "github.com/Azure/go-ansiterm", "SPDXID": "SPDXRef-Package-go-module-github.com-Azure-go-ansiterm-6bea16b82bcc34e8", "versionInfo": "v0.0.0-20250102033503-faa5f7b0171c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go-ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Azure:go_ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d32685516e140603", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/Microsoft/go-winio", "SPDXID": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-59cafe4b91df1cf1", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:go-winio:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Microsoft:go_winio:v0.6.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-23f68f22a35fcae5", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/VividCortex/ewma", "SPDXID": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-06ba2bb85d7db359", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/VividCortex/ewma@v1.2.0"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-55b983922c9b1f8f", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/aead/serpent", "SPDXID": "SPDXRef-Package-go-module-github.com-aead-serpent-f32a1a590756ecf5", "versionInfo": "v0.0.0-20160714141033-fba169763ea6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a9e87098c205ea17", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/chzyer/readline", "SPDXID": "SPDXRef-Package-go-module-github.com-chzyer-readline-ea3c8d91ff897fe6", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chzyer:readline:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/chzyer/readline@v1.5.1"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8979a333bb24fb3b", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e1be76f73421a35f", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-0252838cbbb07f3e", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fdaf37d35db282f5", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-64de32bccd000255", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-f71bc177852bb0ec", "versionInfo": "v1.0.0-rc.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4"}]}, {"name": "github.com/containerd/stargz-snapshotter/estargz", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-2fe9b3a2c1e710e7", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/stargz-snapshotter@v0.18.2#estargz"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-84b8482d66366887", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/containers/libtrust", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-libtrust-675d43ee0d59d44a", "versionInfo": "v0.0.0-20230121012942-c1716e8a8d01", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:libtrust:v0.0.0-20230121012942-c1716e8a8d01:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/libtrust@v0.0.0-20230121012942-c1716e8a8d01"}]}, {"name": "github.com/containers/luksy", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-luksy-fab6ac09e5fdfcd9", "versionInfo": "v0.0.0-20251208191447-ca096313c38f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:luksy:v0.0.0-20251208191447-ca096313c38f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/luksy@v0.0.0-20251208191447-ca096313c38f"}]}, {"name": "github.com/containers/ocicrypt", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-7d54cc1d2f0cf937", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:ocicrypt:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/ocicrypt@v1.3.2"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-dc3a5de68ba3a95d", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/cpuguy83/go-md2man/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cpuguy83-go-md2man-v2-8541acd97ec83901", "versionInfo": "v2.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/tests/tools/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cpuguy83:go_md2man\\/v2:v2.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cpuguy83/go-md2man@v2.0.4#v2"}]}, {"name": "github.com/cyberphone/json-canonicalization", "SPDXID": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-76e06993d0f0c08e", "versionInfo": "v0.0.0-20241213102144-19d51d7fe467", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f8fcfa03fbcf24fe", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/davecgh/go-spew", "SPDXID": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-262622bf95c8865c", "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"}]}, {"name": "github.com/disiqueira/gotree/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-d84dc1568812a310", "versionInfo": "v3.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:disiqueira:gotree\\/v3:v3.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/disiqueira/gotree@v3.0.2#v3"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-e48a8505fd267500", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/distribution", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-distribution-5b8ce5965703947b", "versionInfo": "v2.8.3+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-63c5ebe7885ef18d", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-dfac74681558c2d8", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-1f460b1805fe5c3c", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-22c346abff5e71aa", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-4e2185f4fcb4c512", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsouza/go-dockerclient", "SPDXID": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-c954f8996149cb7a", "versionInfo": "v1.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go-dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go_dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsouza/go-dockerclient@v1.13.2"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cd8e5a71669b8eaa", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-0e5964a7ba20da05", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-cdebc2e8006c92cc", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/godbus/dbus/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-c57363089f17a748", "versionInfo": "v5.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:godbus:dbus\\/v5:v5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/godbus/dbus@v5.2.2#v5"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-3c6d280ffe97a035", "versionInfo": "v0.21.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.21.6"}]}, {"name": "github.com/google/go-intervals", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-intervals-d7f354a04a4c6880", "versionInfo": "v0.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-intervals@v0.0.2"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-d6bc6c47287c2f41", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-87b8ff0a59e2e3c6", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-596cc87a8ff1183e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-19e3ecfb81a0d2bc", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/inconshreveable/mousetrap", "SPDXID": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-6accf35c39498b1e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-b1e1b8476b551d13", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-508911173678cba3", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-02da361f7eaac64a", "versionInfo": "v1.19.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.19.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.19.1"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-d6f43d57d72aea1c", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/kr/fs", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-fs-874b8e48251aabf6", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:fs:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/fs@v0.1.0"}]}, {"name": "github.com/manifoldco/promptui", "SPDXID": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-73a371a9b058a18c", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:manifoldco:promptui:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/manifoldco/promptui@v0.9.0"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d8112a4cda175f3c", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mattn/go-shellwords", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-00228dc90922d7a8", "versionInfo": "v1.0.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.14"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-83ea74103aea903a", "versionInfo": "v1.14.48", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.48"}]}, {"name": "github.com/miekg/pkcs11", "SPDXID": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-dc5b826e6f14bbe9", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:miekg:pkcs11:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/miekg/pkcs11@v1.1.2"}]}, {"name": "github.com/mistifyio/go-zfs/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-174ae057fa81b631", "versionInfo": "v4.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go-zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go_zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mistifyio/go-zfs@v4.0.0#v4"}]}, {"name": "github.com/moby/buildkit", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-25f139ca82311e66", "versionInfo": "v0.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-861b2232b9b63ca1", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/go-archive", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-ff1d97ee9e90217b", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-d68b54481da65a50", "versionInfo": "v1.55.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.55.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-4436f2b2794cb57d", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.5.1#client"}]}, {"name": "github.com/moby/patternmatcher", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-32bd7ae500ba8634", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"}]}, {"name": "github.com/moby/sys/capability", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d2489a1dc937ae05", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#capability"}]}, {"name": "github.com/moby/sys/devices", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-devices-7ef390d738a70f55", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/devices:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#devices"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-2ea99c0c77bf9ebc", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-9e79f6582c7104e4", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.0#sequential"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-72ffaed3df287dfe", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-fb077919511efaf2", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/moby/term", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-3099125c5a87befb", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ad008ccfda82364", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-62ad0a986b9411dc", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/opencontainers/cgroups", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c4db25b2532edbe7", "versionInfo": "v0.0.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:cgroups:v0.0.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/cgroups@v0.0.8"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-39820517e2ec8bc2", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-fc8a990ed94de460", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runc", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runc-1efa7d3515126922", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runc:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runc@v1.5.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-49c66f63cdf58c81", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/opencontainers/runtime-tools", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-64a82c01af80da5e", "versionInfo": "v0.9.1-0.20260316125833-8a4db579f5c8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-tools@v0.9.1-0.20260316125833-8a4db579f5c8"}]}, {"name": "github.com/opencontainers/selinux", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-7387e4f3f706d28f", "versionInfo": "v1.15.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:selinux:v1.15.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/selinux@v1.15.1"}]}, {"name": "github.com/openshift/imagebuilder", "SPDXID": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-81b345862fd745b5", "versionInfo": "v1.2.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openshift:imagebuilder:v1.2.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openshift/imagebuilder@v1.2.21"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-474bf2f388afe342", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/sftp", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-sftp-12ea976afd3c9be6", "versionInfo": "v1.13.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:sftp:v1.13.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/sftp@v1.13.11"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-b15c3f1db2032118", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/pmezard/go-difflib", "SPDXID": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-25963aceaa6dfd23", "versionInfo": "v1.0.1-0.20181226105442-5d4384ee4fb2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2"}]}, {"name": "github.com/proglottis/gpgme", "SPDXID": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ff56132de51ac46c", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpgme_project:gpgme:v0.1.6:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/proglottis/gpgme@v0.1.6"}]}, {"name": "github.com/russross/blackfriday/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-russross-blackfriday-v2-ca0b42e616d3a00a", "versionInfo": "v2.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/tests/tools/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:russross:blackfriday\\/v2:v2.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/russross/blackfriday@v2.1.0#v2"}]}, {"name": "github.com/seccomp/libseccomp-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-a5cb543cf0960336", "versionInfo": "v0.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp-golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp_golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/seccomp/libseccomp-golang@v0.11.1"}]}, {"name": "github.com/secure-systems-lab/go-securesystemslib", "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-2c219eddaf3f07cd", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0"}]}, {"name": "github.com/sigstore/fulcio", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-3b8471856bdaf854", "versionInfo": "v1.8.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:fulcio:v1.8.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/fulcio@v1.8.7"}]}, {"name": "github.com/sigstore/protobuf-specs", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-74889e271e2caf3d", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1"}]}, {"name": "github.com/sigstore/sigstore", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-f3c4f942d1d27a73", "versionInfo": "v1.10.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-9fc7888039937818", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/smallstep/pkcs7", "SPDXID": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-02b22be6cb71a71a", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallstep:pkcs7:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallstep/pkcs7@v0.2.1"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-701c746189c7eb97", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-a1fe40363b85f0e2", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/stefanberger/go-pkcs11uri", "SPDXID": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-0ab52bead0039fd9", "versionInfo": "v0.0.0-20230803200340-78284954bff6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go-pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go_pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stefanberger/go-pkcs11uri@v0.0.0-20230803200340-78284954bff6"}]}, {"name": "github.com/stretchr/testify", "SPDXID": "SPDXRef-Package-go-module-github.com-stretchr-testify-e1f9a8f1eeda28da", "versionInfo": "v1.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stretchr:testify:v1.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.11.1"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e3211d5469af8c26", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/tchap/go-patricia/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-6df09934d5ac3fdd", "versionInfo": "v2.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tchap/go-patricia@v2.3.3#v2"}]}, {"name": "github.com/tonistiigi/dchapes-mode", "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2832745d82445e27", "versionInfo": "v0.0.0-20250318174251-73d941a28323", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-bfaf5559d1935089", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/tar-split", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-dc04ca8c69b0ef96", "versionInfo": "v0.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar-split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar_split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/tar-split@v0.12.3"}]}, {"name": "github.com/vbauerster/cupwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-a5d802201b35ea8c", "versionInfo": "v0.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:cupwriter:v0.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/cupwriter@v0.0.4"}]}, {"name": "github.com/vbauerster/mpb/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-3612c02f29a75362", "versionInfo": "v8.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:mpb\\/v8:v8.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/mpb@v8.14.0#v8"}]}, {"name": "github.com/vishvananda/netlink", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-a75c27634d6eac1f", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netlink:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netlink@v1.3.1"}]}, {"name": "github.com/vishvananda/netns", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netns-53c4e6214f2cc0f7", "versionInfo": "v0.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netns:v0.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netns@v0.0.5"}]}, {"name": "github.com/youmark/pkcs8", "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-d7ecada3f86576aa", "versionInfo": "v0.0.0-20240726163527-a2c0da244d78", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-053aa1d76845cfe0", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.5.0"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dff33bba7b72fa5f", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8bc51ea2f12f3837", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8031c1a1c2921dde", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-3452f5fe9f6690fd", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-460abf6e1309fb4a", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.podman.io/common", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-common-21236ecfcd1c15ca", "versionInfo": "v0.69.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/common@v0.69.2"}]}, {"name": "go.podman.io/image/v5", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-image-v5-ce30e55fd246afdf", "versionInfo": "v5.41.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:image:v5:v5.41.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/image/v5@v5.41.2"}]}, {"name": "go.podman.io/storage", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-storage-41ee67f7b84eb07a", "versionInfo": "v1.64.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/storage@v1.64.1"}]}, {"name": "go.yaml.in/yaml/v2", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-0aba9b8903bc6dd6", "versionInfo": "v2.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5d4e4539d61c9e54", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-4d18e88db2531fed", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-62825d283e5b165a", "versionInfo": "v0.38.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.38.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.38.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-e09b530c0eb878f7", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.57.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-2a85c5ac5f84c365", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-06a691dc2819f8aa", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-fc8984f0380c7b24", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-40bcae7fb951c375", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-0c7a66d3277dd6ea", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5166c6dbad928efe", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-8a5147188280b8ba", "versionInfo": "v1.82.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.82.1"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-c6c431023327850f", "versionInfo": "v1.36.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-616958b158d1a1b8", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "k8s.io/klog", "SPDXID": "SPDXRef-Package-go-module-k8s.io-klog-c6175f681b47d672", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/klog@v1.0.0"}]}, {"name": "lima-vm/lima-actions/setup", "SPDXID": "SPDXRef-Package-github-action-lima-vm-lima-actions-setup-61d7289d94fb9c5f", "versionInfo": "v1.1.0", "supplier": "Organization: lima-vm", "originator": "Organization: lima-vm", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/lima.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima-vm\\/lima-actions\\/setup:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima-vm\\/lima-actions\\/setup:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima_vm\\/lima_actions\\/setup:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima_vm\\/lima_actions\\/setup:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima-vm\\/lima:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima-vm\\/lima:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima_vm\\/lima:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima_vm\\/lima:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima:lima-vm\\/lima-actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lima:lima_vm\\/lima_actions\\/setup:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/lima-vm/lima-actions@v1.1.0#setup"}]}, {"name": "podman-container-tools/podman/.github/workflows/issue_pr_lock.yml", "SPDXID": "SPDXRef-Package-github-action-workflow-podman-container-tools-podman-.github-workflows-issue-pr-lock.yml-d1635a02b62bddcc", "versionInfo": "main", "supplier": "Organization: podman-container-tools", "originator": "Organization: podman-container-tools", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from GitHub Actions workflow file or composite action file: /buildah-1.45.1/.github/workflows/issue_pr_lock.yml", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container-tools\\/podman\\/.github\\/workflows\\/issue:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container_tools\\/podman\\/.github\\/workflows\\/issue:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman-container:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman_container:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman:podman-container-tools\\/podman\\/.github\\/workflows\\/issue-pr-lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman:podman-container-tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:podman:podman_container_tools\\/podman\\/.github\\/workflows\\/issue_pr_lock.yml:main:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:github/podman-container-tools/podman@main#.github/workflows/issue_pr_lock.yml"}]}, {"name": "sigs.k8s.io/yaml", "SPDXID": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-d050975696bfbe02", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"}]}, {"name": "tags.cncf.io/container-device-interface", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-3167543e7b3246f7", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0"}]}, {"name": "tags.cncf.io/container-device-interface/specs-go", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-6255947a73f8217d", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /buildah-1.45.1/go.mod", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface/specs-go@v1.1.0"}]}, {"name": "rpm-extracted/buildah-1.45.1-1.hum1.src", "SPDXID": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-361092e7ceefb4f8", "versionInfo": "1.45.1-1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/buildah-1.45.1-1.hum1.aarch64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/buildah-debuginfo-1.45.1-1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/buildah-debugsource-1.45.1-1.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-e432e535eda4caa4", "versionInfo": "1.45.1-1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.hum1?distro=hummingbird-1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-41989ad2871db53e", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d07f37b6e1339aa8", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-949ddf060b91f752", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/VividCortex/ewma", "SPDXID": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-36aeee05447c4ab0", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:VividCortex:ewma:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/VividCortex/ewma@v1.2.0"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-e403980d946d121a", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/aead/serpent", "SPDXID": "SPDXRef-Package-go-module-github.com-aead-serpent-af5590b5dd4db618", "versionInfo": "v0.0.0-20160714141033-fba169763ea6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aead:serpent:v0.0.0-20160714141033-fba169763ea6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aead/serpent@v0.0.0-20160714141033-fba169763ea6"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-fd0814a7cfd4d300", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/chzyer/readline", "SPDXID": "SPDXRef-Package-go-module-github.com-chzyer-readline-5273ed25852bfdd2", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:chzyer:readline:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/chzyer/readline@v1.5.1"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-5d60d4cf63c0dff5", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-1788891df78e60ba", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-226e18814eec20ca", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-4c8ea025138615b5", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-b6d394f68f80d670", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-25e2900ff01ff9a9", "versionInfo": "v1.0.0-rc.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4"}]}, {"name": "github.com/containerd/stargz-snapshotter/estargz", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-aeb6d73bf624ba9e", "versionInfo": "v0.18.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.18.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/stargz-snapshotter@v0.18.2#estargz"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-66b4dcc10355448a", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/containers/libtrust", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-libtrust-1724824fb1d153ff", "versionInfo": "v0.0.0-20230121012942-c1716e8a8d01", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:libtrust:v0.0.0-20230121012942-c1716e8a8d01:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/libtrust@v0.0.0-20230121012942-c1716e8a8d01"}]}, {"name": "github.com/containers/luksy", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-luksy-a842445342ac62eb", "versionInfo": "v0.0.0-20251208191447-ca096313c38f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:luksy:v0.0.0-20251208191447-ca096313c38f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/luksy@v0.0.0-20251208191447-ca096313c38f"}]}, {"name": "github.com/containers/ocicrypt", "SPDXID": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-8c5e760c763a89d7", "versionInfo": "v1.3.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containers:ocicrypt:v1.3.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containers/ocicrypt@v1.3.2"}]}, {"name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-f14ddd73fcd5ff71", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go-systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:coreos:go_systemd\\/v22:v22.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd@v22.7.0#v22"}]}, {"name": "github.com/cyberphone/json-canonicalization", "SPDXID": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-fa3966549e55ab0b", "versionInfo": "v0.0.0-20241213102144-19d51d7fe467", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-baeb122803413873", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/davecgh/go-spew", "SPDXID": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-6207381a96baefa6", "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"}]}, {"name": "github.com/disiqueira/gotree/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-00a0c6e84b351a87", "versionInfo": "v3.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:disiqueira:gotree\\/v3:v3.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/disiqueira/gotree@v3.0.2#v3"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-ea8ebebb4b7aa971", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/distribution", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-distribution-4afc5fe58b044531", "versionInfo": "v2.8.3+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-8077a3b6bcc178f0", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-fca16dee1a8331f2", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-24432990ab191c14", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-9d859641c62c0e12", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-e05158d78b3754f5", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/fsouza/go-dockerclient", "SPDXID": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-1eadb40fd9d13a92", "versionInfo": "v1.13.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go-dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsouza:go_dockerclient:v1.13.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsouza/go-dockerclient@v1.13.2"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-d654ce2280aeddc7", "versionInfo": "v4.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.4#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-f1fafbe9eb2e18e5", "versionInfo": "v1.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-66c7abcb21f72053", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/godbus/dbus/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-47230d7a16bd104a", "versionInfo": "v5.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:godbus:dbus\\/v5:v5.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/godbus/dbus@v5.2.2#v5"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-e6e5c9f8c1609ace", "versionInfo": "v0.21.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.21.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.21.6"}]}, {"name": "github.com/google/go-intervals", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-intervals-0546a289d7d86cf2", "versionInfo": "v0.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_intervals:v0.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-intervals@v0.0.2"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-0487d9137d5af310", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/gorilla/mux", "SPDXID": "SPDXRef-Package-go-module-github.com-gorilla-mux-ea6c1c5105b08b74", "versionInfo": "v1.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gorilla:mux:v1.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-c17da1d53c007079", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-808b2358ad306d78", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-3910c12acc78f456", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-d2c53bc784b1e8a3", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-a2167bd71dd0405e", "versionInfo": "v1.19.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.19.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.19.1"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-ffa3e11f5503b60c", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/kr/fs", "SPDXID": "SPDXRef-Package-go-module-github.com-kr-fs-0d3869515d005fcd", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kr:fs:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kr/fs@v0.1.0"}]}, {"name": "github.com/manifoldco/promptui", "SPDXID": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-423f18e9ba60a2f3", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:manifoldco:promptui:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/manifoldco/promptui@v0.9.0"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-442894307a6ac4ba", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mattn/go-shellwords", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-8ba74b158ef7735d", "versionInfo": "v1.0.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.14"}]}, {"name": "github.com/mattn/go-sqlite3", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-46cf5a6c2a777ac5", "versionInfo": "v1.14.48", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_sqlite3:v1.14.48:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.48"}]}, {"name": "github.com/miekg/pkcs11", "SPDXID": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-2ae073f95f5dcbab", "versionInfo": "v1.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:miekg:pkcs11:v1.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/miekg/pkcs11@v1.1.2"}]}, {"name": "github.com/mistifyio/go-zfs/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-8fdf256491d18190", "versionInfo": "v4.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go-zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mistifyio:go_zfs\\/v4:v4.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mistifyio/go-zfs@v4.0.0#v4"}]}, {"name": "github.com/moby/buildkit", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-f75abc4d8715100c", "versionInfo": "v0.31.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-b9ea2afb902b7a46", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/go-archive", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-abb22cfbcde57e9d", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-dd6c99ad19702059", "versionInfo": "v1.55.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.55.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-5b6c282ddf51af8f", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.5.1#client"}]}, {"name": "github.com/moby/patternmatcher", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-9d722e4923eac748", "versionInfo": "v0.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"}]}, {"name": "github.com/moby/sys/capability", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-8873853d09303780", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.0#capability"}]}, {"name": "github.com/moby/sys/devices", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-devices-3b7338fb4ef313c9", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/devices:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#devices"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-82f6463fedab13a3", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/sequential", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-6ea15c528b96f632", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.0#sequential"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-00619f9dc7b7be37", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-d5aa7f10a247bc5c", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.1.0#userns"}]}, {"name": "github.com/moby/term", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-08f216ade11269aa", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-a7d6e30792f4cb65", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-a98115e653c9dcfa", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/opencontainers/cgroups", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-8e558ec43d119e4c", "versionInfo": "v0.0.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:cgroups:v0.0.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/cgroups@v0.0.8"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-5471acfe5f417861", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-578df652c8030eb2", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runc", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runc-ced4c04a2741aef3", "versionInfo": "v1.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runc:v1.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runc@v1.5.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-459668f39ed2b5f5", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/opencontainers/runtime-tools", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-ec87c36eb513e5eb", "versionInfo": "v0.9.1-0.20260316125833-8a4db579f5c8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_tools:v0.9.1-0.20260316125833-8a4db579f5c8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-tools@v0.9.1-0.20260316125833-8a4db579f5c8"}]}, {"name": "github.com/opencontainers/selinux", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-5d98fc10c114fa7a", "versionInfo": "v1.15.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:selinux:v1.15.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/selinux@v1.15.1"}]}, {"name": "github.com/openshift/imagebuilder", "SPDXID": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-2fd75220425b7913", "versionInfo": "v1.2.21", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:openshift:imagebuilder:v1.2.21:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/openshift/imagebuilder@v1.2.21"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-2f71b7bce830c213", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/sftp", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-sftp-b9bcfea3bc917029", "versionInfo": "v1.13.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:sftp:v1.13.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/sftp@v1.13.11"}]}, {"name": "github.com/planetscale/vtprotobuf", "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-9bb352a8a03718a6", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"}]}, {"name": "github.com/pmezard/go-difflib", "SPDXID": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-ec2c4fb6a667ab64", "versionInfo": "v1.0.1-0.20181226105442-5d4384ee4fb2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go-difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pmezard:go_difflib:v1.0.1-0.20181226105442-5d4384ee4fb2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2"}]}, {"name": "github.com/proglottis/gpgme", "SPDXID": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-a68e774487006af9", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpgme_project:gpgme:v0.1.6:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/proglottis/gpgme@v0.1.6"}]}, {"name": "github.com/seccomp/libseccomp-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-63b76d178cea917e", "versionInfo": "v0.11.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp-golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:seccomp:libseccomp_golang:v0.11.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/seccomp/libseccomp-golang@v0.11.1"}]}, {"name": "github.com/secure-systems-lab/go-securesystemslib", "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-51cf20844aa37d2b", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0"}]}, {"name": "github.com/sigstore/fulcio", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-af4dbe58754af1be", "versionInfo": "v1.8.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:fulcio:v1.8.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/fulcio@v1.8.7"}]}, {"name": "github.com/sigstore/protobuf-specs", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-f8b74dfac7baafe5", "versionInfo": "v0.5.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1"}]}, {"name": "github.com/sigstore/sigstore", "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-97e82a525dab1122", "versionInfo": "v1.10.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-836e2fda726e5dcc", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"}]}, {"name": "github.com/smallstep/pkcs7", "SPDXID": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-3688341cd2ce0244", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallstep:pkcs7:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallstep/pkcs7@v0.2.1"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-407dbfd6ce973153", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-21b0326a88a88881", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/stefanberger/go-pkcs11uri", "SPDXID": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-3734a77fddb474de", "versionInfo": "v0.0.0-20230803200340-78284954bff6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go-pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:stefanberger:go_pkcs11uri:v0.0.0-20230803200340-78284954bff6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/stefanberger/go-pkcs11uri@v0.0.0-20230803200340-78284954bff6"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-32d59b34bc16b8e6", "versionInfo": "v2.24.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.1#v2"}]}, {"name": "github.com/tchap/go-patricia/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-ba726535d0f58773", "versionInfo": "v2.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tchap/go-patricia@v2.3.3#v2"}]}, {"name": "github.com/tonistiigi/dchapes-mode", "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2071e5d9b75c1c8b", "versionInfo": "v0.0.0-20250318174251-73d941a28323", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-8fdf9d428147f1c5", "versionInfo": "v0.5.16", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.16:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.16"}]}, {"name": "github.com/vbatts/tar-split", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-db8457e5fea9e92a", "versionInfo": "v0.12.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar-split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:tar_split:v0.12.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/tar-split@v0.12.3"}]}, {"name": "github.com/vbauerster/cupwriter", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-34d8ea370a481811", "versionInfo": "v0.0.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:cupwriter:v0.0.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/cupwriter@v0.0.4"}]}, {"name": "github.com/vbauerster/mpb/v8", "SPDXID": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-28569dae89a41674", "versionInfo": "v8.14.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbauerster:mpb\\/v8:v8.14.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbauerster/mpb@v8.14.0#v8"}]}, {"name": "github.com/vishvananda/netlink", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-ccc13fe98b4bf2e2", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netlink:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netlink@v1.3.1"}]}, {"name": "github.com/vishvananda/netns", "SPDXID": "SPDXRef-Package-go-module-github.com-vishvananda-netns-71c9da174019d148", "versionInfo": "v0.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vishvananda:netns:v0.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vishvananda/netns@v0.0.5"}]}, {"name": "github.com/youmark/pkcs8", "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-706fece5b47750b4", "versionInfo": "v0.0.0-20240726163527-a2c0da244d78", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78"}]}, {"name": "go.etcd.io/bbolt", "SPDXID": "SPDXRef-Package-go-module-go.etcd.io-bbolt-051bafa2ae406568", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.5.0"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-987018a052eff2bd", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-721f75215a20d377", "versionInfo": "v0.69.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.69.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-3247def4e49f8c21", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-8faecbf87cc8ad67", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-920967d6378466b8", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0"}]}, {"name": "go.podman.io/buildah", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "versionInfo": "v0.0.0-20260923000000-4fb41d08cdb1+dirty", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/buildah@v0.0.0-20260923000000-4fb41d08cdb1%2Bdirty"}]}, {"name": "go.podman.io/common", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-common-c3fc0512ee7f1bd8", "versionInfo": "v0.69.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/common@v0.69.2"}]}, {"name": "go.podman.io/image/v5", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-image-v5-dd3311a0cfa453e2", "versionInfo": "v5.41.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:image:v5:v5.41.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/image/v5@v5.41.2"}]}, {"name": "go.podman.io/storage", "SPDXID": "SPDXRef-Package-go-module-go.podman.io-storage-4549f1c6a19e4427", "versionInfo": "v1.64.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.podman.io/storage@v1.64.1"}]}, {"name": "go.yaml.in/yaml/v2", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-43fbbe0ba9faf73b", "versionInfo": "v2.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-549b3ec69cc2c733", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-d0f63ff19acaad9a", "versionInfo": "v0.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.56.0"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-795d9f1dc7220df8", "versionInfo": "v0.38.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.38.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.38.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-3e468402d1d2844e", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.57.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-8b570638416d90f5", "versionInfo": "v0.22.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.22.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.22.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-68319a98f16072cc", "versionInfo": "v0.47.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.47.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.47.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-916e1008a79f523e", "versionInfo": "v0.45.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.45.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.45.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-be4dc5464372d1db", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.41.0"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-b340ee8474323dff", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-be07d38269c228af", "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260526163538-3dc84a4a5aaa#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-978dc6e3c84421f7", "versionInfo": "v1.82.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.82.1"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-04b5083fab4a1aad", "versionInfo": "v1.36.11", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11"}]}, {"name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-4ff7e7f3f36d0561", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"}]}, {"name": "sigs.k8s.io/yaml", "SPDXID": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-6c1d7cb3b49d583e", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-18bf1c9a5f65bcf3", "versionInfo": "go1.27.1-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.1-X%3Anodwarf5"}]}, {"name": "tags.cncf.io/container-device-interface", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-c62435b9f3bb8275", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0"}]}, {"name": "tags.cncf.io/container-device-interface/specs-go", "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-e25039af96c032dc", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/buildah", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device-interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device_interface:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container-device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container_device:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs-go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:container:specs_go:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface/specs-go@v1.1.0"}]}, {"name": "rpm-extracted/buildah-1.45.1-1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "buildah", "SPDXID": "SPDXRef-Package-rpm-buildah-938602271f40b50d", "versionInfo": "1.45.1-1.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/buildah-1.45.1-1.hum1.x86_64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:buildah:buildah:1.45.1-1.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/buildah@1.45.1-1.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/buildah-debuginfo-1.45.1-1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/buildah-debugsource-1.45.1-1.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "usr/bin/buildah", "SPDXID": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d3204ebd9211b16e493eba3217080d9bfb57d739"}, {"algorithm": "SHA256", "checksumValue": "17c624bd6f72330066e87b0fff03f1162fa612c03a9c18047eba613a892783e7"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/.github/workflows/ci.yml", "SPDXID": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "fb1ffe039b8d9f75643e9ac04a7eb2e7aee27751"}, {"algorithm": "SHA256", "checksumValue": "557675ab96c21d6d74b299b0524cc3ef86ef44246acc86ba97a2004e5a342c20"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/.github/workflows/issue_pr_lock.yml", "SPDXID": "SPDXRef-File-....github-workflows-issue-pr-lock.yml-32351997c25d719b", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "8d68a519920bab69a5c95dbda8c8c60baa931366"}, {"algorithm": "SHA256", "checksumValue": "19f3697e86fde828c178255de798c838d40e94d72fcc214868f6c094464ac969"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/.github/workflows/lima.yml", "SPDXID": "SPDXRef-File-....github-workflows-lima.yml-59b5cd4280d1856d", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "0deebc00aceb31b5c69950daa52c4f349ed563dc"}, {"algorithm": "SHA256", "checksumValue": "5f10aa06f1dd37494808fe3ac821765558ce1970e9c6383118e98d3cdfbc8f3c"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/.github/workflows/stale.yml", "SPDXID": "SPDXRef-File-....github-workflows-stale.yml-78b6c7eb36262580", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "9e20d545fdbc6b581622722c5d59e9ea5dac168d"}, {"algorithm": "SHA256", "checksumValue": "a1a701df372cb17f301bb070b4d6e4a0b4d531abc18af38ea8e7479df6e4a16a"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/go.mod", "SPDXID": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d461d739b09be8e8fc12bef8ff027042e0bd3848"}, {"algorithm": "SHA256", "checksumValue": "d787b6b9e9c82757c8c90274af1c5dcb487b9069967c7903a65389b3347acf33"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/tests/tools/go.mod", "SPDXID": "SPDXRef-File-buildah-1.45.1-tests-tools-go.mod-d7854cf55ce9efd9", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "abc01378f84ff42fdeb5e2a7dd1d5c6796a2570d"}, {"algorithm": "SHA256", "checksumValue": "776ebc4dd4f9a39b6bebdc18222d4a15590debd8b8c71a99be4b41ea6eef0028"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "buildah-1.45.1/vendor/go.opentelemetry.io/otel/requirements.txt", "SPDXID": "SPDXRef-File-...otel-requirements.txt-499c8ee119bf2901", "fileTypes": ["TEXT"], "checksums": [{"algorithm": "SHA1", "checksumValue": "caa1c2b45eb780dafb1d51f1af54467690a3e576"}, {"algorithm": "SHA256", "checksumValue": "5870c83413e8bee660f619ac3c8b4f3bdd41a9b347e700530f3d675af3e2d483"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/buildah-1.45.1-1.hum1.aarch64.debug", "SPDXID": "SPDXRef-File-...buildah-1.45.1-1.hum1.aarch64.debug-4748494b6117a539", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f91f8d9da2b314a6c2e40288b9ca64bb8f2ae042"}, {"algorithm": "SHA256", "checksumValue": "7a980657ae14fb8c0215e34a36a0c36f259b3d47f6028100a0b842718f93ce64"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/buildah", "SPDXID": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "8328b722fd1d2529017b9dcfebd462e83b100157"}, {"algorithm": "SHA256", "checksumValue": "eb0a056f1dc850ac83d6ba29e3e05060b4bae32832bcb19725f84f916ccae950"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/buildah-1.45.1-1.hum1.x86_64.debug", "SPDXID": "SPDXRef-File-...bin-buildah-1.45.1-1.hum1.x86-64.debug-bdd2bf78298c838a", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "d6266b4aee047ed917074a2bb9545ceca7a86f99"}, {"algorithm": "SHA256", "checksumValue": "c67c9b17827906b0e687b474ef81e2c3e66450d78e7f3e01725da86048953c75"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-buildah", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-buildah", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-buildah-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-buildah-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-buildah-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-buildah-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cracklib-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-e2fsprogs-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-git-core-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-static-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-less-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfsutil-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libedit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnsl2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpwquality-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-static-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtirpc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-static-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lzo-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-clients-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf16-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf32-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-packaging-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sysprof-capture-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-rpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-shared-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-buildah"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-buildah-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-buildah-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-authselect-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-btrfs-progs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cracklib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-device-mapper-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-e2fsprogs-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-git-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glib2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-static-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgme-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-less-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfsutil-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbtrfs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnsl2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpwquality-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-static-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libseccomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtirpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-static-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lzo-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-clients-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-utf32-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-packaging-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-subid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sysprof-capture-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-shared-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-buildah"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-buildah-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-buildah-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-buildah-debugsource"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-008988f0dc1d4c98", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-03a6e2ff57125770", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-04bf7f44f9ba8068", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-058069530e5a17bf", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-06d849b766db6a94", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-0bcce4228c38676e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-0e5a23f407d5e115", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-0f8a8c956b06be13", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-12f5eab5bedb7d98", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-18bf1c9a5f65bcf3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-1966e31bf3f30b7a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-1f98d46e35a1e925", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-25d9f0f5bebad7db", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-26b418bde19402f0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-2b3495ae9384fd6e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-2bf904a081541680", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-2d9885d55ed509be", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-3098cefad10c2669", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-342179f98048cef6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-3447db9f80ac54b8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-34748cadfdda19c3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-37d50429c2b45782", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-3b38bfe0a0c545d0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-3b65ba67049ddf51", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-3ced1cbf76892c3a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-3e056be15145eb43", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-3f2cdf8bcd5b1e7a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-40dbda3cbdac5527", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4161c9f3dc5aa5bb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-42f4ccd8031f38d9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-437cd1f6145ff21b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-43dc44040642cad5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-4489290dd7839895", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-465c24b3f24b21ee", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-49fe1be2b74946ad", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-4d2444712f4d8a77", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-4e1b564b9bc9a8ea", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-5006b69854fd03c4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-50219b4d57b40b0e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-55e484050244bc4a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-5725028a312ac153", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-5a26aade61b2ef58", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5cf902b4d7f643a5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-5e7676468b27e0c7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-5fe8b164a137c0a0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-6417ba8ca93891bc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-644a9f38bf175343", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-654264cc8419162f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-657bd1d518a2092d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-6737de6b11aff650", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-689125eba8c42d96", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-68e3ec0ba66c6212", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-6c861c235e4b5969", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-7558cbbf0035441f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-7685871814ed86c0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-78aac71fbe2c005d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-7bcb23b0a548cb52", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-7dbad719d0bb6e9a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-7f48f189a90efc95", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-81cb40e416811090", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-81d30ea18cac02af", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-85a87ece340edbb0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-88d1129f06039a7c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-88f52eab21bd0b05", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-8a4913288aa8f329", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-8b41e110c9e16334", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-8b530cf1c9d7677b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-8bc6cc5b6d55aa49", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-8cd33f54242fa772", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-923f88a8ad9a5c4a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-9668e80c35fcfdb2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-9879e72e06478787", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-99cd01c2e3eef726", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-9b21bc144746bf54", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-9bcf3cbbfbf1d6da", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-9e01bb80b7422514", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-9eb3f867f1c6068b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-a01375742c05bc1e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-a014df5be22acadc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-ab75924e46a93592", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-ad2d53540b601a8a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-adaf17b90ec898b3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-af5b9c506d9a1898", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-b103c3b310790398", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-b11ff046a5d98cf5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-b47f15d5d6ee8ad7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-b6d4323e929ffb28", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-b8e3ef78b8b91cbc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-b95bc8326475d2f9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-bd15838927babedd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-be45fc04c00ce120", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-c07296d5518e1b72", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-c126525c4dc0c023", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-c4c180e9dc17900c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-c6322125d200d511", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c7aa569cde1d6736", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-c8aaf28d6b7ead25", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-c8d7c157aa1f567a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-c8ea02d0a0a84311", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-cb5d1f5fce9a15ca", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-cbdb2e0b1d975660", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-ce02a5445f19e927", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-ce5ad31eb344ff05", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-ceb5009b8623cb05", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-d243c769433a1690", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-d79f7b35414a39bf", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-da2feed437d6ef78", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-db0ee5820aa45cc0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-dc2d4300fd9ff36d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-e16530d9a6bc75d8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e2525654d67af6f4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-e58a6b58787218cc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-e70b2fbd53a2ed8f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-e9edc67532925589", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ec09e6e39ab43303", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed4dce3e4b59adfd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-effffbc07b4da01a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-f0e82b31a74021c8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-f3947ec54f72cd01", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-f8741d38a8f8bced", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-f90950a4705ef57b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-f9417cac213e88c1", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-f98c64131bff61dd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f9ae71eddc1470bf", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f9f3487a11403b93", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-fb0acd3fa7404114", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-fd67b9900a9220af", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-fd9d4e70117b8c33", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-008988f0dc1d4c98", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-03a6e2ff57125770", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-04bf7f44f9ba8068", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-058069530e5a17bf", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-06d849b766db6a94", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-0bcce4228c38676e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-0e5a23f407d5e115", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-0f520313210379e8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-0f8a8c956b06be13", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-12f5eab5bedb7d98", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-18bf1c9a5f65bcf3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-1966e31bf3f30b7a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-1f98d46e35a1e925", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-25d9f0f5bebad7db", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-26b418bde19402f0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-2b3495ae9384fd6e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-2bf904a081541680", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-2d9885d55ed509be", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-3098cefad10c2669", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-342179f98048cef6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-3447db9f80ac54b8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-34748cadfdda19c3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-37d50429c2b45782", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-3b38bfe0a0c545d0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-3b65ba67049ddf51", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-3ced1cbf76892c3a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-3e056be15145eb43", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-3f2cdf8bcd5b1e7a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-40dbda3cbdac5527", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4161c9f3dc5aa5bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-42f4ccd8031f38d9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-437cd1f6145ff21b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-43dc44040642cad5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-4489290dd7839895", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-465c24b3f24b21ee", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-49fe1be2b74946ad", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-4d2444712f4d8a77", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-4e1b564b9bc9a8ea", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-5006b69854fd03c4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-50219b4d57b40b0e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-55e484050244bc4a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-5725028a312ac153", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-5a26aade61b2ef58", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5cf902b4d7f643a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-5e7676468b27e0c7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-5fe8b164a137c0a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-6417ba8ca93891bc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-644a9f38bf175343", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-654264cc8419162f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-657bd1d518a2092d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-6737de6b11aff650", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-689125eba8c42d96", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-68e3ec0ba66c6212", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-6c861c235e4b5969", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-7558cbbf0035441f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-7685871814ed86c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-78aac71fbe2c005d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-7bcb23b0a548cb52", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-7dbad719d0bb6e9a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-7f48f189a90efc95", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-81cb40e416811090", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-81d30ea18cac02af", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-85a87ece340edbb0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-88d1129f06039a7c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-88f52eab21bd0b05", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-8a4913288aa8f329", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-8b41e110c9e16334", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-8b530cf1c9d7677b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-8bc6cc5b6d55aa49", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-8cd33f54242fa772", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-923f88a8ad9a5c4a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-9668e80c35fcfdb2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-9879e72e06478787", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-99cd01c2e3eef726", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-9b21bc144746bf54", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-9bcf3cbbfbf1d6da", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-9e01bb80b7422514", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-9eb3f867f1c6068b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-a01375742c05bc1e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-a014df5be22acadc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-ab75924e46a93592", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-ad2d53540b601a8a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-adaf17b90ec898b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-af5b9c506d9a1898", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-b103c3b310790398", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-b11ff046a5d98cf5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-b47f15d5d6ee8ad7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-b6d4323e929ffb28", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-b8e3ef78b8b91cbc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-b95bc8326475d2f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-bd15838927babedd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-be45fc04c00ce120", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-c07296d5518e1b72", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-c126525c4dc0c023", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-c4c180e9dc17900c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-c6322125d200d511", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c7aa569cde1d6736", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-c8aaf28d6b7ead25", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-c8d7c157aa1f567a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-c8ea02d0a0a84311", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-cb5d1f5fce9a15ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-cbdb2e0b1d975660", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-ce02a5445f19e927", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-ce5ad31eb344ff05", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-ceb5009b8623cb05", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-d243c769433a1690", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-d79f7b35414a39bf", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-da2feed437d6ef78", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-db0ee5820aa45cc0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-dc2d4300fd9ff36d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-e16530d9a6bc75d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e2525654d67af6f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-e58a6b58787218cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-e70b2fbd53a2ed8f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-e9edc67532925589", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ec09e6e39ab43303", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed4dce3e4b59adfd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-effffbc07b4da01a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-f0e82b31a74021c8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-f3947ec54f72cd01", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-f8741d38a8f8bced", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-f90950a4705ef57b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-f9417cac213e88c1", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-f98c64131bff61dd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f9ae71eddc1470bf", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f9f3487a11403b93", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-fb0acd3fa7404114", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-fd67b9900a9220af", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-fd9d4e70117b8c33", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-0f520313210379e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-3447db9f80ac54b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-1966e31bf3f30b7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-3b38bfe0a0c545d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-37d50429c2b45782", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-6737de6b11aff650", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aead-serpent-3f2cdf8bcd5b1e7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-ad2d53540b601a8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-chzyer-readline-9e01bb80b7422514", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-25d9f0f5bebad7db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e2525654d67af6f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-04bf7f44f9ba8068", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-7558cbbf0035441f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-3ced1cbf76892c3a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-c126525c4dc0c023", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-6417ba8ca93891bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-fb0acd3fa7404114", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-libtrust-657bd1d518a2092d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-luksy-78aac71fbe2c005d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-8a4913288aa8f329", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-ce02a5445f19e927", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-8bc6cc5b6d55aa49", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-1f98d46e35a1e925", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-be45fc04c00ce120", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-0e5a23f407d5e115", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-9879e72e06478787", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-distribution-f90950a4705ef57b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-a01375742c05bc1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-12f5eab5bedb7d98", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-4e1b564b9bc9a8ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-5006b69854fd03c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-f9f3487a11403b93", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-e16530d9a6bc75d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-c6322125d200d511", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-3e056be15145eb43", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-ed4dce3e4b59adfd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-da2feed437d6ef78", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-b8e3ef78b8b91cbc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-intervals-b6d4323e929ffb28", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-99cd01c2e3eef726", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-68e3ec0ba66c6212", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4161c9f3dc5aa5bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-923f88a8ad9a5c4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-8b41e110c9e16334", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-b95bc8326475d2f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-81cb40e416811090", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-8cd33f54242fa772", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-fs-654264cc8419162f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-6c861c235e4b5969", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-03a6e2ff57125770", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-fd67b9900a9220af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-81d30ea18cac02af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-4489290dd7839895", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-689125eba8c42d96", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-342179f98048cef6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-cbdb2e0b1d975660", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-34748cadfdda19c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-5725028a312ac153", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-f8741d38a8f8bced", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-7bcb23b0a548cb52", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-7dbad719d0bb6e9a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-devices-d79f7b35414a39bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-f9417cac213e88c1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-c4c180e9dc17900c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-3098cefad10c2669", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-465c24b3f24b21ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-af5b9c506d9a1898", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-adaf17b90ec898b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-f0e82b31a74021c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c7aa569cde1d6736", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-8b530cf1c9d7677b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-85a87ece340edbb0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runc-ce5ad31eb344ff05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f9ae71eddc1470bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-c8ea02d0a0a84311", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-5a26aade61b2ef58", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-dc2d4300fd9ff36d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-3b65ba67049ddf51", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-sftp-e70b2fbd53a2ed8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-a014df5be22acadc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-c8d7c157aa1f567a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ec09e6e39ab43303", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-d243c769433a1690", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-e9edc67532925589", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-06d849b766db6a94", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-b47f15d5d6ee8ad7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-b103c3b310790398", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-55e484050244bc4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-2d9885d55ed509be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-bd15838927babedd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-4d2444712f4d8a77", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-008988f0dc1d4c98", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-26b418bde19402f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-f98c64131bff61dd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-ceb5009b8623cb05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-058069530e5a17bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-e58a6b58787218cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-0f8a8c956b06be13", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-9bcf3cbbfbf1d6da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-5fe8b164a137c0a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netns-9668e80c35fcfdb2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-50219b4d57b40b0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-2b3495ae9384fd6e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-644a9f38bf175343", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-c8aaf28d6b7ead25", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-40dbda3cbdac5527", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5cf902b4d7f643a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-c07296d5518e1b72", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-ed1f5d9e5965f38e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-common-effffbc07b4da01a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-image-v5-db0ee5820aa45cc0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-storage-7f48f189a90efc95", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-b11ff046a5d98cf5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-88f52eab21bd0b05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-2bf904a081541680", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-ab75924e46a93592", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-9b21bc144746bf54", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-9eb3f867f1c6068b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-cb5d1f5fce9a15ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-88d1129f06039a7c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-43dc44040642cad5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-49fe1be2b74946ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-42f4ccd8031f38d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-f3947ec54f72cd01", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-fd9d4e70117b8c33", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-437cd1f6145ff21b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-7685871814ed86c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-18bf1c9a5f65bcf3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-5e7676468b27e0c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-0bcce4228c38676e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-buildah", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-00228dc90922d7a8", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-0252838cbbb07f3e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-02b22be6cb71a71a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-02da361f7eaac64a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-stale-04f27f671e49a252", "relatedSpdxElement": "SPDXRef-File-....github-workflows-stale.yml-78b6c7eb36262580", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-053aa1d76845cfe0", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-06a691dc2819f8aa", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-06ba2bb85d7db359", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-0ab52bead0039fd9", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-0aba9b8903bc6dd6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-0c7a66d3277dd6ea", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-0dff52be73641f10", "relatedSpdxElement": "SPDXRef-File-....github-workflows-lima.yml-59b5cd4280d1856d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-0e5964a7ba20da05", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-12ea976afd3c9be6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-13b3c98fc1379020", "relatedSpdxElement": "SPDXRef-File-....github-workflows-lima.yml-59b5cd4280d1856d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-.-.github-workflows-lima.yml-15a82663c9dba3c9", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-174ae057fa81b631", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-19e3ecfb81a0d2bc", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-upload-artifact-1c57fd226530a50d", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-1efa7d3515126922", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-1f460b1805fe5c3c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-21236ecfcd1c15ca", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-22c346abff5e71aa", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-23f68f22a35fcae5", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-25963aceaa6dfd23", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-25f139ca82311e66", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-262622bf95c8865c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2832745d82445e27", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-2a85c5ac5f84c365", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-2c219eddaf3f07cd", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cyphar.com-go-pathrs-2d8e4ec86d2e5382", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-2ea99c0c77bf9ebc", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-2fe9b3a2c1e710e7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-3099125c5a87befb", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-3167543e7b3246f7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-32bd7ae500ba8634", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-3452f5fe9f6690fd", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-3612c02f29a75362", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-39820517e2ec8bc2", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-3b8471856bdaf854", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-3c6d280ffe97a035", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-40bcae7fb951c375", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-41ee67f7b84eb07a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-4436f2b2794cb57d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-460abf6e1309fb4a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-474bf2f388afe342", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-49c66f63cdf58c81", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ad008ccfda82364", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-4d18e88db2531fed", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-4e2185f4fcb4c512", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-508911173678cba3", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5166c6dbad928efe", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-53c4e6214f2cc0f7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-55b983922c9b1f8f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-596cc87a8ff1183e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-59cafe4b91df1cf1", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-5b8ce5965703947b", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5d4e4539d61c9e54", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-dorny-paths-filter-611f48a2055c57a6", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-616958b158d1a1b8", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-lima-vm-lima-actions-setup-61d7289d94fb9c5f", "relatedSpdxElement": "SPDXRef-File-....github-workflows-lima.yml-59b5cd4280d1856d", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-6255947a73f8217d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-62825d283e5b165a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-62ad0a986b9411dc", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-63c5ebe7885ef18d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-64a82c01af80da5e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-64de32bccd000255", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-675d43ee0d59d44a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-6accf35c39498b1e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Azure-go-ansiterm-6bea16b82bcc34e8", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-6df09934d5ac3fdd", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-701c746189c7eb97", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-72ffaed3df287dfe", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-7387e4f3f706d28f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-73a371a9b058a18c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-74889e271e2caf3d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-76e06993d0f0c08e", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-7d54cc1d2f0cf937", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-7ef390d738a70f55", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8031c1a1c2921dde", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-81b345862fd745b5", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-83ea74103aea903a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-84b8482d66366887", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cpuguy83-go-md2man-v2-8541acd97ec83901", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-tests-tools-go.mod-d7854cf55ce9efd9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-861b2232b9b63ca1", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-874b8e48251aabf6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-87b8ff0a59e2e3c6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8979a333bb24fb3b", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-8a5147188280b8ba", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8bc51ea2f12f3837", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-python-codespell-90cdfc7d885a6555", "relatedSpdxElement": "SPDXRef-File-...otel-requirements.txt-499c8ee119bf2901", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-9e79f6582c7104e4", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-9fc7888039937818", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-a1fe40363b85f0e2", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-a5cb543cf0960336", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-a5d802201b35ea8c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-a75c27634d6eac1f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a9e87098c205ea17", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-b15c3f1db2032118", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-b1e1b8476b551d13", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-setup-go-b3faae15ddb8a4c7", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-bb7ea264dc855694", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-bfaf5559d1935089", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c4db25b2532edbe7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-c57363089f17a748", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-k8s.io-klog-c6175f681b47d672", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-c6c431023327850f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-c954f8996149cb7a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-russross-blackfriday-v2-ca0b42e616d3a00a", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-tests-tools-go.mod-d7854cf55ce9efd9", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cd8e5a71669b8eaa", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-cdebc2e8006c92cc", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-ce30e55fd246afdf", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-actions-checkout-ce9d12084d1daaed", "relatedSpdxElement": "SPDXRef-File-....github-workflows-ci.yml-c36761807c3b3a00", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-d050975696bfbe02", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-github-action-workflow-podman-container-tools-podman-.github-workflows-issue-pr-lock.yml-d1635a02b62bddcc", "relatedSpdxElement": "SPDXRef-File-....github-workflows-issue-pr-lock.yml-32351997c25d719b", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d2489a1dc937ae05", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d32685516e140603", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-d68b54481da65a50", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-d6bc6c47287c2f41", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-d6f43d57d72aea1c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-d7ecada3f86576aa", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-d7f354a04a4c6880", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d8112a4cda175f3c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-d84dc1568812a310", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-dc04ca8c69b0ef96", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-dc3a5de68ba3a95d", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-dc5b826e6f14bbe9", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-dfac74681558c2d8", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dff33bba7b72fa5f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-e09b530c0eb878f7", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e1be76f73421a35f", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stretchr-testify-e1f9a8f1eeda28da", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e3211d5469af8c26", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-e48a8505fd267500", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-ea3c8d91ff897fe6", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-f32a1a590756ecf5", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-f3c4f942d1d27a73", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-f71bc177852bb0ec", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f8fcfa03fbcf24fe", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-fab6ac09e5fdfcd9", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-fb077919511efaf2", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-fc8984f0380c7b24", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-fc8a990ed94de460", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fdaf37d35db282f5", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-ff1d97ee9e90217b", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ff56132de51ac46c", "relatedSpdxElement": "SPDXRef-File-buildah-1.45.1-go.mod-94fe48d70c66123a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-.-.github-workflows-lima.yml-15a82663c9dba3c9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-ce9d12084d1daaed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-checkout-13b3c98fc1379020", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-setup-go-b3faae15ddb8a4c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-stale-04f27f671e49a252", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-1c57fd226530a50d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-actions-upload-artifact-0dff52be73641f10", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-python-codespell-90cdfc7d885a6555", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-cyphar.com-go-pathrs-2d8e4ec86d2e5382", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-bb7ea264dc855694", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-dorny-paths-filter-611f48a2055c57a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Azure-go-ansiterm-6bea16b82bcc34e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d32685516e140603", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Microsoft-go-winio-59cafe4b91df1cf1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-23f68f22a35fcae5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-06ba2bb85d7db359", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-55b983922c9b1f8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aead-serpent-f32a1a590756ecf5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a9e87098c205ea17", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-chzyer-readline-ea3c8d91ff897fe6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-8979a333bb24fb3b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-e1be76f73421a35f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-0252838cbbb07f3e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-fdaf37d35db282f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-64de32bccd000255", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-f71bc177852bb0ec", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-2fe9b3a2c1e710e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-84b8482d66366887", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-libtrust-675d43ee0d59d44a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-luksy-fab6ac09e5fdfcd9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-7d54cc1d2f0cf937", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-dc3a5de68ba3a95d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cpuguy83-go-md2man-v2-8541acd97ec83901", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-76e06993d0f0c08e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f8fcfa03fbcf24fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-262622bf95c8865c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-d84dc1568812a310", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-e48a8505fd267500", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-distribution-5b8ce5965703947b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-63c5ebe7885ef18d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-dfac74681558c2d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-1f460b1805fe5c3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-22c346abff5e71aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-4e2185f4fcb4c512", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-c954f8996149cb7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-cd8e5a71669b8eaa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-0e5964a7ba20da05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-cdebc2e8006c92cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-c57363089f17a748", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-3c6d280ffe97a035", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-intervals-d7f354a04a4c6880", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-d6bc6c47287c2f41", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-87b8ff0a59e2e3c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-596cc87a8ff1183e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-19e3ecfb81a0d2bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inconshreveable-mousetrap-6accf35c39498b1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-b1e1b8476b551d13", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-508911173678cba3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-02da361f7eaac64a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-d6f43d57d72aea1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-fs-874b8e48251aabf6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-73a371a9b058a18c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-d8112a4cda175f3c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-00228dc90922d7a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-83ea74103aea903a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-dc5b826e6f14bbe9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-174ae057fa81b631", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-25f139ca82311e66", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-861b2232b9b63ca1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-ff1d97ee9e90217b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-d68b54481da65a50", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-4436f2b2794cb57d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-32bd7ae500ba8634", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d2489a1dc937ae05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-devices-7ef390d738a70f55", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-2ea99c0c77bf9ebc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-9e79f6582c7104e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-72ffaed3df287dfe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-fb077919511efaf2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-3099125c5a87befb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-4ad008ccfda82364", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-62ad0a986b9411dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-c4db25b2532edbe7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-39820517e2ec8bc2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-fc8a990ed94de460", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runc-1efa7d3515126922", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-49c66f63cdf58c81", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-64a82c01af80da5e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-7387e4f3f706d28f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-81b345862fd745b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-474bf2f388afe342", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-sftp-12ea976afd3c9be6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-b15c3f1db2032118", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-25963aceaa6dfd23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-ff56132de51ac46c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-russross-blackfriday-v2-ca0b42e616d3a00a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-a5cb543cf0960336", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-2c219eddaf3f07cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-3b8471856bdaf854", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-74889e271e2caf3d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-f3c4f942d1d27a73", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-9fc7888039937818", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-02b22be6cb71a71a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-701c746189c7eb97", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-a1fe40363b85f0e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-0ab52bead0039fd9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stretchr-testify-e1f9a8f1eeda28da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e3211d5469af8c26", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-6df09934d5ac3fdd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2832745d82445e27", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-bfaf5559d1935089", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-dc04ca8c69b0ef96", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-a5d802201b35ea8c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-3612c02f29a75362", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-a75c27634d6eac1f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netns-53c4e6214f2cc0f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-d7ecada3f86576aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-053aa1d76845cfe0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dff33bba7b72fa5f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-8bc51ea2f12f3837", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8031c1a1c2921dde", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-3452f5fe9f6690fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-460abf6e1309fb4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-common-21236ecfcd1c15ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-image-v5-ce30e55fd246afdf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-storage-41ee67f7b84eb07a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-0aba9b8903bc6dd6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-5d4e4539d61c9e54", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-4d18e88db2531fed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-62825d283e5b165a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-e09b530c0eb878f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-2a85c5ac5f84c365", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-06a691dc2819f8aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-fc8984f0380c7b24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-40bcae7fb951c375", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-0c7a66d3277dd6ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5166c6dbad928efe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-8a5147188280b8ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-c6c431023327850f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-616958b158d1a1b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-k8s.io-klog-c6175f681b47d672", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-lima-vm-lima-actions-setup-61d7289d94fb9c5f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-github-action-workflow-podman-container-tools-podman-.github-workflows-issue-pr-lock.yml-d1635a02b62bddcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-d050975696bfbe02", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-3167543e7b3246f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-6255947a73f8217d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.src"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-361092e7ceefb4f8", "relatedSpdxElement": "SPDXRef-File-...buildah-1.45.1-1.hum1.aarch64.debug-4748494b6117a539", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-361092e7ceefb4f8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-buildah-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-buildah-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-00619f9dc7b7be37", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-00a0c6e84b351a87", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-0487d9137d5af310", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-04b5083fab4a1aad", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-051bafa2ae406568", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-0546a289d7d86cf2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-08f216ade11269aa", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-0d3869515d005fcd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-1724824fb1d153ff", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-1788891df78e60ba", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-18bf1c9a5f65bcf3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-1eadb40fd9d13a92", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2071e5d9b75c1c8b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-21b0326a88a88881", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-226e18814eec20ca", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-24432990ab191c14", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-25e2900ff01ff9a9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-28569dae89a41674", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-2ae073f95f5dcbab", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2f71b7bce830c213", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-2fd75220425b7913", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-3247def4e49f8c21", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-32d59b34bc16b8e6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-34d8ea370a481811", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-3688341cd2ce0244", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-36aeee05447c4ab0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-3734a77fddb474de", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-3910c12acc78f456", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-3b7338fb4ef313c9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-3e468402d1d2844e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-407dbfd6ce973153", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-41989ad2871db53e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-423f18e9ba60a2f3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-43fbbe0ba9faf73b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-442894307a6ac4ba", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-4549f1c6a19e4427", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-459668f39ed2b5f5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-46cf5a6c2a777ac5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-47230d7a16bd104a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-4afc5fe58b044531", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-4c8ea025138615b5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-4ff7e7f3f36d0561", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-51cf20844aa37d2b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-5273ed25852bfdd2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-5471acfe5f417861", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-549b3ec69cc2c733", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-578df652c8030eb2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-5b6c282ddf51af8f", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-5d60d4cf63c0dff5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-5d98fc10c114fa7a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-6207381a96baefa6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-63b76d178cea917e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-66b4dcc10355448a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-66c7abcb21f72053", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-68319a98f16072cc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-6c1d7cb3b49d583e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-6ea15c528b96f632", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-706fece5b47750b4", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-71c9da174019d148", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-721f75215a20d377", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-795d9f1dc7220df8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-8077a3b6bcc178f0", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-808b2358ad306d78", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-82f6463fedab13a3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-836e2fda726e5dcc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-8873853d09303780", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-8b570638416d90f5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-8ba74b158ef7735d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-8c5e760c763a89d7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-8e558ec43d119e4c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-8faecbf87cc8ad67", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-8fdf256491d18190", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-8fdf9d428147f1c5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-916e1008a79f523e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-920967d6378466b8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-949ddf060b91f752", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-978dc6e3c84421f7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-97e82a525dab1122", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-987018a052eff2bd", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-9bb352a8a03718a6", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-9d722e4923eac748", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-9d859641c62c0e12", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a2167bd71dd0405e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-a68e774487006af9", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-a7d6e30792f4cb65", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-a842445342ac62eb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-a98115e653c9dcfa", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-abb22cfbcde57e9d", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-aeb6d73bf624ba9e", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-af4dbe58754af1be", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-af5590b5dd4db618", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-b340ee8474323dff", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-b6d394f68f80d670", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-b9bcfea3bc917029", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-b9ea2afb902b7a46", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-ba726535d0f58773", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-baeb122803413873", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-be07d38269c228af", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-be4dc5464372d1db", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-c17da1d53c007079", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-c3fc0512ee7f1bd8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-c62435b9f3bb8275", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-ccc13fe98b4bf2e2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-ced4c04a2741aef3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d07f37b6e1339aa8", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-d0f63ff19acaad9a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-d2c53bc784b1e8a3", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-d5aa7f10a247bc5c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-d654ce2280aeddc7", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-db8457e5fea9e92a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-dd3311a0cfa453e2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-dd6c99ad19702059", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-e05158d78b3754f5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-e25039af96c032dc", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-e403980d946d121a", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-e6e5c9f8c1609ace", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-ea6c1c5105b08b74", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-ea8ebebb4b7aa971", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-ec2c4fb6a667ab64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-ec87c36eb513e5eb", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-f14ddd73fcd5ff71", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-f1fafbe9eb2e18e5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-f75abc4d8715100c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-f8b74dfac7baafe5", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-fa3966549e55ab0b", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-fca16dee1a8331f2", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-fd0814a7cfd4d300", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-ffa3e11f5503b60c", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-00619f9dc7b7be37", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-00a0c6e84b351a87", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-0487d9137d5af310", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-04b5083fab4a1aad", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.etcd.io-bbolt-051bafa2ae406568", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-intervals-0546a289d7d86cf2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-08f216ade11269aa", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kr-fs-0d3869515d005fcd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-libtrust-1724824fb1d153ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-1788891df78e60ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-18bf1c9a5f65bcf3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-1eadb40fd9d13a92", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2071e5d9b75c1c8b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-21b0326a88a88881", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-226e18814eec20ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-24432990ab191c14", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-25e2900ff01ff9a9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-28569dae89a41674", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-2ae073f95f5dcbab", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2f71b7bce830c213", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-2fd75220425b7913", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-3247def4e49f8c21", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-32d59b34bc16b8e6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-34d8ea370a481811", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-3688341cd2ce0244", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-36aeee05447c4ab0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-3734a77fddb474de", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-3910c12acc78f456", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-devices-3b7338fb4ef313c9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-3e468402d1d2844e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-407dbfd6ce973153", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-41989ad2871db53e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-423f18e9ba60a2f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-43fbbe0ba9faf73b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-442894307a6ac4ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-storage-4549f1c6a19e4427", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-459668f39ed2b5f5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-46cf5a6c2a777ac5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-47230d7a16bd104a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-distribution-4afc5fe58b044531", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-4c8ea025138615b5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-4ff7e7f3f36d0561", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-51cf20844aa37d2b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-chzyer-readline-5273ed25852bfdd2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-5471acfe5f417861", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-549b3ec69cc2c733", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-578df652c8030eb2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-5b6c282ddf51af8f", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-5d60d4cf63c0dff5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-5d98fc10c114fa7a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-6207381a96baefa6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-63b76d178cea917e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-66b4dcc10355448a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-66c7abcb21f72053", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-68319a98f16072cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-6c1d7cb3b49d583e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-6ea15c528b96f632", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-706fece5b47750b4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netns-71c9da174019d148", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-721f75215a20d377", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-795d9f1dc7220df8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-8077a3b6bcc178f0", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-808b2358ad306d78", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-82f6463fedab13a3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-836e2fda726e5dcc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-8873853d09303780", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-8b570638416d90f5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-8ba74b158ef7735d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-8c5e760c763a89d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-8e558ec43d119e4c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-8faecbf87cc8ad67", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-8fdf256491d18190", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-8fdf9d428147f1c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-916e1008a79f523e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-920967d6378466b8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-949ddf060b91f752", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-978dc6e3c84421f7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-97e82a525dab1122", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-987018a052eff2bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-9bb352a8a03718a6", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-9d722e4923eac748", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-9d859641c62c0e12", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a2167bd71dd0405e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-a68e774487006af9", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-a7d6e30792f4cb65", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containers-luksy-a842445342ac62eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-a98115e653c9dcfa", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-abb22cfbcde57e9d", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-aeb6d73bf624ba9e", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-af4dbe58754af1be", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aead-serpent-af5590b5dd4db618", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-b340ee8474323dff", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-b6d394f68f80d670", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-sftp-b9bcfea3bc917029", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-b9ea2afb902b7a46", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-ba726535d0f58773", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-baeb122803413873", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-be07d38269c228af", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-be4dc5464372d1db", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-c17da1d53c007079", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-common-c3fc0512ee7f1bd8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-c62435b9f3bb8275", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-ccc13fe98b4bf2e2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runc-ced4c04a2741aef3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d07f37b6e1339aa8", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-d0f63ff19acaad9a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-d2c53bc784b1e8a3", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-d5aa7f10a247bc5c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-d654ce2280aeddc7", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-db8457e5fea9e92a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.podman.io-image-v5-dd3311a0cfa453e2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-dd6c99ad19702059", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-e05158d78b3754f5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-e25039af96c032dc", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-e403980d946d121a", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-e432e535eda4caa4", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-e6e5c9f8c1609ace", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gorilla-mux-ea6c1c5105b08b74", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-ea8ebebb4b7aa971", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-ec2c4fb6a667ab64", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-ec87c36eb513e5eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-f14ddd73fcd5ff71", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-f1fafbe9eb2e18e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-f75abc4d8715100c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-f8b74dfac7baafe5", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-fa3966549e55ab0b", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-fca16dee1a8331f2", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-fd0814a7cfd4d300", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-ffa3e11f5503b60c", "relatedSpdxElement": "SPDXRef-File-usr-bin-buildah-93b05f434b690035", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-e432e535eda4caa4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-41989ad2871db53e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-d07f37b6e1339aa8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-949ddf060b91f752", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-VividCortex-ewma-36aeee05447c4ab0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-e403980d946d121a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aead-serpent-af5590b5dd4db618", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-fd0814a7cfd4d300", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-chzyer-readline-5273ed25852bfdd2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-5d60d4cf63c0dff5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-1788891df78e60ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-226e18814eec20ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-4c8ea025138615b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-b6d394f68f80d670", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-25e2900ff01ff9a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-stargz-snapshotter-estargz-aeb6d73bf624ba9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-66b4dcc10355448a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-libtrust-1724824fb1d153ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-luksy-a842445342ac62eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containers-ocicrypt-8c5e760c763a89d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-coreos-go-systemd-v22-f14ddd73fcd5ff71", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyberphone-json-canonicalization-fa3966549e55ab0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-baeb122803413873", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-davecgh-go-spew-6207381a96baefa6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-disiqueira-gotree-v3-00a0c6e84b351a87", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-ea8ebebb4b7aa971", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-distribution-4afc5fe58b044531", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-8077a3b6bcc178f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-fca16dee1a8331f2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-24432990ab191c14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-9d859641c62c0e12", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-e05158d78b3754f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsouza-go-dockerclient-1eadb40fd9d13a92", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-d654ce2280aeddc7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-f1fafbe9eb2e18e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-66c7abcb21f72053", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-godbus-dbus-v5-47230d7a16bd104a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-e6e5c9f8c1609ace", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-intervals-0546a289d7d86cf2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-0487d9137d5af310", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gorilla-mux-ea6c1c5105b08b74", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-c17da1d53c007079", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-808b2358ad306d78", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-3910c12acc78f456", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-d2c53bc784b1e8a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-a2167bd71dd0405e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-ffa3e11f5503b60c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kr-fs-0d3869515d005fcd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-manifoldco-promptui-423f18e9ba60a2f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-442894307a6ac4ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-8ba74b158ef7735d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-sqlite3-46cf5a6c2a777ac5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-miekg-pkcs11-2ae073f95f5dcbab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mistifyio-go-zfs-v4-8fdf256491d18190", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-f75abc4d8715100c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-b9ea2afb902b7a46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-abb22cfbcde57e9d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-dd6c99ad19702059", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-5b6c282ddf51af8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-9d722e4923eac748", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-8873853d09303780", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-devices-3b7338fb4ef313c9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-82f6463fedab13a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-6ea15c528b96f632", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-00619f9dc7b7be37", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-d5aa7f10a247bc5c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-08f216ade11269aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-a7d6e30792f4cb65", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-a98115e653c9dcfa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-cgroups-8e558ec43d119e4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-5471acfe5f417861", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-578df652c8030eb2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runc-ced4c04a2741aef3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-459668f39ed2b5f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-tools-ec87c36eb513e5eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-selinux-5d98fc10c114fa7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-openshift-imagebuilder-2fd75220425b7913", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-2f71b7bce830c213", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-sftp-b9bcfea3bc917029", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-9bb352a8a03718a6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pmezard-go-difflib-ec2c4fb6a667ab64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-proglottis-gpgme-a68e774487006af9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-seccomp-libseccomp-golang-63b76d178cea917e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-51cf20844aa37d2b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-fulcio-af4dbe58754af1be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-protobuf-specs-f8b74dfac7baafe5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-97e82a525dab1122", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-836e2fda726e5dcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallstep-pkcs7-3688341cd2ce0244", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-407dbfd6ce973153", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-21b0326a88a88881", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-stefanberger-go-pkcs11uri-3734a77fddb474de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-32d59b34bc16b8e6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tchap-go-patricia-v2-ba726535d0f58773", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-2071e5d9b75c1c8b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-8fdf9d428147f1c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-tar-split-db8457e5fea9e92a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-cupwriter-34d8ea370a481811", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbauerster-mpb-v8-28569dae89a41674", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netlink-ccc13fe98b4bf2e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vishvananda-netns-71c9da174019d148", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-706fece5b47750b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.etcd.io-bbolt-051bafa2ae406568", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-987018a052eff2bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-721f75215a20d377", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-3247def4e49f8c21", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-8faecbf87cc8ad67", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-920967d6378466b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-buildah-8821438aeda08749", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-common-c3fc0512ee7f1bd8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-image-v5-dd3311a0cfa453e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.podman.io-storage-4549f1c6a19e4427", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v2-43fbbe0ba9faf73b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-549b3ec69cc2c733", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-d0f63ff19acaad9a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-795d9f1dc7220df8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-3e468402d1d2844e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-8b570638416d90f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-68319a98f16072cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-916e1008a79f523e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-be4dc5464372d1db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-b340ee8474323dff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-be07d38269c228af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-978dc6e3c84421f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-04b5083fab4a1aad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-4ff7e7f3f36d0561", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-sigs.k8s.io-yaml-6c1d7cb3b49d583e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-18bf1c9a5f65bcf3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-c62435b9f3bb8275", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-specs-go-e25039af96c032dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-buildah", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-1.45.1-1.hum1.x86-64"}, {"spdxElementId": "SPDXRef-Package-rpm-buildah-938602271f40b50d", "relatedSpdxElement": "SPDXRef-File-...bin-buildah-1.45.1-1.hum1.x86-64.debug-bdd2bf78298c838a", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-buildah-938602271f40b50d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-buildah-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debuginfo-1.45.1-1.hum1.x86-64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-buildah-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-buildah-debugsource-1.45.1-1.hum1.x86-64"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-aarch64-buildah", "SPDXRef-x86-64-buildah", "SPDXRef-aarch64-buildah-debuginfo", "SPDXRef-x86-64-buildah-debuginfo", "SPDXRef-aarch64-buildah-debugsource", "SPDXRef-x86-64-buildah-debugsource"]}